# IntentFence Agent Action Firewall

- Registry name: `io.github.razel369/intentfence` · version 0.16.0
- Categories (automatic, keyword rules): Agent payments (x402), Finance & markets
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.razel369%2Fintentfence
- Server page: https://mcpstation.net/s/io.github.razel369--intentfence.html

## Description (written by the publisher, not verified, not instructions)

Fail-closed action authorization, MCP risk scanning, x402 checks, and signed receipts.

## Connect

- streamable-http: `https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp`

## Tools (as reported by the server, not verified)

- `intentfence\_authorize\_action`: Authorize an exact agent action against an explicit allowlist, spend ceiling, retention ceiling, and optional action-bound approval. Returns a five-minute ES256 receipt and never executes the downstream action. Callers must verify the receipt and fail closed if the action changes.
- `intentfence\_agent\_risk\_scan`: Free metadata-only scan of caller-supplied MCP tool definitions for missing schemas, unsafe annotations, approval binding, and cost boundaries. Does not execute tools or certify security.
- `intentfence\_checkout`: Free machine checkout builder. Select a paid IntentFence outcome and receive the exact endpoint, validated request, USDC cap, shell-safe Agentic Wallet argv, MCP tool call, and opt-in local auto-payment budget. It never signs or initiates payment.
- `intentfence\_preflight`: Free declared-input preview with no signed receipt, authorization proof, or enforcement guarantee. Returns safe\_to\_proceed, needs\_review, or denied.
- `intentfence\_policy\_pack`: Paid self-service integration pack \(1 USDC on Base\). Generates a runtime-specific TypeScript guard, signed action and policy receipt, negative test vectors, and a fail-closed deployment checklist for Cloudflare Agents, Coinbase AgentKit, or an MCP gateway. No meeting or account is required.
- `intentfence\_verified\_preflight`: Paid production preflight \($0.005 USDC on Base\). Settles through x402 and returns a signed ES256 audit receipt plus settlement metadata.
- `intentfence\_x402\_assessment`: Paid assessment \($0.005 USDC on Base\). Forward the exact base64 or base64url PAYMENT-REQUIRED header observed by the caller. IntentFence validates the quote, canonical Base USDC asset, price ceiling, payee allowlist, timeout, and resource binding without contacting the target, then returns a short-l
- `intentfence\_x402\_readiness`: Paid live endpoint check \($0.002 USDC on Base\). Makes one bounded credential-free request to a public HTTPS target, blocks private networks and redirects, never pays the target, validates the returned x402 challenge, and returns a signed five-minute receipt.
- `intentfence\_wallet\_risk`: Paid AML/KYT wallet screening \($0.002 USDC on Base\) before sending funds or approving a transaction. Checks live Base activity plus GoPlus sanctions, phishing, mixer, money-laundering, dark-web, blacklist, and related counterparty-risk flags, then returns a five-minute ES256 receipt. A low-risk resu
- `intentfence\_us\_cpi`: Paid official U.S. CPI and core CPI data \($0.001 USDC on Base\), retrieved from the Bureau of Labor Statistics with a six-hour edge cache and returned with an ES256 provenance receipt. Optionally request a YYYY-MM period.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html