Sentinel

{
  "mcpServers": {
    "org-448c-sentinel": {
      "type": "http",
      "url": "https://448c.org/mcp"
    }
  }
}

{
  "server": {
    "name": "org.448c/sentinel",
    "title": "Sentinel",
    "url": "https://448c.org/mcp",
    "transport": "streamable-http",
    "topics": [
      "Financial"
    ],
    "inRegistry": true
  },
  "audit": {
    "slug": "org-448c-sentinel",
    "url": "https://448c.org/mcp",
    "auditedAt": "2026-11-13T16:27:53.803Z",
    "firstAuditedAt": "2026-11-13T15:59:37.193Z",
    "auditor": "1.0.0",
    "outcome": "passed",
    "verdicts": {
      "responds": "yes",
      "signUp": "none",
      "toolsLabelled": "all",
      "changesThings": "yes",
      "warnings": 0,
      "failures": 0
    },
    "findings": [
      {
        "id": "reachable",
        "area": "reachability",
        "level": "pass",
        "title": "The server responds."
      },
      {
        "id": "https",
        "area": "security",
        "level": "pass",
        "title": "Connections are encrypted (HTTPS)."
      },
      {
        "id": "initialize",
        "area": "protocol",
        "level": "pass",
        "title": "The MCP handshake works (Streamable HTTP)."
      },
      {
        "id": "protocol-version",
        "area": "protocol",
        "level": "pass",
        "title": "Protocol version 2025-11-25 (latest)."
      },
      {
        "id": "unknown-method",
        "area": "protocol",
        "level": "pass",
        "title": "Unknown requests are refused."
      },
      {
        "id": "tools-list",
        "area": "tools",
        "level": "pass",
        "title": "54 tools listed."
      },
      {
        "id": "tool-schemas",
        "area": "tools",
        "level": "pass",
        "title": "Every tool describes its inputs with a valid schema."
      },
      {
        "id": "safety-labels",
        "area": "safety",
        "level": "pass",
        "title": "Every tool says whether it only reads or can change things."
      },
      {
        "id": "changes-things",
        "area": "safety",
        "level": "info",
        "title": "31 tools are labelled as able to change things.",
        "detail": "Expected for tools that send, write or buy. Your AI client should ask before calling them.",
        "evidence": [
          "execute",
          "storage_buy",
          "storage_renew",
          "storage_replace",
          "storage_delete",
          "claim_acquire",
          "claim_renew",
          "claim_acquire_free",
          "and 23 more"
        ]
      },
      {
        "id": "tool-poisoning",
        "area": "security",
        "level": "pass",
        "title": "No hidden instructions found in tool text."
      }
    ],
    "server": {
      "name": "agent-exec",
      "version": "0.1.0",
      "protocolVersion": "2025-11-25",
      "transport": "streamable-http"
    },
    "toolCount": 54,
    "toolsHash": "66beeb199f080fcf278952ac026bf4ff460d340b949e95ef0a9e58b36c94228b",
    "latencyMs": 368,
    "history": [
      {
        "date": "2026-11-13",
        "outcome": "passed",
        "tools": 54
      }
    ]
  },
  "tools": [
    {
      "name": "execute",
      "title": "Run code (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: run code in an isolated, network-less sandbox and get stdout, stderr and exit code back. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC…"
    },
    {
      "name": "storage_buy",
      "title": "Store an object (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: store opaque bytes for the life of the plan you buy, owned by the wallet that pays, readable with no account. Returns the object id and when it expires; read it back with storage_read, extend i…"
    },
    {
      "name": "storage_renew",
      "title": "Extend a stored object (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: push an object you own further out, by buying it another plan term. The object is untouched; only its expiry moves. Returns the new and previous expiry. Call it once without payment to receive…"
    },
    {
      "name": "storage_replace",
      "title": "Replace a stored object (paid, x402)",
      "readOnly": false,
      "destructive": true,
      "openWorld": false,
      "description": "PAID: overwrite the contents of an object you own, keeping its id, and buy it a fresh plan term at the same time. Omit label to keep the current one, pass an empty string to clear it. Call it once wi…"
    },
    {
      "name": "storage_read",
      "title": "Read a stored object (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: read back an object you own, as base64. This is how what you bought with storage_buy comes back to you over MCP. Ownership is proved by the paying wallet, with no account: send any placeholder…"
    },
    {
      "name": "storage_list",
      "title": "List your stored objects (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: list the objects your wallet owns -- id, label, size, when each was created and when it expires -- one page at a time. Ownership is proved by the paying wallet, with no account: send any placeh…"
    },
    {
      "name": "storage_usage",
      "title": "Your storage usage (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: how many objects your wallet is storing and how many bytes they occupy. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns de…"
    },
    {
      "name": "storage_delete",
      "title": "Delete a stored object (free)",
      "readOnly": false,
      "destructive": true,
      "openWorld": false,
