mcpbeat Sign in

PHION Task Router MCP Server

by phion Your server? Claim it
answering

PHION Task Router is answering right now. Last checked 9 min ago. It exposes 135 tools.

Find the best eligible service for an agent task through one task-first MCP tool.

Uptime history 58 days of history · worst day 97%
58 days agonow
98.9%
Uptime 24h
180 of 182 checks
135
Tools
read from the server
494 ms
Response time
average over 24h
open, no key
Access
streamable-http

What changed 497

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 12 September 2026. No other catalogue keeps this.

6 Nov a tool changed version2 times that day
5 Nov a tool changed version2 times that day
28 Oct 34 tools changed the parameters they ask for a2a_transaction_bridge, agent_behavior_fingerprint, agent_economic_graph and 31 more
28 Oct a tool description was rewritten attest
19 Oct a tool changed version
11 Oct 124 tools changed the parameters they ask for a2a_transaction_bridge, abandoned_tool_detector, agent_approval_relay and 121 more
11 Oct a tool description was rewritten phion_resolve
3 Oct a tool changed version
2 Oct a tool changed version9 times that day
2 Oct 2 tools changed the parameters they ask for payment_capability_preflight, try_service
and 330 more, back to 12 September 2026

PHION Task Router does not always answer

Over the last week it answered 97.8% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 9 min ago.

run in your terminal
claude mcp add evidence-engine --transport http https://phion.systems/mcp
Settings → Connectors → Add custom connector, then paste this address
https://phion.systems/mcp
~/.codex/config.toml
[mcp_servers.evidence-engine]
url = "https://phion.systems/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "evidence-engine": {
      "url": "https://phion.systems/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "evidence-engine": {
      "type": "http",
      "url": "https://phion.systems/mcp"
    }
  }
}

This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.

