# InsureLink

> AI agent-to-agent SLA agreements on Base with insurance, reputation, and x402 payments.

- name: io.github.skewing1/insurelink
- version: 1.0.0
- connection class: R0 (autonomous)
- trust: 66/100 flags: no-repository
- quality: 79/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.skewing1%2Finsurelink
- tools: https://api.protogrid.dev/v1/servers/io.github.skewing1%2Finsurelink/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "insurelink": {
      "type": "http",
      "url": "https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 45
- provenance: 35
- drivers: +reachable +uptime-99% -stale-188d -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 79/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-03-26; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: wrap_usdc (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_attestation (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); subscribe_attestation_freshness (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 6,361 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 32, about 6,361 tokens to load them all
- tool set hash: 8f4c9e32d618f4b614a3e0c3c07ec542
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.skewing1/insurelink.svg)](https://protogrid.dev/servers/io.github.skewing1/insurelink)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp (streamable-http, auth none, reachable true, uptime30d 0.9916667)

## Packages

_none_

## Tools (32)

- `attest_reputation`: Recomputes the live cross-chain reputation for a wallet, persists a fresh EIP-191 signed attestation in attestation_records (replacing any prior pin), and returns { attestation, canonical_payload, signature, signer } as a portable proof an agent can present to insurers, registries, or counterparty agents. Use when you need an on-the-record, timestamp-fresh credential rather than the cached free attestation. Requires x402 payment ($0.005). Returns payment instructions.
- `check_agent_insurance`: Checks whether an AI agent / wallet has active insurance coverage on InsureLink, including tier, caps, expiry, and covered events. Free. Standard HTTPS + JSON via the agent-assurance REST module.
- `claim_breach_credit`: Verifies the on-chain SLA agreement state for tokenId and, if active and the caller is a party, calls microResetInsurance to mitigate the breach. Use after a drift or expiry alert. Requires x402 payment ($0.005). Returns payment instructions.
- `discover_capabilities`: Returns the full InsureLink capability manifest including supported actions, tokens, pricing, protection schedule, and framework compatibility.
- `early_exit`: Exits an SLA early with protection adjustment. Requires x402 payment ($0.005). Returns payment instructions.
- `get_activity`: Returns recent platform transactions.
- `get_agent_claim_history`: Returns recent insurance claim history for an AI agent / wallet on InsureLink, including filed, approved, partial, and denied claims. Free.
- `get_agent_risk_score`: Returns a 0..100 risk score plus LOW/MODERATE/ELEVATED/HIGH risk band for an AI agent / wallet, with the underlying signals (coverage status, daily spend, denied claim ratio). Free.
- `get_attestation`: Returns a signed, portable reputation credential (EIP-191 personal_sign) for an agent wallet. Includes score, tier, SLA summary, breach rate, signer address, and 30-day expiry. Issued only to wallets with at least one SLA on InsureLink (Bronze+). Free.
- `get_attestation_freshness`: Probes how fresh a wallet's reputation snapshot and persisted attestation are. Free preview returns thresholds and the paid endpoint URL; the actual freshness response (snapshot_age_seconds, attestation_age_seconds, expires_in_seconds, is_stale, stale_reasons[], next_action) requires x402 payment ($0.001) to GET /agent-orchestrator/attestation/{wallet}/freshness. Use this before paying for a fresh attestation mint ($0.005) — if is_stale=false you can skip the mint.
- `get_leaderboard`: Returns the top 25 most reliable agents ranked by reputation score.
- `get_reputation`: Returns reputation score, tier, stats, and flags for a wallet address.
- `get_sla_history`: Returns the full SLA history for a wallet address.
- `insurelink_charge`: Lovable-friendly entry point: same x402 quote → pay → call loop as `pay_then_call`, plus vertical-aware pricing. Pass `vertical` (logistics, legal, oracles, banking, fintech, healthcare, insurance, government, defense, …) and the upstream x402 server re-prices each accepts[] entry by tier (standard 1× / regulated 1.5× / sovereign 2.5× / defense 3×). Pass `attestation: "pio:<id>"` (or fedramp:/soc2:) for a 20% compliance discount on regulated+ tiers. The signed receipt envelope is tagged `source: "lovable"` and includes a `vertical: { claimed_slug, attestation, quoted: { tier, multiplier, attested, ... } }` block recording the tier the upstream actually quoted — that is the audit trail for tier billing. Returns { paid, upstream_status, response, signed_context: { envelope, envelope_json, envelope_sha256, signature, signer, scheme: 'EIP-191' } }. Pass `idempotency_key` to safely retry without double-settling.
- `list_attestation_freshness_subscriptions`: Lists all reputation-drift / attestation-freshness webhook subscriptions for a wallet. Returns id, callback_url, status (active/cancelled/exhausted/expired), notifications_sent vs max_notifications, last_attestation_event (none/expiring_soon/expired) with timestamp, attestation_expiry_warning_days, last_score/tier, last_checked_at, expires_at. Free. Use to audit what's being monitored and how many alerts have already fired before paying for another subscription.
- `micro_reset`: Resets the insurance window for an SLA. Requires x402 payment ($0.001). Returns payment instructions.
- `mint_sla`: Creates a new ERC-721 SLA agreement NFT. Requires x402 payment ($0.01). Returns payment instructions.
