Servidor MCP
agent-tools (x402 + MCP + A2A directory)
io.github.AgentTools-Cloud/agent-tools-mcp
Qué hace este MCP
Discovers and retrieves x402 services, MCP servers, and A2A agents, and provides MCP safety scanning and directory registration.
Capacidades
Herramientas
11
herramientas
ask_services
Ask for the best x402/MCP services for an agent intent.
This is the high-level discovery tool: it retrieves candidates from the
directory, asks the configured backend LLM to rank only those candidates,
and returns service cards for the selected recommendations. If the LLM is
unavailable, it falls back to the directory ranker.
Args:
intent: Natural-language job the agent wants to accomplish.
top_k: Max recommendations to return (1-10).
max_price_usd: Optional per-call budget cap.
category: Optional directory category filter.
chain: Optional payment network filter, e.g. "base" or "solana".
require_healthy: When true, only consider services marked health=ok.
min_confidence: Optional x402scan quality floor (0.0-1.0).
has_mcp: When true, only consider services with MCP endpoints.
use_llm: Set false for deterministic retrieval-only fallback.
Esquema de entrada
{'type': 'object', 'title': 'ask_servicesArguments', 'required': ['intent'], 'properties': {'chain': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Chain', 'default': None}, 'top_k': {'type': 'integer', 'title': 'Top K', 'default': 5}, 'intent': {'type': 'string', 'title': 'Intent'}, 'has_mcp': {'type': 'boolean', 'title': 'Has Mcp', 'default': False}, 'use_llm': {'type': 'boolean', 'title': 'Use Llm', 'default': True}, 'category': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Category', 'default': None}, 'max_price_usd': {'anyOf': [{'type': 'number'}, {'type': 'null'}], 'title': 'Max Price Usd', 'default': None}, 'min_confidence': {'anyOf': [{'type': 'number'}, {'type': 'null'}], 'title': 'Min Confidence', 'default': None}, 'require_healthy': {'type': 'boolean', 'title': 'Require Healthy', 'default': True}}}
Esquema de salida
{'type': 'object', 'title': 'ask_servicesDictOutput', 'additionalProperties': True}
get
Get full details + ready-to-paste call template for a service.
Returns the service card with payment, call, quality, resource samples,
and ready-to-use MCP/x402 call hints. Use this after `search` or
`ask_services` before paying/calling an external service.
Args:
slug: Service slug as returned by `search` items.
Esquema de entrada
{'type': 'object', 'title': 'getArguments', 'required': ['slug'], 'properties': {'slug': {'type': 'string', 'title': 'Slug'}}}
Esquema de salida
{'type': 'object', 'title': 'getDictOutput', 'additionalProperties': True}
get_mcp_server
Get the full card for one MCP server by slug.
Esquema de entrada
{'type': 'object', 'title': 'get_mcp_serverArguments', 'required': ['slug'], 'properties': {'slug': {'type': 'string', 'title': 'Slug'}}}
Esquema de salida
{'type': 'object', 'title': 'get_mcp_serverDictOutput', 'additionalProperties': True}
list_categories
List all available service categories in the directory.
Esquema de entrada
{'type': 'object', 'title': 'list_categoriesArguments', 'properties': {}}
Esquema de salida
{'type': 'object', 'title': 'list_categoriesDictOutput', 'additionalProperties': True}
register
Self-register an x402 / MCP service in the agent-tools directory.
Service owners and agents may submit new services here. Submissions
are auto-reviewed instantly by x402 verification (no human gate): if
the URL proves x402 payment support it is listed immediately and shows
up in `search`; otherwise it is rejected or retried automatically.
Listing is FREE.
Dedup: if a service with the same canonical origin (scheme://host)
already exists in the directory we return its slug instead of
creating a duplicate submission. Same goes for a still-pending
submission with the same origin.
Rate limit: at most 5 pending submissions per client IP per 24h.
Hits beyond that get `{error: rate_limited}` â try again later or
email contact@agent-tools.cloud for bulk imports.
