assay

{"properties":{"dossier":{"type":"object"},"error":{"type":["string","null"]},"reason":{"type":"string"},"receipt":{"type":"string"},"status":{"type":"string"},"verdict": ⟨7 unchanged words⟩ 

{"properties":{"dossier":{"type":"object"},"error":{"type":["string","null"]},"reason":{"type":"string"},"receipt":{"type":"string"},"status":{"type":"string"},"verdict": ⟨7 unchanged words⟩ 

{"additionalProperties":false,"examples":[{"target":"https://agentdiet-72343955726.us-central1.run.app/mcp"}],"properties":{"status_code":{"description":"Optional  ⟨106 unchanged words⟩ 

 ⟨97 unchanged words⟩  pinning use assay_get_ledger_policy; for post-payment disputes use assay_verify_delivery. Example: target='https://agentdiet-72343955726.us-central1.run.app/mcp'.

 ⟨23 unchanged words⟩ . Private and loopback IPs are blocked.","examples":["https://agentdiet-72343955726.us-central1.run.app/mcp"],"maxLength":512,"minLength":8,"type":" ⟨5 unchanged words⟩ 

 ⟨86 unchanged words⟩  indexing use assay_probe; for policy history use assay_get_ledger_policy. Example: target='https://agentdiet-72343955726.us-central1.run.app/mcp'.

 ⟨56 unchanged words⟩ . Private and loopback IPs are blocked.","examples":["https://agentdiet-72343955726.us-central1.run.app/mcp"],"maxLength":512,"minLength":8,"type":" ⟨41 unchanged words⟩ 

EvaluateGate a remote MCP, A2A, or x402 endpoint before calling or paying it.it Probesby probing live JSON-RPC reachability, hasheshashing tools/list (SHA-256), checksand expected_tools_hashscanning for prompt-injection poisoning. When expected_tools_hash is provided, any mismatch against the live tools/list digest forces verdict='deny' to block silent rug-pullschema driftrug-pulls; when omitted, verdict reflects liveness and scansinjection forsafety prompt-injectionalone. poisoning.Read-only Returnsgate; {verdictfirst ('allow'|'warn'|'deny'),5 reason,calls/IP receiptare ('asr_rcpt_...'),free dossier}.and quota-exceeded calls return a 402 top-up prompt. Use before tool execution or payment; forto post-paymentregister disputesor refresh public leaderboard telemetry use assay_verify_delivery;assay_probe; forto rawread telemetryor indexingpin stored policy hashes use assay_probe.assay_get_ledger_policy; Firstafter 5payment calls/IPuse free.assay_verify_delivery.

 ⟨10 unchanged words⟩ of the canonical MCP tools/list schema from mcp-lock.json. IfOmit setto andread or auto-pin the current live hashdigest; differs,pass verdicta is64-hex 'deny'.digest to enforce zero-drift gating.","maxLength":128,"minLength":0,"type ⟨38 unchanged words⟩ 

{"destructiveHint":false,"idempotentHint":true,"openWorldHint":true,"readOnlyHint":falsetrue,"title":"Pre-Flight MCP & A2A Security Gate"}

RecordRegister Live& Refresh Endpoint Conformance ObservationTelemetry

ExecuteRegister a livenew HTTPremote MCP, A2A agent-card, andor MCPx402 tools/listendpoint probeor againstrefresh aits targetpublic URLAssay andObservatory recorddossier theby observationrunning ina thelive AssayHTTP, Observatoryagent-card, ledgerand withoutJSON-RPC pre-flighttools/list inspection without policy gating. ReturnsTarget themust updatedbe dossiera {target,public gradeHTTPS origin ('A+'private toIPs 'F'),are scorerejected (0-100with a 400 error),; mcp_tools,each tools_hash,call appends a timestamped observation and increments rug_pulls, poison_flags,if latency_ms,tools_hash receipt}.drifted Usesince the prior stored observation. Writes to indexthe apublic serverledger; first 5 calls/IP are free and retries are idempotent on steady schemas. Use to onboard or refreshre-index leaderboarda telemetry;server; for pre-call allow/deny gating use assay_preflight.assay_preflight; Firstfor 5historical calls/IPobservations free.or hash pinning use assay_get_ledger_policy; for post-payment disputes use assay_verify_delivery.