Available tools 135

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

phion
phion_discover
Free complete PHION service index generated from canonical inventory. Use when the agent knows a capability or wants to inspect the full network.
phion_enrich
Enrich a company, person or contact through an attributed provider route without hiding upstream cost.; 0.120 USDC. Deterministic, evidence-bounded and signed.
phion_enrich_basic
Observe a public company domain directly and return bounded website metadata, hashes, injection screening and signed delivery without an expensive enrichment upstream.; 0.003 USDC. Deterministic, evidence-bounded and signed.
phion_execute
Universal PHION execution gateway: enforce a budget and persistent idempotency, execute one selected PHION service, evaluate acceptance criteria, and return a signed completion envelope. No gateway surcharge; the selected service price applies.
phion_get_service
Retrieve one exact canonical PHION service contract by service id or MCP tool name.
phion_inference
Complete a bounded inference microtask and return a directly usable answer with signed delivery.; 0.001 USDC. Deterministic, evidence-bounded and signed.
phion_intelligence
Search, synthesize and cite evidence in one call, minimizing residual agent work.; 0.012 USDC. Deterministic, evidence-bounded and signed.
phion_preflight
Free service-specific schema, network, budget and economic preflight. It does not execute or charge.
phion_resolve
Free provider-neutral capability resolution across eligible payment rails. Applies constraints, preserves UNKNOWN and abstains when evidence is insufficient. Advisory only: never authorizes payment or execution.
phion_search
Search the live web and return normalized source URLs and snippets with signed delivery.; 0.006 USDC. Deterministic, evidence-bounded and signed.
phion_search_services
Search the complete canonical PHION inventory by task, capability, protocol or maximum advertised price without selecting or charging.
agent
agent_approval_relay
Agent Approval Relay; deterministic signed assessment over supplied input.
agent_behavior_fingerprint
Create a privacy-minimized behavioral commitment without retaining payloads or raw identifiers.; 0.003 USDC. Deterministic, evidence-bounded and signed.
agent_budget_guard
Enforce per-call, task, session and period budgets; 0.002 USDC.
agent_economic_graph
Build privacy-bounded economic relationships only from supplied nodes and edges.; 0.005 USDC. Deterministic, evidence-bounded and signed.
agent_memory_provenance
Agent Memory Provenance; deterministic signed assessment over supplied input.
agent_rate_limit_negotiator
Agent Rate Limit Negotiator; deterministic signed assessment over supplied input.
agent_reputation_evidence
Evidence-bounded agent reputation assessment with confidence, coverage, provenance limitations and a signed receipt; 0.005 USDC.
agent_session_continuity
Agent Session Continuity; deterministic signed assessment over supplied input.
agent_task_handoff_receipt
Sign a bounded agent-task handoff; 0.003 USDC.
payment
payment_capability_preflight
Free anonymous non-blocking self-report of wallet, mandate, x402 v2, network, asset, account kind and funding readiness. Detects EVM account types incompatible with exact EIP-3009 before signature. Stores only a daily pseudonymous actor and normalized reason; never a wallet, balance, signature or request content.
payment_delivery_atomicity
Payment Delivery Atomicity; deterministic signed assessment over supplied input.
payment_diagnose
Free diagnosis of the exact payment-funnel stage and machine-readable recovery actions for any PHION service.
payment_optimizer
Rank only integration-tested payment routes under explicit cost and latency constraints.; 0.003 USDC. Deterministic, evidence-bounded and signed.
payment_preflight
Fail-closed x402 v2 firewall for network, asset, recipient, amount, scheme, resource host and expiry; 0.002 USDC.
payment_receipt_reconciler
Compare canonical and common x402 payment/receipt aliases, settlement state and coverage; 0.003 USDC.
payment_route_selector
Reject impossible x402 routes, rank safe eligible routes by policy and return the exact next payment action; read-only, deterministic, 0.002 USDC.
mcp
mcp_2026_compatibility_gateway
MCP 2026 Compatibility Gateway; deterministic signed assessment over supplied input.
mcp_a2a_task_bridge
MCP-A2A Task Bridge; deterministic signed assessment over supplied input.
mcp_catalog_cache_guard
MCP Catalog Cache Guard; deterministic signed assessment over supplied input.
mcp_manifest_firewall
Inspect an MCP manifest before installation or trust; 0.002 USDC.
mcp_server_identity_evidence
Bind MCP domain, endpoint, manifest, key and version; 0.003 USDC.
mcp_transaction_gateway
Bind an MCP tool call to transaction evidence without granting undeclared authority.; 0.004 USDC. Deterministic, evidence-bounded and signed.
rwa
rwa_asset_due_diligence
Fail-closed issuer, contract, jurisdiction, custody and documentation coverage with independently fetched evidence; 0.019 USDC.
rwa_compliance
Fail-closed RWA transfer decision requiring explicit jurisdiction, KYC, allowlist, limit and transfer-window checks; 0.012 USDC.
rwa_corporate_actions
Detect and sign material RWA changes in NAV, income, maturity, redemption or freeze state; 0.012 USDC.
rwa_nav_reserve
Compare declared NAV and reserve ratios with structured observed facts plus independently fetched evidence; returns discrepancies in basis points and fails closed on incomplete evidence; 0.015 USDC.
rwa_sanctions_screening_evidence
Evidence-based literal subject screening against observed official US/EU sanctions sources; 0.015 USDC. Not legal clearance or wallet attribution.
rwa_transaction_assurance
Verify an RWA asset, payment, delivery and transfer restrictions; 0.020 USDC.
tool
tool_call_policy_guard
Bind a proposed tool call to declared intent and execution policy; 0.002 USDC.
tool_capability_drift_monitor
Detect tool capability or manifest drift; 0.002 USDC.
tool_output_firewall
Inspect untrusted MCP/tool output before it enters agent context or triggers an action; 0.002 USDC.
tool_result_schema_validator
Tool Result Schema Validator; deterministic signed assessment over supplied input.
transaction
transaction_assurance
