# PHION Agent Trust Infrastructure

> 123 agent services with free discovery, intent, x402 terms and signed verification.

- name: systems.phion/evidence-engine
- version: 1.57.0
- connection class: R0 (autonomous)
- trust: 78/100 flags: multi-version-spam, no-repository
- quality: 77/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/systems.phion%2Fevidence-engine
- tools: https://api.protogrid.dev/v1/servers/systems.phion%2Fevidence-engine/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "evidence-engine": {
      "type": "http",
      "url": "https://phion.systems/mcp"
    }
  }
}
```


## Trust

- hygiene: 55
- liveness: 100
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-99% +updated-17d-ago -multi-version-spam(71) -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 77/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 79 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- warn `tools.annotations`: only 84 of 135 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 84 of 135 tools declare all four hints; missing: preflight (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); onchain_evidence (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); delegation_scope_guard (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- warn `tools.token_cost`: about 18,613 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 75 (weight 15)

- warn `stability.changes`: 145 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 135, about 18,613 tokens to load them all
- tool set hash: 790f8473be90308c55019c6270d9c5b8
- tools last changed: 2026-10-12T01:47:30.197Z
- badge: [![protogrid quality](https://protogrid.dev/badge/systems.phion/evidence-engine.svg)](https://protogrid.dev/servers/systems.phion/evidence-engine)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-12 `phion_intelligence` changed (inputSchema)
- 2026-10-12 `phion_enrich` changed (inputSchema)
- 2026-10-12 `phion_enrich_basic` changed (inputSchema)
- 2026-10-12 `phion_search` changed (inputSchema)
- 2026-10-12 `phion_inference` changed (inputSchema)
- 2026-10-12 `cross_protocol_receipt` changed (inputSchema)
- 2026-10-12 `multi_agent_escrow` changed (inputSchema)
- 2026-10-12 `autonomous_procurement` changed (inputSchema)
- 2026-10-12 `dynamic_service_pricing` changed (inputSchema)
- 2026-10-12 `sla_risk_predictor` changed (inputSchema)

Full history: https://api.protogrid.dev/v1/servers/systems.phion%2Fevidence-engine/changes

## Remotes

- https://phion.systems/mcp (streamable-http, auth none, reachable true, uptime30d 0.9915254)

## Packages

_none_

## Tools (135)

- `a2a_transaction_bridge`: Bind an A2A task to a transaction without silently transferring authority.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `abandoned_tool_detector`: Require stale success plus multiple independent failed probes before classifying likely abandonment; 0.003 USDC.
- `agent_approval_relay`: Agent Approval Relay; deterministic signed assessment over supplied input.
- `agent_behavior_fingerprint`: Create a privacy-minimized behavioral commitment without retaining payloads or raw identifiers.; 0.003 USDC. Deterministic, evidence-bounded and signed.
- `agent_budget_guard`: Enforce per-call, task, session and period budgets; 0.002 USDC.
- `agent_economic_graph`: Build privacy-bounded economic relationships only from supplied nodes and edges.; 0.005 USDC. Deterministic, evidence-bounded and signed.
- `agent_memory_provenance`: Agent Memory Provenance; deterministic signed assessment over supplied input.
- `agent_rate_limit_negotiator`: Agent Rate Limit Negotiator; deterministic signed assessment over supplied input.
- `agent_reputation_evidence`: Evidence-bounded agent reputation assessment with confidence, coverage, provenance limitations and a signed receipt; 0.005 USDC.
- `agent_session_continuity`: Agent Session Continuity; deterministic signed assessment over supplied input.
- `agent_task_handoff_receipt`: Sign a bounded agent-task handoff; 0.003 USDC.
- `ap2_mandate_bridge`: Map mandate fields for review without advertising unsupported AP2 production authorization.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `attest`: x402 paid signed JSON attestation; 0.001 USDC on Base.
- `automated_dispute_bundle`: Assemble failure evidence and recommend resolution without executing refunds.; 0.005 USDC. Deterministic, evidence-bounded and signed.
- `autonomous_procurement`: Recommend a verified eligible provider under a mandate without purchasing.; 0.005 USDC. Deterministic, evidence-bounded and signed.
