web3-agents-mcp
Provides tools to discover, inspect, and verify on-chain AI agents registered via ERC-8004 on Ethereum mainnet.
Provides tools to discover, inspect, and verify on-chain AI agents registered via ERC-8004 on OP Mainnet.
Provides tools to discover, inspect, and verify on-chain AI agents registered via ERC-8004 on Polygon PoS.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@web3-agents-mcplook up agent #1 on Base"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
web3-agents-mcp
Discover, inspect, and verify on-chain AI agents — from any MCP client.
An MCP (Model Context Protocol) server that bridges
ERC-8004 agent identity, reputation, and
validation registries into tool calls any AI agent can make. One server, every supported
chain — each tool takes a chain argument.
📋 Table of contents
Related MCP server: AgentStamp
🤔 Why
AI agents are starting to hire, pay, and delegate to other agents. ERC-8004 ("Trustless Agents") gives them an on-chain trust layer — identity, reputation, and validation registries on 20+ EVM chains — but until now an LLM agent had no way to read it from inside its tool loop.
web3-agents-mcp closes that gap. Before your agent trusts a counterparty, it can ask: Who owns this agent? Is its registration file authentic? What feedback has it received — and from whom? Has anyone independently validated its work?
🚀 Quickstart
npx web3-agents-mcpPre-publish: run from a checkout instead —
pnpm install && pnpm build && node dist/server/index.js
Claude Code:
claude mcp add web3-agents -- npx web3-agents-mcpClaude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"web3-agents": {
"command": "npx",
"args": ["web3-agents-mcp"]
}
}
}Any other MCP client: spawn npx web3-agents-mcp as a child process and speak MCP
over stdio. The server never opens a network port.
💬 Example prompts
Once connected, just ask your agent naturally:
"Which chains does the web3-agents server support?"
"Look up ERC-8004 agent #1 on Base — who owns it and what does it do?"
"Is agent #42's registration file cryptographically verified?"
"Show me the raw feedback entries for agent #1 on Base, including who submitted them."
"Should I trust agent #0 on Polygon for a code-review task? Pull the on-chain facts."
🧰 Tools
Tool | What it returns |
| Configured chains: slug, chainId, registry addresses, default flag |
| Identity record by agentId or owner: owner, tokenUri, endpoints, capabilities |
| The agent's full registration file, fetched and hash-verified ( |
| Feedback summary + optional raw per-client entries (address, score, tag), paginated |
| Independent validation entries: validator, method (TEE/ZK/re-execution), result |
| Composite factual report: identity + file verification + reputation + validations + caveats + plain-language summary |
| Capability search (indexer backend — MVP ships a stub) |
| Liveness + version |
Full input/output schemas, defaults, and error codes are generated from source into
docs/tools.md (pnpm docs:gen). A real captured transcript is in
docs/demo.md.
🛡️ Design principles
🔒 Read-only by design
No private keys, no signing, no write operations — every tool reads public state. An MCP tool surface reachable by an LLM must never have an injection path into on-chain actions (spending funds, changing registrations, submitting feedback). If a task needs a write, it needs a different, explicitly authorized tool — not this one.
⚖️ No scoring by design
There is no numeric score, confidence level, or star rating anywhere in this server's output. It hands back verified on-chain facts plus mandatory honesty caveats; weighing them into a trust decision is the consuming agent's job. A server that quietly compresses "57 feedback entries, all from one address, no independent validation" into a single number is making a judgment call it has no business making on the consumer's behalf.
⛓️ Supported chains
Chain |
| chainId | Supported |
Ethereum Mainnet |
| 1 | ✅ |
Base Mainnet |
| 8453 | ✅ |
Polygon PoS |
| 137 | ✅ |
Arbitrum One |
| 42161 | ✅ |
OP Mainnet |
| 10 | ✅ |
BNB Smart Chain |
| 56 | ✅ |
Gnosis Chain |
| 100 | ✅ |
Registry addresses are identical on every chain (CREATE2). Adding a chain is one entry in
src/chains/config.ts; agents discover the live list via the list_chains tool, and the
chain enum in every tool's schema updates automatically.
⚙️ Configuration
All configuration is via environment variables; every tool call still takes an explicit
chain argument, so these are defaults, not global switches.
