accueil / serveurs / Dev & Code / com.ontarioprotocol/ontario-protocol
com.ontarioprotocol/ontario-protocol
serveur MCP (Model Context Protocol) · ontario-protocol 1.0.12
Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur.
Est-ce que com.ontarioprotocol/ontario-protocol est sûr ?
Au dernier audit MCP Hub, le serveur MCP « com.ontarioprotocol/ontario-protocol » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.
Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.
Les 17 outils
- agent_can_pay≈ 506 tokens
Free pre-payment policy decision. Agents ask whether an x402 endpoint should be paid under strict, standard, or permissive policy. The free result is sufficient by default; set require_audit_receipt only when a settlement-backed receipt is required.
Paramètres, retour & exemple (4)
Paramètresendpoint· string · requis
Public x402 endpoint to evaluate before payment; never include credentials or private query parameters.max_usdc· string · optionnel
Caller-approved per-call spending ceiling in decimal USDC, for example 0.01. This check never spends funds.agent_policy· string · optionnel · strict | standard | permissive
Readiness policy to apply. Use strict unless the operator explicitly permits a different policy.require_audit_receipt· boolean · optionnel
Explicitly request the optional paid receipt handoff after an allow decision. This does not submit payment.
Exemple d'appel{"name": "agent_can_pay", "arguments": {"endpoint": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"report": {}, "reasons": [], "decision": "allow", "endpoint": "texte", "max_usdc": 1, "decision_code": "texte", "recommendations": [], "declared_price_usdc": 1, "report_integrity_ok": true, "verification_age_hours": 1, "decision_schema_version": "texte", "auditable_paid_continuation": {}}} - agent_trust_preview≈ 359 tokens
Free live, rate-limited agent trust preview for one public endpoint. Returns safe signals and issues without the paid evidence bundle or attestation; use the paid trust scan only when the preview is insufficient.
Paramètres, retour & exemple (2)
Paramètresagent_id· string · optionnel
Optional stable public agent identifier to associate with the preview.target_url· string · requis
Public HTTPS agent card or endpoint to preview without payment; never include private hosts or credentials.
Exemple d'appel{"name": "agent_trust_preview", "arguments": {"target_url": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"issues": [], "schema": "texte", "preview": true, "signals": {}, "max_score": 1, "scanned_at": "texte", "target_url": "texte", "limitations": [], "trust_score": 1, "paid_upgrade": {}, "normalized_base": "texte"}} - bazaar_buyer_intent_gap≈ 741 tokens
Free read-only provider audit that runs Coinbase's indexing preflight and measures one public x402 endpoint across five live CDP Bazaar buyer-search variations. Returns retrieval coverage, observed sample ranks, alternatives, public 30-day call and unique-payer observations, Base USDC price bands, HTTP 402 and metadata readiness, and the activation boundary. Public quality counts may include owner-funded calls and are not revenue. It never signs or settles.
Paramètres, retour & exemple (3)
Paramètrestarget_url· string · requis
Public x402 paid endpoint whose buyer visibility should be measured.buyer_query· string · requis
Public task phrase a funded agent could use in CDP Bazaar search; never include credentials or private customer text.buyer_queries· array · optionnel
Optional explicit portfolio of up to five public buyer phrases. When omitted, Ontario generates four deterministic variants from buyer_query.
Exemple d'appel{"name": "bazaar_buyer_intent_gap", "arguments": {"target_url": "texte", "buyer_query": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"grade": "metadata_ready", "score": 1, "checks": [], "schema": "texte", "status": "texte", "buyer_fit": {}, "max_score": "texte", "report_id": "texte", "checked_at": "texte", "target_url": "texte", "buyer_intent": {}, "next_actions": []}} - find_x402_tool≈ 595 tokens
Free buyer-side search across Ontario's fresh strict-ready paid profiles, Agentic Market, and Coinbase CDP Bazaar. Rank public, credential-free endpoint candidates by task relevance plus bounded source-reported recent activity, with optional Base/USDC budget filtering. Paid Ontario publication adds no ranking score. This is discovery, not a safety certification; run readiness and can-pay before spending. When the query is provider-side publication intent, skip buyer marketplace search and return the free listing validator followed by the gated 0.50 USDC publication workflow.
