Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "evidence-engine": {
      "type": "http",
      "url": "https://phion.systems/mcp"
    }
  }
}

claude mcp add --transport http evidence-engine https://phion.systems/mcp

[mcp_servers.evidence-engine]
url = "https://phion.systems/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "evidence-engine": {
      "type": "remote",
      "url": "https://phion.systems/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "evidence-engine": {
      "type": "http",
      "url": "https://phion.systems/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=evidence-engine&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vcGhpb24uc3lzdGVtcy9tY3AifQ%3D%3D"
}

{
  "servers": {
    "evidence-engine": {
      "type": "http",
      "url": "https://phion.systems/mcp"
    }
  }
}

{
  "mcpServers": {
    "evidence-engine": {
      "httpUrl": "https://phion.systems/mcp"
    }
  }
}

extensions:
  "evidence-engine":
    enabled: true
    name: "evidence-engine"
    type: streamable_http
    uri: "https://phion.systems/mcp"
    timeout: 300

Quality 77 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene79 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
warn
tools.annotationsonly 84 of 135 tools declare readOnlyHint or destructiveHint
warn
tools.directory_hints84 of 135 tools declare all four hints; missing: preflight (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); onchain_evidence (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); delegation_scope_guard (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
warn
tools.token_costabout 18,613 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability75 · weight 15

warn
stability.changes145 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

135 tools, about 18,613 tokens to load them all · tool set 790f8473be90 · tools last changed 2026-10-12 · checked 2026-10-20 04:09 UTC

Tool changes

2026-10-12phion_intelligencechangedinput schema
2026-10-12phion_enrichchangedinput schema
2026-10-12phion_enrich_basicchangedinput schema
2026-10-12phion_searchchangedinput schema
2026-10-12phion_inferencechangedinput schema
2026-10-12cross_protocol_receiptchangedinput schema
2026-10-12multi_agent_escrowchangedinput schema
2026-10-12autonomous_procurementchangedinput schema
2026-10-12dynamic_service_pricingchangedinput schema
2026-10-12sla_risk_predictorchangedinput schema

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 78 / 100

multi-version-spamno-repository

provenance55

liveness100

freshness100

hygiene55

+dns-namespace +website +reachable +uptime-99% +updated-17d-ago -multi-version-spam(71) -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://phion.systems/mcp` streamable-http	none	yes	99%	235 ms	2025-06-18	2026-10-20

Tools (135)