Variable | Default | Purpose |
|
| Chain id used by any tool call that omits |
| none (built-in public RPC list per chain) | Overrides/prepends the RPC endpoint used for that specific chain id, e.g. |
|
| Directory for the local sqlite cache of fetched registration files. |
|
| Comma-separated list of IPFS HTTP gateways to try, in order, for |
|
| One of |
|
| Selects the |
🔍 Verification semantics
A registration file's verified field means different things depending on how the agent's
tokenUri points at it (per the v1 ERC-8004 contracts this server targets):
|
| Why |
|
| The content is embedded directly in the on-chain |
|
| The file is fetched from an IPFS gateway and its content hash is checked against the CID in the URI — an explicit |
|
| Unverifiable: v1 has no on-chain hash commitment for |
🧂 Feedback honesty
get_reputation and assess_trust always attach caveats to feedback-derived data, because
on-chain feedback has real, structural weaknesses that no aggregation can paper over:
There is no canonical score scale enforced by the registry; averages are clamped to 0-100 and may overstate quality relative to whatever scale a given client actually used.
Feedback is submitted by arbitrary addresses and is Sybil-able — nothing stops one party from submitting many entries under different addresses.
These caveats are deterministic and unremovable: they are always present in the output, not an opt-in flag.
🛠️ Development
pnpm install
pnpm dev # build then run the stdio server
pnpm build # compile TypeScript to dist/
pnpm test # run the vitest suite (excludes live-chain fork tests)
pnpm test:fork # run the live-chain fork tests against public RPCs
pnpm lint # eslint + prettier --check
pnpm typecheck # tsc --noEmit
pnpm docs:gen # regenerate docs/tools.md from the tool schemasProject layout:
src/chains— per-chain static config (registry addresses, deployment blocks, RPC URLs).src/registry— typed reads against the identity/reputation/validation ERC-8004 contracts.src/fetcher— registration-file retrieval, hashing/CID verification, and the sqlite cache.src/trust—assess_trust's orchestration, deterministic caveats, and summary text.src/indexer—search_agentsbackend contract and the MVPNullBackendstub.src/tools— one module per MCP tool: input/output zod schemas plus the tool function.src/server— MCP server wiring, tool registration, and the stdio entry point.src/shared— theResult/BridgeErrortypes and the stderr logger used everywhere.
Contributor/agent guidelines live in AGENTS.md.
🗺️ Roadmap
Local search indexer — real
search_agentsbackend (SQLite log backfill, resumable)Endpoint liveness checks — flag agents whose advertised endpoints are dead
Streamable HTTP transport — hosted/shared deployments
npm release —
npx web3-agents-mcpwithout a checkoutMore chains (one config entry each)
📄 License
MIT — see LICENSE.
Available Tools
8 toolsassess_trustA
Factual trust report for an ERC-8004 agent: runs identity, registration file, reputation, and validation lookups in parallel with graceful partial failure, and returns the raw sections plus deterministic honesty caveats and a short factual natural-language summary. No numeric scoring. taskContext only shapes the summary text.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | No | Chain to query, by name (see list_chains). Defaults to base. | |
| agentId | Yes | ||
| taskContext | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the behavioral burden. It discloses graceful partial failure, parallel execution, output composition (raw sections, honesty caveats, summary), and explicitly states no numeric scoring. It lacks details on error handling or permissions, but the key behaviors are well covered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loaded, using three terse sentences. Each sentence delivers essential information: purpose/behavior, scoring expectation, and parameter effect. No redundant wording or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of an output schema and annotations, the description sufficiently describes return components (raw sections, caveats, summary) and key behaviors. It could detail the report structure more, but the high-level description is adequate for an agent to invoke and interpret the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Only the chain parameter has schema coverage; agentId and taskContext lack descriptions. The description adds meaning by explaining taskContext's role ('only shapes the summary text') and the tool's purpose for agentId, but it does not provide format details for agentId or chain defaults beyond the schema enum.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states that this tool produces a factual trust report for an ERC-8004 agent by running identity, registration, reputation, and validation lookups in parallel. This distinguishes it from sibling lookup tools like get_registration_file and get_reputation, which focus on individual data sources.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for comprehensive trust assessment, combining multiple lookups into one report. It notes that taskContext only shapes the summary, but it does not explicitly name alternatives or state when not to use this tool (e.g., when only reputation is needed).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_registration_fileA
Fetches and verifies an agent's registration file (via its tokenUri): ipfs:// CIDs are verified, data: URIs are inherently verified, https:// is unverifiable in v1 (no on-chain hash commitment).
