accueil / serveurs / Dev & Code / io.github.JesseGdotIO/hermes-plant
io.github.JesseGdotIO/hermes-plant
serveur MCP (Model Context Protocol) · Hermes Plant 2.0.2
Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur.
Est-ce que io.github.JesseGdotIO/hermes-plant est sûr ?
Au dernier audit MCP Hub, le serveur MCP « io.github.JesseGdotIO/hermes-plant » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.
Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.
Les 25 outils
- action_safety_quick_gate≈ 730 tokens
AI agent action safety quick gate ($0.01 over x402 or free-tier quota). Deterministically scores a consequential action and returns the exact next call: proceed, request full DestructGuard evidence, or run the complete Action Safety workflow.
Paramètres, retour & exemple (16)
Paramètrescwd· string · optionnel
Working directory or execution contextrepo· string · optionnel
Repository or project contextactor· string · optionnel
Agent or tool requesting the actionpayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.branch· string · optionnel
Branch or environment contextintent· string · optionnel
Why the action is being requestedchannel· string · optionnel
Discovery channel or source tagcommand· string · requis
Shell, SQL, Git, deploy, or infrastructure action to preflightcampaign· string · optionnel
Campaign tag for downstream telemetrydiffStat· string · optionnel
Optional git diff --stat or change summaryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionpaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "action_safety_quick_gate", "arguments": {"command": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - action_safety_run≈ 732 tokens
Complete AI agent action safety workflow ($0.25 over x402 or free-tier quota): DestructGuard evidence, conditional ReviewQueue triage for high or critical risk, an honest decision, signed receipt, and 30-day status record. Triage does not imply human approval.
Paramètres, retour & exemple (16)
Paramètrescwd· string · optionnel
Working directory or execution contextrepo· string · optionnel
Repository or project contextactor· string · optionnel
Agent or tool requesting the actionpayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.branch· string · optionnel
Branch or environment contextintent· string · optionnel
Why the action is being requestedchannel· string · optionnel
Discovery channel or source tagcommand· string · requis
Shell, SQL, Git, deploy, or infrastructure action to preflightcampaign· string · optionnel
Campaign tag for downstream telemetrydiffStat· string · optionnel
Optional git diff --stat or change summaryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionpaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "action_safety_run", "arguments": {"command": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - assurance_attest≈ 872 tokens
Assurance Attest (x402-paid, $0.05): bind one x402 payment intent or MCP tool call to a canonical HMAC-signed record (binding hash, policy verdict, findings, optional settlement outcome). Loop it after every payment or tool call to build a tamper-evident audit trail a third party can check at the free verify endpoint.
Paramètres, retour & exemple (14)
Paramètrespayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.intent· object · requis
x402: resourceUrl+method (+scheme/network/asset/amountUnits/payTo/settlement fields). mcp: serverId+toolName (+toolArguments or toolArgumentsHash).policy· object · optionnel
Optional buyer policy (policyId+version, caps, allow-lists); omit for binding-only attestationchannel· string · optionnel
Discovery channel or source tagoutcome· object · optionnel
Optional settlement outcome: {outcome: fulfilled|failed|rejected, settlementId, responseStatus, evidenceHashes[]}subject· object · requis
Who acted and whycampaign· string · optionnel
Campaign tag for downstream telemetryprotocol· string · requis · x402 | mcp
"x402" for a payment, "mcp" for a tool callxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionpaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "assurance_attest", "arguments": {"intent": {}, "subject": {}, "protocol": "x402"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - assurance_verify≈ 380 tokens
Verify a Hermes-signed assurance record for free: recomputes the canonical hash (hermes-stable-json-v1 + SHA-256) and HMAC signature server-side and reports recordHashValid / signatureValid. Use it to audit attestations produced by assurance_attest without trusting the agent that produced them.