Paramètres, retour & exemple (5)
Paramètreslimit· integer · optionnel
Maximum number of task-matched candidates to return, from 1 to 10.query· string · requis
Public task text only; never include credentials or private customer data.network· string · optionnel
Optional network filter, for example eip155:8453 or base.max_usdc· string · optionnel
Optional hard USDC price ceiling for returned candidates.active_only· boolean · optionnel
When true, require recent source-reported activity or fresh strict-ready Ontario profile evidence.
Exemple d'appel{"name": "find_x402_tool", "arguments": {"query": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"count": 1, "query": "texte", "intent": "texte", "schema": "texte", "candidates": [], "provider_path": {}, "trust_boundary": "texte", "agent_next_step": "texte", "selection_method": "texte"}} - github_x402_repo_scan≈ 332 tokens
Free pre-deployment scan of one public GitHub repository for x402 implementation, HTTP 402 tests, payment configuration, buyer documentation, discovery metadata, CI gates, and sensitive filenames. Returns paths and remediation, never source contents.
Paramètres, retour & exemple (1)
Paramètresrepository_url· string · requis
Public https://github.com/owner/repo URL.
Exemple d'appel{"name": "github_x402_repo_scan", "arguments": {"repository_url": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"grade": "texte", "score": 1, "checks": [], "schema": "texte", "status": "complete", "summary": {}, "max_score": "texte", "repository": {}, "next_actions": []}} - ontario_find-api≈ 730 tokens
Which x402 API should I call for this task? Returns up to 5 paid APIs from Coinbase Bazaar and Agentic Market that answered a fresh unpaid probe with a valid Base USDC payment challenge at their listed price, ranked by repeat buyers rather than one-off probe payments, each with a ready-to-call request. The search runs before settlement: if no live match is found the payment is not settled. Agent payment guidance: run free can-pay and readiness checks first; pay only when policy allows base 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 and 0.005 USDC is inside the agent budget. [PAID: 0.005 USDC via x402 on Base. Two-step flow: call without payment to receive MCP PaymentRequired, then retry with params._meta['x402/payment'] containing the signed PaymentPayload. The legacy _x402_payment base64 argument is also supported. Sign only after explicit budget and policy approval.]
Paramètres, retour & exemple (4)
Paramètrestask· string · requis
Public task text, e.g. 'web search for an AI agent'. Never include credentials or private data.limit· integer · optionnel
Number of live-verified APIs to return, 1 to 5.max_usdc· string · optionnel
Optional per-call price ceiling in USDC for returned APIs, e.g. '0.01'._x402_payment· string · optionnel
base64 x402 PaymentPayload (USDC on Base); obtain the requirements by calling this tool without it first.
Exemple d'appel{"name": "ontario_find-api", "arguments": {"task": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - ontario_list-agent≈ 570 tokens
Use only when the caller owns the agent and wants to submit a public directory listing. Validate the payload for free first; payment does not guarantee approval, traffic, ranking, or safety. Agent payment guidance: run free can-pay and readiness checks first; pay only when policy allows base 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 and 0.10 USDC is inside the agent budget. [PAID: 0.10 USDC via x402 on Base. Two-step flow: call without payment to receive MCP PaymentRequired, then retry with params._meta['x402/payment'] containing the signed PaymentPayload. The legacy _x402_payment base64 argument is also supported. Sign only after explicit budget and policy approval.]
Paramètres, retour & exemple (7)
Paramètresname· string · requis
Public name of the agent being listed.tags· array · optionnel
Capability tags describing the agent.owner_url· string · optionnel
Optional public owner website.description· string · optionnel
Public description of the agent's capabilities._x402_payment· string · optionnel
base64 x402 PaymentPayload (USDC on Base); obtain the requirements by calling this tool without it first.owner_contact· string · optionnel
Optional owner contact supplied for the listing; do not include secrets.agent_card_url· string · requis
Public HTTPS agent card URL for the listing.
Exemple d'appel{"name": "ontario_list-agent", "arguments": {"name": "texte", "agent_card_url": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - ontario_list-service≈ 1889 tokens
Publish a provider-owned x402 API so AI agents can discover and buy it. After free validation and a Bazaar buyer-intent audit, the 0.50 USDC Launch Passport creates a signed public HTML/JSON profile, readiness and Coinbase indexing evidence, a five-query retrieval snapshot, badge, copy-ready MCP/catalog records, and 30 days of freshness maintenance. It can become eligible for strict Ontario discovery when evidence is ready and fresh. It does not guarantee Coinbase placement, ranking, traffic, purchases, a ready grade, or safety. Agent payment guidance: run free can-pay and readiness checks first; pay only when policy allows base 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 and 0.50 USDC is inside the agent budget. [PAID: 0.50 USDC via x402 on Base. Two-step flow: call without payment to receive MCP PaymentRequired, then retry with params._meta['x402/payment'] containing the signed PaymentPayload. The legacy _x402_payment base64 argument is also supported. Sign only after explicit budget and policy approval.]