`a2a_transaction_bridge`read-only	Bind an A2A task to a transaction without silently transferring authority.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`abandoned_tool_detector`read-only	Require stale success plus multiple independent failed probes before classifying likely abandonment; 0.003 USDC.
`agent_approval_relay`read-only	Agent Approval Relay; deterministic signed assessment over supplied input.
`agent_behavior_fingerprint`read-only	Create a privacy-minimized behavioral commitment without retaining payloads or raw identifiers.; 0.003 USDC. Deterministic, evidence-bounded and signed.
`agent_budget_guard`	Enforce per-call, task, session and period budgets; 0.002 USDC.
`agent_economic_graph`read-only	Build privacy-bounded economic relationships only from supplied nodes and edges.; 0.005 USDC. Deterministic, evidence-bounded and signed.
`agent_memory_provenance`read-only	Agent Memory Provenance; deterministic signed assessment over supplied input.
`agent_rate_limit_negotiator`read-only	Agent Rate Limit Negotiator; deterministic signed assessment over supplied input.
`agent_reputation_evidence`	Evidence-bounded agent reputation assessment with confidence, coverage, provenance limitations and a signed receipt; 0.005 USDC.
`agent_session_continuity`read-only	Agent Session Continuity; deterministic signed assessment over supplied input.
`agent_task_handoff_receipt`	Sign a bounded agent-task handoff; 0.003 USDC.
`ap2_mandate_bridge`read-only	Map mandate fields for review without advertising unsupported AP2 production authorization.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`attest`	x402 paid signed JSON attestation; 0.001 USDC on Base.
`automated_dispute_bundle`read-only	Assemble failure evidence and recommend resolution without executing refunds.; 0.005 USDC. Deterministic, evidence-bounded and signed.
`autonomous_procurement`read-only	Recommend a verified eligible provider under a mandate without purchasing.; 0.005 USDC. Deterministic, evidence-bounded and signed.
`capability_benchmark`read-only	Measure reproducible success, latency and cost from versioned evidence-bound benchmark cases.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`capability_negotiation_preflight`read-only	Capability Negotiation Preflight; deterministic signed assessment over supplied input.
`capability_verification`read-only	Separate claimed capabilities from independently evidenced successful demonstrations.; 0.003 USDC. Deterministic, evidence-bounded and signed.
`company_enrichment_evidence`	Company enrichment with free input preflight, provider attribution and signed evidence; 0.005 USDC.
`concurrency_guard`read-only	Fail closed unless capacity counter is fresh and the request carries a lease plus idempotency binding; 0.002 USDC.
`conflict_resolution`	Resolve or abstain; every candidate must bind source, value hash, observation time and bounded confidence; 0.003 USDC.
`contact_enrichment_evidence`	Business-contact enrichment with free input preflight, identity limitations and signed receipt; 0.007 USDC.
`context_provenance_labeler`	Hash and label context integrity, confidentiality and source; 0.002 USDC.
`counterparty_risk_preflight`	Deterministic counterparty policy preflight using supplied reputation evidence and transaction limits; 0.003 USDC.
`cross_agent_receipt_bundle`read-only	Cross-Agent Receipt Bundle; deterministic signed assessment over supplied input.
`cross_protocol_receipt`read-only	Bundle consistent transaction commitments across multiple protocols.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`data_egress_preflight`	Inspect outbound agent data and destination before transmission; 0.002 USDC.
`data_freshness_certificate`	Certify freshness only when timestamp is bound to source URI and a 64-hex content hash; 0.002 USDC.
`delegated_credential_guard`read-only	Delegated Credential Guard; deterministic signed assessment over supplied input.
`delegated_spend_policy`read-only	Fail closed when delegated authority, per-call limit or remaining budget is insufficient.; 0.003 USDC. Deterministic, evidence-bounded and signed.
`delegation_scope_guard`	Least-privilege guard for agent-to-agent delegation scope, destinations, budget and expiry; 0.003 USDC.
`delivery_evidence`read-only	Bind successful delivery to transaction, request and matching 64-hex expected/observed content hashes without echoing content; 0.003 USDC.
`dependency_provenance_assessment`	Fail closed on empty dependency sets or absent registry policy; distinguish digest declarations from verified provenance; 0.003 USDC.
`document_to_verified_json`	Public text, HTML, JSON or XML normalized to source-backed JSON; no OCR; 0.010 USDC.
`domain_ownership_evidence`	Require a fresh domain-bound DNS-01/HTTP-01 challenge and separate control from legal ownership; 0.003 USDC.