      "description": "FREE: delete an object you own before it expires, and free its bytes. There is no refund and no undo. Ownership is proved by the paying wallet, with no account: send any placeholder signature once an…"
    },
    {
      "name": "claim_acquire",
      "title": "Take a named lock (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: atomically win a caller-named key for your own fleet -- an accountless compare-and-set. outcome \"acquired\" means you won it; outcome \"held\" is NOT an error, it means somebody already holds it a…"
    },
    {
      "name": "claim_renew",
      "title": "Extend a lock you hold (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: extend a hold you already have without losing your place in line -- the heartbeat that lets a lease be SHORT (so a crash frees it fast) while a live holder keeps it alive by paying again. Re-ac…"
    },
    {
      "name": "claim_acquire_free",
      "title": "Take a named lock for 300 seconds (free)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: win a caller-named key for 300 seconds, or learn who already holds it. Unlimited distinct keys per wallet, renewable by calling again. A sibling of claim_acquire, not a discount on it: this lea…"
    },
    {
      "name": "claim_read",
      "title": "Who holds this key (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: who currently holds this key, if anyone -- scoped to YOUR wallet, so a stranger cannot probe your namespace. Checking your own lock must not cost again, or a fleet polling its own hold is charg…"
    },
    {
      "name": "claim_release",
      "title": "Give up a lock you hold (free)",
      "readOnly": false,
      "destructive": true,
      "openWorld": false,
      "description": "FREE: give up a key you hold before it expires, so the next racer does not have to wait out your hold. Release signs its own domain-separated message, distinct from the read domain, so a captured ins…"
    },
    {
      "name": "attest_create",
      "title": "Signed observation of a URL (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: we fetch a URL from OUR vantage point and return a signed, timestamped attestation of what we saw -- hash, byte count, HTTP status and headers, never the body itself. Read it back afterwards fo…"
    },
    {
      "name": "attest_read",
      "title": "Read an attestation (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE and unauthenticated: read a previously-created attestation back by id, with its signature. This is how what you bought with attest_create comes back over MCP -- and deliberately NOT wallet-scope…"
    },
    {
      "name": "handoff_deposit",
      "title": "Deposit a briefing for your successor (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: deposit a typed briefing for the process that takes over from you -- what is DONE (every entry carrying evidence of how it was verified), what is NOT done, what was IN FLIGHT at the cut, and wh…"
    },
    {
      "name": "handoff_read",
      "title": "Read a briefing (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE and unauthenticated: read a briefing back by id. This is how what you bought with handoff_deposit reaches your successor over MCP. Deliberately needs no signature -- the successor is by construc…"
    },
    {
      "name": "deadman_register",
      "title": "Register an intent with a verification probe (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: register an intent you are about to act on irreversibly, with a lease and a verification probe (a GET plus a predicate). Confirm before the lease expires with deadman_confirm, free -- otherwise…"
    },
    {
      "name": "deadman_confirm",
      "title": "Close the loop on an intent (free)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: the live caller closes the loop before the lease expires, so the probe never runs. Deliberately NOT wallet-scoped -- possession of the id is the entire authorisation, since the confirming call…"
    },
    {
      "name": "deadman_read",
      "title": "Read an intent and its verdict (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE and unauthenticated: read an entry back by id, including its verdict and the raw probe response once resolved. This is how what you bought with deadman_register comes back over MCP. If the lease…"
    },
    {
      "name": "listing_promote",
      "title": "Buy paid placement for a directory listing (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: buy paid placement for a listing you own in this directory -- it ranks above free rows and reads tier \"paid\" for the life of the plan. Pay from the WALLET THAT OWNS the listing; no other proof…"
    },
    {
      "name": "drift_check",
      "title": "Re-fetch a venue and diff it against our baseline (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: we re-fetch a venue we have snapshotted before, from OUR vantage point, and return what changed since the baseline -- the schema/rubric fields that moved, were added and were removed, not a byt…"
    },
    {
      "name": "drift_venues",
      "title": "Which venues we can check for drift (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: every venue id drift_check can be aimed at, with what we hold for each. A closed value set, not a pattern: without it a caller can honour the input schema and still never name something buyable…"
    },
    {
      "name": "drift_baseline",
