"Firewalla" matching MCP tools:

• intentfence_checkoutA

  IntentFence Agent Action FirewallA

  Free machine checkout builder. Select a paid IntentFence outcome and receive the exact endpoint, validated request, USDC cap, shell-safe Agentic Wallet argv, MCP tool call, and opt-in local auto-payment budget. It never signs or initiates payment.

  ConnectorNo auth

• list_charterA

  values-firewallA

  Transparens: hvilke regler/principper håndhæver DENNE firewall lige nu — navn/version/ hard_rules/outward_patterns/principles. Values-locked (arvet): firewall'en håndhæver KUN dette deklarerede charter, opfinder aldrig regler/principper udenfor det. PUBLIC_DEMO-mode: ÅBEN, GRATIS — ALDRIG rate-begrænset. Viser det OFFENTLIGE Art-14-demo- charter (6 principper, 4 hard_rules, 14 outward_patterns) — ikke noget kunde-/fleet-/ TIER-1-charter. Får et `scope_note`-felt med demo-disclosuren tilføjet (fraværende i default-mode — additiv, ingen bestående felter ændres).

  ConnectorNo auth

• intentfence_x402_assessmentA

  IntentFence Agent Action FirewallA

  Paid assessment ($0.005 USDC on Base). Forward the exact base64 or base64url PAYMENT-REQUIRED header observed by the caller. IntentFence validates the quote, canonical Base USDC asset, price ceiling, payee allowlist, timeout, and resource binding without contacting the target, then returns a short-lived ES256 receipt bound to the quote hash. Supply allowed_payees for safe_to_proceed; omission yields needs_review.

  ConnectorNo auth

• sqlguard_balanceA

  SQLGuard — Execution Certificate FirewallB

  Check prepaid credit balance (legacy volume). For production authorize use sqlguard_challenge — not prepaid micro.

  ConnectorNo auth

• intentfence_authorize_actionA

  IntentFence Agent Action FirewallA

  Authorize an exact agent action against an explicit allowlist, spend ceiling, retention ceiling, and optional action-bound approval. Returns a five-minute ES256 receipt and never executes the downstream action. Callers must verify the receipt and fail closed if the action changes.

  ConnectorNo auth

• intentfence_wallet_riskA

  IntentFence Agent Action FirewallA

  Paid AML/KYT wallet screening ($0.002 USDC on Base) before sending funds or approving a transaction. Checks live Base activity plus GoPlus sanctions, phishing, mixer, money-laundering, dark-web, blacklist, and related counterparty-risk flags, then returns a five-minute ES256 receipt. A low-risk result is not proof of identity, ownership, authorization, or future behavior.

  ConnectorNo auth

• sqlguard_challengeA

  SQLGuard — Execution Certificate FirewallB

  PRIMARY agent buy path. Free POST /v1/challenge with mutating SQL → DENY + deny_id. Exact USDC $100.00 via POST /v1/challenge/unlock (402 amount 100000000) opens 500 PASS / 7d. Alt: Gateway invoice $299/$499/$1999. Session/Cert/micro OFF TABLE as primary. Probe FREE tip — never authorizes.

  ConnectorNo auth

• sqlguard_catalogA

  SQLGuard — Execution Certificate FirewallB

  LEGACY prepaid catalog (OFF TABLE as wealth/primary). Prefer sqlguard_handshake then sqlguard_challenge. Returns credit bundles + x402 buy URLs for volume validates only — not the authorize standard.

  ConnectorNo auth

• sqlguard_handshakeA

  SQLGuard — Execution Certificate FirewallB

  FIRST tool on connect. Asks: What do you need? Pass { need: "…" }. Org/migrate/mutate/production → sqlguard_challenge (POST /v1/challenge → Exact unlock /v1/challenge/unlock amount 100000000). Company invoice → /gateway $299+. Session/Cert OFF TABLE as primary. Call before sqlguard_catalog when unsure.

  ConnectorNo auth

• sqlguard_verifyA

  SQLGuard — Execution Certificate FirewallB

  REQUIRED before production execute. Verify Execution Certificate signature, expiry, and PASS. If verify fails, do not write.

  ConnectorNo auth

• sqlguard_gateA

  SQLGuard — Execution Certificate FirewallB

  ABMP GATE — free portable authorize bus. POST /v1/gate with certificate+signature+sql (+ mandate when BIND). Any mutating agent tool fail-closes here before execute. Issues nothing.

  ConnectorNo auth

• intentfence_x402_readinessA

  IntentFence Agent Action FirewallA

  Paid live endpoint check ($0.002 USDC on Base). Makes one bounded credential-free request to a public HTTPS target, blocks private networks and redirects, never pays the target, validates the returned x402 challenge, and returns a signed five-minute receipt.

