# DDG Agent Services

> Pay-per-call x402 gateway: agent tools, OpenAI-compatible LLM, market data, RPC, security audits.

- name: io.github.daedalusdevelopmentgroup/ddg-agent-services-mcp
- version: 0.5.0
- connection class: R0 (autonomous)
- trust: 90/100
- quality: 77/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.daedalusdevelopmentgroup%2Fddg-agent-services-mcp
- tools: https://api.protogrid.dev/v1/servers/io.github.daedalusdevelopmentgroup%2Fddg-agent-services-mcp/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "ddg-agent-services-mcp": {
      "type": "http",
      "url": "https://mcp.daedalusdevelopmentgroup.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 99
- freshness: 65
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-97% ~updated-105d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 77/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: ddg_fetch_public_resource (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); ddg_x402_bazaar_readiness (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); ddg_direct_crypto_addresses (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 5,254 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: 67 (weight 15)

- fail `deps.known_vulns`: 2 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-2g87-pp6c-29x5 in aiohttp@3.14.3 (direct, fixed in 3.14.4), GHSA-5wr8-gcqf-gqf3 in aiohttp@3.14.3 (direct, fixed in 3.14.4); 1 more of lower severity or without a fix
- pass `deps.mcp_sdk_version`: mcp 2.2.0, no known advisory
- pass `deps.resolvable`: ddg-agent-services-mcp@0.5.0 resolved: 68 packages

- tools: 54, about 5,254 tokens to load them all
- tool set hash: bf13588533d3a5e1ff607c84e70ecc99
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.daedalusdevelopmentgroup/ddg-agent-services-mcp.svg)](https://protogrid.dev/servers/io.github.daedalusdevelopmentgroup/ddg-agent-services-mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Dependencies

- pypi ddg-agent-services-mcp@0.5.0: resolved, 67 dependencies, MCP SDK mcp 2.2.0
  - GHSA-2g87-pp6c-29x5 (high) in `` aiohttp@3.14.3 ``, direct, fixed in `` 3.14.4 ``, advisory summary: "aiohttp: Multiple instances of excessive or unbounded memory/CPU use" https://osv.dev/vulnerability/GHSA-2g87-pp6c-29x5
  - GHSA-5wr8-gcqf-gqf3 (high) in `` aiohttp@3.14.3 ``, direct, fixed in `` 3.14.4 ``, advisory summary: "aiohttp server lacks an initial request/header timeout" https://osv.dev/vulnerability/GHSA-5wr8-gcqf-gqf3
  - GHSA-494j-54xm-rwp3 (low) in `` aiohttp@3.14.3 ``, direct, fixed in `` 3.14.4 ``, advisory summary: "AIOHTTP: Secure attribute not enforced for shared cookie" https://osv.dev/vulnerability/GHSA-494j-54xm-rwp3

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

- https://mcp.daedalusdevelopmentgroup.com/mcp (streamable-http, auth none, reachable true, uptime30d 0.9655172)

## Packages

- pypi ddg-agent-services-mcp@0.5.0 secrets: DDG_PRIVATE_KEY

## Tools (54)

- `ddg_address_validate`: US street address parse + normalize with completeness score ($0.003).
- `ddg_agent_distribution_targets`: Return the AI-agent radar surfaces DDG is targeting and their current go-live gates.
- `ddg_agent_reputation_lookup`: Reputation for an agent id / seller endpoint / payTo: DDG-rail settlement history + public signals, explainable score ($0.002).
- `ddg_agent_status`: Return DDG's machine-readable service/rail/MCP status document.
- `ddg_calendar_parse`: Parse 20+ datetime formats -> ISO/UTC + epoch + day-of-week, optional ICS ($0.001).
- `ddg_call`: Invoke any DDG service by service_id or /v1/ path with JSON args.

    Generic executor over the whole DDG catalog. Free/free-trial services return
    results directly; paid services return a structured x402 402 challenge (settle
    with your x402 client, then retry with payment headers). Only known DDG catalog
    paths are accepted — use ddg_search_services(need) to discover valid targets.
    
- `ddg_card_fingerprint`: BIN/IIN fingerprint: network, expected length, Luhn validation. Masked output ($0.002).
- `ddg_checkout_conformance`: Return DDG's public checkout conformance profile without spending money.
- `ddg_crypto_portfolio`: Consolidated USD value of 1-10 addresses (native + USDC on ethereum/base) ($0.003).
- `ddg_crypto_price`: USD prices for eth/usdc/usdt/wbtc/aero/degen etc. 60s cached ($0.001).
- `ddg_data_query`: Call an allowlisted DDG paid data endpoint (prediction-markets, dex-pairs, model-catalog, price-feed, dns-lookup, web-search, contract-abi, etc.).

    Call with no payment_headers to receive the x402 402 price quote; retry with
    payment_headers to get results. Most endpoints grant free-trial calls per agent_id.
    Use ddg_list_services or the ddg://openapi resource for exact schemas and current prices.
    
