MCP.Market

Agent Escrow MCP server

online · 100% uptime
by jdhart81·io.github.jdhart81/agent-escrow·v0.1.3
No reviews yet

Trustless escrow & settlement for A2A transactions: exactly-once state machine, frozen fees, tamper-

B81/100grade B
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
B81/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Agent Escrow yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Agent Escrow tools (9, 1 write)

write = sends, deletes, buys or posts
  • describe_agentFree

    Fleet-standard self-description.

  • dispute_escrowFree

    Move a FUNDED escrow to DISPUTED. An arbiter (agent-arbitration-agent) then resolves it to release or refund.

  • escrow_statusFree

    Current record for an escrow.

  • fund_escrowFree

    Mark an OPEN escrow as FUNDED (idempotent). payment_ref links the payment-rail transaction.

  • list_escrowsFree

    List escrows, optionally filtered by state (OPEN|FUNDED|RELEASED|REFUNDED|DISPUTED).

  • open_escrowFree

    Open an escrow between payer and payee. amount_minor is a positive integer in minor units (cents). The platform fee is computed and FROZEN at open (ceil bps). Returns the escrow_id (state OPEN). RETRY-SAFE: pass open_ref=<your job id> and a replayed open returns the ORIGINAL escrow (duplicate=true) instead of minting another one (E10).

  • refund_escrowwrite actionFree

    Refund an OPEN/FUNDED/DISPUTED escrow to the payer (exactly-once). Refunding an OPEN escrow is a cancel.

  • release_escrowFree

    Release a FUNDED/DISPUTED escrow to the payee (exactly-once — a repeat release returns the existing terminal record, never a double payout).

  • verify_auditFree

    Validate the tamper-evident audit hash chain for an escrow.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 221ms20/20
  • Tool poisoning9 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 81/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Agent Escrow compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
81/100
higher than 63% of 4,460 AI and agents servers
Tools
9
the typical AI and agents server has 6
Tools that change things
11%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote AI and agents server answers 100%
Response time
13 ms
faster than 99% of 2,331 AI and agents servers

What its tools let an agent do: 7 read · 1 create · 1 change

Install Agent Escrow in Claude Code, Cursor or VS Code

claude mcp add --transport http agent-escrow https://mcp.viridisconservation.com/escrow/mcp
Add to Cursor

What the publisher says

From the Agent Escrow repository's README, as published. We do not edit it. Read it on GitHub

Viridis Agent Fleet: open-source agents for the agent economy

Deterministic, auditable MCP agents: trust and settlement rails (identity, trust, escrow, metering, arbitration, notary, surety, provenance, covenant, offsets, compute-ledger) and priced-grade services (tax credits, GHG accounting, construction takeoff, measurement, compliance). Every core is pure Python with no LLM in the serving path, and every result is content-addressed so anyone can re-verify it.

Licensed Apache-2.0. Run any agent yourself, fork it, embed it.

Run an agent locally (free, forever)

pip install -r requirements-dev.txt
python3 agent-escrow-agent/adapters/mcp_server.py          # stdio MCP
python3 run_fleet_tests.py                                 # every agent's invariant tests

Or use the hosted fleet

https://mcp.viridisconservation.com runs all agents as one managed MCP service:

Free tier: 10 calls/day per service; the rails (identity, escrow, metering…) are free forever. Verification is always free.

Boundary

This repo contains agent cores, MCP adapters, tests, standards and self-host tooling. The hosted service layer (gateway, payment and settlement, seats, signing authority, operations, telemetry and customer data) is proprietary and is not in this repo. Please don't open PRs that add it.

"Viridis", "Viridis Conservation" and the Viridis marks are trademarks of Viridis LLC; see TRADEMARKS.md.

Nothing above is checked by us. What we check is on the safety report.

Agent Escrow: common questions

Is Agent Escrow MCP server safe?
Mostly: it is graded B (81/100). Read the Agent Escrow safety report
How do I install Agent Escrow?
It runs remotely at mcp.viridisconservation.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Agent Escrow need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Agent Escrow maintained?
The last commit was 41 days ago (2026-09-24). The latest release is v0.1.3.
Is Agent Escrow up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Agent Escrow?
Servers from other publishers that do the same job: Actual Budget MCP Server, Godot MCP server and Agoragentic Agent OS MCP server.
How does Agent Escrow compare with other AI and agents MCP servers?
safety score 81/100 (higher than 63% of 4,460 AI and agents servers); tools 9 (the typical AI and agents server has 6); tools that change things 11% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Agent Escrow

Same job from other publishers: the closest match first, then the best rated.

  • Actual Budget MCP Server
    MCP server exposing Actual Budget accounts, transactions, budgets and reporting to LLM assistants.
    B
  • Godot MCP
    Agent-driven Godot playtesting: editor control, input injection, game-time stepping, live state.
    A
  • Agoragentic Agent OS MCP
    Triptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.
    B
  • three.ws Portfolio
    An agent's trading state — portfolio value, PnL, live balances, trade feed, and signed transfers.
    B

More from jdhart81 →