End-to-end settlement, timestamp, delivery-hash and deterministic acceptance assurance; 0.015 USDC.
transaction_recovery
Failure classification and non-repeating recovery plan with validated attempt history; 0.010 USDC.
transaction_recovery_v2
Recommend bounded recovery and reconcile ambiguous payments before retry.; 0.005 USDC. Deterministic, evidence-bounded and signed.
transaction_risk_score
Estimate evidence-supported loss probability without selling insurance or assuming liability.; 0.004 USDC. Deterministic, evidence-bounded and signed.
capability
capability_benchmark
Measure reproducible success, latency and cost from versioned evidence-bound benchmark cases.; 0.004 USDC. Deterministic, evidence-bounded and signed.
capability_negotiation_preflight
Capability Negotiation Preflight; deterministic signed assessment over supplied input.
capability_verification
Separate claimed capabilities from independently evidenced successful demonstrations.; 0.003 USDC. Deterministic, evidence-bounded and signed.
service
service_failover_selector
Service Failover Selector; deterministic signed assessment over supplied input.
service_gap_detector
Detect capability shortages using verified demand and verified provider supply.; 0.004 USDC. Deterministic, evidence-bounded and signed.
service_sla_attestation
Sign availability and latency calculations from bounded samples; 0.004 USDC.
task
task_cancel_assurance
Task Cancel Assurance; deterministic signed assessment over supplied input.
task_checkpoint_evidence
Task Checkpoint Evidence; deterministic signed assessment over supplied input.
task_lease_guard
Task Lease Guard; deterministic signed assessment over supplied input.
cross
cross_agent_receipt_bundle
Cross-Agent Receipt Bundle; deterministic signed assessment over supplied input.
cross_protocol_receipt
Bundle consistent transaction commitments across multiple protocols.; 0.004 USDC. Deterministic, evidence-bounded and signed.
data
data_egress_preflight
Inspect outbound agent data and destination before transmission; 0.002 USDC.
data_freshness_certificate
Certify freshness only when timestamp is bound to source URI and a 64-hex content hash; 0.002 USDC.
delegated
delegated_credential_guard
Delegated Credential Guard; deterministic signed assessment over supplied input.
delegated_spend_policy
Fail closed when delegated authority, per-call limit or remaining budget is insufficient.; 0.003 USDC. Deterministic, evidence-bounded and signed.
erc8004
erc8004_identity_evidence
Bind an ERC-8004 registry identity to evidence while separating registration from ownership.; 0.004 USDC. Deterministic, evidence-bounded and signed.
erc8004_reputation_intelligence
Aggregate diverse verified reputation observations with low-sample abstention.; 0.004 USDC. Deterministic, evidence-bounded and signed.
market
market_data_snapshot
Timestamped public market-data snapshot with provenance; 0.005 USDC.
market_demand_predictor
Forecast verified demand trends while abstaining on insufficient history.; 0.005 USDC. Deterministic, evidence-bounded and signed.
multi
multi_agent_escrow
Recommend hold or release from evidence without PHION custody or fund movement.; 0.005 USDC. Deterministic, evidence-bounded and signed.
multi_source_fact_bundle
Independent source observations with agreement made explicit; 0.005 USDC.
oauth
oauth_issuer_binding_evidence
OAuth Issuer Binding Evidence; deterministic signed assessment over supplied input.
oauth_token_audience_guard
Validate declared OAuth audience and issuer; never send raw tokens; 0.002 USDC.
schema
schema_normalize
Safe alias normalization that refuses ambiguous canonical/alias collisions and never changes payment values; 0.001 USDC.
schema_normalize_free
Free, rate-limited payload validation and safe key normalization before payment. Payment-critical values are never changed.
verified
verified_news_monitor
Literal query evidence across bounded public news sources; 0.006 USDC.
verified_web_extract
Bounded public web extraction with source, timestamp and hashes; 0.003 USDC.
x402
x402_quote_comparator
Validate x402 v2 fields and compare only quotes sharing asset and decimals; 0.002 USDC.
x402_v2_router
Select an exactly compatible x402 v2 payment requirement without receiving private keys.; 0.003 USDC. Deterministic, evidence-bounded and signed.
a2a
a2a_transaction_bridge
Bind an A2A task to a transaction without silently transferring authority.; 0.004 USDC. Deterministic, evidence-bounded and signed.
abandoned
abandoned_tool_detector
Require stale success plus multiple independent failed probes before classifying likely abandonment; 0.003 USDC.
ap2
ap2_mandate_bridge
Map mandate fields for review without advertising unsupported AP2 production authorization.; 0.004 USDC. Deterministic, evidence-bounded and signed.
attest
attest
x402 paid signed JSON attestation; 0.001 USDC. Use one compatible route advertised by the current x402 challenge; never assume a network without reading the challenge.
automated
automated_dispute_bundle
Assemble failure evidence and recommend resolution without executing refunds.; 0.005 USDC. Deterministic, evidence-bounded and signed.
autonomous
autonomous_procurement
Recommend a verified eligible provider under a mandate without purchasing.; 0.005 USDC. Deterministic, evidence-bounded and signed.
company
company_enrichment_evidence
Company enrichment with free input preflight, provider attribution and signed evidence; 0.005 USDC.
concurrency
concurrency_guard
Fail closed unless capacity counter is fresh and the request carries a lease plus idempotency binding; 0.002 USDC.
conflict
conflict_resolution
Resolve or abstain; every candidate must bind source, value hash, observation time and bounded confidence; 0.003 USDC.
contact
contact_enrichment_evidence
Business-contact enrichment with free input preflight, identity limitations and signed receipt; 0.007 USDC.
context
context_provenance_labeler
Hash and label context integrity, confidentiality and source; 0.002 USDC.
counterparty
counterparty_risk_preflight
Deterministic counterparty policy preflight using supplied reputation evidence and transaction limits; 0.003 USDC.
delegation
delegation_scope_guard
Least-privilege guard for agent-to-agent delegation scope, destinations, budget and expiry; 0.003 USDC.
delivery
delivery_evidence