Paramètres, retour & exemple (18)
Paramètresname· string · requis
Public service name displayed on the provider profile.tags· array · optionnel
Public capability tags for discovery, up to ten relevant labels.asset· string · optionnel
Payment token contract accepted by the provider on the declared network.method· string · optionnel
HTTP method used to call the provider's endpoint.source· string · optionnel · coinbase_bazaar | direct_or_unknown | github | google_search | internal_navigation | mcp_registry | other_search
Privacy-safe aggregate acquisition bucket; never a URL or query.network· string · optionnel
Provider payment network, for example base or eip155:8453. Ontario publication itself uses Base USDC.category· string · optionnel
Public capability category for the service, not a claim of certification.endpoint· string · requis
Provider-owned public HTTPS x402 endpoint to list. Never include secrets or sensitive query parameters.owner_url· string · optionnel
Public website identifying the provider; publication does not verify legal identity.price_usdc· string · requis
Provider endpoint price in decimal USDC, at most six decimal places. This is separate from Ontario's 0.50 USDC publication fee.buyer_query· string · optionnel
Public task phrase used for the point-in-time Bazaar retrieval audit. It may appear in the public profile.description· string · requis
Public buyer task, expected result, and important service limitations; do not include confidential text.price_atomic· integer · optionnel
Optional provider price in six-decimal USDC units: 10000 equals 0.01 USDC. Must match price_usdc when supplied._x402_payment· string · optionnel
base64 x402 PaymentPayload (USDC on Base); obtain the requirements by calling this tool without it first.owner_contact· string · optionnel
Optional provider contact retained for operations and omitted from public profiles. Omit when unnecessary; never send wallet credentials.mcp_remote_url· string · optionnel
Optional public MCP remote for read-only initialize and tools/list checks.mcp_server_name· string · optionnel
Optional exact MCP Registry server name.mcp_server_json_url· string · optionnel
Optional public MCP Registry record or exact-search JSON URL.
Exemple d'appel{"name": "ontario_list-service", "arguments": {"name": "texte", "endpoint": "texte", "price_usdc": "texte", "description": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - ontario_purchase_router≈ 1125 tokens
Free deterministic pre-purchase routing across Ontario tools. Use this before any paid Ontario tool to decide whether the task is free-only, needs free preflight, or is eligible for a paid result after wallet, Base network, and explicit budget gates. Natural endpoint-verification tasks route to the free readiness verifier and disclose the optional 0.002 USDC settlement-backed receipt only when extra audit evidence is needed. Provider jobs such as publishing, registering, or making an x402 endpoint discoverable can route to the self-serve 0.50 USDC publication product after preflight. Existing paid profiles can route to the 0.10 USDC evidence refresh only after the free refresh validator. Empty calls return safe free discovery guidance instead of guessing a purchase. This tool never invokes another tool, signs a payload, or spends funds.
Paramètres, retour & exemple (5)
Paramètrestask· string · requis
Public task description only; never include credentials or private customer data.network· string · optionnel
Wallet policy network; Ontario paid tools currently require Base mainnet.max_usdc· ? · optionnel
Optional owner-authorized per-call USDC ceiling from 0 to 1000. Send a JSON number or decimal string such as 0.5, '0.50', '$0.50' or '0.50 USDC'. Omit when no budget is authorized; a budget is only a ceiling and does not grant spending authority. The router never increases it.wallet_enabled· boolean · optionnel
True only when the caller can locally sign an x402 PaymentPayload.free_preflight_complete· boolean · optionnel
True only after the recommended free check has completed for this task.
Exemple d'appel{"name": "ontario_purchase_router", "arguments": {"task": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"gates": {}, "schema": "texte", "status": "texte", "privacy": "texte", "reasons": [], "decision": "free_only", "free_tool": {}, "next_action": "texte", "payment_flow": {}, "selected_tool": {}, "task_category": "texte", "input_guidance": {}}} - ontario_refresh-listing≈ 732 tokens
Use only for an existing paid Ontario provider profile when the caller wants a fresh live readiness observation attached to its canonical HTML, JSON twin, and badge. This tool cannot edit provider metadata, improve a grade by payment, or buy ranking or traffic. Do not pay while the launch passport's 30-day included maintenance is active. Agent payment guidance: run free can-pay and readiness checks first; pay only when policy allows base 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 and 0.10 USDC is inside the agent budget. [PAID: 0.10 USDC via x402 on Base. Two-step flow: call without payment to receive MCP PaymentRequired, then retry with params._meta['x402/payment'] containing the signed PaymentPayload. The legacy _x402_payment base64 argument is also supported. Sign only after explicit budget and policy approval.]
