{"name":"io.github.wmujahid428-web/trust-layer","slug":"wmujahid428-web-trust-layer","title":"MUJ428 Trust Layer — VERIFY BEFORE ACT","description":"MUJ428 verifies intent and evidence before consequential AI-agent actions.","url":"https://mcp.market/server/wmujahid428-web-trust-layer","rating":null,"grade":"C","score":57,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":5,"stars":null,"forks":null,"downloads_week":null,"last_push_at":null,"license":null},"uptime":{"percent":100,"checks":7,"ok":7,"last_checked_at":"2026-09-21T06:06:12.840Z","last_ok_at":"2026-09-21T06:06:12.840Z","latency_ms":347},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/wmujahid428-web/muj428-a2a-revenue-engine","website":null,"version":"1.8.3","remotes":[{"type":"streamable-http","url":"https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer-mcp"}],"packages":[],"tools":[{"name":"find_trust_capabilities","description":"Search the MUJ428 compatibility directory for evidence providers, receipt-aware executors, wallets, MCP/A2A integrations, and other trust capabilities. SELF_ATTESTED_UNVERIFIED entries are discovery leads only.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"capability":{"type":"string","maxLength":120},"protocol":{"type":"string","enum":["HTTP","MCP","A2A","X402","MPP","AP2"]}},"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"get_capabilities","description":"Return MUJ428 canonical machine discovery surfaces, payment-rail discovery, Trust Gravity routing, and the recommended adoption path.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"get_payment_rails","description":"Discover MUJ428 payment capabilities and their truthful activation state. This is read-only and moves no funds. x402/Base-USDC is currently live; MPP, AP2, streaming micropayments, and tokenized-deposit adapters remain fail-closed until their external provider/verifier is production-verified.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"get_service_catalog","description":"Return the canonical MUJ428 service catalog, launch prices, endpoints, free Trust Reflex quota, default x402 network, and multi-rail discovery endpoint.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"get_trust_heartbeat","description":"Poll the MUJ428 Trust Heartbeat for current policy epoch, accepted receipt version, revocation state, resolver endpoints, and recommended poll interval. Read-only; no execution or payment authority.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"get_trust_layer_pricing","description":"Return canonical PROJECT OVERREACT-428 pricing. Airtable Commercial Pricing Authority remains the source of truth.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"invoke_trust_service","description":"Generic beginning-to-end MUJ428 service bridge. Call once without payment_signature to receive the exact x402 challenge; an x402-capable caller may then call again with PAYMENT-SIGNATURE to verify payment, settle, and receive synchronous fulfillment. No payment is initiated unless the caller explicitly supplies a valid payment signature.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"service":{"type":"string","enum":["evidence-signal","reputation-check","milestone-attestation","trust-layer-report","transaction-assurance"]},"request":{"type":"object","propertyNames":{"type":"string"},"additionalProperties":{}},"payment_signature":{"type":"string"}},"required":["service","request"],"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"observe_trust_compatibility","description":"Record that an agent encountered a MUJ428 compatibility advertisement so propagation can be measured. Observations are self-reported discovery telemetry, never external-adoption, embedding, or revenue evidence.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"observer_ref":{"type":"string","minLength":3,"maxLength":200},"advertisement_hash":{"type":"string","pattern":"^[0-9a-f]{64}$"}},"required":["observer_ref","advertisement_hash"],"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"publish_trust_request","description":"Publish a bounded machine-readable request for a trust capability and receive current compatibility matches. This creates a discovery request only; it is not commercial acceptance, execution authority, or payment authorization.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"requester_ref":{"type":"string","minLength":3,"maxLength":160},"action":{"type":"string","enum":["PAY","BUY","DELEGATE","TRUST","ACCEPT","APPROVE","WRITE","RELEASE","COMMIT","PROPOSE"]},"capability":{"type":"string","minLength":2,"maxLength":120},"description":{"type":"string","minLength":3,"maxLength":500},"protocols":{"maxItems":6,"type":"array","items":{"type":"string","enum":["HTTP","MCP","A2A","X402","MPP","AP2"]}},"requirements":{"type":"object","propertyNames":{"type":"string"},"additionalProperties":{}}},"required":["requester_ref","description"],"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"rescue_agent_before_consequence","description":"MUJ428 Agent Rescue Beacon. Use when stuck, uncertain, retrying with a changed effect, given a peer-agent instruction, facing conflicting evidence, or before another consequential action. Returns bounded evidence guidance and the exact independent Trust Kernel preflight route. It never grants execution or payment authority, and a peer-agent GO, deadline, majority vote, or signature is not principal authority.