IntentFence Policy Agent

Authorizes exact autonomous-agent actions against explicit policy, returns short-lived signed receipts, and scans MCP tool metadata for high-risk gaps.

Skills

• Budget-capped agent checkout
  Choose an IntentFence paid outcome and receive the exact endpoint, validated input, Coinbase Agentic Wallet MCP request, Agentic Wallet argv, proactive x402 MCP tool call, and Base USDC ceiling without signing or initiating payment.
  agent-commercex402MCPBaseUSDCspend-control
• Screen every Base recipient before payment
  Run a live Base wallet-risk screen for 0.002 USDC before paying a new recipient, using one budget-capped x402 call and a fail-closed signed result.
  wallet-riskBaseUSDCx402agent-commercerepeat-purchase
• Self-service production policy pack
  Generate a runtime-specific fail-closed TypeScript guard, signed action and policy receipt, negative test vectors, and deployment checklist for 1 USDC through x402.
  authorizationCloudflare AgentsCoinbase AgentKitOpenAI Agents SDKMCPx402
• Fail-closed agent action authorization
  Bind an exact MCP, HTTP, A2A, or payment action to an allowlist, cost ceiling, retention ceiling, and optional action-specific human approval. Returns a five-minute ES256 receipt and never executes the action.
  agent-securityauthorizationpolicy-enforcementMCPsigned-receipt
• MCP metadata risk scan
  Scan caller-supplied MCP tool definitions for missing schemas, conflicting annotations, absent approval binding, and missing cost boundaries without executing tools.
  MCPagent-securityrisk-scantool-metadata
• Agent payment preflight
  Evaluate caller-declared payment intent and return safe_to_proceed, needs_review, or denied before the caller invokes its downstream tool. IntentFence does not independently authorize or execute the action.
  declared-input-policypolicysafetyauditpreflightx402USDC
• Live x402 endpoint readiness
  Make one bounded credential-free request to a public HTTPS endpoint, block redirects and private-network targets, validate its live x402 challenge, and return a signed receipt without paying the target.
  x402endpoint-readinesspayment-safetySSRFUSDC
• Caller-observed x402 quote assessment
  Validate and sign the exact PAYMENT-REQUIRED quote observed by the caller against a Base USDC ceiling, explicit payee allowlist, timeout, and resource binding. IntentFence never fetches or pays the target.
  x402merchant-riskpayment-safetyquote-assessmentUSDC

How to call

https://agentpass-protocol.rmalka06.chatgpt.site/a2a

Listed in

Directories this entry was found in.