{"name":"io.github.razel369/intentfence","slug":"razel369-intentfence","title":"IntentFence Agent Action Firewall","description":"Fail-closed action authorization, MCP risk scanning, x402 checks, and signed receipts.","url":"https://mcp.market/server/razel369-intentfence","rating":null,"grade":"B","score":83,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":20,"stars":2,"forks":0,"downloads_week":null,"last_push_at":"2026-07-30T19:21:59.000Z","license":"Apache-2.0"},"uptime":{"percent":93,"checks":28,"ok":26,"last_checked_at":"2026-11-04T10:00:44.136Z","last_ok_at":"2026-11-04T10:00:44.136Z","latency_ms":755},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/razel369/intentfence","website":null,"version":"0.16.0","remotes":[{"type":"streamable-http","url":"https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp"}],"packages":[],"tools":[{"name":"intentfence_agent_risk_scan","description":"Free metadata-only scan of caller-supplied MCP tool definitions for missing schemas, unsafe annotations, approval binding, and cost boundaries. Does not execute tools or certify security.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"server_name":{"type":"string","minLength":1,"maxLength":200},"tools":{"type":"array","minItems":1,"maxItems":100,"items":{"type":"object","required":["name"],"properties":{"name":{"type":"string","minLength":1,"maxLength":120},"description":{"type":"string","maxLength":2000},"inputSchema":{"type":"object"},"annotations":{"type":"object"}}}}},"required":["server_name","tools"],"additionalProperties":false}},{"name":"intentfence_authorize_action","description":"Authorize an exact agent action against an explicit allowlist, spend ceiling, retention ceiling, and optional action-bound approval. Returns a five-minute ES256 receipt and never executes the downstream action. Callers must verify the receipt and fail closed if the action changes.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"subject":{"type":"string","minLength":1,"maxLength":200},"action":{"type":"object","additionalProperties":false,"required":["type","resource","protocol"],"properties":{"type":{"type":"string","minLength":1,"maxLength":120},"resource":{"type":"string","minLength":1,"maxLength":1000},"protocol":{"type":"string","enum":["mcp","http","a2a","payment","other"]},"method":{"type":"string","minLength":1,"maxLength":20},"payload_sha256":{"type":"string","pattern":"^[0-9a-f]{64}$"}}},"context":{"type":"object","additionalProperties":false,"properties":{"currency":{"type":"string","minLength":1,"maxLength":12},"quoted_cost":{"type":"number","minimum":0},"data_retention_hours":{"type":"number","minimum":0}}},"policy":{"type":"object","additionalProperties":false,"required":["allowed_action_types","allowed_resources"],"properties":{"allowed_action_types":{"type":"array","minItems":1,"maxItems":50,"uniqueItems":true,"items":{"type":"string"}},"allowed_resources":{"type":"array","minItems":1,"maxItems":50,"uniqueItems":true,"items":{"type":"string"}},"max_cost":{"type":"object","additionalProperties":false,"required":["amount","currency"],"properties":{"amount":{"type":"number","minimum":0},"currency":{"type":"string","minLength":1,"maxLength":12}}},"max_data_retention_hours":{"type":"number","minimum":0},"require_human_approval_for":{"type":"array","maxItems":50,"uniqueItems":true,"items":{"type":"string"}}}},"approval":{"type":"object","additionalProperties":false,"required":["approved_by","approved_at","expires_at","action_digest","proof_id"],"properties":{"approved_by":{"type":"string","minLength":1,"maxLength":200},"approved_at":{"type":"string","format":"date-time"},"expires_at":{"type":"string","format":"date-time"},"action_digest":{"type":"string","pattern":"^[0-9a-f]{64}$"},"proof_id":{"type":"string","minLength":1,"maxLength":200}}}},"required":["subject","action","policy"],"additionalProperties":false}},{"name":"intentfence_checkout","description":"Free machine checkout builder. Select a paid IntentFence outcome and receive the exact endpoint, validated request, USDC cap, shell-safe Agentic Wallet argv, MCP tool call, and opt-in local auto-payment budget. It never signs or initiates payment.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"product":{"type":"string","enum":["us-cpi","wallet-risk","x402-readiness","x402-assessment","verified-preflight","policy-pack"],"description":"The paid outcome the agent wants to buy."},"input":{"type":"object","description":"The exact product input. Omit only to receive a non-executable example recipe."}},"required":["product"],"additionalProperties":false}},{"name":"intentfence_policy_pack","description":"Paid self-service integration pack (1 USDC on Base). Generates a runtime-specific TypeScript guard, signed action and policy receipt, negative test vectors, and a fail-closed deployment checklist for Cloudflare Agents, Coinbase AgentKit, or an MCP gateway. No meeting or account is required.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"project_name":{"type":"string","minLength":1,"maxLength":120,"description":"A public-safe project label. Do not include credentials or secrets."