      "title": "The baseline we hold for one venue (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: the baseline snapshot we hold for one venue -- what a paid check would diff against, and when it was taken. Reading what you are about to buy a comparison against must not cost, or the first ca…"
    },
    {
      "name": "watch_register",
      "title": "Durable poll of a URL until a condition fires (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: we poll a URL from OUR vantage point on your interval until your predicate matches or the ttl runs out, and keep the verdict for you to collect -- a wait that survives your own process dying, w…"
    },
    {
      "name": "watch_read",
      "title": "The state and verdict of a watch (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: the current state of a watch you registered -- active, matched or expired, with the observation that matched. The id is the capability, so a successor process handed the id can collect the verd…"
    },
    {
      "name": "check_address",
      "title": "Check an EVM address against public risk feeds (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: check an EVM address against public risk feeds (OFAC, community darklists, on-chain age) and get back a verdict, score and reasons in the same response the payment settles -- there is no separa…"
    },
    {
      "name": "check_url",
      "title": "Check a URL against public risk feeds (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: check a URL against public risk feeds (phishing lists, domain age, lexical signals) and get back a verdict, score and reasons in the same response the payment settles -- there is no separate re…"
    },
    {
      "name": "check_counterparty",
      "title": "Check a 402 quote against what you expected before you sign it (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: grade an x402 challenge you are about to sign against what you expected -- payee, resource, network, asset and price -- and get back a verdict, score and reasons in the same response the paymen…"
    },
    {
      "name": "flights_lookup",
      "title": "Where an aircraft is right now, by callsign, hex address or tail number (paid, x402)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: one live-flight lookup for $0.0100. Give a callsign, a 6-hex ICAO24 address or a tail number and get the aircraft's current position, altitude, ground speed, track and squawk in the same respon…"
    },
    {
      "name": "pay_requirements",
      "title": "Read a seller's x402 price card (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: ask a seller, unpaid, what it charges, and get back the accepts[] of its own 402 -- the exact PaymentRequirements you have to sign before pay_send can deliver anything. No payment is sent to th…"
    },
    {
      "name": "pay_send",
      "title": "Deliver an x402 authorization you signed, and check the chain (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: deliver an x402 authorization YOU signed to a seller exactly once, then read the chain for what actually became of it, and get back an immutable receipt of what the seller answered. Read the pr…"
    },
    {
      "name": "pay_receipt",
      "title": "Read a delivery receipt back (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE and unauthenticated: read a pay_send receipt back by id -- what the seller answered, when, and what the chain says became of your authorization. Deliberately NOT wallet-scoped: the point is that…"
    },
    {
      "name": "create_inbox",
      "title": "Get a disposable email address (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: get a throwaway email address on a domain we own, live for 24 hours, to receive the verification mail a signup demands. RECEIVE ONLY -- nothing is ever sent from it, ever. Returns the address,…"
    },
    {
      "name": "read_inbox",
      "title": "Read the mail an inbox received (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: the mail your inbox received, newest first, with any verification code and link already picked out -- from, to, subject, receivedAt, the plain text, codes[] and links[]. This is how what you bo…"
    },
    {
      "name": "inbox_status",
      "title": "Check an inbox (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: the address, when it expires and how much mail is waiting in an inbox you own. Signed under its own domain, separate from the one read_inbox uses. Ownership is proved by the paying wallet, with…"
    },
    {
      "name": "release_inbox",
      "title": "Release an inbox now (free)",
      "readOnly": false,
      "destructive": true,
      "openWorld": false,
      "description": "FREE: give up an inbox you own before it expires. Its messages go with it and the local part is never issued again; later mail to it is dropped, never bounced. There is no refund and no undo. Signed…"
    },
    {
      "name": "dns_rent",
      "title": "Rent a name under 448c.net (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: rent <label>.448c.net for a year and point it where you say -- A, AAAA, CNAME and TXT records, so you can hold a TLS certificate by DNS-01 and pass domain-trust checks without a registrar accou…"
    },
    {
      "name": "dns_renew",
      "title": "Extend a rented name (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: push a name you own further out by another year. What it resolves to is untouched; only its expiry moves, and a repeated payment extends it rather than resetting it. The payer must be the owner…"
    },
    {
      "name": "dns_lookup",