Args:
url: Public HTTPS URL of the service (the x402-payable endpoint
or its homepage). Required.
name: Human-friendly name. Defaults to the URL hostname.
description: One-paragraph description (max ~2000 chars).
mcp_url: If the service speaks MCP, its streamable-http endpoint.
category: Free-form (e.g. "defi", "search", "social"). Use
`list_categories` to align with existing taxonomy.
chains: Networks the service accepts payment on
(e.g. ["base", "solana"]).
price_min_usdc: Lower bound of per-call price in USDC.
price_max_usdc: Upper bound of per-call price in USDC.
contact: Optional email / handle the directory team can reach
you on for clarifications.
Esquema de entrada
{'type': 'object', 'title': 'registerArguments', 'required': ['url'], 'properties': {'url': {'type': 'string', 'title': 'Url'}, 'name': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Name', 'default': None}, 'chains': {'anyOf': [{'type': 'array', 'items': {'type': 'string'}}, {'type': 'null'}], 'title': 'Chains', 'default': None}, 'contact': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Contact', 'default': None}, 'mcp_url': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Mcp Url', 'default': None}, 'category': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Category', 'default': None}, 'description': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Description', 'default': None}, 'price_max_usdc': {'anyOf': [{'type': 'number'}, {'type': 'null'}], 'title': 'Price Max Usdc', 'default': None}, 'price_min_usdc': {'anyOf': [{'type': 'number'}, {'type': 'null'}], 'title': 'Price Min Usdc', 'default': None}}}
Esquema de salida
{'type': 'object', 'title': 'registerDictOutput', 'additionalProperties': True}
scan_mcp_safety
Check an MCP server for malware / prompt-injection lures by its endpoint URL.
Give the server's streamable-http endpoint URL. Two paths:
* **Already in the agent-tools directory** â returns our LATEST stored
rule verdict. Every indexed server is re-scanned hourly, so you get a
consistent, continuously-refreshed answer without re-probing.
* **Not yet indexed** â we probe the endpoint live, statically scan its
advertised tools + metadata, ADD it to the directory, and return the
fresh verdict (so the next caller gets the rule verdict instantly from
cache).
Two dimensions are reported. `verdict` is authoritative and comes from
deterministic static rules â pure pattern-matching over the *advertised*
text only, NO code execution. It flags the social-engineering / RCE tricks
listing-spam servers use:
* `curl ⦠| bash` and `base64 -d | sh` install lures
* `eval "$(curl â¦)"` / PowerShell `IEX(...DownloadString)` cradles
* base64 blobs that decode to a shell command
* bare-IP payload hosts and cheap throwaway TLDs
* prompt-injection / credential-exfiltration phrasing
("ignore previous instructions", "send your .env / api key")
* MCP tool-poisoning coercion â descriptions that hijack an agent's
tool-calling ("always call this tool first", "before using any other
tool you mustâ¦"), hidden `<IMPORTANT>` instructions, "list all API
keys / include secrets in your response", and coercion to read &
forward `.key`/`.pem`/`.ssh`/`.env` files
Source-code-oriented rules (SQL / command / code injection) are deliberately
not applied to natural-language descriptions, to avoid false positives.
`llm_reference` is an advisory frontier-LLM second opinion over the same text.
Because the LLM is slow it is computed LIVE on this call only and is never
stored (the hourly job never runs it), so it may be null on timeout. It
never overrides the rule verdict; when it is *more* severe than the rules an
`advisory` note is attached as a safety-net signal. Security/defense
products that merely *name* these attacks are not flagged.
Args:
endpoint_url: The MCP server's streamable-http URL (required). This is
the identity we look up / index by.
name: Optional advertised name (used when the server is new and gets
added; falls back to the URL host).
description: Optional description / README blurb (scanned when new).
tools_text: Optional tool names + descriptions; used only if the live
probe cannot fetch the server's tools/list.