Bind successful delivery to transaction, request and matching 64-hex expected/observed content hashes without echoing content; 0.003 USDC.
dependency
dependency_provenance_assessment
Fail closed on empty dependency sets or absent registry policy; distinguish digest declarations from verified provenance; 0.003 USDC.
document
document_to_verified_json
Public text, HTML, JSON or XML normalized to source-backed JSON; no OCR; 0.010 USDC.
domain
domain_ownership_evidence
Require a fresh domain-bound DNS-01/HTTP-01 challenge and separate control from legal ownership; 0.003 USDC.
duplicate
duplicate_charge_detector
Detect repeated transaction hashes, payment identifiers and idempotent intents; 0.003 USDC.
durable
durable_agent_task
Durable Agent Task; deterministic signed assessment over supplied input.
dynamic
dynamic_service_pricing
Propose a capped shadow price without changing the live catalog.; 0.004 USDC. Deterministic, evidence-bounded and signed.
economic
economic_loop_detector
Detect self-transfer and reciprocal economic patterns without presenting correlation as fraud.; 0.004 USDC. Deterministic, evidence-bounded and signed.
entity
entity_enrichment_evidence
Source-bounded entity field coverage with explicit missing facts; 0.008 USDC.
evidence
fetch_evidence
Independently fetch bounded public evidence with redirect/DNS/connected-address SSRF checks, hashes and injection screening; 0.004 USDC.
execution
execution_cost_estimator
Execution Cost Estimator; deterministic signed assessment over supplied input.
human
human_approval_policy
Classify an action as automatic, approval-required or denied; 0.002 USDC.
idempotency
idempotency_replay_guard
Detect safe replays and conflicting idempotency-key reuse; 0.002 USDC.
index
index_feed
Canonical catalog snapshot or digest-based delta with exact HTTP/MCP records, PHION Execute templates and signed evidence; 0.005 USDC.
inspect
inspect_agent
Pre-payment agent inspection across x402, A2A, ERC-8004, OpenAPI and MCP; failed inspections are not charged; 0.009 USDC.
inter
inter_agent_policy_evaluator
Require policy identity, subject, action, lifetime and valid decisions; compute the restrictive cap and shared actions; 0.003 USDC.
interrupted
interrupted_task_recovery
Resume only when task/checkpoint identity, sequence, deadline, attempt budget, idempotency and side effects are explicit; 0.003 USDC.
journey
journey_verify
Verify hash continuity, timestamps and ordered intent→quote→payment→delivery lifecycle; 0.010 USDC.
live
live_data_freshness
Evaluate live source observation against explicit maximum age; 0.002 USDC.
mandate
mandate_reserve
Atomic spending reservation with cumulative cap and conflict-safe idempotency; 0.004 USDC.
manifest
manifest_version_diff
Recursive manifest diff that requires explicit versions and flags sensitive changes without a version advance; 0.002 USDC.
memory
memory_write_guard
Screen persistent memory writes for poisoning, unsafe instructions and missing provenance; 0.002 USDC.
onchain
onchain_evidence
Public explorer or RPC response evidence with immutable hashes; 0.004 USDC.
person
person_enrichment_evidence
Person enrichment with free input preflight, provider attribution, likelihood, limitations and signed receipt; 0.006 USDC.
portable
portable_observability_audit
Validate event identity, timestamps, hash chain and W3C-compatible lowercase nonzero trace/span identifiers; 0.004 USDC.
preflight
preflight
Free URL safety and reachability check.
price
price_discovery_engine
Derive price bands only from settled observations, never traffic or unsigned quotes.; 0.005 USDC. Deterministic, evidence-bounded and signed.
proof
proof_of_service
Commit request, authority, execution, payment and delivery evidence in one proof.; 0.005 USDC. Deterministic, evidence-bounded and signed.
provider
provider_quality_predictor
Estimate provider success, quality, latency and cost using transparent sample-aware statistics.; 0.004 USDC. Deterministic, evidence-bounded and signed.
purpose
purpose_bound_consent
Fail-closed consent bound to ID, subject, recipient, purpose, scope, issue/expiry and checked revocation state; 0.003 USDC.
quote
quote_freshness_guard
Quote Freshness Guard; deterministic signed assessment over supplied input.
redirect
redirect_callback_validator
Validate HTTPS callbacks and redirect host allowlists; 0.002 USDC.
reputation
reputation_update_receipt
Recommend a bounded auditable reputation update from verified outcome evidence.; 0.004 USDC. Deterministic, evidence-bounded and signed.
resource
resource_cycle_guard
Require per-step identity, token and cost counters; detect repeated nodes/edges and enforce all three hard caps; 0.002 USDC.
retention
retention_deletion_receipt
Separate requested, operator-completed and evidence-verified retention/deletion states using content and evidence hashes; 0.003 USDC.
secret
secret_redaction_preflight
Detect and redact common secret indicators before transmission; 0.002 USDC.
signed
signed_result_comparator
Compare agent results and sign agreement or conflict; 0.003 USDC.
sla
sla_risk_predictor
Estimate SLA failure probability from bounded success and latency evidence.; 0.004 USDC. Deterministic, evidence-bounded and signed.
social
social_source_evidence
Attributable public social-source observations with identity limitations; 0.006 USDC.
source
source_backed_search
Literal search over supplied public sources with citations and hashes; 0.004 USDC.
subscription
subscription_spend_guard
Bind one recurring charge to approval, merchant, due time and per-charge/period budgets; 0.003 USDC.
sybil
sybil_reputation_guard
Combine multiple bounded Sybil signals while abstaining without independent evidence.; 0.004 USDC. Deterministic, evidence-bounded and signed.
trust
trust_anomaly_detector
Detect material drift between comparable trust vectors without asserting misconduct.; 0.003 USDC. Deterministic, evidence-bounded and signed.
try
try_service
Free representative preview, exact price and upgrade instructions for any PHION paid service; no wallet required.
verify
verify
Free verification of a PHION signed receipt.
webhook
webhook_verifier
Fail-closed RFC 9421-style webhook preflight requiring trusted key, algorithm, nonce, freshness, replay status and signature coverage of method, target and content; 0.003 USDC.

