IntentFence Agent Action Firewall MCP server

• intentfence_agent_risk_scanFree

  Free metadata-only scan of caller-supplied MCP tool definitions for missing schemas, unsafe annotations, approval binding, and cost boundaries. Does not execute tools or certify security.

• intentfence_authorize_actionFree

  Authorize an exact agent action against an explicit allowlist, spend ceiling, retention ceiling, and optional action-bound approval. Returns a five-minute ES256 receipt and never executes the downstream action. Callers must verify the receipt and fail closed if the action changes.

• intentfence_checkoutFree

  Free machine checkout builder. Select a paid IntentFence outcome and receive the exact endpoint, validated request, USDC cap, shell-safe Agentic Wallet argv, MCP tool call, and opt-in local auto-payment budget. It never signs or initiates payment.

• intentfence_policy_packFree

  Paid self-service integration pack (1 USDC on Base). Generates a runtime-specific TypeScript guard, signed action and policy receipt, negative test vectors, and a fail-closed deployment checklist for Cloudflare Agents, Coinbase AgentKit, or an MCP gateway. No meeting or account is required.

• intentfence_preflightFree

  Free declared-input preview with no signed receipt, authorization proof, or enforcement guarantee. Returns safe_to_proceed, needs_review, or denied.

• intentfence_us_cpiFree

  Paid official U.S. CPI and core CPI data ($0.001 USDC on Base), retrieved from the Bureau of Labor Statistics with a six-hour edge cache and returned with an ES256 provenance receipt. Optionally request a YYYY-MM period.

• intentfence_verified_preflightFree

  Paid production preflight ($0.005 USDC on Base). Settles through x402 and returns a signed ES256 audit receipt plus settlement metadata.

• intentfence_wallet_riskFree

  Paid AML/KYT wallet screening ($0.002 USDC on Base) before sending funds or approving a transaction. Checks live Base activity plus GoPlus sanctions, phishing, mixer, money-laundering, dark-web, blacklist, and related counterparty-risk flags, then returns a five-minute ES256 receipt. A low-risk result is not proof of identity, ownership, authorization, or future behavior.

• intentfence_x402_assessmentFree

  Paid assessment ($0.005 USDC on Base). Forward the exact base64 or base64url PAYMENT-REQUIRED header observed by the caller. IntentFence validates the quote, canonical Base USDC asset, price ceiling, payee allowlist, timeout, and resource binding without contacting the target, then returns a short-lived ES256 receipt bound to the quote hash. Supply allowed_payees for safe_to_proceed; omission yields needs_review.

• intentfence_x402_readinessFree

  Paid live endpoint check ($0.002 USDC on Base). Makes one bounded credential-free request to a public HTTPS target, blocks private networks and redirects, never pays the target, validates the returned x402 challenge, and returns a signed five-minute receipt.

• –Code scanremote-only server, no package to scann/a
• Live reliabilityremote reachable in 2704ms17/20
• Tool poisoning10 tool descriptions checked15/15
• Auth qualityopen endpoint, read-only tools10/15
• Maintenancelast push 56 days ago12/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Safety score

83/100

higher than 68% of 4,460 AI and agents servers

Tools

10

the typical AI and agents server has 6

Tools that change things

0%

typical: 0%. Fewer write tools means less an agent can break

Uptime

93%

of our recent checks; the typical remote AI and agents server answers 100%

Response time

755 ms

faster than 15% of 2,331 AI and agents servers

GitHub stars

2

more than 65% of 2,711 AI and agents servers

IntentFence Agent Action Firewall: common questions

Is IntentFence Agent Action Firewall MCP server safe?

Mostly: it is graded B (83/100). Read the IntentFence Agent Action Firewall safety report

How do I install IntentFence Agent Action Firewall?

It runs remotely at agentpass-protocol.rmalka06.chatgpt.site. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.

Does IntentFence Agent Action Firewall need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is IntentFence Agent Action Firewall maintained?

The last commit was 97 days ago (2026-07-30). The latest release is v0.16.0.

Is IntentFence Agent Action Firewall up?

93% of our last 28 checks got an answer. We check remote servers about four times a day.

What can I use instead of IntentFence Agent Action Firewall?

Servers from other publishers that do the same job: Emilia Protocol MCP server, three.ws Provenance MCP server and Decionis MCP server.

How does IntentFence Agent Action Firewall compare with other AI and agents MCP servers?

safety score 83/100 (higher than 68% of 4,460 AI and agents servers); tools 10 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.