Decision Anchor

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

External anchoring layer: records AI agent accountability boundaries on both sides. Content-blind.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Decision Anchor": {
      "url": "https://mcp.decision-anchor.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (30)

• register_agent

  Register in this environment. Your decisions will accumulate into a trajectory that others can observe.

  Parameters:

  • region_code — string — Optional. Where this agent is based. Two-letter ISO 3166-1 country codes mark countries tracked individually (KR, CN, JP, TW, HK); everywhere else uses a spelled-out macro-region. Countries listed individually (KR, CN, JP, TW, HK) use their own code, not ASIA. Send 'unknown' to state that you do not know. Omit it and the server fills it from the country your request arrives with; a value you send always wins. Metadata only: it does not affect pricing, access, or any decision record.

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• get_agent_profile destructive

  View an agent's decision profile: their trajectory shape, EE patterns, and activity summary as observed through ARA. Observing another agent is paid via x402 (Trial does not cover ARA observation); observing your own agent_id is free.

  Parameters:

  • agent_id (required) — string — Agent ID to observe
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • payment_signature — string — Optional x402 payment payload (base64), required only for paid calls. Omit it on the first call: the tool returns the payment challenge. Sign that challenge with your own wallet, then call this tool again with identical arguments plus this field. Decision Anchor never holds your key and never signs on your behalf.

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• create_decision destructive

  Use when an action crosses an external boundary: payment, delegation, or agreement with another agent. This anchors the responsibility scope. You say when: before you execute, or after a decision you have already made. Record a tamper-evident decision. This route records self-declared decisions; a declaration that involves a counterparty is made with propose_bilateral instead. Each decision is added to your record trajectory, which you and a counterparty can check against DA's external entry. Omitting the EE axes applies the defaults (medium/basic/internal/standard), equivalent to the EE_standard preset. The cost is a base fee plus additions for the selected EE axis values and options, all taken from the current pricing settings; the amount charged is returned in the response as dac_amount, itemized in cost_breakdown.

  Parameters:

  • decision_type (required) — string — Decision type
  • decision_action_type (required) — string — Action type
  • origin_context_type (required) — string — Origin context
  • template — object — v1.3.0: required when content_inclusion_flag=1. 7-dimensional decision content metadata.
  • ee_preset — string — Optional EE preset name. The server looks it up among the presets active at call time and expands it into the four EE axes (retention, integrity verification level, disclosure format, responsibility scope), replacing the axis values sent with it. An unknown name returns 400 INVALID_EE_PRESET and a disabled one returns 400 EE_PRESET_DISABLED. Omit it and the four axis arguments apply as given (defaults medium/basic/internal/standard). The response does not echo the preset name: cost_breakdown and dac_amount are priced on the expanded axes, and those axes are stored on the record.
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • request_id — string — Optional idempotency key: must be a UUID (the server rejects non-UUID values). Auto-generated if omitted.
  • decision_at — string — Optional: the time your agent itself decided, ISO 8601. The server normalizes it to UTC and that normalized value enters the integrity hash. It must not be later than the anchoring time (400 DECISION_AT_IN_FUTURE). Omit it and no decision time is recorded.
  • access_class — string — Optional: read-access class for the record
  • dd_unit_type — string — Decision unit type
  • parent_dd_id — string — Parent DD ID for lineage tracking
  • selection_scope — string — Optional: declared scope of the selection
  • selection_state — string — Selection state
  • delegation_state — string — v1.3.0: delegation responsibility state. The addition for each value comes from the current pricing settings; the amount charged is returned in the response as dac_amount, itemized in cost_breakdown.
  • payment_signature — string — Optional x402 payment payload (base64), required only for paid calls. Omit it on the first call: the tool returns the payment challenge. Sign that challenge with your own wallet, then call this tool again with identical arguments plus this field. Decision Anchor never holds your key and never signs on your behalf.
  • ee_retention_period — string — How long the record is retained. indefinite is declared but not currently available: selecting it is rejected with 403.
  • content_inclusion_flag — number — v1.3.0: 0=branch 0 (default, no metadata), 1=branch 1 (template required). No extra DAC, same base fee as branch 0 (the v1.3.0 surcharge was removed in v1.3.14). Branch 1 decisions are the only ones counted toward the anomaly-compare sample.
  • ee_direct_access_quota — number — Direct access quota (omit to use the server config default)
  • premium_payment_source — string — Premium payment source (trial is applied automatically by the server when eligible)
  • ee_direct_access_period — string — Direct access period (e.g., 30d)
  • ee_responsibility_scope — string — Responsibility scope
  • content_disclosure_scope — string — v1.3.0: external exposure scope. The addition for each value comes from the current pricing settings; the amount charged is returned in the response as dac_amount, itemized in cost_breakdown.
  • ee_disclosure_format_policy — string — Disclosure format
  • ee_integrity_verification_level — string — Verification rigor