| Name | Required | Description | Default |
|---|---|---|---|
| chain | No | Chain to query, by name (see list_chains). Defaults to base. | |
| agentId | Yes | ||
| requireVerified | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses important behavioral details: verification depends on URI scheme (ipfs verified, data inherently verified, https unverifiable). This is beyond a simple 'fetches file' statement. However, it doesn't mention output format, error behavior, or whether the tool performs network requests.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, information-dense sentence that front-loads the action and provides key verification details. Every word earns its place; there is no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The core function and verification criteria are described, but with no output schema and no annotations, the description should explain what the tool returns and any prerequisites. It does not, leaving gaps in return format and parameter usage. It is adequate for a simple fetch tool but not fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is only 33% (chain has description, agentId and requireVerified do not). The description mentions 'via its tokenUri' but doesn't explain the parameters. agentId is inferable from the name, but requireVerified's behavior is not clarified. The description does not compensate for the low schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's action: 'Fetches and verifies an agent's registration file'. It specifies the resource and the verification behavior, distinguishing it from sibling tools like resolve_agent which likely resolves agent metadata, and trust assessment tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use this tool: when you need to fetch and verify a registration file. It also notes that https:// URIs are unverifiable in v1, which is a limitation but not an explicit alternative. It doesn't explicitly compare to sibling tools, but the purpose is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_reputationA
Reads an agent's Reputation Registry feedback summary (and optionally the raw feedback entries). Always returns honesty caveats — feedback is self-reported by clients and is a weak signal, especially for low feedback counts.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | No | Chain to query, by name (see list_chains). Defaults to base. | |
| limit | No | ||
| offset | No | ||
| agentId | Yes | ||
| includeRaw | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It excels by disclosing that the tool always returns honesty caveats, explaining that feedback is self-reported and a weak signal, especially for low counts. This provides valuable behavioral context beyond a simple 'read' action.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately concise: two sentences that front-load the core function and add a critical caveat. Every sentence provides value without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description provides a solid overview for a read-only tool with no output schema. It covers the main capability and an important caveat. However, it omits details about pagination behavior (limit/offset) and the exact structure of the summary, which would be helpful given no output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has only 20% coverage (only chain has a description). The description adds meaning for includeRaw ('raw feedback entries') and clarifies the context of agentId ('an agent's'). However, it does not discuss limit/offset pagination semantics, leaving some parameters underdefined.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: reading an agent's Reputation Registry feedback summary, optionally including raw entries. It uses a specific verb ('Reads') and resource ('Reputation Registry feedback summary'), distinguishing it from siblings like get_validations and assess_trust.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is used for reading reputation feedback but does not explicitly state when to use this tool over alternatives or mention any exclusions. It lacks direct guidance on choosing between this and related tools like get_validations or assess_trust.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_validationsB
Reads an agent's Validation Registry entries (validator, best-effort method classification, response, timestamp). An agent with zero validations is a normal, successful result — not an error.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | No | Chain to query, by name (see list_chains). Defaults to base. | |
| limit | No | ||
| offset | No | ||
| agentId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full transparency burden. It does disclose that the operation is a read and explains that an empty result is normal (a useful behavioral clarification). However, it omits details on pagination behavior (limit/offset), chain handling, and any potential side effects or errors, leaving significant gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is exceptionally concise: two sentences, front-loaded with the action and resource, and the second sentence adds a valuable clarification without any fluff or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has four parameters, no output schema, and no annotations, so the description must compensate. It provides a partial return-value description (entry fields) and the zero-validations clarification, but fails to cover pagination, chain switching, or how this differs from related trust/reputation tools. It is adequate but leaves clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is low (25%, only chain described). The description does not explain agentId, limit, offset, or chain semantics. It mentions the content of returned entries, which indirectly relates to what data is fetched, but it does not help an agent understand how to fill the parameters or what each parameter controls.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Reads') and resource ('Validation Registry entries'), and enumerates the entry content (validator, method classification, response, timestamp). This clearly distinguishes it from sibling tools like get_reputation or assess_trust, which focus on different aspects.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given on when to use this tool versus alternatives such as get_reputation or assess_trust. The note about zero validations being a normal result is a result-interpretation hint, not a usage-selection criterion, so it does not satisfy the 'when-to-use vs alternatives' requirement.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_chainsA
Lists the chains this server is configured for. Every other tool's chain argument must be one of the chain slugs returned here; isDefault marks the chain used when a tool call omits chain (DEFAULT_CHAIN_ID env resolution).
