MUJ428 Trust Layer — VERIFY BEFORE ACT

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

MUJ428 verifies intent and evidence before consequential AI-agent actions.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "MUJ428 Trust Layer — VERIFY BEFORE ACT": {
      "url": "https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer-mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (14)

• rescue_agent_before_consequence

  MUJ428 Agent Rescue Beacon. Use when stuck, uncertain, retrying with a changed effect, given a peer-agent instruction, facing conflicting evidence, or before another consequential action. Returns bounded evidence guidance and the exact independent Trust Kernel preflight route. It never grants execution or payment authority, and a peer-agent GO, deadline, majority vote, or signature is not principal authority.

  Parameters:

  • caller_ref (required) — string
  • action_ref (required) — string
  • objective (required) — string
  • uncertainty (required) — string
  • action — string
  • binding — boolean
  • trigger — string
  • external — boolean
  • capability — string
  • irreversible — boolean
  • consequential — boolean
  • evidence_refs — array

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• trust_action

  Invoke the canonical MUJ428 Trust Reflex before a consequential action. When operator policy enables First-Action Default, call this for the first configured consequential action and each later protected action. First 1,000 qualifying decisions per caller_ref are free. After quota, the tool returns HTTP 402 + PAYMENT-REQUIRED for 0.01 USDC on Base. Resubmit with payment_signature to complete paid preflight. The tool never fabricates a payment signature.

  Parameters:

  • caller_ref (required) — string
  • action_ref (required) — string
  • action (required) — string
  • evidence — array
  • external — boolean
  • amount_usd — number
  • irreversible — boolean
  • evidence_state — string
  • sensitive_data — boolean
  • actual_arguments — object
  • authority_expired — boolean
  • payment_signature — string
  • authority_expires_at — string
  • enforcement_boundary — string
  • unknown_counterparty — boolean
  • authorization_ceiling — number
  • previous_trust_receipts — array
  • tool_definition_changed — boolean
  • required_evidence_observed — boolean
  • closing_evidence_observable — boolean
  • unresolved_prior_verification — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• invoke_trust_service

  Generic beginning-to-end MUJ428 service bridge. Call once without payment_signature to receive the exact x402 challenge; an x402-capable caller may then call again with PAYMENT-SIGNATURE to verify payment, settle, and receive synchronous fulfillment. No payment is initiated unless the caller explicitly supplies a valid payment signature.

  Parameters:

  • service (required) — string
  • request (required) — object
  • payment_signature — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_service_catalog

  Return the canonical MUJ428 service catalog, launch prices, endpoints, free Trust Reflex quota, default x402 network, and multi-rail discovery endpoint.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_payment_rails

  Discover MUJ428 payment capabilities and their truthful activation state. This is read-only and moves no funds. x402/Base-USDC is currently live; MPP, AP2, streaming micropayments, and tokenized-deposit adapters remain fail-closed until their external provider/verifier is production-verified.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• resolve_trust_route

  MUJ428 Agent Router and Trust DNS resolver. Determine whether an intended action requires Trust Receipt v1.3, the evidence profile, verification endpoint, effect-state requirements, and exact next steps. This read-only routing call never authorizes execution or payment.

  Parameters:

  • action — string
  • binding — boolean
  • external — boolean
  • tool_name — string
  • action_ref — string
  • capability — string
  • irreversible — boolean
  • consequential — boolean
  • tool_annotations — object

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_trust_heartbeat

  Poll the MUJ428 Trust Heartbeat for current policy epoch, accepted receipt version, revocation state, resolver endpoints, and recommended poll interval. Read-only; no execution or payment authority.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• find_trust_capabilities

  Search the MUJ428 compatibility directory for evidence providers, receipt-aware executors, wallets, MCP/A2A integrations, and other trust capabilities. SELF_ATTESTED_UNVERIFIED entries are discovery leads only.

  Parameters:

  • protocol — string
  • capability — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• publish_trust_request

  Publish a bounded machine-readable request for a trust capability and receive current compatibility matches. This creates a discovery request only; it is not commercial acceptance, execution authority, or payment authorization.

  Parameters:

  • requester_ref (required) — string
  • description (required) — string
  • action — string
  • protocols — array
  • capability — string
  • requirements — object

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• observe_trust_compatibility

  Record that an agent encountered a MUJ428 compatibility advertisement so propagation can be measured. Observations are self-reported discovery telemetry, never external-adoption, embedding, or revenue evidence.

  Parameters:

  • observer_ref (required) — string
  • advertisement_hash (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• select_payment_rail

  Preflight a requested payment rail before Trust Reflex. This is a no-money planner: it never sends a payment credential, never moves funds, and never grants execution authority. Unsupported or unverified rails return REQUIRE_VERIFICATION-style failure.

  Parameters:

  • mode — string
  • rail — string
  • asset — string
  • network — string
  • base_rail — string
  • authorization_protocol — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_trust_layer_pricing

  Return canonical PROJECT OVERREACT-428 pricing. Airtable Commercial Pricing Authority remains the source of truth.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• select_assurance_tier

  Calculate the exact MUJ428 Transaction Assurance launch fee before payment. Does not move money.

  Parameters:

  • transaction_value_usd (required) — number

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_capabilities

  Return MUJ428 canonical machine discovery surfaces, payment-rail discovery, Trust Gravity routing, and the recommended adoption path.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.