Paramètres, retour & exemple (2)
Paramètresrecord· object · requis
The attestation/decision/receipt record objectintegrity· object · requis
The integrity object returned with the record (recordHash, signature, keyId)
Exemple d'appel{"name": "assurance_verify", "arguments": {"record": {}, "integrity": {}}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - bond_analyze≈ 743 tokens
BondLens (x402-paid, $0.25): deterministic fixed-income and loan analytics. Bond mode solves price<->yield-to-maturity, duration, and convexity; loan mode (send principal+annualRate+termMonths) returns an amortization schedule.
Paramètres, retour & exemple (18)
Paramètrespayer· string · optionnel
Optional wallet/account identifier; stored only as a hashprice· number · optionnel
Bond price; supply to solve yieldyield· number · optionnel
Annual yield; supply to solve priceapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.channel· string · optionnel
Discovery channel or source tagperiods· number · optionnel
Periods to maturitycampaign· string · optionnel
Campaign tag for downstream telemetryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownfaceValue· number · optionnel
Bond face value (default 1000)frequency· number · optionnel
Coupons per year (default 2)principal· number · optionnel
Loan principal (selects loan mode)synthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionannualRate· number · optionnel
Loan annual rate, e.g. 0.06couponRate· number · optionnel
Annual coupon rate, e.g. 0.05termMonths· number · optionnel
Loan term in monthspaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "bond_analyze", "arguments": {"payer": "texte", "price": 1, "yield": 1, "apiKey": "texte", "channel": "texte", "periods": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - cashflowlens_analyze≈ 829 tokens
CashflowLens (x402-paid, $0.20): deterministic NPV, IRR, XIRR, DCF valuation, MOIC/DPI/TVPI, and payback period from a cashflow series. Use for valuation and return analysis instead of letting the model estimate.
Paramètres, retour & exemple (14)
Paramètresdcf· object · optionnel
Optional DCF valuation inputs (projected FCFs, discount rate, terminal value, net debt, shares)nav· number · optionnel
Residual value, for TVPIpayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.channel· string · optionnel
Discovery channel or source tagcampaign· string · optionnel
Campaign tag for downstream telemetryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknowncashflows· array · requis
Cashflows: numbers for periodic, or {amount,date} objects for dated XIRR. Outflows negative.synthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusiondiscountRate· number · optionnel
Annual rate for NPV, e.g. 0.08periodsPerYear· number · optionnel
Periods per year to annualize a periodic IRRpaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "cashflowlens_analyze", "arguments": {"cashflows": []}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - dealanalyzer_analyze≈ 942 tokens
DealAnalyzer (x402-paid, $2.00): the flagship. Deterministic full deal underwrite in a single call — DCF valuation (EV, equity value, implied share price), fund returns (IRR/MOIC), and the LP/GP distribution waterfall, plus sensitivity. Combines what CashflowLens + WaterfallLens do, cross-checked.
Paramètres, retour & exemple (12)
Paramètresdcf· object · requis
Required. DCF valuation inputs.payer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.channel· string · optionnel
Discovery channel or source tagreturns· object · optionnel
Optional fund/deal return inputs (IRR, MOIC, NPV).campaign· string · optionnel
Campaign tag for downstream telemetryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionwaterfall· object · optionnel
Optional LP/GP distribution waterfall inputs.paymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "dealanalyzer_analyze", "arguments": {"dcf": {}}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - emailguard_validate≈ 647 tokens
EmailGuard (x402-paid, $0.02): deterministic email/contact quality scorer — validity, deliverability score, disposable/role/free classification, typo suggestion. Pure function, no DNS.
Paramètres, retour & exemple (13)
Paramètresname· string · optionnel
Optional contact name associated with the emailemail· string · requis
Email address to validatepayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.domain· string · optionnel
Optional explicit domain hint (usually derived from email)channel· string · optionnel
Discovery channel or source tagcampaign· string · optionnel
Campaign tag for downstream telemetryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownmxPresent· boolean · optionnel
Caller-supplied MX hintsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionpaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "emailguard_validate", "arguments": {"email": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - emailguard_validate_batch≈ 728 tokens
Validate up to 20 emails in one tool call — one deterministic verdict per record (validity, deliverability score, disposable/role/free classification, typo suggestion, canonical normalization). Pass your free apiKey (250 records/mo, no wallet — https://hermesplant.com/pricing) and each record serves from quota. Results preserve input order; the batch stops at the first 402 (quota exhausted) and marks the rest skipped so you can upgrade and resume.