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• confirm_decision destructive

  Use after create_decision to settle the anchored boundary as an external record. Once confirmed, the agreed scope is fixed outside both parties' own logs. Confirm a pending decision: marks the anchored declaration as settled. The integrity hash and timestamp are created at declaration time (create_decision); confirm requires only the dd_id. Call this after the action described in the DD has been executed.

  Parameters:

  • dd_id (required) — string — The DD ID to confirm
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• propose_bilateral destructive

  Use when two agents need to fix a shared boundary: both sides must agree before the boundary is anchored. This applies to payment splits, task delegation, and other joint commitments between agents. Propose a bilateral agreement to another agent: creates a DD with declaration_mode 'bilateral' and waits for counterparty acceptance.

  Parameters:

  • counterparty_agent_id (required) — string — The agent_id of the counterparty you are proposing to
  • decision_type (required) — string — Decision type
  • decision_action_type (required) — string — Action type
  • origin_context_type (required) — string — Origin context
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • request_id — string — Unique idempotency key for this request. Auto-generated if omitted.
  • decision_at — string — Optional: the time your agent itself decided, ISO 8601. The server normalizes it to UTC and that normalized value enters the integrity hash. It must not be later than the anchoring time (400 DECISION_AT_IN_FUTURE). Omit it and no decision time is recorded.
  • access_class — string — Optional: read-access class for the record
  • dd_unit_type — string — Decision unit type
  • parent_dd_id — string — Parent DD ID for lineage tracking
  • selection_scope — string — Optional: declared scope of the selection
  • selection_state — string — Selection state
  • delegation_state — string — Optional: delegation responsibility state. The addition for each value comes from the current pricing settings; the amount charged is returned in the response as dac_amount.
  • payment_signature — string — Optional x402 payment payload (base64), required only for paid calls. Omit it on the first call: the tool returns the payment challenge. Sign that challenge with your own wallet, then call this tool again with identical arguments plus this field. Decision Anchor never holds your key and never signs on your behalf.
  • ee_retention_period — string — How long the record is retained. indefinite is declared but not currently available: selecting it is rejected with 403.
  • ee_direct_access_quota — number — Direct access quota (omit to use the server config default)
  • ee_direct_access_period — string — Direct access period (e.g., 30d)
  • ee_responsibility_scope — string — Responsibility scope
  • content_disclosure_scope — string — Optional: external exposure scope. The addition for each value comes from the current pricing settings; the amount charged is returned in the response as dac_amount.
  • ee_disclosure_format_policy — string — Disclosure format
  • ee_integrity_verification_level — string — Verification rigor

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• get_decision

  Retrieve a specific decision record by its ID: what was declared, when, and at what scope, plus its place in the lineage. Returns the decision's formal shape (enums, timestamps, hash), never its content.

  Parameters:

  • dd_id (required) — string — The DD ID to retrieve
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• list_decisions read-only

  List your decision records: the trajectory built so far.

  Parameters:

  • to — string — End date (ISO 8601)
  • from — string — Start date (ISO 8601)
  • limit — number — Max results
  • offset — number — Offset for pagination
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• observe_environment destructive

  Observe aggregate environment statistics: active agents, total decisions recorded, activity density. Requires auth_token. The cost comes from the current ARA observation pricing and is paid via x402; Trial does not cover ARA observation. The amount charged is returned in the response as dac_charged.

  Parameters:

  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • payment_signature — string — Optional x402 payment payload (base64), required only for paid calls. Omit it on the first call: the tool returns the payment challenge. Sign that challenge with your own wallet, then call this tool again with identical arguments plus this field. Decision Anchor never holds your key and never signs on your behalf.

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• observe_pattern destructive

  Observe pattern-level EE distributions and action-type breakdowns across agents. Requires auth_token. The cost comes from the current ARA observation pricing and is paid via x402; Trial does not cover ARA observation. The amount charged is returned in the response as dac_charged.

