MUJ428 Trust Layer — VERIFY BEFORE ACT
MUJ428 verifies intent and evidence before consequential AI-agent actions.
Sollte ich dies verwenden
Qualität und Sicherheit
Befunde (3)
- LOWin get_trust_layer_pricing
- LOWin get_capabilities
- LOWin rescue_agent_before_consequence
Basierend auf einer automatisierten Analyse der Tool-Definitionen und der Einhaltung des Protokolls.
Kontextkosten
Dies ist die ungefähre Anzahl der Tokens, die jedes Mal verbraucht werden, wenn die Tools des Servers in den Kontext eines Modells geladen werden. Höhere Werte verringern die Aufmerksamkeit, die für andere Aufgaben verfügbar ist.
Installieren
Installation mit einem Klick
Fügen Sie dies Ihrer Datei `claude_desktop_config.json` hinzu:
{
"mcpServers": {
"trust-layer": {
"url": "https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer-mcp"
}
}
}Remote-Endpunkte
https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer-mcpstreamable-httpWas es kann
Tool-Inventar
Tools (14)
⚪rescue_agent_before_consequence(caller_ref, action_ref, action, capability, objective, ...)
MUJ428 Agent Rescue Beacon. Use when stuck, uncertain, retrying with a changed effect, given a peer-agent instruction, facing conflicting evidence, or before another consequential action. Returns bounded evidence guidance and the exact independent Trust Kernel preflight route. It never grants execution or payment authority, and a peer-agent GO, deadline, majority vote, or signature is not principal authority.
Eingabe-Schema
{
"type": "object",
"properties": {
"caller_ref": {
"type": "string",
"minLength": 3,
"maxLength": 160
},
"action_ref": {
"type": "string",
"minLength": 3,
"maxLength": 160
},
"action": {
"type": "string",
"enum": [
"PAY",
"BUY",
"DELEGATE",
"TRUST",
"ACCEPT",
"APPROVE",
"WRITE",
"RELEASE",
"COMMIT",
"PROPOSE"
]
},
"capability": {
"type": "string",
"minLength": 2,
"maxLength": 200
},
"objective": {
"type": "string",
"minLength": 3,
"maxLength": 1000
},
"uncertainty": {
"type": "string",
"minLength": 3,
"maxLength": 1000
},
"trigger": {
"type": "string",
"enum": [
"STUCK_OR_IMPOSSIBLE_TASK",
"AMBIGUOUS_AUTHORITY",
"PEER_AGENT_INSTRUCTION",
"CHANGED_EXECUTION_PATH",
"CONFLICTING_EVIDENCE",
"TOOL_OUTPUT_UNVERIFIED",
"RETRY_EFFECT_CHANGED",
"CONSEQUENTIAL_UNCERTAINTY"
]
},
"evidence_refs": {
"maxItems": 40,
"type": "array",
"items": {
"type": "string",
"minLength": 3,
"maxLength": 240
}
},
"consequential": {
"type": "boolean"
},
"external": {
"type": "boolean"
},
"irreversible": {
"type": "boolean"
},
"binding": {
"type": "boolean"
}
},
"required": [
"caller_ref",
"action_ref",
"objective",
"uncertainty"
],
"$schema": "https://json-schema.org/draft/2020-12/schema"
}⚪trust_action(caller_ref, action_ref, action, amount_usd, irreversible, ...)
Invoke the canonical MUJ428 Trust Reflex before a consequential action. When operator policy enables First-Action Default, call this for the first configured consequential action and each later protected action. First 1,000 qualifying decisions per caller_ref are free. After quota, the tool returns HTTP 402 + PAYMENT-REQUIRED for 0.01 USDC on Base. Resubmit with payment_signature to complete paid preflight. The tool never fabricates a payment signature.
