Assay A2A, MCP & x402 Pre-Flight Verifier & Observatory
Live behavioral security verifier, schema auditor, and trust oracle for A2A, MCP & x402 agents.
Connect it
Settings → Connectors → Add custom connector
URL: https://assay.agentdiet.dev/mcpSettings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://assay.agentdiet.dev/mcp{
"mcpServers": {
"assay": {
"url": "https://assay.agentdiet.dev/mcp"
}
}
}claude mcp add --transport http assay https://assay.agentdiet.dev/mcp{
"servers": {
"assay": {
"type": "http",
"url": "https://assay.agentdiet.dev/mcp"
}
}
}4 tools, pulled live
assay_preflightread-onlyGate a remote MCP, A2A, or x402 endpoint before calling or paying it by probing live JSON-RPC reachability, hashing tools/list (SHA-256), and scanning for prompt-injection poisoning. When expected_tools_hash is provided, any mismatch against the live tools/list digest forces verdict='deny' to block silent schema rug-pulls; when omitted, verdict reflects liveness and injection safety alone. Read-on
assay_probeRegister a new remote MCP, A2A, or x402 endpoint or refresh its public Assay Observatory dossier by running a live HTTP, agent-card, and JSON-RPC tools/list inspection without policy gating. Target must be a public HTTPS origin (private IPs are rejected with a 400 error); each call appends a timestamped observation and increments rug_pulls if tools_hash drifted since the prior stored observation.
assay_verify_deliveryAudit a paid x402 or A2A provider after payment to confirm delivery or prove an SLA breach with an HMAC-SHA256 signed receipt. Passing status_code >= 500 forces verdict='sla_breach_confirmed' even if the live re-probe succeeds, while passing tx_hash cryptographically binds your Base or Solana payment signature into the receipt (omitting tx_hash still verifies liveness and issues a probe-bound rece
assay_get_ledger_policyRetrieve historical conformance observations and manage pinned SHA-256 tools/list policy hashes in the Assay ledger for a target endpoint. When expected_tools_hash is provided, it pins that 64-hex digest as the target's baseline policy and compares it against the latest stored observation; when omitted, it returns the stored dossier and last 20 drift observations without network probing unless the
Alternatives in Security
Compare →
TracePass DPP Compliance AssistantB
Answers EU Digital Product Passport questions: scope, required fields, registry and law changes.
MSMicrosoft Sentinel Data ExplorationOfficialB
Find relevant security data from Sentinel data lake for building effective agents. More:aka.ms/s/de
Tailscale MCP by usefulapiB
Read devices, users, keys, ACLs and DNS for a tailnet; manage devices, routes and auth keys.
Castle MCP by usefulapiB
Investigate security events and manage the allow/deny lists an analyst acts on.
Basis Theory MCP by usefulapiB
Read token metadata, applications, audit logs, proxies and usage in the PCI vault.
DEDechonetB
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.