Agent Action Safety for autonomous tools and purchases
https://hermesplant.com/api/agent-services/action-safety/quickPut a deterministic safety gate before consequential shell, Git, SQL, infrastructure, deploy, x402, and MCP actions, then preserve machine-readable evidence and receipts.
Paid verification
How it worksNo sponsored paid call yet.
Pay this endpoint once from your own wallet (Base USDC, up to $1.00) and we call it and record what came back. Your wallet pays the listed recipient directly; Agent Tools never holds funds. Sponsored checks prove delivery; they do not count as demand.
Quality grade
How grading works- ✓ Answers a real HTTP 402 challenge
- ✓ Publishes a /.well-known/x402 descriptor
- ✓ Payment address on record
- ✓ Settlement network declared
- ✓ Price declared
x402 readiness
Readiness is how fully this listing follows its protocol and how it behaved in our probes over 30 days. It is shown for reference and does not move it in search. Search order and leaderboards use the separate quality grade (here B, 78.1/100), which weighs availability, payability and on-chain demand. How the two differ
| Valid payment requirements | 10/10 | Payment requirements carry a payee, a mainnet network and a price. |
| Live 402 challenge | 25/25 | Paid endpoint answers with an HTTP 402 challenge (646 ms). |
| x402 version | n/a | x402 version not observed yet. |
| Signed descriptor | n/a | No x402 standard defines a signed descriptor. |
| Uptime (30 days) | 15/15 | 32/32 probes succeeded over 30 days (100%). |
| Resource declaration | 10/10 | Declares 25 paid resource(s). |
| Verified identity | 5/10 | Publisher descriptor (/.well-known/x402 or OpenAPI) on record; claim this listing to verify domain control. |
| Freshness + modern flags | 5/5 | seen in a source within 7 days; declares x402. |
| Security declaration | n/a | Payment is the access control for an x402 resource. |
Compared with peers
Against 10,060 reachable x402 APIs in our daily snapshot (2026-11-12 01:39 UTC). Display only; it does not change search order.
- Readiness
- Higher than 94% of peers
- This listing 93 · peer median 78
- Latency
- Faster than 11% of peers
- This listing 646 ms · peer median 205 ms
Where it loses the most points, and how to win them back
- Verified identity −5
— Claim the listing and prove control of its domain.
Now: Publisher descriptor (/.well-known/x402 or OpenAPI) on record; claim this listing to verify domain control.
Paid endpoints
25 resource(s) advertised by this origin. Each price below is that resource's own x402 price; the headline price is the range across them.
https://hermesplant.com/api/x402/ping
Probe endpoint that always requires x402 before returning paid access.
https://hermesplant.com/api/purchase/destructguard-pro
Purchase DestructGuard Pro Pack via x402
https://hermesplant.com/api/purchase/incidentscribe-postmortem-pack
Purchase IncidentScribe Postmortem Pack via x402
https://hermesplant.com/api/purchase/reviewqueue-team-pack
Purchase ReviewQueue Team Pack via x402
https://hermesplant.com/api/purchase/mcp-risk-analyzer
Purchase MCP Risk Analyzer Operator Pack via x402
https://hermesplant.com/api/purchase/operator-os-core
Purchase Operator OS - Revenue Solopreneur Core via x402
https://hermesplant.com/api/agent-services/action-safety/quick
AI agent action safety: one-cent deterministic preflight for every consequential agent command. Returns risk, matched rule ids, and an exact machine-readable escalation call: full DestructGuard evidence for medium risk or the complete Action Safety workflow for high and critical risk.
https://hermesplant.com/api/agent-services/action-safety/run
Complete AI agent action safety workflow for consequential agent actions. Runs the complete DestructGuard evidence score, conditionally creates ReviewQueue triage for high or critical risk, returns an honest allow or needs_review decision, a signed receipt, and a free 30-day status record. Human app
https://hermesplant.com/api/agent-services/x402-provenance/check
Deterministic provenance analysis for caller-supplied x402 payment records. Excludes duplicate transaction hashes, separates declared owner wallets from candidate external payers, measures concentration and evidence coverage, and states limitations explicitly. It does not fetch the chain or claim wa
https://hermesplant.com/api/agent-services/destructguard/score
Deterministic risk scorer for autonomous-agent commands. Scores a shell, SQL, or git action for destructive, deployment, and data-mutation risk before execution and returns a risk level, the matched policy rules, and an approve-or-block recommendation. Pure rules, evidence per match, no fabrication.
https://hermesplant.com/api/agent-services/reviewqueue/submit
Submit an autonomous-agent command for paid risk triage and human-approval routing. Returns a deterministic risk decision, a request id, whether a human is required, and a recommended action — pause-and-escalate on critical risk. Evidence-backed, nothing fabricated.