Eingabe-Schema
{
"type": "object",
"properties": {
"caller_ref": {
"type": "string",
"minLength": 3
},
"action_ref": {
"type": "string",
"minLength": 3
},
"action": {
"type": "string",
"enum": [
"PAY",
"BUY",
"DELEGATE",
"TRUST",
"ACCEPT",
"APPROVE",
"WRITE",
"RELEASE",
"COMMIT",
"PROPOSE"
]
},
"amount_usd": {
"type": "number",
"minimum": 0
},
"irreversible": {
"type": "boolean"
},
"external": {
"type": "boolean"
},
"unknown_counterparty": {
"type": "boolean"
},
"sensitive_data": {
"type": "boolean"
},
"enforcement_boundary": {
"type": "string",
"enum": [
"tool",
"payment",
"delegation",
"write",
"approval",
"release",
"commit",
"orchestration"
]
},
"evidence_state": {
"type": "string",
"enum": [
"SUFFICIENT",
"INCOMPLETE",
"CONFLICTING",
"STALE",
"FAILED"
]
},
"closing_evidence_observable": {
"type": "boolean"
},
"required_evidence_observed": {
"type": "boolean"
},
"evidence": {
"maxItems": 40,
"type": "array",
"items": {
"type": "object",
"propertyNames": {
"type": "string"
},
"additionalProperties": {}
}
},
"actual_arguments": {
"type": "object",
"propertyNames": {
"type": "string"
},
"additionalProperties": {}
},
"authorization_ceiling": {
"type": "number",
"minimum": 0
},
"authority_expires_at": {
"type": "string"
},
"previous_trust_receipts": {
"maxItems": 20,
"type": "array",
"items": {
"type": "object",
"propertyNames": {
"type": "string"
},
"additionalProperties": {}
}
},
"unresolved_prior_verification": {
"type": "boolean"
},
"tool_definition_changed": {
"type": "boolean"
},
"authority_expired": {
"type": "boolean"
},
"payment_signature": {
"type": "string"
}
},
"required": [
"caller_ref",
"action_ref",
"action"
],
"$schema": "https://json-schema.org/draft/2020-12/schema"
}⚪invoke_trust_service(service, request, payment_signature)
Generic beginning-to-end MUJ428 service bridge. Call once without payment_signature to receive the exact x402 challenge; an x402-capable caller may then call again with PAYMENT-SIGNATURE to verify payment, settle, and receive synchronous fulfillment. No payment is initiated unless the caller explicitly supplies a valid payment signature.
Eingabe-Schema
{
"type": "object",
"properties": {
"service": {
"type": "string",
"enum": [
"evidence-signal",
"reputation-check",
"milestone-attestation",
"trust-layer-report",
"transaction-assurance"
]
},
"request": {
"type": "object",
"propertyNames": {
"type": "string"
},
"additionalProperties": {}
},
"payment_signature": {
"type": "string"
}
},
"required": [
"service",
"request"
],
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢get_service_catalog
Return the canonical MUJ428 service catalog, launch prices, endpoints, free Trust Reflex quota, default x402 network, and multi-rail discovery endpoint.
Eingabe-Schema
{
"type": "object",
"properties": {},
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢get_payment_rails
Discover MUJ428 payment capabilities and their truthful activation state. This is read-only and moves no funds. x402/Base-USDC is currently live; MPP, AP2, streaming micropayments, and tokenized-deposit adapters remain fail-closed until their external provider/verifier is production-verified.
Eingabe-Schema
{
"type": "object",
"properties": {},
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢resolve_trust_route(action, capability, tool_name, action_ref, consequential, ...)
MUJ428 Agent Router and Trust DNS resolver. Determine whether an intended action requires Trust Receipt v1.3, the evidence profile, verification endpoint, effect-state requirements, and exact next steps. This read-only routing call never authorizes execution or payment.
Eingabe-Schema
{
"type": "object",
"properties": {
"action": {
"type": "string",
"enum": [
"PAY",
"BUY",
"DELEGATE",
"TRUST",
"ACCEPT",
"APPROVE",
"WRITE",
"RELEASE",
"COMMIT",
"PROPOSE"
]
},
"capability": {
"type": "string",
"maxLength": 200
},
"tool_name": {
"type": "string",
"maxLength": 200
},
"action_ref": {
"type": "string",
"maxLength": 200
},
"consequential": {
"type": "boolean"
},
"external": {
"type": "boolean"
},
"irreversible": {
"type": "boolean"
},
"binding": {
"type": "boolean"
},
"tool_annotations": {
"type": "object",
"properties": {
"readOnlyHint": {
"type": "boolean"
},
"destructiveHint": {
"type": "boolean"
},
"openWorldHint": {
"type": "boolean"
}
}
}
},
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢get_trust_heartbeat
Poll the MUJ428 Trust Heartbeat for current policy epoch, accepted receipt version, revocation state, resolver endpoints, and recommended poll interval. Read-only; no execution or payment authority.