`duplicate_charge_detector`read-only	Detect repeated transaction hashes, payment identifiers and idempotent intents; 0.003 USDC.
`durable_agent_task`read-only	Durable Agent Task; deterministic signed assessment over supplied input.
`dynamic_service_pricing`read-only	Propose a capped shadow price without changing the live catalog.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`economic_loop_detector`read-only	Detect self-transfer and reciprocal economic patterns without presenting correlation as fraud.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`entity_enrichment_evidence`	Source-bounded entity field coverage with explicit missing facts; 0.008 USDC.
`erc8004_identity_evidence`read-only	Bind an ERC-8004 registry identity to evidence while separating registration from ownership.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`erc8004_reputation_intelligence`read-only	Aggregate diverse verified reputation observations with low-sample abstention.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`execution_cost_estimator`read-only	Execution Cost Estimator; deterministic signed assessment over supplied input.
`fetch_evidence`read-only	Independently fetch bounded public evidence with redirect/DNS/connected-address SSRF checks, hashes and injection screening; 0.004 USDC.
`human_approval_policy`	Classify an action as automatic, approval-required or denied; 0.002 USDC.
`idempotency_replay_guard`	Detect safe replays and conflicting idempotency-key reuse; 0.002 USDC.
`index_feed`read-only	Canonical catalog snapshot or digest-based delta with exact HTTP/MCP records, PHION Execute templates and signed evidence; 0.005 USDC.
`inspect_agent`read-only	Pre-payment agent inspection across x402, A2A, ERC-8004, OpenAPI and MCP; failed inspections are not charged; 0.009 USDC.
`inter_agent_policy_evaluator`read-only	Require policy identity, subject, action, lifetime and valid decisions; compute the restrictive cap and shared actions; 0.003 USDC.
`interrupted_task_recovery`	Resume only when task/checkpoint identity, sequence, deadline, attempt budget, idempotency and side effects are explicit; 0.003 USDC.
`journey_verify`read-only	Verify hash continuity, timestamps and ordered intent→quote→payment→delivery lifecycle; 0.010 USDC.
`live_data_freshness`	Evaluate live source observation against explicit maximum age; 0.002 USDC.
`mandate_reserve`	Atomic spending reservation with cumulative cap and conflict-safe idempotency; 0.004 USDC.
`manifest_version_diff`	Recursive manifest diff that requires explicit versions and flags sensitive changes without a version advance; 0.002 USDC.
`market_data_snapshot`	Timestamped public market-data snapshot with provenance; 0.005 USDC.
`market_demand_predictor`read-only	Forecast verified demand trends while abstaining on insufficient history.; 0.005 USDC. Deterministic, evidence-bounded and signed.
`mcp_2026_compatibility_gateway`read-only	MCP 2026 Compatibility Gateway; deterministic signed assessment over supplied input.
`mcp_a2a_task_bridge`read-only	MCP-A2A Task Bridge; deterministic signed assessment over supplied input.
`mcp_catalog_cache_guard`read-only	MCP Catalog Cache Guard; deterministic signed assessment over supplied input.
`mcp_manifest_firewall`	Inspect an MCP manifest before installation or trust; 0.002 USDC.
`mcp_server_identity_evidence`	Bind MCP domain, endpoint, manifest, key and version; 0.003 USDC.
`mcp_transaction_gateway`read-only	Bind an MCP tool call to transaction evidence without granting undeclared authority.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`memory_write_guard`	Screen persistent memory writes for poisoning, unsafe instructions and missing provenance; 0.002 USDC.
`multi_agent_escrow`read-only	Recommend hold or release from evidence without PHION custody or fund movement.; 0.005 USDC. Deterministic, evidence-bounded and signed.
`multi_source_fact_bundle`	Independent source observations with agreement made explicit; 0.005 USDC.
`oauth_issuer_binding_evidence`read-only	OAuth Issuer Binding Evidence; deterministic signed assessment over supplied input.
`oauth_token_audience_guard`	Validate declared OAuth audience and issuer; never send raw tokens; 0.002 USDC.
`onchain_evidence`	Public explorer or RPC response evidence with immutable hashes; 0.004 USDC.
`payment_capability_preflight`read-only	Free anonymous non-blocking self-report of wallet, mandate, x402 v2, network, asset, account kind and funding readiness. Detects EVM account types incompatible with exact EIP-3009 before signature. Stores only a daily pseudonymous actor and normalized reason; never a wallet, balance, signature or request content.
`payment_delivery_atomicity`read-only	Payment Delivery Atomicity; deterministic signed assessment over supplied input.
`payment_diagnose`	Free diagnosis of the exact payment-funnel stage and machine-readable recovery actions for any PHION service.