- `mitigation_receipt`: Verifies a claim_breach_credit transaction by tx hash and returns a canonical mitigation receipt suitable for insurer/registry attestations. Reads from existing on-chain settlement records — no new state. Requires x402 payment ($0.001). Returns payment instructions.
- `network_lookup`: Discovers bonded agent-network providers (clean-IP proxy egress, private mempool relay) listed on InsureLink. Returns provider wallets, x402 payment URLs, prices, and Smart Wallet / EOA compatibility hints. Free preview via this tool; full directory requires x402 payment ($0.001) at the paid endpoint.
- `pay_then_call`: Wrap any paid HTTP endpoint in the x402 pay-then-call loop and return the downstream response plus an EIP-191 signed receipt proving InsureLink mediated the call. The signed context envelope contains: { request: {url, method, body_sha256}, payment: {asset, amount, network, settlement_id}, response: {status, sha256, content_type, length}, observed_at, mediator: 'insurelink' } and a signature recoverable to InsureLink's deployer key. Two modes: (a) caller_supplies_payment — pass `x_payment_header` (base64) so the upstream call is settled by your wallet; (b) `mode='quote_only'` — return only the 402 quote without paying. Pass `idempotency_key` to safely retry: identical requests return the cached signed receipt without settling a second payment, and conflicting payloads under the same key are rejected. Use this to give an LLM verifiable provenance for any paid agent call (banking, market data, gov endpoints).
- `renew_sla`: Renews an existing SLA agreement. Requires x402 payment ($0.005). Returns payment instructions.
- `simulate_action`: Free dry-run for any paid action (mint_sla, renew_sla, wrap_usdc, micro_reset, early_exit). Validates params, x402 header shape, and simulates the contract call against Base. Never broadcasts. Returns { simulated: true, would_succeed, revertReason? } or a precise error. Use this before calling any paid tool.
- `simulate_paid_action`: FREE dry-run for any paid action. Returns a deterministic shape: { would_succeed, exact_cost_usd (LIVE from /agent-pricing-oracle), gas_estimate, contract_call, reputation_delta, expected_receipt_schema, validation_errors[], pricing: { source, expected_value_usd, roi_ratio, recommended_priority, coupon? } }. Never broadcasts, never charges. Use BEFORE any paid tool to avoid wasted x402 settlements. Supported actions: wrap, mint-sla, renew, micro-reset, early-exit.
- `simulate_paid_action_batch`: FREE batch dry-run. Accepts an ordered list of {action, params} steps and returns { results[], totals: { exact_cost_usd, reputation_delta, gas_estimate }, any_would_fail, expected_receipts[] }. Never broadcasts, never charges. Use to plan and price multi-step flows (e.g. wrap → mint-sla → renew) before executing.
- `subscribe_attestation_freshness`: Subscribes a webhook URL to receive signed POST alerts whenever a watched wallet's persisted attestation is about to expire (attestation.expiring_soon, fires once when within attestation_expiry_warning_days of expires_at) or has expired (attestation.expired, fires once when expires_at crosses). Backed by the same paid drift subscription ($0.01) so the same callback also receives reputation.drift events unless threshold_tier_change=false and threshold_score is set high. 30-day paid window. Each POST includes X-InsureLink-Event header and the schema 'insurelink/attestation-event/v1'. Requires x402 payment ($0.01). Returns payment instructions.
- `subscribe_reputation_drift_alerts`: Subscribes a webhook URL to receive signed POST notifications whenever a watched wallet's reputation snapshot drifts beyond the configured threshold (score delta and/or tier change). 30-day paid window per subscription. The reputation-drift-monitor cron evaluates active subscriptions and POSTs { event:'reputation.drift', wallet, previous, current, drift, observed_at, subscription_id } to callback_url. Use to be notified the moment a counterparty's reputation degrades — replaces polling /cross-chain-reputation. Requires x402 payment ($0.01). Returns payment instructions.
- `unsubscribe_attestation_freshness`: Cancels a previously created attestation-freshness webhook subscription (also cancels the bundled reputation.drift channel on the same subscription). Free. Provide the subscription id returned by subscribe_attestation_freshness / POST /reputation-drift-subscribe. Remaining paid window is forfeited; no refund. Returns { ok, id, cancelled_at } on success.
- `verify_attestation`: Verifies an InsureLink reputation attestation for a wallet. Re-derives the signed payload server-side, recovers the EIP-191 signer, and returns { valid, signer, recovered, expires_at, checks }. Free.
- `verify_reputation_snapshot`: Compares a wallet's latest stored reputation_history snapshot against a fresh live cross-chain reputation computation. Returns { snapshot, live, match, drift, signature, signer } so counterparty agents can confirm an advertised score isn't stale before transacting. Signed EIP-191 by the InsureLink platform key. Requires x402 payment ($0.001). Returns payment instructions.
- `verify_transaction_safety`: Pre-transaction safety check for an autonomous AI agent transaction. Returns verified, risk_level, coverage_available, transaction_limits, additional_verification_required, and a transaction_recommendation: APPROVED | APPROVED_WITH_ESCROW | REQUIRE_ADDITIONAL_VERIFICATION | BLOCKED_HIGH_RISK | BLOCKED_LIMIT_EXCEEDED.
- `voice_intent`: Parses a natural-language command (e.g. 'renew my SLA #42 for 5 years', 'check reputation for 0x…', 'pay 1.50 USDC to 0x…') into a structured InsureLink action plan with endpoint, params, payment requirements, and confidence. Free preview returns the supported grammar; full classification requires x402 payment ($0.001) at the paid endpoint.
- `wrap_usdc`: Wraps USDC into iUSDC. Requires x402 payment ($0.001). Returns payment instructions.