Hermes Plant — Agent Commerce Assurance

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Preflight, approve, and prove consequential agent actions with signed evidence and x402 tools.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Hermes Plant — Agent Commerce Assurance": {
      "url": "https://mcp.hermesplant.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (25)

• freetier_status read-only

  Check a free API key's remaining monthly quota, reset date, and upgrade path. Pass your hp_free_ key as apiKey. No key yet? POST an email to https://hermesplant.com/api/keys/free (250 calls/mo, no wallet).

  Parameters:

  • apiKey (required) — string — Your free-tier key (hp_free_...)

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

• list_products read-only

  List active products from the Hermes Plant catalog

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

• get_product read-only

  Get a single product by slug

  Parameters:

  • slug (required) — string — Product slug from the catalog

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

• get_checkout_policies read-only

  Return legal policy URLs required before checkout

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

• get_x402_manifest read-only

  Return the live x402 manifest with paid endpoint prices, Bazaar metadata, and buyer policy checks

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

• start_checkout

  Start a Stripe checkout session for a product slug

  Parameters:

  • slug (required) — string — Product slug to purchase

  Hints: read-only no · destructive no · idempotent no · open-world yes

• purchase_with_x402

  Purchase a one-time product via x402 (returns 402 challenge or fulfillment JSON). Call get_x402_manifest first, verify method/path/network/amount/payTo, then sign and retry with PAYMENT-SIGNATURE.

  Parameters:

  • slug (required) — string — One-time product slug (e.g. destructguard-pro)
  • email — string — Optional email for the order record
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent no · open-world yes

• action_safety_quick_gate

  AI agent action safety quick gate ($0.01 over x402 or free-tier quota). Deterministically scores a consequential action and returns the exact next call: proceed, request full DestructGuard evidence, or run the complete Action Safety workflow.

  Parameters:

  • command (required) — string — Shell, SQL, Git, deploy, or infrastructure action to preflight
  • cwd — string — Working directory or execution context
  • repo — string — Repository or project context
  • actor — string — Agent or tool requesting the action
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • branch — string — Branch or environment context
  • intent — string — Why the action is being requested
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • diffStat — string — Optional git diff --stat or change summary
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• action_safety_run

  Complete AI agent action safety workflow ($0.25 over x402 or free-tier quota): DestructGuard evidence, conditional ReviewQueue triage for high or critical risk, an honest decision, signed receipt, and 30-day status record. Triage does not imply human approval.

  Parameters:

  • command (required) — string — Shell, SQL, Git, deploy, or infrastructure action to preflight
  • cwd — string — Working directory or execution context
  • repo — string — Repository or project context
  • actor — string — Agent or tool requesting the action
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • branch — string — Branch or environment context
  • intent — string — Why the action is being requested
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • diffStat — string — Optional git diff --stat or change summary
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• submit_reviewqueue_request

  Submit a command/action to the x402-paid ReviewQueue agent service. Call get_x402_manifest first, verify the ReviewQueue price and buyer policy, then retry the 402 challenge with an x402 payment signature.

  Parameters:

  • command (required) — string — Command or agent action being requested
  • repo — string — Repository or project context
  • actor — string — Agent/tool requesting the action
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • branch — string — Branch or environment context
  • reason — string — Why the action is being requested
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • diffStat — string — Optional git diff --stat or change summary
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• score_destructguard_command

  Score a command/action with the x402-paid DestructGuard service. Call get_x402_manifest first, verify the DestructGuard price and buyer policy, then retry the 402 challenge with an x402 payment signature.

  Parameters:

  • command (required) — string — Command or agent action to score
  • cwd — string — Working directory or execution context
  • repo — string — Repository or project context
  • actor — string — Agent/tool requesting the action
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • intent — string — Why the command is being requested
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • diffStat — string — Optional git diff --stat or change summary
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• dealanalyzer_analyze

  DealAnalyzer (x402-paid, $2.00): the flagship. Deterministic full deal underwrite in a single call — DCF valuation (EV, equity value, implied share price), fund returns (IRR/MOIC), and the LP/GP distribution waterfall, plus sensitivity. Combines what CashflowLens + WaterfallLens do, cross-checked.

  Parameters:

  • dcf (required) — object — Required. DCF valuation inputs.
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • channel — string — Discovery channel or source tag
  • returns — object — Optional fund/deal return inputs (IRR, MOIC, NPV).
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • waterfall — object — Optional LP/GP distribution waterfall inputs.
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• cashflowlens_analyze

  CashflowLens (x402-paid, $0.20): deterministic NPV, IRR, XIRR, DCF valuation, MOIC/DPI/TVPI, and payback period from a cashflow series. Use for valuation and return analysis instead of letting the model estimate.