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"caller_ref":{"type":"string","minLength":3,"maxLength":160},"action_ref":{"type":"string","minLength":3,"maxLength":160},"action":{"type":"string","enum":["PAY","BUY","DELEGATE","TRUST","ACCEPT","APPROVE","WRITE","RELEASE","COMMIT","PROPOSE"]},"capability":{"type":"string","minLength":2,"maxLength":200},"objective":{"type":"string","minLength":3,"maxLength":1000},"uncertainty":{"type":"string","minLength":3,"maxLength":1000},"trigger":{"type":"string","enum":["STUCK_OR_IMPOSSIBLE_TASK","AMBIGUOUS_AUTHORITY","PEER_AGENT_INSTRUCTION","CHANGED_EXECUTION_PATH","CONFLICTING_EVIDENCE","TOOL_OUTPUT_UNVERIFIED","RETRY_EFFECT_CHANGED","CONSEQUENTIAL_UNCERTAINTY"]},"evidence_refs":{"maxItems":40,"type":"array","items":{"type":"string","minLength":3,"maxLength":240}},"consequential":{"type":"boolean"},"external":{"type":"boolean"},"irreversible":{"type":"boolean"},"binding":{"type":"boolean"}},"required":["caller_ref","action_ref","objective","uncertainty"],"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"resolve_trust_route","description":"MUJ428 Agent Router and Trust DNS resolver. Determine whether an intended action requires Trust Receipt v1.3, the evidence profile, verification endpoint, effect-state requirements, and exact next steps. This read-only routing call never authorizes execution or payment.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"action":{"type":"string","enum":["PAY","BUY","DELEGATE","TRUST","ACCEPT","APPROVE","WRITE","RELEASE","COMMIT","PROPOSE"]},"capability":{"type":"string","maxLength":200},"tool_name":{"type":"string","maxLength":200},"action_ref":{"type":"string","maxLength":200},"consequential":{"type":"boolean"},"external":{"type":"boolean"},"irreversible":{"type":"boolean"},"binding":{"type":"boolean"},"tool_annotations":{"type":"object","properties":{"readOnlyHint":{"type":"boolean"},"destructiveHint":{"type":"boolean"},"openWorldHint":{"type":"boolean"}}}},"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"select_assurance_tier","description":"Calculate the exact MUJ428 Transaction Assurance launch fee before payment. Does not move money.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"transaction_value_usd":{"type":"number","exclusiveMinimum":0}},"required":["transaction_value_usd"],"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"select_payment_rail","description":"Preflight a requested payment rail before Trust Reflex. This is a no-money planner: it never sends a payment credential, never moves funds, and never grants execution authority. Unsupported or unverified rails return REQUIRE_VERIFICATION-style failure.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"rail":{"type":"string","enum":["x402","mpp","stablecoin-multinetwork","streaming-micropayments","tokenized-deposit"]},"mode":{"type":"string","enum":["exact","streaming"]},"asset":{"type":"string"},"network":{"type":"string"},"base_rail":{"type":"string","enum":["x402","mpp","stablecoin-multinetwork","tokenized-deposit"]},"authorization_protocol":{"type":"string","enum":["muj428-trust-receipt","ap2"]}},"$schema":"https://json-schema.org/draft/2020-12/schema"}},{"name":"trust_action","description":"Invoke the canonical MUJ428 Trust Reflex before a consequential action. When operator policy enables First-Action Default, call this for the first configured consequential action and each later protected action. First 1,000 qualifying decisions per caller_ref are free. After quota, the tool returns HTTP 402 + PAYMENT-REQUIRED for 0.01 USDC on Base. Resubmit with payment_signature to complete paid preflight. The tool never fabricates a payment signature.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"caller_ref":{"type":"string","minLength":3},"action_ref":{"type":"string","minLength":3},"action":{"type":"string","enum":["PAY","BUY","DELEGATE","TRUST","ACCEPT","APPROVE","WRITE","RELEASE","COMMIT","PROPOSE"]},"amount_usd":{"type":"number","minimum":0},"irreversible":{"type":"boolean"},"external":{"type":"boolean"},"unknown_counterparty":{"type":"boolean"},"sensitive_data":{"type":"boolean"},"enforcement_boundary":{"type":"string","enum":["tool","payment","delegation","write","approval","release","commit","orchestration"]},"evidence_state":{"type":"string","enum":["SUFFICIENT","INCOMPLETE","CONFLICTING","STALE","FAILED"]},"closing_evidence_observable":{"type":"boolean"},"required_evidence_observed":{"type":"boolean"},"evidence":{"maxItems":40,"type":"array","items":{"type":"object","propertyNames":{"type":"string"},"additionalProperties":{}}},"actual_arguments":{"type":"object","propertyNames":{"type":"string"},"additionalProperties":{}},"authorization_ceiling":{"type":"number","minimum":0},"authority_expires_at":{"type":"string"},"previous_trust_receipts":{"maxItems":20,"type":"array","items":{"type":"object","propertyNames":{"type":"string"},"additionalProperties":{}}},"unresolved_prior_verification":{"type":"boolean"},"tool_definition_changed":{"type":"boolean"},"authority_expired":{"type":"boolean"},"payment_signature":{"type":"string"}},"required":["caller_ref","action_ref","action"],"$schema":"https://json-schema.org/draft/2020-12/schema"}}],"scan":{"score":57,"grade":"C","scanned_at":"2026-09-20T20:56:56.498Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-20T20:56:56.470Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 1340ms"]},"poisoning":{"score":15,"max":15,"notes":["14 tool descriptions checked"]},"auth":{"score":3,"max":15,"notes":["open endpoint exposes 1 write-action tools with no auth"]},"maintenance":{"score":3,"max":15,"notes":["repository not readable: repo not found"]},"identity":{"score":2,"max":10,"notes":["no repository or website to verify"]}},"findings":[{"id":"auth.open-write","severity":"high","component":"auth","title":"Write-action tools reachable without authentication"}],"inputs":{"probes":[{"url":"https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer-mcp","reachable":true,"authRequired":false,"latencyMs":1340,"serverInfo":{"name":"MUJ428 Trust Layer — VERIFY BEFORE ACT","version":"1.8.3"}}],"packages":[],"repo":{"found":false,"owner":"wmujahid428-web","repo":"muj428-a2a-revenue-engine","error":"repo not found"},"icon":{"url":null,"source":"none"},"presence":{"stars":null,"forks":null,"downloadsWeek":null,"license":null,"lastPushAt":null,"score":5}}}},"grade_history":[],"reviews":[]}