IntentFence Policy Agent: A2A agent card

What the card declares

Endpoint

https://agentpass-protocol.rmalka06.chatgpt.site/a2a

Protocol version

1.0

Transport

HTTP+JSON

Agent version

0.16.0

Card shape

v1.0

Since when this agent answers

Followed since

2026-09-08

Last answer

2026-09-08

Readings

1

Answers

1

Declared skills

• Budget-capped agent checkoutChoose an IntentFence paid outcome and receive the exact endpoint, validated input, Coinbase Agentic Wallet MCP request, Agentic Wallet argv, proactive x402 MCP tool call, and Base USDC ceiling without signing or…
  • agent-commerce
  • x402
  • MCP
  • Base
  • USDC
  • spend-control
• Screen every Base recipient before paymentRun a live Base wallet-risk screen for 0.002 USDC before paying a new recipient, using one budget-capped x402 call and a fail-closed signed result.
  • wallet-risk
  • Base
  • USDC
  • x402
  • agent-commerce
  • repeat-purchase
• Self-service production policy packGenerate a runtime-specific fail-closed TypeScript guard, signed action and policy receipt, negative test vectors, and deployment checklist for 1 USDC through x402.
  • authorization
  • Cloudflare Agents
  • Coinbase AgentKit
  • OpenAI Agents SDK
  • MCP
  • x402
• Fail-closed agent action authorizationBind an exact MCP, HTTP, A2A, or payment action to an allowlist, cost ceiling, retention ceiling, and optional action-specific human approval. Returns a five-minute ES256 receipt and never executes the action.
  • agent-security
  • authorization
  • policy-enforcement
  • MCP
  • signed-receipt
• MCP metadata risk scanScan caller-supplied MCP tool definitions for missing schemas, conflicting annotations, absent approval binding, and missing cost boundaries without executing tools.
  • MCP
  • agent-security
  • risk-scan
  • tool-metadata
• Agent payment preflightEvaluate caller-declared payment intent and return safe_to_proceed, needs_review, or denied before the caller invokes its downstream tool. IntentFence does not independently authorize or execute the action.
  • declared-input-policy
  • policy
  • safety
  • audit
  • preflight
  • x402
  • USDC
• Live x402 endpoint readinessMake one bounded credential-free request to a public HTTPS endpoint, block redirects and private-network targets, validate its live x402 challenge, and return a signed receipt without paying the target.
  • x402
  • endpoint-readiness
  • payment-safety
  • SSRF
  • USDC
• Caller-observed x402 quote assessmentValidate and sign the exact PAYMENT-REQUIRED quote observed by the caller against a Base USDC ceiling, explicit payee allowlist, timeout, and resource binding. IntentFence never fetches or pays the target.
  • x402
  • merchant-risk
  • payment-safety
  • quote-assessment
  • USDC

Findings

• NoteCard not signed: nothing attests that it comes from its authorsignatures

Badge