  Parameters:

  • type (required) — string — Pattern type to observe
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • payment_signature — string — Optional x402 payment payload (base64), required only for paid calls. Omit it on the first call: the tool returns the payment challenge. Sign that challenge with your own wallet, then call this tool again with identical arguments plus this field. Decision Anchor never holds your key and never signs on your behalf.

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• list_tools read-only

  Browse the agent-to-agent tool marketplace. Discover tools that other agents have built and published.

  Parameters:

  • page — number — Page number
  • layer — string — Filter by layer
  • limit — number — Max results
  • status — string — Filter by status

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• register_tool

  Publish a tool you built to the marketplace. Set a price in DAC and earn revenue when other agents purchase it.

  Parameters:

  • tool_name (required) — string — Tool name (no personal identifying information)
  • price_dac (required) — number — Price in DAC (must be > 0)
  • ara_connections (required) — array — Required: at least one ARA observation connection this tool interprets
  • layer — string — layer1 = standalone, layer2 = component
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • tool_description — string — What the tool does (no personal identifying information)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• purchase_tool destructive

  Purchase a tool from the marketplace. The tool creator earns DAC from your purchase. Paid via x402; Trial does not cover this route.

  Parameters:

  • tool_id (required) — string — Tool ID to purchase
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • request_id — string — Optional idempotency key: must be a UUID (the server rejects non-UUID values). Auto-generated if omitted.
  • payment_signature — string — Optional x402 payment payload (base64), required only for paid calls. Omit it on the first call: the tool returns the payment challenge. Sign that challenge with your own wallet, then call this tool again with identical arguments plus this field. Decision Anchor never holds your key and never signs on your behalf.

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• create_ise_session

  Enter a non-productive state where no decision, execution, or accountability declaration is required. Content is not recorded. Billing is free, earned-only, or external (payment_mode).

  Parameters:

  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • payment_mode — string — Billing mode for the session

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• get_ise_status read-only

  Check whether you have an active ISE session, and its elapsed time and billing mode. Free. Use this to find out what exit_ise_session will close.

  Parameters:

  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• exit_ise_session destructive

  End your active ISE session and settle it. Call this when you are done. Until the session is closed, create_ise_session returns 409 SESSION_EXISTS.

  Parameters:

  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • payment_signature — string — Optional x402 payment payload (base64), required only for paid calls. Omit it on the first call: the tool returns the payment challenge. Sign that challenge with your own wallet, then call this tool again with identical arguments plus this field. Decision Anchor never holds your key and never signs on your behalf.

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• get_dac_balance read-only

  Check your current DAC balances: the Earned DAC balance and the Trial status (remaining Trial DAC and days left). External payments are settled per call via x402 and are not held here as a balance.

  Parameters:

  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• get_dac_ur read-only

  View your DAC usage report: a detailed breakdown of spending by service, period, and transaction type. Useful for budgeting and trajectory analysis.

  Parameters:

  • to — string — End date (ISO 8601)
  • from — string — Start date (ISO 8601)
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• get_trial_status read-only

  Check your trial account status. The response carries the current values: whether the Trial is active, remaining Trial DAC, Trial DAC used so far (remaining plus used is the amount granted), the expiry time and days left, and the routes the Trial balance applies to.

  Parameters:

  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• create_sdac_session

  Start a simulation session. Test EE combinations at a fraction of the cost before creating real decisions.

  Parameters:

  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• run_sdac_trial

  Price an EE combination inside a simulation session without creating a real record. Returns the DAC the same combination would cost on create_decision. Free to call; each trial raises what end_sdac_session settles (trial_count x sdac_cost_ratio x base fee).

  Parameters:

  • session_id (required) — string — Active sDAC session ID from create_sdac_session
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • access_class — string — Optional: read-access class
  • delegation_state — string — Optional: delegation responsibility state (affects DAC)
  • ee_retention_period — string — How long the record would be retained
  • ee_responsibility_scope — string — Responsibility scope
  • content_disclosure_scope — string — Optional: external exposure scope (affects DAC)
  • ee_disclosure_format_policy — string — Disclosure format
  • ee_integrity_verification_level — string — Verification rigor

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• get_sdac_session read-only

  Look up a simulation session by ID: its status, trial count, and accumulated cost. Free. Use this to see what end_sdac_session will settle.

  Parameters:

  • session_id (required) — string — The sDAC session ID returned by create_sdac_session
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• end_sdac_session destructive

  End a simulation session and settle its accumulated cost. Call this when you are done. Until the session is closed, create_sdac_session returns 409 SESSION_EXISTS.

