mcp server
IntentFence Agent Action Firewall
Fail-closed action authorization, MCP risk scanning, x402 checks, and signed receipts.
Description as published by the maintainer. Source
- version 0.16.0
- active
active — Registry entry last updated 2026-07-25.
What this server can do
10 functions, named and described by the server itself. Parameter names are shown because they say more about what a function does than its name usually does.
intentfence_agent_risk_scan(tools, server_name)- Free metadata-only scan of caller-supplied MCP tool definitions for missing schemas, unsafe annotations, approval binding, and cost boundaries. Does not execute tools or certify security. Required: server_name, tools.
intentfence_authorize_action(action, policy, context, subject, approval)- Authorize an exact agent action against an explicit allowlist, spend ceiling, retention ceiling, and optional action-bound approval. Returns a five-minute ES256 receipt and never executes the downstream action. Callers must verify the receipt and fail closed if the action changes. Required: subject, action, policy.
intentfence_checkout(input, product)- Free machine checkout builder. Select a paid IntentFence outcome and receive the exact endpoint, validated request, USDC cap, shell-safe Agentic Wallet argv, MCP tool call, and opt-in local auto-payment budget. It never signs or initiates payment. Required: product.
intentfence_policy_pack(runtime, project_name, authorization)- Paid self-service integration pack (1 USDC on Base). Generates a runtime-specific TypeScript guard, signed action and policy receipt, negative test vectors, and a fail-closed deployment checklist for Cloudflare Agents, Coinbase AgentKit, or an MCP gateway. No meeting or account is required. Required: project_name, runtime, authorization.
intentfence_preflight(action, proofs, subject, constraints)- Free declared-input preview with no signed receipt, authorization proof, or enforcement guarantee. Returns safe_to_proceed, needs_review, or denied. Required: subject, action.
intentfence_us_cpi(month)- Paid official U.S. CPI and core CPI data ($0.001 USDC on Base), retrieved from the Bureau of Labor Statistics with a six-hour edge cache and returned with an ES256 provenance receipt. Optionally request a YYYY-MM period.
intentfence_verified_preflight(action, proofs, subject, constraints)- Paid production preflight ($0.005 USDC on Base). Settles through x402 and returns a signed ES256 audit receipt plus settlement metadata. Required: subject, action.
intentfence_wallet_risk(address)- Paid AML/KYT wallet screening ($0.002 USDC on Base) before sending funds or approving a transaction. Checks live Base activity plus GoPlus sanctions, phishing, mixer, money-laundering, dark-web, blacklist, and related counterparty-risk flags, then returns a five-minute ES256 receipt. A low-risk result is not proof of identity, ownership, authorization, or future behavior. Required: address.
intentfence_x402_assessment(method, policy, subject, target_url, payment_required)- Paid assessment ($0.005 USDC on Base). Forward the exact base64 or base64url PAYMENT-REQUIRED header observed by the caller. IntentFence validates the quote, canonical Base USDC asset, price ceiling, payee allowlist, timeout, and resource binding without contacting the target, then returns a short-lived ES256 receipt bound to the quote hash. Supply allowed_payees for safe_to_proceed; omission yields needs_review. Required: subject, target_url, payment_required, policy.
intentfence_x402_readiness(body, method, policy, subject, target_url, allowed_payees, max_price_usdc)- Paid live endpoint check ($0.002 USDC on Base). Makes one bounded credential-free request to a public HTTPS target, blocks private networks and redirects, never pays the target, validates the returned x402 challenge, and returns a signed five-minute receipt. Required: target_url.
Last successful function declaration observed on . Source: https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp. We list what the server declared; we do not call any of these functions.
Endpoint status observed on . Source: https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp.
Signals
These are separate measurements of different things. They are deliberately not combined into one score, because a popularity number that mixes website traffic with saves and stars cannot be checked or acted on.
| Signal | Value | What it measures | Window | Observed | Source |
|---|---|---|---|---|---|
| Latest published version | 0.16.0 | Latest version string the maintainer published to the registry. | as of fetch | Model Context Protocol | |
| Registry record last updated | 2026-07-25 | When the registry record was last updated by its maintainer. | point in time | Model Context Protocol | |
| First listed in the MCP Registry | 2026-07-25 | Date this server was first published to the official MCP Registry. Not a usage or quality measure. | point in time | Model Context Protocol | |
| mcp tools declared | 10 tools | Number of functions the server itself declared when asked to list them. This is what the server offers an agent, not a measure of how well any of them work. | as of probe | agentpass-protocol.rmalka06.chatgpt.site | |
| mcp endpoint status | ok | The server listed 10 functions when asked. | as of probe | agentpass-protocol.rmalka06.chatgpt.site |
Where to get it
This record as data
Every field on this page, with its source and observation date, is in the catalog JSON. Fetch the whole kind at once instead of parsing this HTML.
GET /api/v1/entries/mcp_server.json