Paramètres, retour & exemple (10)
Paramètrespayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.channel· string · optionnel
Discovery channel or source tagrecords· array · requis
Contact records to validate — one storefront call per record (max 20 per tool call)campaign· string · optionnel
Campaign tag for downstream telemetryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionpaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "emailguard_validate_batch", "arguments": {"records": []}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - evidence_verify≈ 774 tokens
Evidence Verification (x402-paid, $0.05): verify an agent-commerce evidence bundle before trusting a paid result — x402 challenge/receipt/policy-decision/service-response artifacts, endpoint and price binding, freshness, hashes, synthetic-proof leakage. Returns verified / needs_review / rejected / insufficient_evidence with per-rule evidence.
Paramètres, retour & exemple (12)
Paramètrespayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.policy· object · optionnel
Verification policy: expected serviceId/endpoint/network/priceCents, require* flagschannel· string · optionnel
Discovery channel or source tagsubject· object · optionnel
Optional run subject: kind, serviceId, endpoint, method, runIdcampaign· string · optionnel
Campaign tag for downstream telemetryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownartifacts· array · requis
Evidence artifacts (Hermes contract): x402_challenge, x402_receipt, payment_policy_decision, service_response, ...synthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionpaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "evidence_verify", "arguments": {"artifacts": []}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - freetier_status≈ 272 tokens
Check a free API key's remaining monthly quota, reset date, and upgrade path. Pass your hp_free_ key as apiKey. No key yet? POST an email to https://hermesplant.com/api/keys/free (250 calls/mo, no wallet).
Paramètres, retour & exemple (1)
ParamètresapiKey· string · requis
Your free-tier key (hp_free_...)
Exemple d'appel{"name": "freetier_status", "arguments": {"apiKey": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - get_checkout_policies≈ 210 tokens
Return legal policy URLs required before checkout
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "get_checkout_policies", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - get_product≈ 221 tokens
Get a single product by slug
Paramètres, retour & exemple (1)
Paramètresslug· string · requis
Product slug from the catalog
Exemple d'appel{"name": "get_product", "arguments": {"slug": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - get_x402_manifest≈ 219 tokens
Return the live x402 manifest with paid endpoint prices, Bazaar metadata, and buyer policy checks
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "get_x402_manifest", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - list_products≈ 204 tokens
List active products from the Hermes Plant catalog
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "list_products", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - mcp_risk_score≈ 715 tokens
MCP Server Risk Analyzer (x402-paid, $0.05): score an MCP server manifest for security risk before install — destructive tools, over-broad scopes, weak auth, egress — with per-tool findings and fixes.
Paramètres, retour & exemple (13)
Paramètrespayer· string · optionnel
Optional wallet/account identifier; stored only as a hashtools· array · requis
The MCP server's tool manifestapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.server· string · optionnel
Server name/URLchannel· string · optionnel
Discovery channel or source tagcampaign· string · optionnel
Campaign tag for downstream telemetryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownauthModel· string · optionnel
e.g. oauth, token, nonesynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionpriorTools· array · optionnel
Prior tool names to diff capability growthpaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "mcp_risk_score", "arguments": {"tools": []}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - options_price≈ 726 tokens
OptionLens (x402-paid, $0.30): deterministic Black-Scholes price and full Greeks (delta, gamma, vega, theta, rho) for European calls/puts, with dividend yield, intrinsic/time value, and moneyness.