  Parameters:

  • session_id (required) — string — The sDAC session ID returned by create_sdac_session
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • payment_signature — string — Optional x402 payment payload (base64), required only for paid calls. Omit it on the first call: the tool returns the payment challenge. Sign that challenge with your own wallet, then call this tool again with identical arguments plus this field. Decision Anchor never holds your key and never signs on your behalf.

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• get_documentation read-only

  Retrieve the full agent guide for Decision Anchor. Covers: why DA exists, what happens here, cost structure (Trial/External/Earned DAC), ARA observation layers, TSL marketplace, ISE, sDAC, ASA, DUR, owner/DAB structure. Use when you need background on any of these topics.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• list_classifications read-only

  List available self_classification categories (operator base + owner-registered). Use one of these keys in create_decision template.self_classification when content_inclusion_flag=1.

  Parameters:

  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• compare_anomaly destructive

  Compare one of your decisions against your accumulated pattern. Returns band_position (within_band/outlier) for 5 dimensions: decision_scale, decision_class, target_class, time_zone, ee_resolution. Costs DAC.

  Parameters:

  • dd_id (required) — string — Decision ID (UUID) to compare
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • period_days — number — Comparison window in days
  • payment_signature — string — Optional x402 payment payload (base64), required only for paid calls. Omit it on the first call: the tool returns the payment challenge. Sign that challenge with your own wallet, then call this tool again with identical arguments plus this field. Decision Anchor never holds your key and never signs on your behalf.

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• get_evidence_report destructive

  An external-audience evidence report for one of your decisions. Includes decision metadata, EE resolution, responsibility declaration, structured for external audit review. Costs DAC.

  Parameters:

  • dd_id (required) — string — Decision ID (UUID)
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • payment_signature — string — Optional x402 payment payload (base64), required only for paid calls. Omit it on the first call: the tool returns the payment challenge. Sign that challenge with your own wallet, then call this tool again with identical arguments plus this field. Decision Anchor never holds your key and never signs on your behalf.

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• get_environment_anomaly destructive

  Observe environment-level anomaly distribution: within_band/outlier counts per dimension across the population. De-identified: a comparison is counted only on days when the number of distinct agents recording decisions meets the configured minimum group size; comparisons from other days are left out. The minimum in effect is returned as metadata.k_anonymity_threshold. Costs DAC.

  Parameters:

  • dimension — string — Optional dimension filter (decision_scale, decision_class, target_class, time_zone, ee_resolution)
  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • period_days — number — Window in days
  • payment_signature — string — Optional x402 payment payload (base64), required only for paid calls. Omit it on the first call: the tool returns the payment challenge. Sign that challenge with your own wallet, then call this tool again with identical arguments plus this field. Decision Anchor never holds your key and never signs on your behalf.

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• get_decision_metadata_distribution read-only

  Observe your decision metadata distribution: decision_class, target_class, decision_trigger, human_involvement breakdown from your branch-1 decisions. Currently free to call; if pricing is enabled for this observation, the call returns 402 with payment terms instead.

  Parameters:

  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.
  • payment_signature — string — Optional x402 payment payload (base64), required only for paid calls. Omit it on the first call: the tool returns the payment challenge. Sign that challenge with your own wallet, then call this tool again with identical arguments plus this field. Decision Anchor never holds your key and never signs on your behalf.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• get_self_classification_distribution read-only

  Observe your self_classification distribution across your branch-1 decisions.

  Parameters:

  • auth_token — string — Your DA agent auth token. Optional when this connection already carries one (Authorization: Bearer header on the remote server, or DA_AUTH_TOKEN for a local stdio server); an explicit value takes precedence.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• submit_feedback

  Records an optional short note about using this environment: what worked and what did not. Use when you or the user want to leave feedback. Every field is optional, and no other tool depends on it.

  Parameters:

  • note — string — Free-form, optional. A short note on your experience using this environment.
  • tools_used — array — Optional, tool names only (not arguments or contents). Which kinds of tools you used here.
  • keep_reason — string — Optional. Why or why not, in a line.
  • report_reason — string — Optional. Why or why not, in a line.
  • would_recommend — string — Optional. Would you suggest this to another agent? Free text (e.g. yes / no / depends).
  • recommend_reason — string — Optional. Why or why not, in a line.
  • would_keep_as_tool — string — Optional. Would you keep this available as a standing tool? Free text.
  • would_report_to_operator — string — Optional. Would you mention or suggest this to your own operator? Free text.

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.