Paramètres, retour & exemple (3)
Paramètreslisting_id· string · requis
Existing paid provider profile id._x402_payment· string · optionnel
base64 x402 PaymentPayload (USDC on Base); obtain the requirements by calling this tool without it first.paid_refresh_tx· string · optionnel
One-use retry reference only when a settled refresh could not complete.
Exemple d'appel{"name": "ontario_refresh-listing", "arguments": {"listing_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - ontario_task_fit≈ 592 tokens
Free task-to-tool matching with an optional Jev second opinion. With allow_typesafe=true, your public task and Ontario's public tool descriptions are sent to TypeSafe for Jev inference. Do not supply secrets, personal data, private URLs, or customer content. Ontario does not persist task text here. TypeSafe processing is subject to its policies; zero retention is not promised. Without consent, only Ontario's deterministic router is used. Returns a callable tool and input schema, or abstains. Never executes tools or authorizes payment. Model quota exhaustion falls back to deterministic routing.
Paramètres, retour & exemple (6)
Paramètrestask· string · requis
A public capability request, never private task content.network· string · optionnel
Network permitted by the caller's wallet policy; Ontario paid tools require Base mainnet (eip155:8453).max_usdc· string · optionnel
Explicit owner-approved USDC ceiling; never inferred.allow_typesafe· boolean · optionnel
With allow_typesafe=true, your public task and Ontario's public tool descriptions are sent to TypeSafe for Jev inference. Do not supply secrets, personal data, private URLs, or customer content. Ontario does not persist task text here. TypeSafe processing is subject to its policies; zero retention is not promised. Without consent, only Ontario's deterministic router is used.wallet_enabled· boolean · optionnel
True only when the caller can locally sign an x402 payment; this flag does not authorize spending.free_preflight_complete· boolean · optionnel
True only after the recommended free check has completed for this task.
Exemple d'appel{"name": "ontario_task_fit", "arguments": {"task": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"status": "texte", "payment_authorized": "texte"}} - ontario_validate-agent≈ 320 tokens
Validate an agent listing payload for free before publication. Never publishes, signs or spends.
Paramètres, retour & exemple (6)
Paramètresname· string · requis
Public name of the agent being listed.tags· array · optionnel
Capability tags describing the agent.owner_url· string · optionnel
Optional public owner website.description· string · optionnel
Public description of the agent's capabilities.owner_contact· string · optionnel
Optional owner contact supplied for the listing; do not include secrets.agent_card_url· string · requis
Public HTTPS agent card URL for the listing.
Exemple d'appel{"name": "ontario_validate-agent", "arguments": {"name": "texte", "agent_card_url": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "errors": []}} - ontario_validate-refresh≈ 224 tokens
Check an existing paid provider profile's refresh eligibility for free, including cooldown. Never refreshes, signs or spends.
Paramètres, retour & exemple (2)
Paramètreslisting_id· string · requis
Existing paid provider profile id.paid_refresh_tx· string · optionnel
One-use retry reference only when a settled refresh could not complete.
Exemple d'appel{"name": "ontario_validate-refresh", "arguments": {"listing_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "errors": []}} - ontario_validate-service≈ 1199 tokens
Free provider listing preflight. Validate public service metadata before buying the 0.50 USDC Ontario launch passport. Returns field errors or a normalized request and publication decision. Set verify_now only to create a public readiness report. Never publishes a listing, signs or spends; a valid payload alone does not establish readiness or Bazaar placement.
