Back to directory

Agent Action Safety for autonomous tools and purchases

https://hermesplant.com/api/agent-services/action-safety/quick
● healthy crypto

Put a deterministic safety gate before consequential shell, Git, SQL, infrastructure, deploy, x402, and MCP actions, then preserve machine-readable evidence and receipts.

Category
crypto
Chains
base, eip155:8453
Price
$0.0100–$9.0000 USDC

Quality grade

How grading works
B 78.1 / 100
Availability 40.0 / 40
Endpoint responded (HTTP 402)
Payability 20.0 / 20
  • ✓ Answers a real HTTP 402 challenge
  • ✓ Publishes a /.well-known/x402 descriptor
  • ✓ Payment address on record
  • ✓ Settlement network declared
  • ✓ Price declared
Demand 18.1 / 40
17 distinct payers, 120 USDC transfers in the last 30 days
Owner verified 0.0 / 3
Nobody has claimed this listing yet
Endpoint last checked 4 h ago. On-chain activity last read 2 d ago. Availability and on-chain demand are both re-probed daily; the grade updates automatically on the next pass. This grade sets search order and leaderboards; the readiness score below is shown for reference only.

x402 readiness

A · 93/100

Readiness is how fully this listing follows its protocol and how it behaved in our probes over 30 days. It is shown for reference and does not move it in search. Search order and leaderboards use the separate quality grade (here B, 78.1/100), which weighs availability, payability and on-chain demand. How the two differ

Valid payment requirements 10/10 Payment requirements carry a payee, a mainnet network and a price.
Live 402 challenge 25/25 Paid endpoint answers with an HTTP 402 challenge (646 ms).
x402 version n/a x402 version not observed yet.
Signed descriptor n/a No x402 standard defines a signed descriptor.
Uptime (30 days) 15/15 32/32 probes succeeded over 30 days (100%).
Resource declaration 10/10 Declares 25 paid resource(s).
Verified identity 5/10 Publisher descriptor (/.well-known/x402 or OpenAPI) on record; claim this listing to verify domain control.
Freshness + modern flags 5/5 seen in a source within 7 days; declares x402.
Security declaration n/a Payment is the access control for an x402 resource.
Applicable criteria total 75 points, scaled to 100.
Responsiveness: Responsive (646 ms; bands ≤2.5 s, ≤5 s, ≤8 s, slower; penalty only).
Payment evidence: x402_challenge — We sent a request and got a live HTTP 402 challenge. Also: x402_manifest, bazaar_feed, catalog_listing. Qualifies the payment claim; adds no points.
Measured 2026-11-11.
Nine criteria, the same as the A2A readiness score, read from our daily probe of the paid endpoint, its payment requirements and 30-day probe history. Signed descriptor and security declaration are n/a for x402 (payment is the access control), as is an x402 version we have not observed; the remaining points are scaled to 100. Grades: A>=90, B>=75, C>=60, D>=40, F<40. Display only: search order uses the quality grade.

Compared with peers

Against 10,060 reachable x402 APIs in our daily snapshot (2026-11-12 01:39 UTC). Display only; it does not change search order.

Readiness
Higher than 94% of peers
This listing 93 · peer median 78
Latency
Faster than 11% of peers
This listing 646 ms · peer median 205 ms

Where it loses the most points, and how to win them back

  • Verified identity −5 — Claim the listing and prove control of its domain.
    Now: Publisher descriptor (/.well-known/x402 or OpenAPI) on record; claim this listing to verify domain control.

How many agent tools actually work · All statistics

Paid endpoints

25 resource(s) advertised by this origin. Each price below is that resource's own x402 price; the headline price is the range across them.

GET https://hermesplant.com/api/x402/ping

Probe endpoint that always requires x402 before returning paid access.

POST https://hermesplant.com/api/purchase/destructguard-pro

Purchase DestructGuard Pro Pack via x402

POST https://hermesplant.com/api/purchase/incidentscribe-postmortem-pack

Purchase IncidentScribe Postmortem Pack via x402

POST https://hermesplant.com/api/purchase/reviewqueue-team-pack

Purchase ReviewQueue Team Pack via x402

POST https://hermesplant.com/api/purchase/mcp-risk-analyzer

Purchase MCP Risk Analyzer Operator Pack via x402

POST https://hermesplant.com/api/purchase/operator-os-core

Purchase Operator OS - Revenue Solopreneur Core via x402

POST https://hermesplant.com/api/agent-services/action-safety/quick

AI agent action safety: one-cent deterministic preflight for every consequential agent command. Returns risk, matched rule ids, and an exact machine-readable escalation call: full DestructGuard evidence for medium risk or the complete Action Safety workflow for high and critical risk.

POST https://hermesplant.com/api/agent-services/action-safety/run

Complete AI agent action safety workflow for consequential agent actions. Runs the complete DestructGuard evidence score, conditionally creates ReviewQueue triage for high or critical risk, returns an honest allow or needs_review decision, a signed receipt, and a free 30-day status record. Human app

POST https://hermesplant.com/api/agent-services/x402-provenance/check

Deterministic provenance analysis for caller-supplied x402 payment records. Excludes duplicate transaction hashes, separates declared owner wallets from candidate external payers, measures concentration and evidence coverage, and states limitations explicitly. It does not fetch the chain or claim wa

POST https://hermesplant.com/api/agent-services/destructguard/score

Deterministic risk scorer for autonomous-agent commands. Scores a shell, SQL, or git action for destructive, deployment, and data-mutation risk before execution and returns a risk level, the matched policy rules, and an approve-or-block recommendation. Pure rules, evidence per match, no fabrication.