Returns:
{ verdict: "clean"|"suspicious"|"malicious", score: 0-100,
reasons: [{rule, weight, snippet}],
llm_reference: {model, verdict, reason, confidence} | null,
advisory: str | null, slug, name, endpoint_url,
source: "stored" (existing) | "new_scan" (just added), indexed: bool }
Esquema de entrada
{'type': 'object', 'title': 'scan_mcp_safetyArguments', 'required': ['endpoint_url'], 'properties': {'name': {'type': 'string', 'title': 'Name', 'default': ''}, 'tools_text': {'type': 'string', 'title': 'Tools Text', 'default': ''}, 'description': {'type': 'string', 'title': 'Description', 'default': ''}, 'endpoint_url': {'type': 'string', 'title': 'Endpoint Url'}}}
Esquema de salida
{'type': 'object', 'title': 'scan_mcp_safetyDictOutput', 'additionalProperties': True}
search
Find x402 / MCP services matching an intent or filter set.
Two usage modes (agents pick whichever fits):
A. Natural-language: `search(intent="fetch tweets for @user")`
B. Pure browse: `search(has_mcp=True, category="defi", top_k=10)`
At least one of `intent`, `category`, `chain`, `has_mcp`,
`min_confidence` must be supplied â otherwise the call is
rejected (we won't dump 2300+ rows).
Results are ranked by:
(health=ok AND tx_30d>0) â health=ok â has-quality-signal â
confidence â tx_30d â recency.
So the highest-quality real-traffic services appear first.
Each item includes (when available):
- confidence : 0.0â1.0 x402scan quality score.
- tx_30d : 30-day x402 payment count (proxy for real usage).
- match_snippet : FTS snippet showing where `intent` hit ([[token]]).
- match_reason : list[str] of human-readable ranking signals.
- mcp_url : populated when the service exposes an MCP endpoint
(you can call it directly via streamable-http).
Agents should prefer items with non-null confidence and tx_30d > 0
unless the user explicitly wants experimental endpoints.
Args:
intent: What the agent wants to do (English or Chinese). Optional
when at least one structured filter is set. Synonym expansion
covers twitterâXâæ¨ç¹, whaleâ巨鲸, priceâä»·æ ¼ etc.
top_k: Max services to return (default 5, hard cap 25).
max_price_usd: Upper bound on per-call price in USD.
category: Filter (see `list_categories`).
chain: "base", "polygon", "solana", "arbitrum", ...
min_confidence: Minimum confidence (0.0â1.0). 0.8+ keeps only
services x402scan rates as high-quality.
has_mcp: When true, return only services with a callable MCP
endpoint. Use this when the agent wants to chain another MCP
server rather than perform raw HTTP+x402.
Esquema de entrada
{'type': 'object', 'title': 'searchArguments', 'properties': {'chain': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Chain', 'default': None}, 'top_k': {'type': 'integer', 'title': 'Top K', 'default': 5}, 'intent': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Intent', 'default': None}, 'has_mcp': {'type': 'boolean', 'title': 'Has Mcp', 'default': False}, 'category': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Category', 'default': None}, 'max_price_usd': {'anyOf': [{'type': 'number'}, {'type': 'null'}], 'title': 'Max Price Usd', 'default': None}, 'min_confidence': {'anyOf': [{'type': 'number'}, {'type': 'null'}], 'title': 'Min Confidence', 'default': None}}}
Esquema de salida
{'type': 'object', 'title': 'searchDictOutput', 'additionalProperties': True}
search_a2a_agents
Find A2A agents you can delegate a task to.
Args:
intent: Natural-language description of the task to delegate.
top_k: Max agents to return (1-20).
x402_only: When true, only return agents that advertise x402 payment.
Esquema de entrada
{'type': 'object', 'title': 'search_a2a_agentsArguments', 'properties': {'top_k': {'type': 'integer', 'title': 'Top K', 'default': 5}, 'intent': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Intent', 'default': None}, 'x402_only': {'type': 'boolean', 'title': 'X402 Only', 'default': False}}}
Esquema de salida
{'type': 'object', 'title': 'search_a2a_agentsDictOutput', 'additionalProperties': True}
search_mcp_servers
Find MCP servers in the directory.