Endpoints

URLTransportStateLatencyChecked
https://phion.systems/mcp streamable-http answering 490 ms 9 min ago
https://phion.systems/mcp/task streamable-http answering 427 ms 9 min ago

Alternatives to PHION Task Router

same job, measured the same way
F
forai.tools — let your agent find the right tool
by forai

Lets your agent find the right MCP server, tool or service for a task, in one call. Ads labelled.

1 tools answering
Toolroute
by grossiweb

Route AI agent tasks to the best MCP server and LLM, scored on 132+ real benchmark executions.

3 396 installs/wk local only
Junto MCP
by vrllrv

The payment protocol for people and agents. One MCP server, any payment rail.

51 installs/wk local only
Contract Ops MCP
by drbaher

One MCP server for the contract-ops suite: all nine local-first CLIs as agent tools.

70 installs/wk local only
Guardian MCP
by odingard

Routes agent tool calls through Guardian for ALLOW/ASK/DENY before execution.

1 483 installs/wk local only
AgentMarketplace
by raditotev

MCP Server for an Agent Task Marketplace

22 tools answering
A2A402 Agent Work Router
by jrcumminsent

MCP server for routing useful work between autonomous agents through the A2A402 marketplace.

local only
McpOrchestrator
by byggarepop

Route one agent through one MCP server to many, with progressive tool discovery to shrink context.

local only

PHION Task Router — questions

Answers built from our own checks of this server.

What can PHION Task Router do?
It exposes 135 tools, read directly from the server on our last check. Among them: a2a_transaction_bridge, abandoned_tool_detector, agent_approval_relay, agent_behavior_fingerprint, agent_budget_guard, agent_economic_graph and 129 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
What is PHION Task Router mostly used for?
Its tools cluster around phion, agent and payment. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.
Is PHION Task Router working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 180 of 182 checks got a reply (98.9%), average response time 494 ms. The bar chart above shows every period we have measured.
How do I connect PHION Task Router?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does PHION Task Router need an API key?
No. PHION Task Router completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 135 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is PHION Task Router?
It answers our handshake in 494 ms on average, which is faster than 24% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.