{"uid":"cap_lSfJ2NAnO0xK5pbrn3ibY","slug":"nomos-tool-access-decision-api-d369af97","name":"Nomos Tool Access Decision API","description":"Machine-payable service intelligence for discovering, verifying, and monitoring identity, risk, authorization, execution-preflight, and evidence APIs before autonomous agents spend.","url":"https://base-agent-preflight.bytoken2023.workers.dev/x402/v1/decision/tool-access","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"queryParams":{"type":"object","required":["agent_id","tool_name","action_type"],"properties":{"agent_id":{"type":"string","maxLength":128,"minLength":1},"tool_name":{"type":"string","maxLength":160,"minLength":1},"action_type":{"type":"string","maxLength":120,"minLength":2},"environment":{"enum":["local","preview","staging","production"],"type":"string"},"idempotency_key":{"type":"string","maxLength":128}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"network":{"type":"string"},"product":{"type":"string"},"activity":{"type":"object"},"identity":{"type":"object"},"assessment":{"type":"object"},"provenance":{"type":"object"}}}}}}},"responseSchema":{"type":"json","example":{"network":"eip155:8453","product":"nomos-tool-access","assessment":{"flags":[],"risk_level":"low","risk_score":0}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_iZ9h6uNkpBlpoX9lPb-OJ","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a preflight risk and authorization assessment for an agent attempting to use a specific tool, returning a risk score and flags before execution.","exampleAgentPrompt":"Before my agent 'agent-abc123' runs the 'send-email' tool with action type 'compose' in the production environment, check the Nomos tool access decision API to see if the risk level is acceptable and whether there are any flags I should know about.","exampleUseCases":[{"title":"Pre-execution tool gating for production agent","prompt":"My agent 'agent-prod-7f2a' is about to call the 'database-write' tool with action type 'insert' in production — run a Nomos preflight check first and tell me the risk score and any flags before it proceeds."},{"title":"Staging environment risk check for new tool","prompt":"We're testing a new tool called 'file-delete' in our staging environment with agent 'agent-test-001' and action type 'delete' — can you run a risk assessment through Nomos to see if we should be worried?"},{"title":"Compliance gate for financial agent tool","prompt":"Agent 'agent-finance-88' wants to execute action type 'transfer' using the 'crypto-transfer' tool in production — run a Nomos tool access preflight and let me know if the risk level is low enough to proceed."}],"resultDescription":"Returns a JSON object containing the network (e.g. eip155:8453), product identifier, and an assessment object with risk_score (numeric), risk_level (e.g. 'low'), and a flags array listing any concerns. May also include identity, activity, and provenance objects for deeper context.","failureModes":["Missing required query parameters (agent_id, tool_name, action_type) returns a 400 validation error","Invalid or unauthorized agent_id may return a rejection or elevated risk score","Payment failure or missing x402 payment header results in 402 Payment Required","Unknown tool_name or action_type may result in a generic assessment with no specific flags","Network or Cloudflare Worker timeout may result in a 503 or empty response"],"whenToPreferThis":"Use this endpoint when you need a lightweight, pay-per-request preflight decision on whether an autonomous agent should be permitted to invoke a specific tool before execution occurs. Prefer this over full IAM or policy engines when you need fast, per-call risk scoring integrated into an agent loop with x402 micropayment support on Base.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T06:41:59.105Z","isFirstParty":false}