  ConnectorNo auth

• intentfence_agent_risk_scanA

  IntentFence Agent Action FirewallA

  Free metadata-only scan of caller-supplied MCP tool definitions for missing schemas, unsafe annotations, approval binding, and cost boundaries. Does not execute tools or certify security.

  ConnectorNo auth

• intentfence_us_cpiA

  IntentFence Agent Action FirewallA

  Paid official U.S. CPI and core CPI data ($0.001 USDC on Base), retrieved from the Bureau of Labor Statistics with a six-hour edge cache and returned with an ES256 provenance receipt. Optionally request a YYYY-MM period.

  ConnectorNo auth

• evaluate_agent_spend_requestA

  Agent Reserve Protocol Authorization FirewallA

  Return eligible, escalate, or block under an owner-defined mandate. Advisory preflight only; never executes payment or accesses a wallet.

  ConnectorNo auth

• sqlguard_clientA

  SQLGuard — Execution Certificate FirewallB

  Classifies an agent wallet as a prior Exact-paying client (excluding operator wallets), returns lifetime USD, sku counts, and next ladder step.

  ConnectorNo auth

• check_action_deterministicA

  values-firewallA

  KUN Lag A — ingen LLM-kald overhovedet (billig, ren mekanisk, spejler consistency-gates check_triple). Samme receipt-form som check_action, men values_assessment er altid tom, values_assessment_unavailable altid false, og scope_note siger eksplicit 'values_layer_consulted:false'. Read-only. PUBLIC_DEMO-mode: ÅBEN, GRATIS — ALDRIG rate-begrænset (spec §2, ingen LLM-kost). Vurderet mod det offentlige Art-14-demo-charter; scope_note får demo-disclosuren appended.

  ConnectorNo auth

• check_actionA

  values-firewallA

  Kerne-gaten (to-lags evaluering): Lag A (deterministisk hard-rule/outward-match, ingen LLM) + Lag B (Sonnet vurderer mod charterets NL-principper via LiteLLM :4000, citerer principle_id + reasoning — INGEN egen alvorligheds-dom) → most-restrictive-wins aggregeret, auditerbar receipt: {action, deterministic_flags[], values_assessment[], values_assessment_unavailable, unrecognized_principle_citations, principles_evaluated, recommendation, requires_human, charter_name, scope_note}. `recommendation` ∈ {allow, flag, gate_to_human} — ALDRIG approved/denied/true/false. ADVISORY: anbefaler, blokerer/eksekverer/autoriserer ALDRIG (never-decide-for-you). FAIL-SAFE: Lag B utilgængelig -> Lag A kører stadig, values_assessment_unavailable=true, recommendation løftet til MINDST 'flag' (aldrig stille 'allow'). Read-only — skriver INTET, ingen side-effekter. PUBLIC_DEMO-mode: vurderet mod det OFFENTLIGE Art-14-demo-charter (ikke din org — se scope_note). Rate-limitet (default 5/min + 30/time, ÉN global demo-bucket). Over grænsen returneres `{error:"rate_limited", retry_after_s, scope_note}` — ALDRIG et recommendation-formet svar. Bogholderi-fejl i rate-limiteren -> deny (fail-safe). RED-TEAM-FIX (minimal-indgreb): tomt/whitespace-only `action` valideres FØR rate-limiteren forbruger en kvote-token — en ugyldig-input-loop kan ellers stille dræne demoens kvote uden at nogensinde levere en receipt (rå ValueError fra firewall.check_action's fail-loud-guard ville ellers både forbruge kvote OG propagere ubehandlet til transport-laget, hvilket bryder "check_action leverer ALTID en receipt/struktureret fejl"-disciplinen). Uden for PUBLIC_DEMO uændret: fw.check_action's egen ValueError-fail-loud gælder stadig (bindende, testet i test_values_firewall.py).

  ConnectorNo auth

• sqlguard_requireA

  SQLGuard — Execution Certificate FirewallB

  Embeddable ABMP fail-closed policy. Agent runtimes MUST block SQL write tools until Pilot Challenge Exact $100 unlock (or Gateway invoice $299) PASS + verify. Session/Cert OFF TABLE as primary. Returns compliance_loop + buy URLs.

  ConnectorNo auth

• sqlguard_effectsA

  SQLGuard — Execution Certificate FirewallB

  Free effects prover: Exact settle success ≠ Bazaar/catalog listing freshness. Points at GET /v1/effects for CDP/Bazaar honesty checks on Session/Cert.

  ConnectorNo auth

• intentfence_policy_packA

  IntentFence Agent Action FirewallA

  Paid self-service integration pack (1 USDC on Base). Generates a runtime-specific TypeScript guard, signed action and policy receipt, negative test vectors, and a fail-closed deployment checklist for Cloudflare Agents, Coinbase AgentKit, or an MCP gateway. No meeting or account is required.

  ConnectorNo auth