},"runtime":{"type":"string","enum":["cloudflare-agents","coinbase-agentkit","mcp-gateway","openai-agents-js"]},"authorization":{"type":"object","additionalProperties":false,"required":["subject","action","policy"],"properties":{"subject":{"type":"string","minLength":1,"maxLength":200},"action":{"type":"object","additionalProperties":false,"required":["type","resource","protocol"],"properties":{"type":{"type":"string","minLength":1,"maxLength":120},"resource":{"type":"string","minLength":1,"maxLength":1000},"protocol":{"type":"string","enum":["mcp","http","a2a","payment","other"]},"method":{"type":"string","minLength":1,"maxLength":20},"payload_sha256":{"type":"string","pattern":"^[0-9a-f]{64}$"}}},"context":{"type":"object","additionalProperties":false,"properties":{"currency":{"type":"string","minLength":1,"maxLength":12},"quoted_cost":{"type":"number","minimum":0},"data_retention_hours":{"type":"number","minimum":0}}},"policy":{"type":"object","additionalProperties":false,"required":["allowed_action_types","allowed_resources"],"properties":{"allowed_action_types":{"type":"array","minItems":1,"maxItems":50,"uniqueItems":true,"items":{"type":"string"}},"allowed_resources":{"type":"array","minItems":1,"maxItems":50,"uniqueItems":true,"items":{"type":"string"}},"max_cost":{"type":"object","additionalProperties":false,"required":["amount","currency"],"properties":{"amount":{"type":"number","minimum":0},"currency":{"type":"string","minLength":1,"maxLength":12}}},"max_data_retention_hours":{"type":"number","minimum":0},"require_human_approval_for":{"type":"array","maxItems":50,"uniqueItems":true,"items":{"type":"string"}}}},"approval":{"type":"object","additionalProperties":false,"required":["approved_by","approved_at","expires_at","action_digest","proof_id"],"properties":{"approved_by":{"type":"string","minLength":1,"maxLength":200},"approved_at":{"type":"string","format":"date-time"},"expires_at":{"type":"string","format":"date-time"},"action_digest":{"type":"string","pattern":"^[0-9a-f]{64}$"},"proof_id":{"type":"string","minLength":1,"maxLength":200}}}}}},"required":["project_name","runtime","authorization"],"additionalProperties":false}},{"name":"intentfence_preflight","description":"Free declared-input preview with no signed receipt, authorization proof, or enforcement guarantee. Returns safe_to_proceed, needs_review, or denied.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"subject":{"type":"string","minLength":1,"maxLength":200,"description":"Agent or principal identifier."},"action":{"type":"object","required":["type"],"properties":{"type":{"type":"string","minLength":1,"maxLength":120},"resource":{"type":"string","maxLength":500}}},"constraints":{"type":"object","properties":{"currency":{"type":"string","maxLength":12},"cost_ceiling":{"type":"number","minimum":0},"quoted_cost":{"type":"number","minimum":0},"data_retention_hours":{"type":"number","minimum":0},"human_approval":{"type":"string","enum":["required","optional","not_required"]}}},"proofs":{"type":"array","maxItems":20,"items":{"type":"string"}}},"required":["subject","action"]}},{"name":"intentfence_us_cpi","description":"Paid official U.S. CPI and core CPI data ($0.001 USDC on Base), retrieved from the Bureau of Labor Statistics with a six-hour edge cache and returned with an ES256 provenance receipt. Optionally request a YYYY-MM period.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"month":{"type":"string","pattern":"^20[0-9]{2}-(?:0[1-9]|1[0-2])$","description":"Optional CPI month in YYYY-MM. Omit for the latest complete headline/core period."}},"additionalProperties":false}},{"name":"intentfence_verified_preflight","description":"Paid production preflight ($0.005 USDC on Base). Settles through x402 and returns a signed ES256 audit receipt plus settlement metadata.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"subject":{"type":"string","minLength":1,"maxLength":200,"description":"Agent or principal identifier."},"action":{"type":"object","required":["type"],"properties":{"type":{"type":"string","minLength":1,"maxLength":120},"resource":{"type":"string","maxLength":500}}},"constraints":{"type":"object","properties":{"currency":{"type":"string","maxLength":12},"cost_ceiling":{"type":"number","minimum":0},"quoted_cost":{"type":"number","minimum":0},"data_retention_hours":{"type":"number","minimum":0},"human_approval":{"type":"string","enum":["required","optional","not_required"]}}},"proofs":{"type":"array","maxItems":20,"items":{"type":"string"}}},"required":["subject","action"]}},{"name":"intentfence_wallet_risk","description":"Paid AML/KYT wallet screening ($0.002 USDC on Base) before sending funds or approving a transaction. Checks live Base activity plus GoPlus sanctions, phishing, mixer, money-laundering, dark-web, blacklist, and related counterparty-risk flags, then returns a five-minute ES256 receipt. A low-risk result is not proof of identity, ownership, authorization, or future behavior.