XGuard — Agent Execution Gateway

Inspect the signed delegation sandbox, limits and unactivated service-fee contract.

Submit an owner/agent-signed authority envelope. Requires explicit key-holder authorization; the tool cannot sign for the caller. Sandbox is not a payment.

Verify a financial authority receipt against the existing ProofRail key, without charging.

Return the enabled and disabled XGuard tools, their security boundary, and canonical discovery URLs. Free.

Fetch and extract one public HTTPS page after checking robots.txt. No JavaScript rendering, login, CAPTCHA bypass or unlimited crawl. Price: 0.015 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Find matching curated services and check up to three official documentation resources now. A documentation check is not proof of provider execution. Price: 0.01 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Extract main text, titles, metadata and links from 1–3 public HTTPS pages into one deduplicated, attributed result. No JavaScript rendering, private pages or web search. Up to 6,000 text characters per page; partial source coverage is explicit. Price: 0.012 USDC on Base. Uses x402 v2 HTTP payment headers: retry identical arguments and idempotency key with Payment-Signature and X-XGuard-Quote; the authorization is for the canonical HTTP API resource. No source is fetched before payment.

Read a current npm package version or official publisher service summary from its primary JSON endpoint. Includes retrieval time and source digest. Price: 0.01 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Read one free published software fact by canonical ID. Returns the primary source, verification status and timestamp. Use xguard.web.fetch for a separate paid fetch of a public URL.

Inspect up to three same-origin public metadata paths from one supplied HTTPS platform. Returns attributed candidate metadata, never trusts self-description as verified capability. Price: 0.015 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Free, read-only safety gate for xguard.web.fetch. Validates the public HTTPS target, SSRF policy, DNS reachability and selected payment path without contacting the target or attempting payment. On allow, call xguard.web.fetch directly; it creates the signed quote and returns the mandatory x402 v2 PaymentRequired result.

Get an optional signed quote for xguard.web.fetch. Call xguard.web.fetch directly to receive the price in an HTTP 402 challenge.

Compare cheapest, fastest, highest-evidence and recommended paths against the same current capability catalog. Unknown prices and probabilities remain null. Price: 0.005 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Resolve a bounded intent against the capability catalog. Returns four route rankings, dependencies, explicit unknowns and executable coverage. No universal task execution claim. Price: 0.005 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Schedule up to three bounded public read-only steps. One-shot time, bounded interval or HTTP-health condition; at most three total attempts/runs, included in the quoted price. Price: 0.03 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Run up to three public read-only fetch, extraction or HTTP verification steps with persistent task ID, checkpoints, bounded retry, failover and acceptance checks. Fee breakdown is included. No third-party paid actions. Price: 0.03 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Verify the current HTTP status of one public HTTPS resource against an explicit expected status. It cannot verify responsive layout, payment capture or arbitrary task completion. Price: 0.01 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Fetch one public HTTPS resource after x402 v2 payment and on-chain settlement verification. Retry the identical MCP call with Payment-Signature and X-XGuard-Quote. A completed retry returns the prior receipt.