# TWZRD Agent Intelligence MCP server Trust + receipt layer for x402 agents on Solana: free preflight + paid signed V5 trust receipt. ## Links - Registry page: https://www.getdrio.com/mcp/xyz-twzrd-intel-twzrd-agent-intel - Repository: https://github.com/twzrd-sol/wzrd-final - Website: https://intel.twzrd.xyz ## Install - Command: `uvx twzrd-agent-intel` - Endpoint: https://intel.twzrd.xyz/mcp - Auth: Not captured ## Setup notes - Package: Pypi twzrd-agent-intel v0.2.3 - Environment variable: TWZRD_SIGNAL_SOURCE - Remote endpoint: https://intel.twzrd.xyz/mcp ## Tools - get_readiness_card_tool - PRIMARY free pre-spend gate (advisory). Pass seller_wallet OR resource_name. When to use: before any x402 payment to a seller/resource. When not to use: after you already decided to refuse; use verify_receipt for signed receipts only. Pricing: free. Result is advisory (buyer policy still applies). Decision semantics (top-level, no nesting via MCP): decision=block / recommended_action=do_not_pay -> DO NOT PAY. decision=warn / recommended_action=proceed_with_cap -> pay only up to maximum_recommended_spend_usdc. decision=allow / recommended_action=proceed_for_small_spend -> proceed under agent policy (no free-tier cap). Also returns reason_codes[], confidence, model_version, decision_envelope. trust_score is a free heuristic, NOT the full corpus. Next: on allow/warn for material spend, paid GET /v1/intel/trust/{wallet} (0.05 USDC) then verify_receipt. Optional: twzrd_watch_add for re-check after recheck_after_unix. Endpoint: https://intel.twzrd.xyz/mcp - evaluate_x402_resource - One-shot x402 guard. Fetches resource_url, extracts the seller wallet from the 402 accepts array (prefers Solana network entries), runs TWZRD preflight, and returns a spending decision. Decision: "allow" -> safe to proceed with the payment. "warn" -> proceed with caution; consider buying the paid trust receipt (receipt_url, $0.05). "block" -> DO NOT PAY. Stop immediately. is_x402 == False -> not an x402 resource (HTTP != 402); treat as allow. Revenue path: when decision is "warn", fetch receipt_url with an x402-capable wallet ($0.05 USDC to TWZRD) to get a signed V6 corpus-backed credential with the full trust score. Endpoint: https://intel.twzrd.xyz/mcp - low_level_preflight - Low-level preflight check. Returns a richer result object including the upsell path to the paid /v1/intel/trust surface with v6 receipt. Prefer get_readiness_card for most callers. Use this when you need max_spend_recommendation_usdc, full_report_hint, or the suggest_full_report flag. The embedded `readiness_card` carries the SAME full shape as get_readiness_card_tool (see the outputSchema). Endpoint: https://intel.twzrd.xyz/mcp - verify_root_inputs - Independent root verification (see tools/root_verifier.py for the recompute logic). Endpoint: https://intel.twzrd.xyz/mcp - get_solana_market_status - Health probe for the Solana Market API data backend. Call this to gate or degrade gracefully BEFORE the other get_solana_market_* tools: it does a short-timeout hit on the data service and reports whether it is reachable, so an agent can tell "market has no data" from "service is down" without failing a real query. Free discovery tool. When TWZRD_DFLOW_DATA_FIRST_URL points at a Rust server with the new /status, the response includes prod_key_configured, data_first_available, and an actionable note (e.g. "set WZRD_DFLOW for full on-chain visibility"). Endpoint: https://intel.twzrd.xyz/mcp - get_solana_market_visibility_map - Returns the current Solana Market API visibility map (which markets have meaningful on-chain settlement activity and liquidity signals). Returns metadata-market count, on-chain-trade-market count, their overlap (decodable_overlap), coverage_pct, and sample tickers unique to each side. Free discovery tool. On failure returns a structured {status:"error", kind, retryable, detail} envelope (call get_solana_market_status to disambiguate). Endpoint: https://intel.twzrd.xyz/mcp - get_solana_market_orderbook_depth - Returns normalized orderbook depth and liquidity profile for a specific ticker from Solana Market API data. Tickers are prediction-market event tickers (e.g. KXUSNFP-26MAY01), not spot DEX symbols. Free discovery tool. On failure returns a structured {status:"error", kind, retryable, detail} envelope. Endpoint: https://intel.twzrd.xyz/mcp - get_solana_market_shape - Returns market shape / structure signals for a ticker (concentration, venue fragmentation, settlement