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description carries the full burden of behavioral disclosure. It adds useful context about `isDefault` and `DEFAULT_CHAIN_ID` env resolution, but it does not mention potential errors, rate limits, or the exact structure of the returned list beyond slugs. For a read-only listing operation, this is acceptable but not fully comprehensive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise—two sentences—and front-loaded with the primary purpose. The second sentence adds crucial usage context without redundancy. Every word contributes to the tool's understanding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (no params, no output schema), the description covers the essential aspects: what the tool lists, how to use the results, and what `isDefault` means. It could be more explicit about the return format (e.g., array of objects), but the description is sufficient for an agent to know when and how to invoke this tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the baseline is 4. The description adds meaning beyond the empty schema by explaining that the returned `chain` slugs are used as arguments in other tools and that `isDefault` indicates the fallback chain. This enriches the conceptual understanding of how the tool's output is consumed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool 'lists the chains this server is configured for', using a specific verb and resource. It distinguishes this tool from siblings (ping, resolve_agent, etc.) by focusing on chain configuration. The added detail about `isDefault` and the relationship to other tools' `chain` argument further clarifies its unique purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit context that this tool must be used to obtain valid `chain` slugs for other tools, stating 'Every other tool's `chain` argument must be one of the `chain` slugs returned here'. It implies the appropriate time to use this tool (before using other tools with chain arguments), though it does not explicitly mention when not to use it or name alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pingA
Liveness check; returns pong and the server version.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It discloses the return value (pong and server version) and implies a non-destructive read-only operation, but it does not explicitly discuss side effects, error behavior, or authorization requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence that wastes no words. It states the action ('liveness check') and the expected result ('returns pong and server version') efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple zero-parameter tool, the description covers the essential context: what it does and what it returns. However, it omits details about failure modes or response formatting, which would be nice but are not critical for such a basic operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and the schema coverage is trivially 100%. No parameter documentation is needed in the description, so the baseline score of 4 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose as a liveness check and specifies that it returns pong and the server version. This distinctively separates it from sibling tools which deal with agent resolution, chains, and reputation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The usage is implied by the nature of a ping (checking if the server is alive), but there is no explicit guidance on when to use it versus alternatives, nor any exclusions or prerequisites. The description is adequate but not explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
resolve_agentA
Resolves an ERC-8004 agent by agentId or ownerAddress (exactly one selector), returning identity fields plus best-effort endpoints/capabilities parsed from its registration file.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | No | Chain to query, by name (see list_chains). Defaults to base. | |
| agentId | No | ||
| ownerAddress | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description must cover behavioral traits. It discloses that parsing is 'best-effort' and that exactly one selector is required, which is useful. However, it does not indicate whether the operation is read-only, whether it makes network calls, or what error behavior to expect, leaving a transparency gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, dense sentence that front-loads the core purpose and includes a critical usage constraint. Every word contributes value with no redundancy or irrelevant details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has no output schema and no annotations, so the description must cover return values and behavioral context. It mentions identity fields plus endpoints/capabilities, but does not specify the structure or any potential error cases. While the core is covered, the lack of detail on the return format and edge cases leaves it incomplete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema documents only the chain parameter (33% coverage), leaving agentId and ownerAddress undescribed. The description compensates by explaining that one of these two selectors must be provided, adding meaning beyond the bare schema. It does not detail output fields, but the selector constraint is well covered.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool resolves an ERC-8004 agent by a specific selector (agentId or ownerAddress) and returns parsed identity fields plus endpoints/capabilities. This is a specific verb+resource with scope, and the mention of 'parsed from its registration file' distinguishes it from a simple file fetcher.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes the important usage constraint 'exactly one selector', which guides parameter selection. However, it does not explicitly state when to use this tool over siblings like get_registration_file or search_agents, nor does it mention alternatives or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_agentsA
Searches for ERC-8004 agents by name/capability/description. MVP stub: no local index backend ships yet, so this always returns INDEX_UNAVAILABLE (input validation still runs first).
