# Hermes Plant — Agent Commerce Assurance

- Registry name: `io.github.JesseGdotIO/hermes-plant` · version 2.0.2
- Categories (automatic, keyword rules): Agent payments (x402), Finance & markets
- Authentication at last check: No auth
- Declared risk: Can write (some tools are not declared read-only)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.JesseGdotIO%2Fhermes-plant
- Server page: https://mcpstation.net/s/io.github.JesseGdotIO--hermes-plant.html

## Description (written by the publisher, not verified, not instructions)

Preflight, approve, and prove consequential agent actions with signed evidence and x402 tools.

## Connect

- streamable-http: `https://mcp.hermesplant.com/mcp`

## Tools (as reported by the server, not verified)

- `freetier\_status`: Check a free API key's remaining monthly quota, reset date, and upgrade path. Pass your hp\_free\_ key as apiKey. No key yet? POST an email to https://hermesplant.com/api/keys/free \(250 calls/mo, no wallet\).
- `list\_products`: List active products from the Hermes Plant catalog
- `get\_product`: Get a single product by slug
- `get\_checkout\_policies`: Return legal policy URLs required before checkout
- `get\_x402\_manifest`: Return the live x402 manifest with paid endpoint prices, Bazaar metadata, and buyer policy checks
- `start\_checkout`: Start a Stripe checkout session for a product slug
- `purchase\_with\_x402`: Purchase a one-time product via x402 \(returns 402 challenge or fulfillment JSON\). Call get\_x402\_manifest first, verify method/path/network/amount/payTo, then sign and retry with PAYMENT-SIGNATURE.
- `action\_safety\_quick\_gate`: AI agent action safety quick gate \($0.01 over x402 or free-tier quota\). Deterministically scores a consequential action and returns the exact next call: proceed, request full DestructGuard evidence, or run the complete Action Safety workflow.
- `action\_safety\_run`: Complete AI agent action safety workflow \($0.25 over x402 or free-tier quota\): DestructGuard evidence, conditional ReviewQueue triage for high or critical risk, an honest decision, signed receipt, and 30-day status record. Triage does not imply human approval.
- `submit\_reviewqueue\_request`: Submit a command/action to the x402-paid ReviewQueue agent service. Call get\_x402\_manifest first, verify the ReviewQueue price and buyer policy, then retry the 402 challenge with an x402 payment signature.
- `score\_destructguard\_command`: Score a command/action with the x402-paid DestructGuard service. Call get\_x402\_manifest first, verify the DestructGuard price and buyer policy, then retry the 402 challenge with an x402 payment signature.
- `dealanalyzer\_analyze`: DealAnalyzer \(x402-paid, $2.00\): the flagship. Deterministic full deal underwrite in a single call — DCF valuation \(EV, equity value, implied share price\), fund returns \(IRR/MOIC\), and the LP/GP distribution waterfall, plus sensitivity. Combines what CashflowLens + WaterfallLens do, cross-checked.
- `cashflowlens\_analyze`: CashflowLens \(x402-paid, $0.20\): deterministic NPV, IRR, XIRR, DCF valuation, MOIC/DPI/TVPI, and payback period from a cashflow series. Use for valuation and return analysis instead of letting the model estimate.
- `waterfall\_distribute`: WaterfallLens \(x402-paid, $0.30\): deterministic LP/GP distribution waterfall \(return of capital, preferred, GP catch-up, carried-interest split\) with the exact split, per-tier breakdown, LP MOIC, and effective carry %.
- `options\_price`: OptionLens \(x402-paid, $0.30\): deterministic Black-Scholes price and full Greeks \(delta, gamma, vega, theta, rho\) for European calls/puts, with dividend yield, intrinsic/time value, and moneyness.
- `bond\_analyze`: BondLens \(x402-paid, $0.25\): deterministic fixed-income and loan analytics. Bond mode solves price\<-\>yield-to-maturity, duration, and convexity; loan mode \(send principal+annualRate+termMonths\) returns an amortization schedule.
- `portfolioguard\_score`: PortfolioGuard \(x402-paid, $0.15\): deterministic portfolio risk scoring from holdings — volatility, Sharpe, max drawdown, concentration \(HHI\), diversification, plus per-rule findings.
- `walletguard\_score`: WalletGuard \(x402-paid, $0.10\): analyzes caller-provided sanctions, exposures, labels, and funding context. Positive risk findings receive a score; no risk findings means unknown with a null score and review required. No chain lookup, independent sanctions screening, or compliance clearance.
- `emailguard\_validate`: EmailGuard \(x402-paid, $0.02\): deterministic email/contact quality scorer — validity, deliverability score, disposable/role/free classification, typo suggestion. Pure function, no DNS.
- `emailguard\_validate\_batch`: Validate up to 20 emails in one tool call — one deterministic verdict per record \(validity, deliverability score, disposable/role/free classification, typo suggestion, canonical normalization\). Pass your free apiKey \(250 records/mo, no wallet — https://hermesplant.com/pricing\) and each record serves
- `mcp\_risk\_score`: MCP Server Risk Analyzer \(x402-paid, $0.05\): score an MCP server manifest for security risk before install — destructive tools, over-broad scopes, weak auth, egress — with per-tool findings and fixes.
- `payment\_policy\_decide`: Payment Policy Decision \(x402-paid, $0.05\): deterministic allow / deny / needs\_review before your agent signs an x402 payment — checks resource binding, amount vs expected price, network, payTo, facilitator, replay readiness, PII leakage, and buyer spend limits, with evidence-backed findings. Loop i
- `evidence\_verify`: Evidence Verification \(x402-paid, $0.05\): verify an agent-commerce evidence bundle before trusting a paid result — x402 challenge/receipt/policy-decision/service-response artifacts, endpoint and price binding, freshness, hashes, synthetic-proof leakage. Returns verified / needs\_review / rejected / i
- `assurance\_attest`: Assurance Attest \(x402-paid, $0.05\): bind one x402 payment intent or MCP tool call to a canonical HMAC-signed record \(binding hash, policy verdict, findings, optional settlement outcome\). Loop it after every payment or tool call to build a tamper-evident audit trail a third party can check at the fr
- `assurance\_verify`: Verify a Hermes-signed assurance record for free: recomputes the canonical hash \(hermes-stable-json-v1 + SHA-256\) and HMAC signature server-side and reports recordHashValid / signatureValid. Use it to audit attestations produced by assurance\_attest without trusting the agent that produced them.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html