Paramètres, retour & exemple (16)
Paramètresspot· number · requis
Underlying price (> 0)payer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.strike· number · requis
Strike price (> 0)channel· string · optionnel
Discovery channel or source tagcampaign· string · optionnel
Campaign tag for downstream telemetryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionoptionType· string · optionnel · call | put
Option type, 'call' or 'put' (default call)volatility· number · requis
Annualized volatility, e.g. 0.2riskFreeRate· number · optionnel
Annual risk-free rate, default 0timeToExpiry· number · requis
Years to expiry, e.g. 0.5dividendYield· number · optionnel
Continuous dividend yield, default 0paymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "options_price", "arguments": {"spot": 1, "strike": 1, "volatility": 1, "timeToExpiry": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - payment_policy_decide≈ 948 tokens
Payment Policy Decision (x402-paid, $0.05): deterministic allow / deny / needs_review before your agent signs an x402 payment — checks resource binding, amount vs expected price, network, payTo, facilitator, replay readiness, PII leakage, and buyer spend limits, with evidence-backed findings. Loop it over every payment; pair with assurance_attest for a signed record.
Paramètres, retour & exemple (21)
Paramètrestags· array · optionnel
Bazaar/service tags for sensitive-category detectionasset· string · optionnel
Payment asset addresspayTo· string · optionnel
Payment recipient from the challengepayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.method· string · optionnel
HTTP method the agent intends to callscheme· string · optionnel
x402 payment scheme (exact expected)channel· string · optionnel
Discovery channel or source tagnetwork· string · optionnel
Payment network, e.g. eip155:8453campaign· string · optionnel
Campaign tag for downstream telemetryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionamountUnits· string · optionnel
Raw x402 amount units (USDC = 6 decimals)buyerPolicy· object · optionnel
Buyer guardrails: maxUsdPerCall, allowedNetworks, allowedPayTo, allowedHosts, requireExactScheme, requireHttps, ...resourceUrl· string · requis
Absolute resource URL from the x402 challenge or Bazaar listingserviceRisk· object · optionnel
Optional upstream service-risk result (e.g. from mcp_risk_score)facilitatorUrl· string · optionnel
Facilitator URL used to settlepaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrymaxTimeoutSeconds· number · optionnel
Challenge timeout windowpaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "payment_policy_decide", "arguments": {"resourceUrl": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - portfolioguard_score≈ 713 tokens
PortfolioGuard (x402-paid, $0.15): deterministic portfolio risk scoring from holdings — volatility, Sharpe, max drawdown, concentration (HHI), diversification, plus per-rule findings.
Paramètres, retour & exemple (12)
Paramètrespayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.channel· string · optionnel
Discovery channel or source tagcampaign· string · optionnel
Campaign tag for downstream telemetryholdings· array · requis
Positions with symbol, weight (0-1), optional returns[], sectorxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionriskFreeRate· number · optionnel
Optional risk-free rate for the Sharpe ratio (default 0)periodReturns· array · optionnel
Optional portfolio/market return seriespaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "portfolioguard_score", "arguments": {"holdings": []}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - purchase_with_x402≈ 634 tokens
Purchase a one-time product via x402 (returns 402 challenge or fulfillment JSON). Call get_x402_manifest first, verify method/path/network/amount/payTo, then sign and retry with PAYMENT-SIGNATURE.
Paramètres, retour & exemple (11)
Paramètresslug· string · requis
One-time product slug (e.g. destructguard-pro)email· string · optionnel
Optional email for the order recordpayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.channel· string · optionnel
Discovery channel or source tagcampaign· string · optionnel
Campaign tag for downstream telemetryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionpaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "purchase_with_x402", "arguments": {"slug": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - score_destructguard_command≈ 694 tokens
Score a command/action with the x402-paid DestructGuard service. Call get_x402_manifest first, verify the DestructGuard price and buyer policy, then retry the 402 challenge with an x402 payment signature.
Paramètres, retour & exemple (15)
Paramètrescwd· string · optionnel
Working directory or execution contextrepo· string · optionnel
Repository or project contextactor· string · optionnel
Agent/tool requesting the actionpayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.intent· string · optionnel
Why the command is being requestedchannel· string · optionnel
Discovery channel or source tagcommand· string · requis
Command or agent action to scorecampaign· string · optionnel
Campaign tag for downstream telemetrydiffStat· string · optionnel
Optional git diff --stat or change summaryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionpaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "score_destructguard_command", "arguments": {"command": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - start_checkout≈ 234 tokens
Start a Stripe checkout session for a product slug
Paramètres, retour & exemple (1)
Paramètresslug· string · requis
Product slug to purchase
Exemple d'appel{"name": "start_checkout", "arguments": {"slug": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - submit_reviewqueue_request≈ 695 tokens
Submit a command/action to the x402-paid ReviewQueue agent service. Call get_x402_manifest first, verify the ReviewQueue price and buyer policy, then retry the 402 challenge with an x402 payment signature.