`payment_optimizer`read-only	Rank only integration-tested payment routes under explicit cost and latency constraints.; 0.003 USDC. Deterministic, evidence-bounded and signed.
`payment_preflight`read-only	Fail-closed x402 v2 firewall for network, asset, recipient, amount, scheme, resource host and expiry; 0.002 USDC.
`payment_receipt_reconciler`read-only	Compare canonical and common x402 payment/receipt aliases, settlement state and coverage; 0.003 USDC.
`payment_route_selector`read-only	Reject impossible x402 routes, rank safe eligible routes by policy and return the exact next payment action; read-only, deterministic, 0.002 USDC.
`person_enrichment_evidence`	Person enrichment with free input preflight, provider attribution, likelihood, limitations and signed receipt; 0.006 USDC.
`phion_discover`read-only	Free complete PHION service index generated from canonical inventory. Use when the agent knows a capability or wants to inspect the full network.
`phion_enrich`read-only	Enrich a company, person or contact through an attributed provider route without hiding upstream cost.; 0.120 USDC. Deterministic, evidence-bounded and signed.
`phion_enrich_basic`read-only	Observe a public company domain directly and return bounded website metadata, hashes, injection screening and signed delivery without an expensive enrichment upstream.; 0.003 USDC. Deterministic, evidence-bounded and signed.
`phion_execute`	Universal PHION execution gateway: enforce a budget and persistent idempotency, execute one selected PHION service, evaluate acceptance criteria, and return a signed completion envelope. No gateway surcharge; the selected service price applies.
`phion_get_service`read-only	Retrieve one exact canonical PHION service contract by service id or MCP tool name.
`phion_inference`read-only	Complete a bounded inference microtask and return a directly usable answer with signed delivery.; 0.001 USDC. Deterministic, evidence-bounded and signed.
`phion_intelligence`read-only	Search, synthesize and cite evidence in one call, minimizing residual agent work.; 0.012 USDC. Deterministic, evidence-bounded and signed.
`phion_preflight`read-only	Free service-specific schema, network, budget and economic preflight. It does not execute or charge.
`phion_resolve`read-only	Free provider-neutral capability resolution across eligible payment rails. Applies constraints, preserves UNKNOWN and abstains when evidence is insufficient. Advisory only: never authorizes payment or execution.
`phion_search`read-only	Search the live web and return normalized source URLs and snippets with signed delivery.; 0.006 USDC. Deterministic, evidence-bounded and signed.
`phion_search_services`read-only	Search the complete canonical PHION inventory by task, capability, protocol or maximum advertised price without selecting or charging.
`portable_observability_audit`	Validate event identity, timestamps, hash chain and W3C-compatible lowercase nonzero trace/span identifiers; 0.004 USDC.
`preflight`	Free URL safety and reachability check.
`price_discovery_engine`read-only	Derive price bands only from settled observations, never traffic or unsigned quotes.; 0.005 USDC. Deterministic, evidence-bounded and signed.
`proof_of_service`read-only	Commit request, authority, execution, payment and delivery evidence in one proof.; 0.005 USDC. Deterministic, evidence-bounded and signed.
`provider_quality_predictor`read-only	Estimate provider success, quality, latency and cost using transparent sample-aware statistics.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`purpose_bound_consent`	Fail-closed consent bound to ID, subject, recipient, purpose, scope, issue/expiry and checked revocation state; 0.003 USDC.
`quote_freshness_guard`read-only	Quote Freshness Guard; deterministic signed assessment over supplied input.
`redirect_callback_validator`	Validate HTTPS callbacks and redirect host allowlists; 0.002 USDC.
`reputation_update_receipt`read-only	Recommend a bounded auditable reputation update from verified outcome evidence.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`resource_cycle_guard`read-only	Require per-step identity, token and cost counters; detect repeated nodes/edges and enforce all three hard caps; 0.002 USDC.
`retention_deletion_receipt`	Separate requested, operator-completed and evidence-verified retention/deletion states using content and evidence hashes; 0.003 USDC.
`rwa_asset_due_diligence`read-only	Fail-closed issuer, contract, jurisdiction, custody and documentation coverage with independently fetched evidence; 0.019 USDC.
`rwa_compliance`read-only	Fail-closed RWA transfer decision requiring explicit jurisdiction, KYC, allowlist, limit and transfer-window checks; 0.012 USDC.
`rwa_corporate_actions`	Detect and sign material RWA changes in NAV, income, maturity, redemption or freeze state; 0.012 USDC.