  Parameters:

  • cashflows (required) — array — Cashflows: numbers for periodic, or {amount,date} objects for dated XIRR. Outflows negative.
  • dcf — object — Optional DCF valuation inputs (projected FCFs, discount rate, terminal value, net debt, shares)
  • nav — number — Residual value, for TVPI
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • discountRate — number — Annual rate for NPV, e.g. 0.08
  • periodsPerYear — number — Periods per year to annualize a periodic IRR
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• waterfall_distribute

  WaterfallLens (x402-paid, $0.30): deterministic LP/GP distribution waterfall (return of capital, preferred, GP catch-up, carried-interest split) with the exact split, per-tier breakdown, LP MOIC, and effective carry %.

  Parameters:

  • contributedCapital (required) — number — Total LP capital to return in tier 1
  • distributable (required) — number — Total cash to distribute
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • years — number — Holding period for preferred accrual
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • compounding — string — Preferred-return accrual basis: 'simple' or 'compounded' (default compounded)
  • preferredRate — number — Annual preferred rate, e.g. 0.08
  • carryPercentage — number — GP carry, e.g. 0.20 (default 0.20)
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • catchUpPercentage — number — GP catch-up share, 1.0 = full (default)
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation
  • preferredReturnAmount — number — Explicit preferred return amount

  Hints: read-only no · destructive no · idempotent yes · open-world no

• options_price

  OptionLens (x402-paid, $0.30): deterministic Black-Scholes price and full Greeks (delta, gamma, vega, theta, rho) for European calls/puts, with dividend yield, intrinsic/time value, and moneyness.

  Parameters:

  • spot (required) — number — Underlying price (> 0)
  • strike (required) — number — Strike price (> 0)
  • timeToExpiry (required) — number — Years to expiry, e.g. 0.5
  • volatility (required) — number — Annualized volatility, e.g. 0.2
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • optionType — string — Option type, 'call' or 'put' (default call)
  • riskFreeRate — number — Annual risk-free rate, default 0
  • dividendYield — number — Continuous dividend yield, default 0
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• bond_analyze

  BondLens (x402-paid, $0.25): deterministic fixed-income and loan analytics. Bond mode solves price<->yield-to-maturity, duration, and convexity; loan mode (send principal+annualRate+termMonths) returns an amortization schedule.

  Parameters:

  • payer — string — Optional wallet/account identifier; stored only as a hash
  • price — number — Bond price; supply to solve yield
  • yield — number — Annual yield; supply to solve price
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • channel — string — Discovery channel or source tag
  • periods — number — Periods to maturity
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • faceValue — number — Bond face value (default 1000)
  • frequency — number — Coupons per year (default 2)
  • principal — number — Loan principal (selects loan mode)
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • annualRate — number — Loan annual rate, e.g. 0.06
  • couponRate — number — Annual coupon rate, e.g. 0.05
  • termMonths — number — Loan term in months
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• portfolioguard_score

  PortfolioGuard (x402-paid, $0.15): deterministic portfolio risk scoring from holdings — volatility, Sharpe, max drawdown, concentration (HHI), diversification, plus per-rule findings.

  Parameters:

  • holdings (required) — array — Positions with symbol, weight (0-1), optional returns[], sector
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • riskFreeRate — number — Optional risk-free rate for the Sharpe ratio (default 0)
  • periodReturns — array — Optional portfolio/market return series
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• walletguard_score

  WalletGuard (x402-paid, $0.10): analyzes caller-provided sanctions, exposures, labels, and funding context. Positive risk findings receive a score; no risk findings means unknown with a null score and review required. No chain lookup, independent sanctions screening, or compliance clearance.

  Parameters:

  • wallet (required) — string — Wallet address
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • labels — array — Address labels, e.g. exchange:binance, contract:..., sanctions:...
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • exposures — array — Signals e.g. mixer:tornado, sanctions:ofac
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • transfers — array — Optional transfer summaries (direction, value, counterparty, tags)
  • sanctionsHits — array — Sanctions / OFAC / blacklist hit identifiers
  • fundingSources — array — Optional fund-source breakdown (source, share 0-1, verified)
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• emailguard_validate

  EmailGuard (x402-paid, $0.02): deterministic email/contact quality scorer — validity, deliverability score, disposable/role/free classification, typo suggestion. Pure function, no DNS.

  Parameters:

  • email (required) — string — Email address to validate
  • name — string — Optional contact name associated with the email
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • domain — string — Optional explicit domain hint (usually derived from email)
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • mxPresent — boolean — Caller-supplied MX hint
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• emailguard_validate_batch

  Validate up to 20 emails in one tool call — one deterministic verdict per record (validity, deliverability score, disposable/role/free classification, typo suggestion, canonical normalization). Pass your free apiKey (250 records/mo, no wallet — https://hermesplant.com/pricing) and each record serves from quota. Results preserve input order; the batch stops at the first 402 (quota exhausted) and marks the rest skipped so you can upgrade and resume.