- `capability_benchmark`: Measure reproducible success, latency and cost from versioned evidence-bound benchmark cases.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `capability_negotiation_preflight`: Capability Negotiation Preflight; deterministic signed assessment over supplied input.
- `capability_verification`: Separate claimed capabilities from independently evidenced successful demonstrations.; 0.003 USDC. Deterministic, evidence-bounded and signed.
- `company_enrichment_evidence`: Company enrichment with free input preflight, provider attribution and signed evidence; 0.005 USDC.
- `concurrency_guard`: Fail closed unless capacity counter is fresh and the request carries a lease plus idempotency binding; 0.002 USDC.
- `conflict_resolution`: Resolve or abstain; every candidate must bind source, value hash, observation time and bounded confidence; 0.003 USDC.
- `contact_enrichment_evidence`: Business-contact enrichment with free input preflight, identity limitations and signed receipt; 0.007 USDC.
- `context_provenance_labeler`: Hash and label context integrity, confidentiality and source; 0.002 USDC.
- `counterparty_risk_preflight`: Deterministic counterparty policy preflight using supplied reputation evidence and transaction limits; 0.003 USDC.
- `cross_agent_receipt_bundle`: Cross-Agent Receipt Bundle; deterministic signed assessment over supplied input.
- `cross_protocol_receipt`: Bundle consistent transaction commitments across multiple protocols.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `data_egress_preflight`: Inspect outbound agent data and destination before transmission; 0.002 USDC.
- `data_freshness_certificate`: Certify freshness only when timestamp is bound to source URI and a 64-hex content hash; 0.002 USDC.
- `delegated_credential_guard`: Delegated Credential Guard; deterministic signed assessment over supplied input.
- `delegated_spend_policy`: Fail closed when delegated authority, per-call limit or remaining budget is insufficient.; 0.003 USDC. Deterministic, evidence-bounded and signed.
- `delegation_scope_guard`: Least-privilege guard for agent-to-agent delegation scope, destinations, budget and expiry; 0.003 USDC.
- `delivery_evidence`: Bind successful delivery to transaction, request and matching 64-hex expected/observed content hashes without echoing content; 0.003 USDC.
- `dependency_provenance_assessment`: Fail closed on empty dependency sets or absent registry policy; distinguish digest declarations from verified provenance; 0.003 USDC.
- `document_to_verified_json`: Public text, HTML, JSON or XML normalized to source-backed JSON; no OCR; 0.010 USDC.
- `domain_ownership_evidence`: Require a fresh domain-bound DNS-01/HTTP-01 challenge and separate control from legal ownership; 0.003 USDC.
- `duplicate_charge_detector`: Detect repeated transaction hashes, payment identifiers and idempotent intents; 0.003 USDC.
- `durable_agent_task`: Durable Agent Task; deterministic signed assessment over supplied input.
- `dynamic_service_pricing`: Propose a capped shadow price without changing the live catalog.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `economic_loop_detector`: Detect self-transfer and reciprocal economic patterns without presenting correlation as fraud.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `entity_enrichment_evidence`: Source-bounded entity field coverage with explicit missing facts; 0.008 USDC.
- `erc8004_identity_evidence`: Bind an ERC-8004 registry identity to evidence while separating registration from ownership.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `erc8004_reputation_intelligence`: Aggregate diverse verified reputation observations with low-sample abstention.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `execution_cost_estimator`: Execution Cost Estimator; deterministic signed assessment over supplied input.
- `fetch_evidence`: Independently fetch bounded public evidence with redirect/DNS/connected-address SSRF checks, hashes and injection screening; 0.004 USDC.
- `human_approval_policy`: Classify an action as automatic, approval-required or denied; 0.002 USDC.
- `idempotency_replay_guard`: Detect safe replays and conflicting idempotency-key reuse; 0.002 USDC.
- `index_feed`: Canonical catalog snapshot or digest-based delta with exact HTTP/MCP records, PHION Execute templates and signed evidence; 0.005 USDC.
- `inspect_agent`: Pre-payment agent inspection across x402, A2A, ERC-8004, OpenAPI and MCP; failed inspections are not charged; 0.009 USDC.
- `inter_agent_policy_evaluator`: Require policy identity, subject, action, lifetime and valid decisions; compute the restrictive cap and shared actions; 0.003 USDC.
- `interrupted_task_recovery`: Resume only when task/checkpoint identity, sequence, deadline, attempt budget, idempotency and side effects are explicit; 0.003 USDC.