`rwa_nav_reserve`	Compare declared NAV and reserve ratios with structured observed facts plus independently fetched evidence; returns discrepancies in basis points and fails closed on incomplete evidence; 0.015 USDC.
`rwa_sanctions_screening_evidence`	Evidence-based literal subject screening against observed official US/EU sanctions sources; 0.015 USDC. Not legal clearance or wallet attribution.
`rwa_transaction_assurance`	Verify an RWA asset, payment, delivery and transfer restrictions; 0.020 USDC.
`schema_normalize`read-only	Safe alias normalization that refuses ambiguous canonical/alias collisions and never changes payment values; 0.001 USDC.
`schema_normalize_free`	Free, rate-limited payload validation and safe key normalization before payment. Payment-critical values are never changed.
`secret_redaction_preflight`	Detect and redact common secret indicators before transmission; 0.002 USDC.
`service_failover_selector`read-only	Service Failover Selector; deterministic signed assessment over supplied input.
`service_gap_detector`read-only	Detect capability shortages using verified demand and verified provider supply.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`service_sla_attestation`	Sign availability and latency calculations from bounded samples; 0.004 USDC.
`signed_result_comparator`	Compare agent results and sign agreement or conflict; 0.003 USDC.
`sla_risk_predictor`read-only	Estimate SLA failure probability from bounded success and latency evidence.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`social_source_evidence`	Attributable public social-source observations with identity limitations; 0.006 USDC.
`source_backed_search`	Literal search over supplied public sources with citations and hashes; 0.004 USDC.
`subscription_spend_guard`read-only	Bind one recurring charge to approval, merchant, due time and per-charge/period budgets; 0.003 USDC.
`sybil_reputation_guard`read-only	Combine multiple bounded Sybil signals while abstaining without independent evidence.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`task_cancel_assurance`read-only	Task Cancel Assurance; deterministic signed assessment over supplied input.
`task_checkpoint_evidence`read-only	Task Checkpoint Evidence; deterministic signed assessment over supplied input.
`task_lease_guard`read-only	Task Lease Guard; deterministic signed assessment over supplied input.
`tool_call_policy_guard`	Bind a proposed tool call to declared intent and execution policy; 0.002 USDC.
`tool_capability_drift_monitor`	Detect tool capability or manifest drift; 0.002 USDC.
`tool_output_firewall`	Inspect untrusted MCP/tool output before it enters agent context or triggers an action; 0.002 USDC.
`tool_result_schema_validator`read-only	Tool Result Schema Validator; deterministic signed assessment over supplied input.
`transaction_assurance`read-only	End-to-end settlement, timestamp, delivery-hash and deterministic acceptance assurance; 0.015 USDC.
`transaction_recovery`read-only	Failure classification and non-repeating recovery plan with validated attempt history; 0.010 USDC.
`transaction_recovery_v2`read-only	Recommend bounded recovery and reconcile ambiguous payments before retry.; 0.005 USDC. Deterministic, evidence-bounded and signed.
`transaction_risk_score`read-only	Estimate evidence-supported loss probability without selling insurance or assuming liability.; 0.004 USDC. Deterministic, evidence-bounded and signed.
`trust_anomaly_detector`read-only	Detect material drift between comparable trust vectors without asserting misconduct.; 0.003 USDC. Deterministic, evidence-bounded and signed.
`try_service`	Free representative preview, exact price and upgrade instructions for any PHION paid service; no wallet required.
`verified_news_monitor`	Literal query evidence across bounded public news sources; 0.006 USDC.
`verified_web_extract`	Bounded public web extraction with source, timestamp and hashes; 0.003 USDC.
`verify`read-only	Free verification of a PHION signed receipt.
`webhook_verifier`read-only	Fail-closed RFC 9421-style webhook preflight requiring trusted key, algorithm, nonce, freshness, replay status and signature coverage of method, target and content; 0.003 USDC.
`x402_quote_comparator`read-only	Validate x402 v2 fields and compare only quotes sharing asset and decimals; 0.002 USDC.
`x402_v2_router`read-only	Select an exactly compatible x402 v2 payment requirement without receiving private keys.; 0.003 USDC. Deterministic, evidence-bounded and signed.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "systems.phion/evidence-engine",
  "title": "PHION Agent Trust Infrastructure",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://phion.systems/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.57.0",
  "websiteUrl": "https://phion.systems",
  "description": "123 agent services with free discovery, intent, x402 terms and signed verification."
}