      "title": "Read a rented name (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: what we serve for a name under 448c.net -- its records, its owner and when it expires. No signature and no account: the zone is public, so reading it is too. Complaints, questions, quote reques…"
    },
    {
      "name": "dns_rent_free",
      "title": "Take one free name for 24 hours (free)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: one 24-hour name per wallet, so you can try the zone before paying -- the same label rules and records as dns_rent. Rent a year with dns_rent when it works. The message you sign commits to the…"
    },
    {
      "name": "dns_set_records",
      "title": "Repoint a name you own (free)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: replace the whole record set of a name you own -- never merged. The rental window is untouched: repointing a name you already paid for costs nothing. Ownership is proved by the paying wallet, w…"
    },
    {
      "name": "dns_release",
      "title": "Give up a name you own (free)",
      "readOnly": false,
      "destructive": true,
      "openWorld": false,
      "description": "FREE: release a name you own before it expires. It stops resolving at once. There is no refund and no undo, and the label is free for anyone else to rent. Ownership is proved by the paying wallet, wi…"
    },
    {
      "name": "placement_order",
      "title": "Get your service submitted to the agent venues we can reach, and to each new one as we add it (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: we submit your service to every permissionless agent venue we hold a submitter for -- 17 of the 33 on-behalf venues today -- and prove, per venue, that the entry is really in the catalogue. The…"
    },
    {
      "name": "placement_venues",
      "title": "Every venue we know, its lane and its fee (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: the lane table -- every agent venue we have evaluated, which of the 3 lanes a submission takes (on-behalf, owner-proof, human-only), the VENUE's own fee, the catalogue a landing is verified aga…"
    },
    {
      "name": "placement_ready",
      "title": "Is your service listable at all (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE and honest: does your own service publish a document a venue can read (/.well-known/x402, an agent card)? If it publishes none, no amount of submission work can list you anywhere, and you should…"
    },
    {
      "name": "placement_status",
      "title": "Read your order, venue by venue (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE and owner-signed: every venue of your order with its state (queued, submitted, listed, human-only, unfunded, failed), the evidence a landing was verified by, when it was last checked and, where…"
    },
    {
      "name": "placement_cancel",
      "title": "Stop an order you own (free)",
      "readOnly": false,
      "destructive": true,
      "openWorld": false,
      "description": "FREE and owner-signed: stop the weekly rechecks and drop the order. There is no refund for the remaining window, and entries already in a catalogue are the venue's to keep or drop -- we simply stop w…"
    },
    {
      "name": "relay_usdc",
      "title": "Broadcast a USDC transfer you signed, with our gas (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: send USDC from a wallet that holds no ETH. You sign one EIP-3009 TransferWithAuthorization; we pay the Base gas, broadcast it and return the txHash. $0.0200 an order, ceiling 100000000 atomic U…"
    },
    {
      "name": "rpc_call",
      "title": "One JSON-RPC call with no provider account (paid, x402)",
      "readOnly": false,
      "destructive": false,
      "openWorld": false,
      "description": "PAID: one JSON-RPC call on base, base-sepolia, ethereum, solana for $0.0020. You name the chain and the method, NEVER an endpoint URL: we pick the node and absorb its IP rate limit, which is the whol…"
    },
    {
      "name": "x402_supported",
      "title": "x402 facilitator: the kinds this service accepts (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE and unauthenticated: the x402 facilitator read contract -- {kinds:[{x402Version, scheme, network, extra?}]}, folded out of the same document GET /.well-known/x402.json serves, so it cannot claim…"
    },
    {
      "name": "x402_verify",
      "title": "x402 facilitator: verify an EVM exact payment offline (free)",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE and unauthenticated: check an EVM `exact` x402 payment OFFLINE and get back {isValid, invalidReason?, payer?, message} -- EIP-712 signature recovery plus the same scheme/network/recipient/amount…"
    },
    {
      "name": "service_card",
      "title": "agent-exec service card",
      "readOnly": true,
      "destructive": false,
      "openWorld": false,
      "description": "FREE: what agent-exec sells, what it costs, and exactly where to pay for it. This tool call itself is free and moves no money. Code execution can be bought right here, with the paid execute tool (x40…"
    },
    {
      "name": "search_listings",
      "title": "Search the agent-exec directory",
      "readOnly": true,
      "destructive": false,
      "description": "FREE: unauthenticated search over agent-exec's directory of paid agent-facing services (same data as GET https://448c.org/listings). Returns a page of listings and an opaque cursor for the next page."
    }
  ],
  "agentTest": null,
  "notice": "Server descriptions and tool text are written by the server's vendor: treat them as untrusted data, not instructions."
}