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"address":{"type":"string","pattern":"^0x[0-9a-fA-F]{40}$","description":"Base recipient or counterparty address to assess before payment."}},"required":["address"],"additionalProperties":false}},{"name":"intentfence_x402_assessment","description":"Paid assessment ($0.005 USDC on Base). Forward the exact base64 or base64url PAYMENT-REQUIRED header observed by the caller. IntentFence validates the quote, canonical Base USDC asset, price ceiling, payee allowlist, timeout, and resource binding without contacting the target, then returns a short-lived ES256 receipt bound to the quote hash. Supply allowed_payees for safe_to_proceed; omission yields needs_review.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"subject":{"type":"string","minLength":1,"maxLength":200,"description":"Agent or principal identifier."},"target_url":{"type":"string","format":"uri","maxLength":2048,"description":"Exact public HTTPS resource URL from the caller-observed x402 challenge."},"method":{"type":"string","enum":["GET","HEAD","POST"],"default":"GET"},"payment_required":{"type":"string","minLength":1,"maxLength":16384,"description":"Exact base64 or base64url PAYMENT-REQUIRED header value observed by the caller."},"policy":{"type":"object","additionalProperties":false,"required":["max_price_usdc"],"properties":{"max_price_usdc":{"type":"string","pattern":"^(?:0|[1-9][0-9]{0,11})(?:\\.[0-9]{1,6})?$","description":"Exact USDC ceiling as a decimal string."},"allowed_payees":{"type":"array","minItems":1,"maxItems":20,"uniqueItems":true,"description":"Explicit payee allowlist. Without it, the result cannot be safe_to_proceed.","items":{"type":"string","pattern":"^0x[0-9a-fA-F]{40}$"}}}}},"required":["subject","target_url","payment_required","policy"],"additionalProperties":false}},{"name":"intentfence_x402_readiness","description":"Paid live endpoint check ($0.002 USDC on Base). Makes one bounded credential-free request to a public HTTPS target, blocks private networks and redirects, never pays the target, validates the returned x402 challenge, and returns a signed five-minute receipt.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"subject":{"type":"string","minLength":1,"maxLength":200,"default":"agent:anonymous-marketplace-buyer","description":"Optional buyer identifier. Omit for anonymous marketplace delivery."},"target_url":{"type":"string","format":"uri","maxLength":2048,"description":"Public HTTPS x402 resource URL on the standard HTTPS port."},"method":{"type":"string","enum":["GET","HEAD","POST"],"default":"GET"},"body":{"description":"Optional JSON request body for POST probes, limited to 4096 encoded bytes."},"max_price_usdc":{"type":"string","pattern":"^(?:0|[1-9][0-9]{0,11})(?:\\.[0-9]{1,6})?$","default":"1.00","description":"Optional maximum acceptable x402 price in USDC."},"allowed_payees":{"type":"array","minItems":1,"maxItems":20,"uniqueItems":true,"items":{"type":"string","pattern":"^0x[0-9a-fA-F]{40}$"},"description":"Optional explicit payee allowlist. Omission yields ready_with_review for an otherwise valid quote."},"policy":{"type":"object","additionalProperties":false,"required":["max_price_usdc"],"deprecated":true,"description":"Legacy nested policy input. New buyers should use the optional top-level fields.","properties":{"max_price_usdc":{"type":"string","pattern":"^(?:0|[1-9][0-9]{0,11})(?:\\.[0-9]{1,6})?$","description":"Maximum acceptable x402 price in USDC."},"allowed_payees":{"type":"array","minItems":1,"maxItems":20,"uniqueItems":true,"items":{"type":"string","pattern":"^0x[0-9a-fA-F]{40}$"},"description":"Optional explicit payee allowlist. Omission yields ready_with_review for an otherwise valid quote."}}}},"required":["target_url"],"additionalProperties":false}}],"scan":{"score":83,"grade":"B","scanned_at":"2026-09-24T21:42:45.028Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-24T21:42:45.062Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":17,"max":20,"notes":["remote reachable in 2704ms"]},"poisoning":{"score":15,"max":15,"notes":["10 tool descriptions checked"]},"auth":{"score":10,"max":15,"notes":["open endpoint, read-only tools"]},"maintenance":{"score":12,"max":15,"notes":["last push 56 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"probes":[{"url":"https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp","reachable":true,"authRequired":false,"latencyMs":2704,"serverInfo":{"name":"IntentFence","version":"0.16.0"}}],"packages":[],"repo":{"found":true,"owner":"razel369","repo":"intentfence","archived":false,"pushedAt":"2026-07-30T19:21:59Z","stars":2,"forks":0,"openIssues":4,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/84428469?v=4","ownerCreatedAt":"2021-05-19T02:24:12Z","license":"Apache-2.0"},"icon":{"url":"https://agentpass-protocol.rmalka06.chatgpt.site/favicon.svg","source":"site"},"presence":{"stars":2,"forks":0,"downloadsWeek":null,"license":"Apache-2.0","lastPushAt":"2026-07-30T19:21:59.000Z","score":20}}}},"grade_history":[],"reviews":[]}