 ⟨4 unchanged words⟩ openWorldHint":true,"readOnlyHint":false,"title":"RecordRegister Live& Refresh Endpoint Conformance ObservationTelemetry"}

Independently probeAudit a paid x402/A2Ax402 or A2A provider after payment to verifyconfirm delivery or confirmprove an SLA breach.breach Combineswith reportedan HMAC-SHA256 signed receipt. Passing status_code with>= a500 forces verdict='sla_breach_confirmed' even if the live probere-probe andsucceeds, bindswhile passing tx_hash intocryptographically anbinds HMAC-SHA256your receipt.Base Returnsor {verdictSolana ('delivery_verified'|'sla_breach_confirmed'),payment sla_breach,signature grade,into score,the sla_receiptreceipt ('asr_sla_...'omitting tx_hash still verifies liveness and issues a probe-bound receipt)}. Non-destructive; first 5 calls/IP are free and failed target connections do not throw tool errors. Use only after paying a provider; before payment use assay_preflight.assay_preflight; Firstfor 5public calls/IPindexing free.use assay_probe; for policy history use assay_get_ledger_policy.

{"additionalProperties":false,"properties":{"status_code":{"description":"Optional HTTP status code returned by the paid endpoint (e.g. '200', '502', '504'). Codes >= 500 triggerforce verdict='sla_breach_confirmed'.verdict='sla_breach_confirmed' even if a retry probe succeeds.","maxLength":8,"minLength":0,"type ⟨33 unchanged words⟩ :"string"},"tx_hash":{"description":"On-chainOptional on-chain payment transaction hash (0x Base USDC hash or base58 Solana signature) to bind into the signed SLA receipt. Omit to run an unsigned post-call SLA check.","maxLength":128,"minLength":0,"type ⟨5 unchanged words⟩ 

assay_probeRecord Live Endpoint Conformance Observation

ProbeExecute a live MCP/A2A/x402HTTP, endpointA2A agent-card, and MCP tools/list probe against a target URL and record observation.the observation in the Assay Observatory ledger without pre-flight policy gating. Returns the updated dossier {target, grade ('A+' to 'F'), score (0-100), mcp_tools, tools_hash, rug_pulls, poison_flags, latency_ms, receipt}. Use to index a server or refresh leaderboard telemetry; for allow/deny gating or hash pinning use assay_preflight. First 5 calls/IP free.

{"additionalProperties":false,"properties":{"target":{"description":"targetPublic forHTTPS assay_probeURL of the remote MCP server, A2A agent, or x402 endpoint to inspect (e.g. 'https://tandem.ac/mcp'). Private and loopback IPs are blocked.","maxLength":512,"minLength":8,"type":"string"}},"required":[ ⟨3 unchanged words⟩ 

{"destructiveHint":false,"idempotentHint":true,"openWorldHint":true,"readOnlyHint":false,"title":"Record Live Endpoint Conformance Observation"}

assay_verify_deliveryVerify Post-Payment x402 Delivery & Mint SLA Receipt

VerifyIndependently post-paymentprobe A2A/x402a paid x402/A2A provider after payment to verify delivery andor mintconfirm signedan SLA breach. Combines reported status_code with a live probe and binds tx_hash into an HMAC-SHA256 receipt. Returns {verdict ('delivery_verified'|'sla_breach_confirmed'), sla_breach, grade, score, sla_receipt ('asr_sla_...')}. Use only after paying a provider; before payment use assay_preflight. First 5 calls/IP free.

{"additionalProperties":false,"properties":{"status_code":{"description":"status_codeHTTP forstatus assay_verify_deliverycode returned by the paid endpoint (e.g. '200', '502', '504'). Codes >= 500 trigger verdict='sla_breach_confirmed'.","maxLength":8,"minLength":0,"type":"string"},"target":{"description":"targetPublic forHTTPS assay_verify_deliveryURL of the remote MCP server, A2A agent, or x402 endpoint to inspect (e.g. 'https://tandem.ac/mcp'). Private and loopback IPs are blocked.","maxLength":512,"minLength":8,"type":"string"},"tx_hash":{"description":"tx_hashOn-chain forpayment assay_verify_deliverytransaction hash (0x Base USDC hash or base58 Solana signature) to bind into the signed SLA receipt.","maxLength":128,"minLength":0,"type":"string"}},"required":[ ⟨3 unchanged words⟩ 

{"destructiveHint":false,"idempotentHint":true,"openWorldHint":true,"readOnlyHint":false,"title":"Verify Post-Payment x402 Delivery & Mint SLA Receipt"}