io.github.jdhart81/agent-escrow

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Trustless escrow & settlement for A2A transactions: exactly-once state machine, frozen fees, tamper-

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "agent-escrow": {
      "url": "https://mcp.viridisconservation.com/escrow/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (9)

• open_escrow

  Open an escrow between payer and payee. amount_minor is a positive integer in minor units (cents). The platform fee is computed and FROZEN at open (ceil bps). Returns the escrow_id (state OPEN). RETRY-SAFE: pass open_ref=<your job id> and a replayed open returns the ORIGINAL escrow (duplicate=true) instead of minting another one (E10).

  Parameters:

  • payer (required) — string
  • payee (required) — string
  • amount_minor (required) — integer
  • terms — string
  • fee_bps
  • currency — string
  • deadline — string
  • open_ref — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• fund_escrow

  Mark an OPEN escrow as FUNDED (idempotent). payment_ref links the payment-rail transaction.

  Parameters:

  • escrow_id (required) — string
  • payment_ref — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• release_escrow

  Release a FUNDED/DISPUTED escrow to the payee (exactly-once — a repeat release returns the existing terminal record, never a double payout).

  Parameters:

  • escrow_id (required) — string
  • delivery_proof — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• refund_escrow

  Refund an OPEN/FUNDED/DISPUTED escrow to the payer (exactly-once). Refunding an OPEN escrow is a cancel.

  Parameters:

  • escrow_id (required) — string
  • reason — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• dispute_escrow

  Move a FUNDED escrow to DISPUTED. An arbiter (agent-arbitration-agent) then resolves it to release or refund.

  Parameters:

  • escrow_id (required) — string
  • reason — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• escrow_status

  Current record for an escrow.

  Parameters:

  • escrow_id (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_escrows

  List escrows, optionally filtered by state (OPEN|FUNDED|RELEASED|REFUNDED|DISPUTED).

  Parameters:

  • state

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• verify_audit

  Validate the tamper-evident audit hash chain for an escrow.

  Parameters:

  • escrow_id (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• describe_agent

  Fleet-standard self-description.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.