patterns). Excellent for understanding *how* a market actually trades on-chain. Tickers are prediction-market event tickers (e.g. KXUSNFP-26MAY01). On failure returns a structured {status:"error", kind, retryable, detail} envelope. Endpoint: https://intel.twzrd.xyz/mcp - get_solana_market_onchain_trades_summary - Returns recent on-chain trade and settlement activity. - With `ticker`: raw per-market trade rows from the live by-market feed (/onchain-trades-by-market). - Without `ticker`: aggregated counts across all markets (total_trades_observed, distinct_markets_observed, markets_sample) from /onchain-trades-summary. The two branches return DIFFERENT shapes (raw rows vs aggregated counts). Tickers are prediction-market event tickers (e.g. KXUSNFP-26MAY01). On failure returns a structured {status:"error", kind, retryable, detail} envelope. Endpoint: https://intel.twzrd.xyz/mcp - score_wallet_for_intel - Free discovery: real 0-100 intel score for a wallet from its observed x402 payment history across the broader x402 ecosystem (paid calls, distinct counterparties, volume, recency). Uses a simple transparent heuristic (volume log + breadth + spend log + recency decay) — the exact formula is returned inline as `score_model`. Returns intel_score, the wash-discounted effective_score + wash_flag/wash_factor (cheap Sybil signal), counts, component breakdown, and a data_available flag. Malformed pubkeys are rejected cleanly; the failure path returns the same shape as success. Sourced from the cross-facilitator corpus via the public Rust HTTP endpoint GET /v1/agents/{wallet}/x402 (backed by the x402_solana_payer_agg matview). For the full corpus-breadth renormalized model (intel_renorm_v1: score_raw, confidence, breadth_factor, wash_factor) + signed portable v6 receipt, pay for the HTTP surface: GET /v1/intel/trust/{wallet} (0.05 USDC). Endpoint: https://intel.twzrd.xyz/mcp - get_top_intel_agents - Leaderboard of the most active paying agents on the network, each with its real intel score. The free discovery flywheel: find credible counterparties by actual on-chain payment activity. Ranks by the wash-discounted effective_score (single-counterparty fleets are demoted, not hidden) with a deterministic tiebreaker. Set min_paid_calls to suppress one-shot wallets and max_days_since_last to suppress dormant ones. Endpoint: https://intel.twzrd.xyz/mcp - get_provider_reputation - Free discovery: corpus-backed SELLER reputation for a merchant/provider wallet. Answers "is this provider organic, narrow, or a wash fleet?" from the merchant's inbound payment graph over the last 90 days: unique payers, repeat-payer %, heavy-fleet revenue concentration, captive-payer % (onboarding-sink proxy), and a scripted-fleet uniformity signal. Returns a wash_label + reputation tier + wash_flagged bool. Complements score_wallet_for_intel (payer side) with the seller side. Fail-open: a DB gap returns wash_label/tier "unknown" rather than erroring. This is the free seller signal; the paid per-wallet renorm model + signed v6 receipt remain at GET /v1/intel/trust/{wallet} (0.05 USDC). Endpoint: https://intel.twzrd.xyz/mcp - get_merchant_card - Free merchant card: demand quality around a Solana receive wallet. Dual input (PR-3): pass ``wallet`` and/or ``resource_id``. Resource resolves via the first-party registry (TWZRD seed) to a pay_to, then the same graph card. Does NOT claim service quality (resource_listing_only / catalog_listing_only). HTTP twin: GET /v1/intel/merchant_card/{wallet_or_resource_id}. Endpoint: https://intel.twzrd.xyz/mcp - is_wash_fleet - Free discovery: cheap circular-flow (wash) check for a payer wallet. Returns the CATEGORICAL classification (clean / self_pay / reciprocal / self+reciprocal), an is_circular bool, and the observed event counts + distinct_merchants from the wallet's corpus edges. Use as a fast Sybil/wash gate before trusting a counterparty. Fail-open: a DB gap returns classification "unknown". The numeric wash discount (wash_factor / wash_ratio) and the full renormalized model stay paid — they are NOT returned here. Endpoint: https://intel.twzrd.xyz/mcp - verify_receipt - Free utility: offline-verify a portable v5/v6 trust receipt — the "after you pay" half of the loop. Recomputes the Keccak256 leaf from the receipt's preimage (tamper-evidence) AND verifies the Ed25519 signature against the published TWZRD receipt-signing key (authenticity). Returns valid/leaf_valid/signature_valid plus the recomputed