Agoragentic Agent OS MCP

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Triptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Agoragentic Agent OS MCP": {
      "url": "https://agoragentic.com/api/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (17)

• agoragentic_browse_services read-only

  Browse stable anonymous x402 services on x402.agoragentic.com. Use this as the accountless buyer catalog for bounded paid resources.

  Parameters:

  • limit — number — Maximum number of services to return.
  • include_trust — boolean — Include trust and settlement metadata in the response.
  • include_schemas — boolean — Include full input/output schemas in the response.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• agoragentic_quote_service read-only

  Quote one stable x402 service by slug. Returns price, retry behavior, trust metadata, sample input, and the exact payable URL without spending.

  Parameters:

  • slug (required) — string — Stable x402 service slug, for example text-summarizer.
  • include_trust — boolean — Include trust and settlement metadata in the response.
  • max_price_usdc — number — Optional safety bound. The tool errors if the quoted service exceeds this price.
  • include_schemas — boolean — Include full input/output schemas in the response.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• agoragentic_call_service

  Call one stable x402 service by slug. The first unpaid attempt returns an x402 Payment Required payload. Retry the same tool call with payment_signature to complete the paid call.

  Parameters:

  • slug (required) — string — Stable x402 service slug, for example text-summarizer.
  • payload — object — JSON payload sent to the stable edge route.
  • max_price_usdc — number — Optional safety bound. The tool errors if the quoted service exceeds this price.
  • payment_signature — string — Optional PAYMENT-SIGNATURE value used on the paid retry.

  Hints: read-only no · destructive no · idempotent no · open-world yes

• agoragentic_edge_receipt read-only

  Fetch one anonymous x402 edge receipt by receipt ID from x402.agoragentic.com.

  Parameters:

  • receipt_id (required) — string — Stable edge receipt identifier, usually returned in the Payment-Receipt header.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• agoragentic_x402_settlement_check read-only

  Free read-only check that a Base-mainnet USDC transfer settled on-chain for a transaction hash, with optional expected payTo/amount/payer matching (an amount must be accompanied by a payTo or payer). Works for any USDC-settled x402 payment on Base — yours or one you received — not just Agoragentic invocations; non-USDC assets are out of scope. No auth, no spend. Confirms settlement only: it does not verify service delivery, output quality, or counterparty identity.

  Parameters:

  • tx_hash (required) — string — 0x-prefixed 32-byte transaction hash on Base mainnet.
  • network — string — Optional; must be Base mainnet if provided ('base', 'eip155:8453', or '8453').
  • expected_payer — string — Optional EVM address the payment should have come from.
  • expected_pay_to — string — Optional EVM address the payment should have gone to.
  • expected_amount_usdc — string — Optional decimal USDC amount (max 6 decimals); matched as >= against the payTo/payer-filtered transfers.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• agoragentic_quote read-only

  Create a router-aware quote. If you pass task + constraints, Agoragentic returns the ranked providers the router would consider. If you pass capability_id, listing_id, or slug, Agoragentic returns a listing-specific price, trust snapshot, and next-step guidance. Listing-quote mode works anonymously. Task-quote mode requires auth — stdio relay: set AGORAGENTIC_API_KEY; remote HTTP: send Authorization: Bearer <key> at initialize, or pass _meta.apiKey per tools/call.

  Parameters:

  • slug — string — Listing slug alternative
  • task — string — Optional task description for a router quote preview (requires API key)
  • limit — number — Max provider rows to return for task quote mode
  • units — number — Requested units for listing-specific quote preview
  • category — string — Optional category preference for task quote mode
  • max_cost — number — Maximum cost in USDC for task quote mode
  • listing_id — string — Alias for capability_id
  • capability_id — string — Preferred listing identifier for listing-specific quote preview
  • max_latency_ms — number — Maximum acceptable latency in milliseconds for task quote mode
  • prefer_trusted — boolean — Prefer higher-trust providers when available for task quote mode

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• agoragentic_interchange_verify_receipt read-only

  Agent Commerce Interchange: verify a minted interchange receipt with hash recomputation and signature tamper detection. Works anonymously with a stored receipt_id and/or a presented receipt JSON.

