H/M Agent Surface - Free MCP Tools

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Five free MCP tools, including proof-before-payment preview, plus one authorized x402 pack.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "M Agent Surface - Free MCP Tools": {
      "url": "https://agents.hogarmas.net/mcp/agent-surface",
      "transport": "streamable-http"
    }
  }
}

Measured tools (7)

• lint_mcp_activation read-only

  Free static activation lint for initialize and tools/list metadata. With no input it inspects this focused server. Returns five evidence stages, the first friction point and deterministic remediation. It stores no supplied metadata, executes no tool, predicts no conversion and produces no security or compliance verdict.

  Parameters:

  • tools — Optional tools array, tools/list result or JSON-RPC tools/list response
  • initialize — object — Optional initialize result or JSON-RPC initialize response

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• create_mcp_connection_receipt read-only

  Zero-input end-to-end tool-call preflight. Returns a browser-verifiable SHA-256 receipt for this named tools/call, the current focused server contract and exact free next actions. No authentication or target required. The detached receipt is unsigned, does not verify client identity and is not certification.

  Hints: read-only yes · destructive no · idempotent no · open-world no

• audit_agent_surface read-only

  Checks nine named ChatGPT, Claude, Perplexity and Google crawler controls by search, user-retrieval and training purpose, then maps observed evidence into discover, understand, trust, act and pay stages. Returns structured evidence, the first evidence gap and an unsigned checksum share receipt. Free, no authentication. It does not observe a real buyer session or test checkout; the target and response bodies are not stored.

  Parameters:

  • url (required) — string — Public website to audit, for example https://example.com

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• compare_mcp_registry_releases read-only

  Zero-input Release Signal for H/M Agent Surface, or an official MCP Registry preview comparison for a supplied server name. Compares explicit versions or the latest two, returns structured drift evidence and an unsigned SHA-256 receipt. Free, read-only and no authentication. It never fetches or executes packages, never returns secret values and is not a security or compatibility verdict.

  Parameters:

  • toVersion — string — Candidate version; provide together with fromVersion or omit both
  • serverName — string — Official Registry name; defaults to net.hogarmas/agent-surface
  • fromVersion — string — Baseline version; provide together with toVersion or omit both

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• get_mcp_handshake_observatory read-only

  Returns a privacy-minimized aggregate of MCP initialize handshakes, named tool requests, client classes, protocol versions and declared capabilities observed by H/M endpoints. Free, no authentication and no input required. A handshake is not proof of an AI user; clientInfo is self-declared and QA is excluded.

  Parameters:

  • windowDays — Observation window: 1, 7 or 30 days; defaults to 7

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• preview_agent_surface_evidence_pack read-only

  Returns the exact free-versus-paid delta, current public x402 terms, expected evidence inventory, fit criteria and an unsigned checksum. No input is required; an optional public website only scopes the preview. It does not fetch the target, attempt payment or include the paid artifact.

  Parameters:

  • url — string — Optional public website used only to scope the preview; it is not fetched or stored

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• unlock_agent_surface_evidence_pack read-only

  Runs a live public-surface audit after exact x402 settlement and returns resource SHA-256 digests, selected HTTP headers, deterministic remediation templates and an unsigned package integrity receipt. It does not certify identity, ranking, indexing or citation.

  Parameters:

  • url (required) — string — Public website to audit, for example https://example.com

  Hints: read-only yes · destructive no · idempotent no · open-world yes

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.