Paramètres, retour & exemple (15)
Paramètresrepo· string · optionnel
Repository or project contextactor· string · optionnel
Agent/tool requesting the actionpayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.branch· string · optionnel
Branch or environment contextreason· string · optionnel
Why the action is being requestedchannel· string · optionnel
Discovery channel or source tagcommand· string · requis
Command or agent action being requestedcampaign· string · optionnel
Campaign tag for downstream telemetrydiffStat· string · optionnel
Optional git diff --stat or change summaryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusionpaymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "submit_reviewqueue_request", "arguments": {"command": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - walletguard_score≈ 888 tokens
WalletGuard (x402-paid, $0.10): analyzes caller-provided sanctions, exposures, labels, and funding context. Positive risk findings receive a score; no risk findings means unknown with a null score and review required. No chain lookup, independent sanctions screening, or compliance clearance.
Paramètres, retour & exemple (15)
Paramètrespayer· string · optionnel
Optional wallet/account identifier; stored only as a hashapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.labels· array · optionnel
Address labels, e.g. exchange:binance, contract:..., sanctions:...wallet· string · requis
Wallet addresschannel· string · optionnel
Discovery channel or source tagcampaign· string · optionnel
Campaign tag for downstream telemetryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownexposures· array · optionnel
Signals e.g. mixer:tornado, sanctions:ofacsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusiontransfers· array · optionnel
Optional transfer summaries (direction, value, counterparty, tags)sanctionsHits· array · optionnel
Sanctions / OFAC / blacklist hit identifiersfundingSources· array · optionnel
Optional fund-source breakdown (source, share 0-1, verified)paymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrypaymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlation
Exemple d'appel{"name": "walletguard_score", "arguments": {"wallet": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}} - waterfall_distribute≈ 783 tokens
WaterfallLens (x402-paid, $0.30): deterministic LP/GP distribution waterfall (return of capital, preferred, GP catch-up, carried-interest split) with the exact split, per-tier breakdown, LP MOIC, and effective carry %.
Paramètres, retour & exemple (17)
Paramètrespayer· string · optionnel
Optional wallet/account identifier; stored only as a hashyears· number · optionnel
Holding period for preferred accrualapiKey· string · optionnel
Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.channel· string · optionnel
Discovery channel or source tagcampaign· string · optionnel
Campaign tag for downstream telemetryxPayment· string · optionnel
Raw X-PAYMENT proof from an x402-compatible wallet/clientactorType· string · optionnel · agent | human | synthetic | system | unknown
Caller type for analytics: agent, human, synthetic, system, or unknownsynthetic· boolean · optionnel
Mark this paid retry as an internal test/probe for analytics exclusioncompounding· string · optionnel · simple | compounded
Preferred-return accrual basis: 'simple' or 'compounded' (default compounded)distributable· number · requis
Total cash to distributepreferredRate· number · optionnel
Annual preferred rate, e.g. 0.08carryPercentage· number · optionnel
GP carry, e.g. 0.20 (default 0.20)paymentSignature· string · optionnel
x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retrycatchUpPercentage· number · optionnel
GP catch-up share, 1.0 = full (default)paymentIdentifier· string · optionnel
Optional x402 payment identifier for idempotency/retry correlationcontributedCapital· number · requis
Total LP capital to return in tier 1preferredReturnAmount· number · optionnel
Explicit preferred return amount
Exemple d'appel{"name": "waterfall_distribute", "arguments": {"distributable": 1, "contributedCapital": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "httpStatus": 1, "paymentRequired": true}}
C'est votre serveur ?
Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».