mcpbeat Sign in

IntentFence Agent Action Firewall MCP Server

by razel369 Your server? Claim it
answering

IntentFence Agent Action Firewall is answering right now. Last checked 3 min ago. It exposes 10 tools. Last commit 30 Jul 2026.

Fail-closed action authorization, MCP risk scanning, x402 checks, and signed receipts.

Uptime history 51 days of history · worst day 87%
51 days agonow
96.7%
Uptime 24h
88 of 91 checks
10
Tools
read from the server
1297 ms
Response time
average over 24h
2
Stars
last commit 30 Jul 2026

What the code does

We read the source, 7 h ago · tools taken from the live server · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

A line of code looks encrypted lib/agent-checkout.ts:66, lib/x402-payment.ts:281 
  "eyJ4NDAyVmVyc2lvbiI6MiwicmVzb3VyY2UiOnsidXJsIjoiaHR0cHM6Ly9tZXJjaGFudC5leGFtcGxlL2FwaS9wYWlkLXJlc291cmNlIiwiZGVzY3JpcHRpb24iOiJQYWlkIHJlc291cmNlIiwibWltZVR5cGUiOiJhcHBsaWNhdGlvbi9qc29uIn0sImFjY2VwdHMiOlt7InNjaGVtZSI6ImV4YWN0IiwibmV0d29yayI6ImVpcDE1NTo4NDUzIiwiYW1vdW50IjoiMTAwM…
In the project's build, not in the package

Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.

Builds a database query by concatenation .github/workflows/sync-payanagent.yml:17 
      - name: Create or update IntentFence marketplace offers
        env:
          PAYANAGENT_API_KEY: ${{ secrets.PAYANAGENT_API_KEY }}

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 3 min ago.

run in your terminal
claude mcp add intentfence --transport http https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "intentfence": {
      "url": "https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.intentfence]
url = "https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "intentfence": {
      "url": "https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "intentfence": {
      "url": "https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp"
    }
  }
}

Available tools 10

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

intentfence
intentfence_agent_risk_scan
Free metadata-only scan of caller-supplied MCP tool definitions for missing schemas, unsafe annotations, approval binding, and cost boundaries. Does not execute tools or certify security.
intentfence_authorize_action
Authorize an exact agent action against an explicit allowlist, spend ceiling, retention ceiling, and optional action-bound approval. Returns a five-minute ES256 receipt and never executes the downstream action. Callers must verify the receipt and fail closed if the action changes.
intentfence_checkout
Free machine checkout builder. Select a paid IntentFence outcome and receive the exact endpoint, validated request, USDC cap, shell-safe Agentic Wallet argv, MCP tool call, and opt-in local auto-payment budget. It never signs or initiates payment.
intentfence_policy_pack
Paid self-service integration pack (1 USDC on Base). Generates a runtime-specific TypeScript guard, signed action and policy receipt, negative test vectors, and a fail-closed deployment checklist for Cloudflare Agents, Coinbase AgentKit, or an MCP gateway. No meeting or account is required.
intentfence_preflight
Free declared-input preview with no signed receipt, authorization proof, or enforcement guarantee. Returns safe_to_proceed, needs_review, or denied.
intentfence_us_cpi
Paid official U.S. CPI and core CPI data ($0.001 USDC on Base), retrieved from the Bureau of Labor Statistics with a six-hour edge cache and returned with an ES256 provenance receipt. Optionally request a YYYY-MM period.
intentfence_verified_preflight
Paid production preflight ($0.005 USDC on Base). Settles through x402 and returns a signed ES256 audit receipt plus settlement metadata.
intentfence_wallet_risk
Paid AML/KYT wallet screening ($0.002 USDC on Base) before sending funds or approving a transaction. Checks live Base activity plus GoPlus sanctions, phishing, mixer, money-laundering, dark-web, blacklist, and related counterparty-risk flags, then returns a five-minute ES256 receipt. A low-risk result is not proof of identity, ownership, authorization, or future behavior.
intentfence_x402_assessment
Paid assessment ($0.005 USDC on Base). Forward the exact base64 or base64url PAYMENT-REQUIRED header observed by the caller. IntentFence validates the quote, canonical Base USDC asset, price ceiling, payee allowlist, timeout, and resource binding without contacting the target, then returns a short-lived ES256 receipt bound to the quote hash. Supply allowed_payees for safe_to_proceed; omission yields needs_review.
intentfence_x402_readiness
Paid live endpoint check ($0.002 USDC on Base). Makes one bounded credential-free request to a public HTTPS target, blocks private networks and redirects, never pays the target, validates the returned x402 challenge, and returns a signed five-minute receipt.

Endpoints

URLTransportStateLatencyChecked
https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp streamable-http answering 1618 ms 3 min ago

Alternatives to IntentFence Agent Action Firewall

same job, measured the same way
Ccs
by correctover

Runtime verification MCP server: fail-closed checks for agent tool calls, signed evidence receipts.

local only
Ccs MCP Server
by dshcorrectover

Runtime verification for agent tool calls: Ed25519 signed receipts, fail-closed RCE/SSRF checks.

271 installs/wk local only
Docimprint
by docimprint

AI document intelligence: extract, summarize, claim-check, notarize, and signed action receipts.

22 tools answering
Haltproof
by rudrendupaul

Fail-closed deterministic checks and hash-chained receipts for AI agent outputs via MCP.

86 installs/wk local only
Shadowgate MCP
by josephibra

Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.

answering
Security Preflight
by jdhart81

Static MCP, source-code and injection-indicator checks with redacted signed receipts.

5 tools answering
Delego
by delego-dev

Intent-bound action authorization for AI agents: policy, human approval, and a signed audit trail.

202 installs/wk local only
Verity MCP
by meloliva14

Fail-closed verify-before-you-act gate for AI agents. Signed receipts. Pay-per-call via x402.

74 installs/wk local only

IntentFence Agent Action Firewall — questions

Answers built from our own checks of this server.

What can IntentFence Agent Action Firewall do?
It exposes 10 tools, read directly from the server on our last check. Among them: intentfence_agent_risk_scan, intentfence_authorize_action, intentfence_checkout, intentfence_policy_pack, intentfence_preflight, intentfence_us_cpi and 4 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is IntentFence Agent Action Firewall working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 88 of 91 checks got a reply (96.7%), average response time 1297 ms. The bar chart above shows every period we have measured.
How do I connect IntentFence Agent Action Firewall?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does IntentFence Agent Action Firewall need an API key?
No. IntentFence Agent Action Firewall completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 10 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is IntentFence Agent Action Firewall?
It answers our handshake in 1297 ms on average, which is faster than 5% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is IntentFence Agent Action Firewall open source?
Yes — it is published under the Apache-2.0 licence, written in TypeScript, 2 stars on GitHub and 4 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.