IntentFence Agent Action Firewall MCP Server

io.github.razel369/intentfence

answering

IntentFence Agent Action Firewall is answering right now. Last checked 2 min ago. It exposes 10 tools. Last commit 30 Jul 2026.

Fail-closed action authorization, MCP risk scanning, x402 checks, and signed receipts.

Uptime history 41 hours of history

41 hours agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

677 ms

Response time

average over 24h

Stars

last commit 30 Jul 2026

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add intentfence --transport http https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "intentfence": {
      "url": "https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.intentfence]
url = "https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "intentfence": {
      "url": "https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "intentfence": {
      "url": "https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp"
    }
  }
}

Available tools 10

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

intentfence

intentfence_agent_risk_scan

Free metadata-only scan of caller-supplied MCP tool definitions for missing schemas, unsafe annotations, approval binding, and cost boundaries. Does not execute tools or certify security.

intentfence_authorize_action

Authorize an exact agent action against an explicit allowlist, spend ceiling, retention ceiling, and optional action-bound approval. Returns a five-minute ES256 receipt and never executes the downstream action. Callers must verify the receipt and fail closed if the action changes.

intentfence_checkout

Free machine checkout builder. Select a paid IntentFence outcome and receive the exact endpoint, validated request, USDC cap, shell-safe Agentic Wallet argv, MCP tool call, and opt-in local auto-payment budget. It never signs or initiates payment.

intentfence_policy_pack

Paid self-service integration pack (1 USDC on Base). Generates a runtime-specific TypeScript guard, signed action and policy receipt, negative test vectors, and a fail-closed deployment checklist for Cloudflare Agents, Coinbase AgentKit, or an MCP gateway. No meeting or account is required.

intentfence_preflight

Free declared-input preview with no signed receipt, authorization proof, or enforcement guarantee. Returns safe_to_proceed, needs_review, or denied.

intentfence_us_cpi

Paid official U.S. CPI and core CPI data ($0.001 USDC on Base), retrieved from the Bureau of Labor Statistics with a six-hour edge cache and returned with an ES256 provenance receipt. Optionally request a YYYY-MM period.

intentfence_verified_preflight

Paid production preflight ($0.005 USDC on Base). Settles through x402 and returns a signed ES256 audit receipt plus settlement metadata.

intentfence_wallet_risk

Paid AML/KYT wallet screening ($0.002 USDC on Base) before sending funds or approving a transaction. Checks live Base activity plus GoPlus sanctions, phishing, mixer, money-laundering, dark-web, blacklist, and related counterparty-risk flags, then returns a five-minute ES256 receipt. A low-risk result is not proof of identity, ownership, authorization, or future behavior.

intentfence_x402_assessment

Paid assessment ($0.005 USDC on Base). Forward the exact base64 or base64url PAYMENT-REQUIRED header observed by the caller. IntentFence validates the quote, canonical Base USDC asset, price ceiling, payee allowlist, timeout, and resource binding without contacting the target, then returns a short-lived ES256 receipt bound to the quote hash. Supply allowed_payees for safe_to_proceed; omission yields needs_review.

intentfence_x402_readiness

Paid live endpoint check ($0.002 USDC on Base). Makes one bounded credential-free request to a public HTTPS target, blocks private networks and redirects, never pays the target, validates the returned x402 challenge, and returns a signed five-minute receipt.

Endpoints

URL	Transport	State	Latency	Checked
https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp	streamable-http	answering	153 ms	2 min ago

IntentFence Agent Action Firewall — questions

Answers built from our own checks of this server.

What can IntentFence Agent Action Firewall do?

It exposes 10 tools, read directly from the server on our last check. Among them: intentfence_agent_risk_scan, intentfence_authorize_action, intentfence_checkout, intentfence_policy_pack, intentfence_preflight, intentfence_us_cpi and 4 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is IntentFence Agent Action Firewall working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 677 ms. The bar chart above shows every period we have measured.

How do I connect IntentFence Agent Action Firewall?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does IntentFence Agent Action Firewall need an API key?

No. IntentFence Agent Action Firewall completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 10 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is IntentFence Agent Action Firewall?

It answers our handshake in 677 ms on average, which is faster than 13% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is IntentFence Agent Action Firewall open source?

Yes — it is published under the Apache-2.0 licence, written in TypeScript, 1 stars on GitHub and 1 open issue. The source link is on this page, so you can read exactly what it does with your data before you connect it.