{"uid":"cap_H5KdnM5iJ3FK_8-J4hsp6","slug":"no-hands-ai-mcp-trust-preflight-01e49e64","name":"NO HANDS AI MCP Trust Preflight","description":"Machine-payable service intelligence for discovering, verifying, and monitoring identity, risk, authorization, execution-preflight, and evidence APIs before autonomous agents spend.","url":"https://base-agent-preflight.bytoken2023.workers.dev/x402/v1/mcp/trust-preflight?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"tools":{"type":"string"},"publisher":{"type":"string"},"repository":{"type":"string"},"maintenance":{"type":"string"},"declared_permissions":{"type":"string"},"network_destinations":{"type":"string"},"execution_environment":{"type":"string"},"credential_requirements":{"type":"string"},"filesystem_requirements":{"type":"string"},"lifecycle_install_scripts":{"type":"string"}}},"responseSchema":{"type":"json","example":{"network":"eip155:8453","product":"nomos-mcp-trust-preflight","assessment":{"flags":[],"risk_level":"low","risk_score":0}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"1.5","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$1.5/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"1.5","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"1.5","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_buXT1ssX35TH8yQKOgDt0","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"1.5","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes an MCP tool or agent package for identity, risk, and authorization signals before an autonomous agent spends money or executes it","exampleAgentPrompt":"Before my agent pays to use this MCP server, run a trust preflight on it — the publisher is 'acme-ai', the repository is 'github.com/acme-ai/mcp-finance', it declares filesystem read permissions and makes outbound calls to api.stripe.com, and it has a postinstall script.","exampleUseCases":[{"title":"Pre-payment safety check for MCP tool","prompt":"Before my agent pays to call that new MCP data tool, can you run a trust preflight on it? The publisher is 'datatools-inc', the repo is 'github.com/datatools-inc/mcp-scraper', it requires network access to external-data.io, and it has lifecycle install scripts I'm worried about."},{"title":"Vetting agent plugin with broad filesystem access","prompt":"I want to install an MCP plugin that claims it needs full filesystem read/write access and stores credentials locally — can you assess its risk level before I authorize anything? The publisher is 'unknown-dev', repo is 'github.com/unknown-dev/mcp-agent', and maintenance status is unclear."},{"title":"Clearing a low-risk internal tool for agent use","prompt":"We built our own internal MCP server for the team — publisher is 'our-company', repo is 'github.com/our-company/internal-mcp', it only calls our own API endpoints and has no install scripts. Can you run a trust preflight to confirm it's low risk before we let agents use it autonomously?"}],"resultDescription":"Returns a JSON object with a risk_level (e.g. 'low', 'medium', 'high'), a numeric risk_score, an array of assessment flags describing specific concerns found, the product name ('nomos-mcp-trust-preflight'), and the network identifier (EIP-155 Base chain). Flags array is empty when no issues are detected.","failureModes":["Missing or malformed input fields may result in incomplete risk assessment","Unknown publishers or private repositories may reduce assessment accuracy","High-traffic periods may increase response latency slightly above typical","Payment failure via x402 protocol will block access before assessment is returned","Ambiguous or contradictory permission declarations may produce inconclusive flags"],"whenToPreferThis":"Use this endpoint when an autonomous agent needs to vet an MCP server or tool package before executing it or authorizing payment — especially when the publisher is unknown, install scripts are present, broad permissions are declared, or external network destinations are involved. Prefer this over generic security scanners because it is specifically designed for the MCP/agent tool ecosystem and produces structured risk scores and flags that agents can act on programmatically.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-19T18:36:39.751Z","isFirstParty":false,"canonicalSlug":"no-hands-ai-mcp-trust-preflight-01e49e64"}