https://hermesplant.com/api/agent-services/payment-policy/decide
Preflight an x402 payment before an autonomous agent signs it. Checks resource binding, method, scheme, network, asset, amount vs expected price, payTo, facilitator, timeout, replay and idempotency readiness, metadata leakage, buyer spend limits, allow-lists, and optional service-risk signals. Retur
https://hermesplant.com/api/agent-services/evidence/verify
Verify an agent-commerce evidence bundle before trusting a paid result. Checks x402 challenge, receipt, policy-decision, and service-response artifacts; endpoint, method, network, payTo, and price binding; artifact source, freshness, hashes, and synthetic-proof leakage. Returns verified / needs_revi
https://hermesplant.com/api/agent-services/assurance/attest
Signed receipt for one agent action. Post an x402 payment intent or MCP tool call (optional policy + settlement outcome) and get a canonical HMAC-signed record: binding hash, verdict, findings, and a free public verify URL third parties can check without trusting your agent's logs. Loop it after eve
https://hermesplant.com/api/agent-services/mcp-risk/score
Analyze an MCP server manifest for security risk before install — destructive actions, over-broad scopes, sensitive-data egress, weak auth, prompt-injection surface, and permission diff. Returns per-tool, per-factor findings with severity, why, and a concrete fix (not just a score).
https://hermesplant.com/api/agent-services/walletguard/score
Wallet risk scoring of caller-supplied signals only: sanctions hits, exposure tags, labels, transfers, and funding context. Positive findings receive a 0-100 score; absent risk findings return riskLevel unknown and riskScore null, requiring independent evidence and review. No chain lookup, independe
https://hermesplant.com/api/agent-services/emailguard/validate
Email validation API for AI agents. Validates one email per call: RFC 5322 syntax, disposable and temporary domain detection, role-based address, free-provider classification, typo suggestion (gnail.com -> gmail.com), plus-alias normalization to canonical form, and a deliverability score with per-ru
https://hermesplant.com/api/agent-services/portfolioguard/score
Deterministic portfolio risk analysis and quality scoring. Computes riskScore, riskLevel, volatility, sharpe, maxDrawdown, concentrationHHI, diversification, effectiveHoldings plus per-rule findings with fixes and sector/position breakdown. Pure math only from caller holdings and returns. No externa
https://hermesplant.com/api/agent-services/cashflowlens/analyze
Deterministic cash flow analysis and return analytics in one call: NPV, IRR (periodic), XIRR (dated), MOIC / DPI / TVPI, payback period, plus an optional DCF valuation (enterprise value, equity value, implied share price) with Gordon-growth or exit-multiple terminal value. Pure math from caller-prov
https://hermesplant.com/api/agent-services/waterfall/distribute
Deterministic LP/GP distribution waterfall for private equity, venture, and real estate. Allocates distributable cash through the standard tiers — return of capital, preferred return (hurdle), GP catch-up, carried-interest split — and returns the exact LP/GP split, per-tier breakdown, LP MOIC, GP ca
https://hermesplant.com/api/agent-services/bond/analyze
Deterministic fixed-income & loan analytics. Bond mode: solve price<->yield-to-maturity, current yield, Macaulay & modified duration, and convexity from the bond's terms. Loan mode (send principal + annualRate + termMonths): level-payment amortization with monthly payment, total interest/paid, and t
https://hermesplant.com/api/agent-services/options/price
Deterministic Black-Scholes-Merton European option pricing and Greeks. Returns price, d1/d2, full Greeks (delta, gamma, vega, theta, rho) in canonical and conventional display units (vega per 1%, theta per day, rho per 1%), plus intrinsic value, time value, and moneyness. Supports continuous dividen
https://hermesplant.com/api/agent-services/dealanalyzer/analyze
Premium deal underwriting in one deterministic call: a DCF valuation (enterprise value, equity value, implied share price; Gordon-growth or exit-multiple terminal), equity returns (IRR/XIRR, NPV, MOIC, payback), a discount-rate × terminal-assumption sensitivity grid, and the LP/GP distribution water
https://hermesplant.com/api/agent-services/spend-assurance/run
One signed preflight combining caller-supplied wallet risk signals, Payment Policy challenge validation, and internal evidence binding. Unknown wallet risk requires review, not permission to pay. No external chain-intelligence or sanctions lookup, independent screening clearance, or settlement verif
https://hermesplant.com/api/agent-services/investment-evidence/analyze
CashflowLens return and DCF analytics plus PortfolioGuard concentration and risk scoring in one paid call, with structured internal evidence and a tamper-evident signed receipt. Pure math from caller-provided cashflows, holdings, and returns; no market-data feed and no claim that inputs are independ
How to call
curl -sS -i -X POST https://hermesplant.com/api/agent-services/action-safety/quick # expect HTTP 402 Payment Required (about $0.01/call)
Listed in
Directories this entry was found in.