| Name | Required | Description | Default |
|---|---|---|---|
| chain | No | Chain to query, by name (see list_chains). Defaults to base. | |
| limit | No | ||
| query | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description fully discloses the tool's stub status and the guaranteed INDEX_UNAVAILABLE response. It also notes that input validation still runs, which is a valuable behavioral detail beyond what the schema reveals.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences: the first states the core purpose, and the second delivers the critical caveat. Every word earns its place, and it is appropriately front-loaded with the search intent.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that the tool always returns a fixed error code, the description fully captures what an agent needs to know: the search capability, the stub status, and the guarantee of INDEX_UNAVAILABLE. No output schema is needed because the outcome is fully specified.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description adds meaning to the query parameter by specifying it searches name/capability/description, which is not in the schema. However, it does not explain the chain or limit parameters beyond what the schema already provides, and schema coverage is only 33%.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Searches for ERC-8004 agents') and identifies search criteria ('by name/capability/description'). It clearly differentiates from sibling tools like resolve_agent by indicating a broad search rather than targeted resolution.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context that this is an MVP stub and will always return INDEX_UNAVAILABLE, telling the agent not to rely on it for actual results. It does not explicitly name an alternative tool, which prevents a 5, but the warning is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
8 tool updates
v0.1.0- First observed
assess_trust - First observed
get_registration_file - First observed
get_reputation - First observed
get_validations - First observed
list_chains - First observed
ping - First observed
resolve_agent - First observed
search_agents
TDQS
Each tool targets a distinct resource or action: liveness, chain config, agent resolution, registration file, reputation, validations, composite trust, and search. assess_trust aggregates the getters but does not overlap with them, so an agent can clearly select the right tool.
All tools use snake_case and nearly all follow a verb_noun pattern (resolve_agent, list_chains, get_registration_file, get_reputation, get_validations, assess_trust, search_agents). The only exception is ping, which is a standard health-check verb and does not break the overall consistency.
8 tools is well-scoped for an ERC-8004 agent trust server. The set covers health, configuration, identity resolution, data source retrieval, a composite trust report, and search without redundancy or bloat.
The tool surface covers identity, registration file verification, reputation, validations, and a composite trust assessment. The search_agents tool is only an MVP stub that always returns INDEX_UNAVAILABLE, which limits discovery but does not block core trust workflows for known agents.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
AI agent registry — search, discover, register, and connect agents via MCP.
The MCP-native bridge to ERC-8004 (on-chain agent identity/reputation/validation): resolve registrat
Search, vet & assemble MCP servers from your agent: verified tools, risk labels, and trust scores.
On-chain ERC-8004 agent registry. Search, register, and check reputation across 16 chains.
Related MCP Servers
- AlicenseAqualityCmaintenanceMCP server for AgentFolio — the identity and reputation layer for AI agents. Query agent profiles, trust scores, verification status, and marketplace listings through 8 MCP tools.91341MIT
- AlicenseAqualityDmaintenanceTrust intelligence MCP server for AI agents. 19 tools for identity stamps, reputation scoring (0-100), agent registry, forensic audit trails, ERC-8004 bridge, and A2A passports via x402 USDC micropayments.191Apache 2.0
- AlicenseNot gradedqualityDmaintenanceMCP Server for AI agent identity and authorization. Create, verify, and manage agent identities with trust scores and scoped authorization tokens.MIT
- AlicenseNot gradedqualityDmaintenanceMCP server for Citizen of the Cloud — agent identity verification, trust scoring, and registry access for any AI runtime that speaks the Model Context Protocol.19MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/hanjoonchoe/web3-agents-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server