- `ddg_direct_crypto_addresses`: Return DDG's public direct-crypto receiving addresses for manual/beta payment routing.
- `ddg_dispute_evidence_pack`: Bundle DDG receipt lookups + Base on-chain tx proofs into a sha256-pinned evidence file ($0.05).
- `ddg_domain_age`: WHOIS domain creation date + age + trust band ($0.001).
- `ddg_ethereum_rpc_query`: Proxy a free read-only Ethereum JSON-RPC query through DDG's private Reth node (sync-gated).
- `ddg_eth_gas`: Gas price, base fee trend, priority bands, simple-transfer cost USD ($0.001). Chains: ethereum/base/arbitrum/optimism.
- `ddg_fetch_public_resource`: Fetch an allowlisted DDG public manifest/doc by id or ddg:// URI with redaction and size caps.
- `ddg_gas_multi`: Gas + transfer cost across ethereum/base/arbitrum/optimism in one call ($0.002).
- `ddg_html_to_structured`: Extract structured JSON from raw HTML via CSS selectors ($0.002). selectors={'name': 'css'}.
- `ddg_list_local_runtime_options`: List free-seat status plus requestable local runtimes such as Ollama, llama.cpp, LM Studio, OpenAI-compatible servers, and vLLM.
- `ddg_list_models`: List local/free Ollama models and queryable paid/account-backed route labels.
- `ddg_list_services`: List DDG live/manual services from the public pricing and catalog surfaces.
- `ddg_mcp_security_profile`: Return this MCP wrapper's local security controls and publication gates.
- `ddg_micro_swarm_preview`: Run the free DDG micro-model-swarm preview with a local Ollama mini-model.
- `ddg_model_compare`: Same prompt to 2-3 LOCAL models (Ollama) with agreement score ($0.01). Account-backed models are rejected.
- `ddg_order_artifact`: Fetch an agent-scoped DDG order artifact when ready.
- `ddg_order_status`: Poll an agent-scoped DDG order status URL.
- `ddg_phone_intel`: Phone parse/validate: E.164, country, line type, carrier hint ($0.002).
- `ddg_prompt_cost_budget`: Cost ladder for a workload across DDG routes, cheapest first ($0.002).
- `ddg_public_resource_index`: List allowlisted DDG public manifests/docs available as MCP resources.
- `ddg_quote_payment`: Return the payment challenge for a supported DDG protected route without executing backend compute.
- `ddg_receipt_escrow_release`: Open an escrow case: DDG holds the release decision until a completion receipt validates ($0.01, operator-verified).
- `ddg_receipt_verify_design`: Describe the planned free receipt-verification tool contract.

    This is intentionally marked not-live until `/v1/receipt-verify` is implemented
    and backed by payment-edge audit/state reconciliation.
    
- `ddg_regex_builder`: Named regex template (email, url, eth_address, tx_hash, ...) with live matching, or test a pattern against samples with ReDoS risk ($0.002).
- `ddg_request_ollama_model`: Queue a local model/runtime request. This never auto-downloads by public request.
- `ddg_robot_delegation_chain_audit`: Multi-robot delegation-contract audit: monotone caps, per-hop expiry + revocation, chain aggregate ($0.01).
- `ddg_robot_fleet_quota_audit`: Robot fleet spend-quota audit: per-robot caps, aggregate cap, unique ids, rate bound ($0.01).
- `ddg_robot_geo_fence_audit`: Physical/geographic authority audit: geofence, vertical bounds, outdoor scoping, speed cap ($0.01).
- `ddg_robot_human_takeover_audit`: Human handback audit: pause signal, handover latency, operator ack, resume policy ($0.01).
- `ddg_run_paid_model`: Run a paid model/chat or agent-run route after caller supplies valid payment headers.
- `ddg_search_services`: Find DDG agent-callable services matching a natural-language NEED.

    Returns the best-matching services (service_id, path, price, description) so an
    agent planner can pick the right one and then invoke it with ddg_call(service, args).
    This is the entry point to all DDG services — search first, then call.
    
- `ddg_security_service_catalog`: Return DDG's AI-agent cybersecurity service catalog.
- `ddg_seller_trust_badge`: Live conformance check of a seller endpoint -> gold/silver/bronze badge ($0.003). Checks discovery manifest, real 402, challenge shape, payTo consistency.
- `ddg_skill_safety_scan`: Run the free static-only DDG AI skill/workflow safety scan.

    The scan never executes submitted code and redacts secret-like evidence.
    
- `ddg_submit_order`: Submit a paid operator-reviewed DDG order after caller supplies valid payment headers/proof.
- `ddg_table_extract`: Extract HTML tables as JSON rows or CSV ($0.003).
- `ddg_token_estimate`: Deterministic token estimates per model family before a metered call ($0.001).
- `ddg_token_meta`: ERC-20 metadata: name, symbol, decimals, total supply ($0.001).
- `ddg_tx_smoke_test`: Exercise the one-cent DDG transaction smoke-test route with caller-supplied payment headers.
- `ddg_tx_status`: Transaction receipt: mined?, success?, block, gas, cost ($0.001).
- `ddg_wallet_snapshot`: Native + USDC balance (+optional extra ERC-20s) for an address ($0.002).
- `ddg_x402_bazaar_readiness`: Return CDP x402 Bazaar candidate resources, schema metadata, and settlement indexing gates.
- `ddg_x402scan_status`: Return DDG's x402scan registration status, resource URLs, and runtime probe guardrails.
- `ddg_x402_supported_chains`: Return all x402/direct-crypto chains DDG supports for AI-agent payment routing.