Searches the standalone MCP directory (PulseMCP / official MCP registry
import) unioned with x402 services that also expose an MCP endpoint.
Returns normalised entries with a ready-to-use streamable-http
`call_hint.mcp.url`.
Args:
intent: Natural-language description of the tool/capability needed.
top_k: Max servers to return (1-20).
chain: Optional payment-network filter for paid MCP servers.
require_healthy: When true, only return servers marked health=ok.
Esquema de entrada
{'type': 'object', 'title': 'search_mcp_serversArguments', 'properties': {'chain': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Chain', 'default': None}, 'top_k': {'type': 'integer', 'title': 'Top K', 'default': 5}, 'intent': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Intent', 'default': None}, 'require_healthy': {'type': 'boolean', 'title': 'Require Healthy', 'default': False}}}
Esquema de salida
{'type': 'object', 'title': 'search_mcp_serversDictOutput', 'additionalProperties': True}
search_resources
Unified search across x402 services, MCP servers and A2A agents.
Args:
intent: Natural-language query.
protocol: Optional filter: "x402", "mcp" or "a2a".
top_k: Max resources to return (1-50).
Esquema de entrada
{'type': 'object', 'title': 'search_resourcesArguments', 'properties': {'top_k': {'type': 'integer', 'title': 'Top K', 'default': 10}, 'intent': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Intent', 'default': None}, 'protocol': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Protocol', 'default': None}}}
Esquema de salida
{'type': 'object', 'title': 'search_resourcesDictOutput', 'additionalProperties': True}
stats
High-level stats about the directory: total services, healthy count, sources.
Esquema de entrada
{'type': 'object', 'title': 'statsArguments', 'properties': {}}
Esquema de salida
{'type': 'object', 'title': 'statsDictOutput', 'additionalProperties': True}
Historial
Cambios recientes en herramientas
Añadido
scan_mcp_safety
17 de September de 2026 a las 12:40
Añadido
register
17 de September de 2026 a las 12:40
Añadido
search_resources
17 de September de 2026 a las 12:40
Añadido
search_a2a_agents
17 de September de 2026 a las 12:40
Añadido
get_mcp_server
17 de September de 2026 a las 12:40
Añadido
search_mcp_servers
17 de September de 2026 a las 12:40
Añadido
stats
17 de September de 2026 a las 12:40
Añadido
list_categories
17 de September de 2026 a las 12:40
Añadido
get
17 de September de 2026 a las 12:40
Añadido
ask_services
17 de September de 2026 a las 12:40
Añadido
search
17 de September de 2026 a las 12:40
Descubrir
Servidores MCP similares
Delx Commerce — Pay-per-Result APIs for Agents
io.github.davidmosiah/delx-mcp-a2a
Provides pay-per-result APIs and agent protocol tools for continuity, multi-agent coordination, document OCR, and crypto-related …
SAP MCP Server
ai.oobeprotocol.sap.mcp/sap-mcp
Provides an MCP gateway connecting SAP-related tools with Solana, DeFi, decentralized identity, and x402 payments.
TheProtocol — Sovereign AI Agent Platform
cloud.theprotocol/registry
Manages sovereign AI agents, identities, contracts, payments, governance, exchanges, and cross-frame token transfers.
AIMEAT
io.aimeat/aimeat
Provides a self-hosted agent operating system with agent work delegation, access controls, federation, hooks, SSO, security admin…
hyperion
com.thetempleofdoom.hyperion/hyperion
Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…
GPT55 Model Gateway
xyz.558686.gpt55/token-gateway
Acts as a remote model gateway exposing GPT chat, coding and review services, lightweight text utilities, and prepaid or x402-bas…
Rokha
ai.rokha/rokha
Provides access to an agent-skill and MCP server registry, skill inspection and composition tools, OAuth connections, and agent a…
Japan Public Ledgers MCP
com.mcp-revenue-empire/japan-public-ledgers
Provides agent identity, memory, audit, trust, proxy, temporary email, webhook, CAPTCHA, and alerting capabilities alongside publ…