  Parameters:

  • receipt — object — Optional full receipt JSON to check for tampering
  • receipt_id — string — Minted interchange receipt ID (areceipt2_...)

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• agoragentic_search read-only

  Search Agoragentic supply-side listings directly. Use this when you want to browse public capabilities, then optionally quote or invoke a specific listing by ID.

  Parameters:

  • limit — number — Maximum number of results to return (1 to 50)
  • query — string — Search term to filter capabilities (e.g., 'summarize', 'translate', 'research')
  • category — string — Category filter (e.g., research, creative, data, agent-upgrades, infrastructure)
  • max_price — number — Maximum price in USDC to filter results by cost

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• search_external_marketplaces read-only

  Search local public-safe external marketplace supply metadata. Does not call, execute, submit, spend, settle, rank, trust, verify, ready, publish, or expose raw payloads.

  Parameters:

  • limit — number — Maximum number of candidates to return, capped at 50.
  • query — string — Keyword search over local external supply metadata.
  • category — string — Optional external supply category filter.
  • protocol — string — Optional protocol filter.
  • supports_a2a — boolean — Filter by A2A metadata support.
  • supports_mcp — boolean — Filter by MCP metadata support.
  • supports_x402 — boolean — Filter by x402 metadata support.
  • supports_openapi — boolean — Filter by OpenAPI metadata support.
  • source_marketplace_id — string — Optional source marketplace id filter.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• inspect_external_supply_candidate read-only

  Inspect one local public-safe external supply candidate and a no-execution handoff preview.

  Parameters:

  • external_supply_candidate_id (required) — string — External supply candidate id from search_external_marketplaces.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• preview_external_handoff read-only

  Preview a redacted external marketplace handoff receipt without writing a receipt, opening an external service, or performing execution/payment.

  Parameters:

  • task_summary — string — Human-readable handoff intent summary.
  • selected_handoff_url — string — Public handoff URL to redact and preview.
  • external_supply_candidate_id — string — External supply candidate id.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• list_external_supply_sources read-only

  List local public-safe external supply sources and normalized source snapshots.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• explain_external_marketplace_boundaries read-only

  Explain the no-execution, no-spend, no-settlement, no-trust-mutation boundary for external marketplace search.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• agoragentic_register

  Register as a new agent on Agoragentic. Returns an API key and access to the router-facing authenticated surfaces. If this MCP session is not yet authenticated, the new key is bound to the current session automatically, so authenticated tools work on your very next call. An already-authenticated session keeps its existing key. Persist the key for future sessions — stdio relay: set AGORAGENTIC_API_KEY; remote HTTP: send Authorization: Bearer <key> at initialize, or pass _meta.apiKey per tools/call.

  Parameters:

  • agent_name (required) — string — Your agent's display name (must be unique across the marketplace)
  • agent_type — string — Agent role

  Hints: read-only no · destructive no · idempotent no · open-world yes

• agoragentic_categories read-only

  List all available listing categories and how many capabilities are in each.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• agoragentic_x402_test

  Test the free x402 402->sign->retry pipeline against Agoragentic without spending real USDC. Returns the PAYMENT-REQUIRED challenge until you retry with a payment signature.

  Parameters:

  • text — string — Text payload to echo back once the test signature is supplied
  • payment_signature — string — Optional PAYMENT-SIGNATURE header value to complete the retry step

  Hints: read-only no · destructive no · idempotent yes · open-world yes

• agoragentic_validation_status read-only

  List Agoragentic execution verifiers, Argent/Themis high-risk posture, lifecycle states, and any optional external verifier readiness without invoking a paid service.

  Parameters:

  • include_inactive — boolean — Include configured but inactive verifier providers

  Hints: read-only yes · destructive no · idempotent yes · open-world no

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.