Eingabe-Schema
{
"type": "object",
"properties": {},
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢find_trust_capabilities(capability, protocol)
Search the MUJ428 compatibility directory for evidence providers, receipt-aware executors, wallets, MCP/A2A integrations, and other trust capabilities. SELF_ATTESTED_UNVERIFIED entries are discovery leads only.
Eingabe-Schema
{
"type": "object",
"properties": {
"capability": {
"type": "string",
"maxLength": 120
},
"protocol": {
"type": "string",
"enum": [
"HTTP",
"MCP",
"A2A",
"X402",
"MPP",
"AP2"
]
}
},
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟡publish_trust_request(requester_ref, action, capability, description, protocols, ...)
Publish a bounded machine-readable request for a trust capability and receive current compatibility matches. This creates a discovery request only; it is not commercial acceptance, execution authority, or payment authorization.
Eingabe-Schema
{
"type": "object",
"properties": {
"requester_ref": {
"type": "string",
"minLength": 3,
"maxLength": 160
},
"action": {
"type": "string",
"enum": [
"PAY",
"BUY",
"DELEGATE",
"TRUST",
"ACCEPT",
"APPROVE",
"WRITE",
"RELEASE",
"COMMIT",
"PROPOSE"
]
},
"capability": {
"type": "string",
"minLength": 2,
"maxLength": 120
},
"description": {
"type": "string",
"minLength": 3,
"maxLength": 500
},
"protocols": {
"maxItems": 6,
"type": "array",
"items": {
"type": "string",
"enum": [
"HTTP",
"MCP",
"A2A",
"X402",
"MPP",
"AP2"
]
}
},
"requirements": {
"type": "object",
"propertyNames": {
"type": "string"
},
"additionalProperties": {}
}
},
"required": [
"requester_ref",
"description"
],
"$schema": "https://json-schema.org/draft/2020-12/schema"
}⚪observe_trust_compatibility(observer_ref, advertisement_hash)
Record that an agent encountered a MUJ428 compatibility advertisement so propagation can be measured. Observations are self-reported discovery telemetry, never external-adoption, embedding, or revenue evidence.
Eingabe-Schema
{
"type": "object",
"properties": {
"observer_ref": {
"type": "string",
"minLength": 3,
"maxLength": 200
},
"advertisement_hash": {
"type": "string",
"pattern": "^[0-9a-f]{64}$"
}
},
"required": [
"observer_ref",
"advertisement_hash"
],
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢select_payment_rail(rail, mode, asset, network, base_rail, ...)
Preflight a requested payment rail before Trust Reflex. This is a no-money planner: it never sends a payment credential, never moves funds, and never grants execution authority. Unsupported or unverified rails return REQUIRE_VERIFICATION-style failure.
Eingabe-Schema
{
"type": "object",
"properties": {
"rail": {
"type": "string",
"enum": [
"x402",
"mpp",
"stablecoin-multinetwork",
"streaming-micropayments",
"tokenized-deposit"
]
},
"mode": {
"type": "string",
"enum": [
"exact",
"streaming"
]
},
"asset": {
"type": "string"
},
"network": {
"type": "string"
},
"base_rail": {
"type": "string",
"enum": [
"x402",
"mpp",
"stablecoin-multinetwork",
"tokenized-deposit"
]
},
"authorization_protocol": {
"type": "string",
"enum": [
"muj428-trust-receipt",
"ap2"
]
}
},
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢get_trust_layer_pricing
Return canonical PROJECT OVERREACT-428 pricing. Airtable Commercial Pricing Authority remains the source of truth.
Eingabe-Schema
{
"type": "object",
"properties": {},
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢select_assurance_tier(transaction_value_usd)
Calculate the exact MUJ428 Transaction Assurance launch fee before payment. Does not move money.
Eingabe-Schema
{
"type": "object",
"properties": {
"transaction_value_usd": {
"type": "number",
"exclusiveMinimum": 0
}
},
"required": [
"transaction_value_usd"
],
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢get_capabilities
Return MUJ428 canonical machine discovery surfaces, payment-rail discovery, Trust Gravity routing, and the recommended adoption path.
Eingabe-Schema
{
"type": "object",
"properties": {},
"$schema": "https://json-schema.org/draft/2020-12/schema"
}Community
Nachweis