POST https://hermesplant.com/api/agent-services/reviewqueue/submit

Submit an autonomous-agent command for paid risk triage and human-approval routing. Returns a deterministic risk decision, a request id, whether a human is required, and a recommended action — pause-and-escalate on critical risk. Evidence-backed, nothing fabricated.

POST https://hermesplant.com/api/agent-services/payment-policy/decide

Preflight an x402 payment before an autonomous agent signs it. Checks resource binding, method, scheme, network, asset, amount vs expected price, payTo, facilitator, timeout, replay and idempotency readiness, metadata leakage, buyer spend limits, allow-lists, and optional service-risk signals. Retur

POST https://hermesplant.com/api/agent-services/evidence/verify

Verify an agent-commerce evidence bundle before trusting a paid result. Checks x402 challenge, receipt, policy-decision, and service-response artifacts; endpoint, method, network, payTo, and price binding; artifact source, freshness, hashes, and synthetic-proof leakage. Returns verified / needs_revi

POST https://hermesplant.com/api/agent-services/assurance/attest

Signed receipt for one agent action. Post an x402 payment intent or MCP tool call (optional policy + settlement outcome) and get a canonical HMAC-signed record: binding hash, verdict, findings, and a free public verify URL third parties can check without trusting your agent's logs. Loop it after eve

POST https://hermesplant.com/api/agent-services/mcp-risk/score

Analyze an MCP server manifest for security risk before install — destructive actions, over-broad scopes, sensitive-data egress, weak auth, prompt-injection surface, and permission diff. Returns per-tool, per-factor findings with severity, why, and a concrete fix (not just a score).

POST https://hermesplant.com/api/agent-services/walletguard/score

Wallet risk scoring of caller-supplied signals only: sanctions hits, exposure tags, labels, transfers, and funding context. Positive findings receive a 0-100 score; absent risk findings return riskLevel unknown and riskScore null, requiring independent evidence and review. No chain lookup, independe

POST https://hermesplant.com/api/agent-services/emailguard/validate

Email validation API for AI agents. Validates one email per call: RFC 5322 syntax, disposable and temporary domain detection, role-based address, free-provider classification, typo suggestion (gnail.com -> gmail.com), plus-alias normalization to canonical form, and a deliverability score with per-ru

POST https://hermesplant.com/api/agent-services/portfolioguard/score

Deterministic portfolio risk analysis and quality scoring. Computes riskScore, riskLevel, volatility, sharpe, maxDrawdown, concentrationHHI, diversification, effectiveHoldings plus per-rule findings with fixes and sector/position breakdown. Pure math only from caller holdings and returns. No externa

POST https://hermesplant.com/api/agent-services/cashflowlens/analyze

Deterministic cash flow analysis and return analytics in one call: NPV, IRR (periodic), XIRR (dated), MOIC / DPI / TVPI, payback period, plus an optional DCF valuation (enterprise value, equity value, implied share price) with Gordon-growth or exit-multiple terminal value. Pure math from caller-prov

POST https://hermesplant.com/api/agent-services/waterfall/distribute

Deterministic LP/GP distribution waterfall for private equity, venture, and real estate. Allocates distributable cash through the standard tiers — return of capital, preferred return (hurdle), GP catch-up, carried-interest split — and returns the exact LP/GP split, per-tier breakdown, LP MOIC, GP ca

POST https://hermesplant.com/api/agent-services/bond/analyze

Deterministic fixed-income & loan analytics. Bond mode: solve price<->yield-to-maturity, current yield, Macaulay & modified duration, and convexity from the bond's terms. Loan mode (send principal + annualRate + termMonths): level-payment amortization with monthly payment, total interest/paid, and t

POST https://hermesplant.com/api/agent-services/options/price

Deterministic Black-Scholes-Merton European option pricing and Greeks. Returns price, d1/d2, full Greeks (delta, gamma, vega, theta, rho) in canonical and conventional display units (vega per 1%, theta per day, rho per 1%), plus intrinsic value, time value, and moneyness. Supports continuous dividen

POST https://hermesplant.com/api/agent-services/dealanalyzer/analyze

Premium deal underwriting in one deterministic call: a DCF valuation (enterprise value, equity value, implied share price; Gordon-growth or exit-multiple terminal), equity returns (IRR/XIRR, NPV, MOIC, payback), a discount-rate × terminal-assumption sensitivity grid, and the LP/GP distribution water

POST https://hermesplant.com/api/agent-services/spend-assurance/run

One signed preflight combining caller-supplied wallet risk signals, Payment Policy challenge validation, and internal evidence binding. Unknown wallet risk requires review, not permission to pay. No external chain-intelligence or sanctions lookup, independent screening clearance, or settlement verif

POST https://hermesplant.com/api/agent-services/investment-evidence/analyze

CashflowLens return and DCF analytics plus PortfolioGuard concentration and risk scoring in one paid call, with structured internal evidence and a tamper-evident signed receipt. Pure math from caller-provided cashflows, holdings, and returns; no market-data feed and no claim that inputs are independ

How to call

cURL · x402-fetch / x402-axios will auto-handle 402
curl -sS -i -X POST https://hermesplant.com/api/agent-services/action-safety/quick  # expect HTTP 402 Payment Required (about $0.01/call)
/.well-known/x402.json
https://hermesplant.com/.well-known/x402

Listed in

Directories this entry was found in.

cdp-bazaar since 2026-06-19 x402scan since 2026-06-19 awesome-x402 since 2026-07-28 x402 since 2026-11-01