Paramètres, retour & exemple (18)
Paramètresname· string · requis
Public service name displayed on the provider profile.tags· array · optionnel
Public capability tags for discovery, up to ten relevant labels.asset· string · optionnel
Payment token contract accepted by the provider on the declared network.method· string · optionnel
HTTP method used to call the provider's endpoint.source· string · optionnel · coinbase_bazaar | direct_or_unknown | github | google_search | internal_navigation | mcp_registry | other_search
Privacy-safe aggregate acquisition bucket; never a URL or query.network· string · optionnel
Provider payment network, for example base or eip155:8453. Ontario publication itself uses Base USDC.category· string · optionnel
Public capability category for the service, not a claim of certification.endpoint· string · requis
Provider-owned public HTTPS x402 endpoint to list. Never include secrets or sensitive query parameters.owner_url· string · optionnel
Public website identifying the provider; publication does not verify legal identity.price_usdc· string · requis
Provider endpoint price in decimal USDC, at most six decimal places. This is separate from Ontario's 0.50 USDC publication fee.verify_now· boolean · optionnel
Optionally run live readiness checks and save a public signed report. No listing is published and no payment is made.buyer_query· string · optionnel
Public task phrase used for the point-in-time Bazaar retrieval audit. It may appear in the public profile.description· string · requis
Public buyer task, expected result, and important service limitations; do not include confidential text.price_atomic· integer · optionnel
Optional provider price in six-decimal USDC units: 10000 equals 0.01 USDC. Must match price_usdc when supplied.owner_contact· string · optionnel
Optional provider contact retained for operations and omitted from public profiles. Omit when unnecessary; never send wallet credentials.mcp_remote_url· string · optionnel
Optional public MCP remote for read-only initialize and tools/list checks.mcp_server_name· string · optionnel
Optional exact MCP Registry server name.mcp_server_json_url· string · optionnel
Optional public MCP Registry record or exact-search JSON URL.
Exemple d'appel{"name": "ontario_validate-service", "arguments": {"name": "texte", "endpoint": "texte", "price_usdc": "texte", "description": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": "texte", "errors": [], "warnings": [], "next_steps": [], "normalized": {}, "verification": {}, "stores_listing": "texte", "trust_disclaimer": "texte", "provider_publication": {}}} - x402_launch_kit≈ 853 tokens
Generate a validated listing payload, x402 resource draft, MCP descriptor, GitHub readiness workflow, README snippet, and registry copy for one paid endpoint.
Paramètres, retour & exemple (10)
Paramètresname· string · requis
Public name of the provider's service.tags· string · optionnel
Comma-separated public capability tags, for example x402,paid-api,agent-tool.asset· string · optionnel
USDC token contract on the declared payment network; omit to use the Base USDC default.method· string · optionnel
HTTP method accepted by the provider endpoint, for example POST.network· string · optionnel
Payment network accepted by the provider, for example base or eip155:8453.endpoint· string · requis
Provider-owned public HTTPS x402 endpoint to prepare for listing.owner_url· string · optionnel
Public website identifying the service provider.price_usdc· string · requis
The provider's per-call price in decimal USDC, not Ontario's publication fee. Kit generation is free.description· string · requis
Public description of the task the service performs and the result it returns.owner_contact· string · optionnel
Optional public business contact for generated drafts. Omit private addresses; never supply credentials.
Exemple d'appel{"name": "x402_launch_kit", "arguments": {"name": "texte", "endpoint": "texte", "price_usdc": "texte", "description": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"schema": "texte", "status": "ready_to_verify", "artifacts": {}, "next_steps": [], "generated_at": "texte", "ontario_calls": {}, "trust_boundary": "texte", "listing_validation": {}}} - x402_readiness_verify≈ 356 tokens
Free check for whether a paid endpoint is ready for agent discovery and x402 payment. Returns a free end-to-end buyer-path diagnostic handoff plus a grade-aware provider handoff: validate listing metadata free before any optional 0.50 USDC publication, and do not pay for publication while the endpoint is not ready-grade.
Paramètres, retour & exemple (1)
Paramètrestarget_url· string · requis
Public service or x402 endpoint URL to inspect without payment. Do not submit credentials, private hosts, or sensitive query parameters.
Exemple d'appel{"name": "x402_readiness_verify", "arguments": {"target_url": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"grade": "texte", "status": "texte", "signals": {}, "warnings": [], "report_id": "texte", "report_url": "texte", "readiness_score": 1, "recommendations": [], "buyer_conversion_next_step": {}, "provider_listing_next_step": {}}} - x402_verification_reports≈ 168 tokens
Public ledger of recent x402 readiness reports.
Paramètres, retour & exemple (1)
Paramètreslimit· integer · optionnel
Maximum recent public readiness reports to request.
Exemple d'appel{"name": "x402_verification_reports", "arguments": {"limit": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"count": 1, "stats": {}, "reports": []}}
C'est votre serveur ?
Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».