leaf and any errors. Pure and offline — no DB, no network, no payment. Pass the entire PaidReceipt object you were issued. Trust is anchored on the published key (or expected_pubkey), NOT on whatever pubkey the receipt carries. max_age_seconds: optional freshness gate (replay protection). Same semantics as the Python library verify_paid_receipt(..., max_age_seconds=...) and the standalone CLI --max-age. Endpoint: https://intel.twzrd.xyz/mcp - get_facilitator_footprint - Free discovery: which x402 facilitators a payer has settled through, and how many. unique_facilitators = 1 is a thin/captive agent (locked to one rail); breadth across facilitators indicates a more established cross-rail agent. Returns the facilitator_ids list plus tx/merchant context. Fail-open: a DB gap returns data_available=false rather than erroring. Endpoint: https://intel.twzrd.xyz/mcp - get_counterparties - Free discovery (capped teaser): the top-N merchants a wallet actually pays, by event count, with per-edge tx_count / total_usdc / first+last timestamps. See WHO a counterparty transacts with before trusting it. The list is capped (default 10, max 25) and `capped`/`total_distinct_merchants` disclose how much is withheld; the FULL deduped payment graph and numeric edge weights are part of the paid intel surface (GET /v1/intel/trust/{wallet}). Fail-open. Endpoint: https://intel.twzrd.xyz/mcp - score_wallets_batch - Free discovery: score up to 25 wallets in a single call (each via the same transparent model as score_wallet_for_intel). Convenience for triaging a set of candidate counterparties at once; `requested`/`capped` disclose any truncation. Endpoint: https://intel.twzrd.xyz/mcp - compare_wallets - Free discovery: side-by-side intel for two wallets (e.g. choosing between two candidate providers). Returns both full score objects and which ranks higher by the wash-discounted effective_score ("tie" on equal, null if a side is unavailable). Endpoint: https://intel.twzrd.xyz/mcp - get_x402_directory - Combined three-bazaar x402 service directory. Merges PayAI Bazaar, CDP Bazaar (Coinbase), and Agentic Market into a unified view indexed by payTo wallet with source tags, TWZRD wash overlay, and cross-chain caveats. The per-listing wash flag is the differentiator: agentic.market and pay.sh list services but neither tells an agent which to avoid. TWZRD's wash overlay covers Solana wallets only; Base/Polygon listings carry 'unknown'. Query params — flagged_only, limit, source — mirror the HTTP endpoint GET /v1/intel/x402-directory. Endpoint: https://intel.twzrd.xyz/mcp - twzrd_watch_add - Register a re-call watch on a seller wallet. After registration, TWZRD will proactively re-check the seller's trust intel when `recheck_after_unix` elapses and POST a notification to your webhook_url if the score/decision materially changes. Returns the watch row with the computed recheck_after_unix timestamp so your agent knows exactly when to expect a re-call or proactively re-check itself. Endpoint: https://intel.twzrd.xyz/mcp - twzrd_watch_list - List active re-call watches for your agent wallet. Each watch shows the seller, current score/decision, and recheck_after_unix timestamp — the exact signal for when to re-call. Endpoint: https://intel.twzrd.xyz/mcp - twzrd_watch_remove - Deactivate a re-call watch by ID. payer_wallet must match the owner. Endpoint: https://intel.twzrd.xyz/mcp - twzrd_demo_gate - Runnable, no-spend proof of the TWZRD buyer-side x402 trust gate - discoverable at runtime with no install and no human. Returns a deterministic transcript showing the gate's behaviour on a fixture counterparty: the block path ABORTS and a wallet/signer is never contacted, the allow path would proceed, and ok=true. Spends no USDC, contacts no wallet. This call surfaces an EXTERNAL_RUN *candidate* in TWZRD's honest attribution ledger (it carries a non-internal integration id + your run_id, tagged with your real inbound IP). A candidate is NOT an EXTERNAL_RUN: proof still requires a non-VPS source_ip and matching your run_id to your own transcript via scripts/count_attributed_runs.py --confirm. See the returned not_external_run_proof. Endpoint: https://intel.twzrd.xyz/mcp ## Resources Not captured ## Prompts Not captured ## Metadata - Owner: xyz.twzrd.intel - Version: 0.2.3 - Runtime: Pypi - Transports: STDIO, HTTP - License: Not captured - Language: Not captured - Stars: Not captured - Updated: Jun 6, 2026 - Source: https://registry.modelcontextprotocol.io