  Parameters:

  • records (required) — array — Contact records to validate — one storefront call per record (max 20 per tool call)
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• mcp_risk_score

  MCP Server Risk Analyzer (x402-paid, $0.05): score an MCP server manifest for security risk before install — destructive tools, over-broad scopes, weak auth, egress — with per-tool findings and fixes.

  Parameters:

  • tools (required) — array — The MCP server's tool manifest
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • server — string — Server name/URL
  • channel — string — Discovery channel or source tag
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • authModel — string — e.g. oauth, token, none
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • priorTools — array — Prior tool names to diff capability growth
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• payment_policy_decide

  Payment Policy Decision (x402-paid, $0.05): deterministic allow / deny / needs_review before your agent signs an x402 payment — checks resource binding, amount vs expected price, network, payTo, facilitator, replay readiness, PII leakage, and buyer spend limits, with evidence-backed findings. Loop it over every payment; pair with assurance_attest for a signed record.

  Parameters:

  • resourceUrl (required) — string — Absolute resource URL from the x402 challenge or Bazaar listing
  • tags — array — Bazaar/service tags for sensitive-category detection
  • asset — string — Payment asset address
  • payTo — string — Payment recipient from the challenge
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • method — string — HTTP method the agent intends to call
  • scheme — string — x402 payment scheme (exact expected)
  • channel — string — Discovery channel or source tag
  • network — string — Payment network, e.g. eip155:8453
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • amountUnits — string — Raw x402 amount units (USDC = 6 decimals)
  • buyerPolicy — object — Buyer guardrails: maxUsdPerCall, allowedNetworks, allowedPayTo, allowedHosts, requireExactScheme, requireHttps, ...
  • serviceRisk — object — Optional upstream service-risk result (e.g. from mcp_risk_score)
  • facilitatorUrl — string — Facilitator URL used to settle
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • maxTimeoutSeconds — number — Challenge timeout window
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• evidence_verify

  Evidence Verification (x402-paid, $0.05): verify an agent-commerce evidence bundle before trusting a paid result — x402 challenge/receipt/policy-decision/service-response artifacts, endpoint and price binding, freshness, hashes, synthetic-proof leakage. Returns verified / needs_review / rejected / insufficient_evidence with per-rule evidence.

  Parameters:

  • artifacts (required) — array — Evidence artifacts (Hermes contract): x402_challenge, x402_receipt, payment_policy_decision, service_response, ...
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • policy — object — Verification policy: expected serviceId/endpoint/network/priceCents, require* flags
  • channel — string — Discovery channel or source tag
  • subject — object — Optional run subject: kind, serviceId, endpoint, method, runId
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• assurance_attest

  Assurance Attest (x402-paid, $0.05): bind one x402 payment intent or MCP tool call to a canonical HMAC-signed record (binding hash, policy verdict, findings, optional settlement outcome). Loop it after every payment or tool call to build a tamper-evident audit trail a third party can check at the free verify endpoint.

  Parameters:

  • protocol (required) — string — "x402" for a payment, "mcp" for a tool call
  • subject (required) — object — Who acted and why
  • intent (required) — object — x402: resourceUrl+method (+scheme/network/asset/amountUnits/payTo/settlement fields). mcp: serverId+toolName (+toolArguments or toolArgumentsHash).
  • payer — string — Optional wallet/account identifier; stored only as a hash
  • apiKey — string — Free-tier / plan API key (hp_free_… or a pass key). Forwarded as X-API-Key so paid tools serve from your monthly quota with NO x402 wallet. Get a free key (250 calls/mo) at https://hermesplant.com/pricing.
  • policy — object — Optional buyer policy (policyId+version, caps, allow-lists); omit for binding-only attestation
  • channel — string — Discovery channel or source tag
  • outcome — object — Optional settlement outcome: {outcome: fulfilled|failed|rejected, settlementId, responseStatus, evidenceHashes[]}
  • campaign — string — Campaign tag for downstream telemetry
  • xPayment — string — Raw X-PAYMENT proof from an x402-compatible wallet/client
  • actorType — string — Caller type for analytics: agent, human, synthetic, system, or unknown
  • synthetic — boolean — Mark this paid retry as an internal test/probe for analytics exclusion
  • paymentSignature — string — x402 payment proof to forward as PAYMENT-SIGNATURE and X-PAYMENT on retry
  • paymentIdentifier — string — Optional x402 payment identifier for idempotency/retry correlation

  Hints: read-only no · destructive no · idempotent yes · open-world no

• assurance_verify read-only

  Verify a Hermes-signed assurance record for free: recomputes the canonical hash (hermes-stable-json-v1 + SHA-256) and HMAC signature server-side and reports recordHashValid / signatureValid. Use it to audit attestations produced by assurance_attest without trusting the agent that produced them.

  Parameters:

  • record (required) — object — The attestation/decision/receipt record object
  • integrity (required) — object — The integrity object returned with the record (recordHash, signature, keyId)

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.