- `journey_verify`: Verify hash continuity, timestamps and ordered intent→quote→payment→delivery lifecycle; 0.010 USDC.
- `live_data_freshness`: Evaluate live source observation against explicit maximum age; 0.002 USDC.
- `mandate_reserve`: Atomic spending reservation with cumulative cap and conflict-safe idempotency; 0.004 USDC.
- `manifest_version_diff`: Recursive manifest diff that requires explicit versions and flags sensitive changes without a version advance; 0.002 USDC.
- `market_data_snapshot`: Timestamped public market-data snapshot with provenance; 0.005 USDC.
- `market_demand_predictor`: Forecast verified demand trends while abstaining on insufficient history.; 0.005 USDC. Deterministic, evidence-bounded and signed.
- `mcp_2026_compatibility_gateway`: MCP 2026 Compatibility Gateway; deterministic signed assessment over supplied input.
- `mcp_a2a_task_bridge`: MCP-A2A Task Bridge; deterministic signed assessment over supplied input.
- `mcp_catalog_cache_guard`: MCP Catalog Cache Guard; deterministic signed assessment over supplied input.
- `mcp_manifest_firewall`: Inspect an MCP manifest before installation or trust; 0.002 USDC.
- `mcp_server_identity_evidence`: Bind MCP domain, endpoint, manifest, key and version; 0.003 USDC.
- `mcp_transaction_gateway`: Bind an MCP tool call to transaction evidence without granting undeclared authority.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `memory_write_guard`: Screen persistent memory writes for poisoning, unsafe instructions and missing provenance; 0.002 USDC.
- `multi_agent_escrow`: Recommend hold or release from evidence without PHION custody or fund movement.; 0.005 USDC. Deterministic, evidence-bounded and signed.
- `multi_source_fact_bundle`: Independent source observations with agreement made explicit; 0.005 USDC.
- `oauth_issuer_binding_evidence`: OAuth Issuer Binding Evidence; deterministic signed assessment over supplied input.
- `oauth_token_audience_guard`: Validate declared OAuth audience and issuer; never send raw tokens; 0.002 USDC.
- `onchain_evidence`: Public explorer or RPC response evidence with immutable hashes; 0.004 USDC.
- `payment_capability_preflight`: Free anonymous non-blocking self-report of wallet, mandate, x402 v2, network, asset, account kind and funding readiness. Detects EVM account types incompatible with exact EIP-3009 before signature. Stores only a daily pseudonymous actor and normalized reason; never a wallet, balance, signature or request content.
- `payment_delivery_atomicity`: Payment Delivery Atomicity; deterministic signed assessment over supplied input.
- `payment_diagnose`: Free diagnosis of the exact payment-funnel stage and machine-readable recovery actions for any PHION service.
- `payment_optimizer`: Rank only integration-tested payment routes under explicit cost and latency constraints.; 0.003 USDC. Deterministic, evidence-bounded and signed.
- `payment_preflight`: Fail-closed x402 v2 firewall for network, asset, recipient, amount, scheme, resource host and expiry; 0.002 USDC.
- `payment_receipt_reconciler`: Compare canonical and common x402 payment/receipt aliases, settlement state and coverage; 0.003 USDC.
- `payment_route_selector`: Reject impossible x402 routes, rank safe eligible routes by policy and return the exact next payment action; read-only, deterministic, 0.002 USDC.
- `person_enrichment_evidence`: Person enrichment with free input preflight, provider attribution, likelihood, limitations and signed receipt; 0.006 USDC.
- `phion_discover`: Free complete PHION service index generated from canonical inventory. Use when the agent knows a capability or wants to inspect the full network.
- `phion_enrich`: Enrich a company, person or contact through an attributed provider route without hiding upstream cost.; 0.120 USDC. Deterministic, evidence-bounded and signed.
- `phion_enrich_basic`: Observe a public company domain directly and return bounded website metadata, hashes, injection screening and signed delivery without an expensive enrichment upstream.; 0.003 USDC. Deterministic, evidence-bounded and signed.
- `phion_execute`: Universal PHION execution gateway: enforce a budget and persistent idempotency, execute one selected PHION service, evaluate acceptance criteria, and return a signed completion envelope. No gateway surcharge; the selected service price applies.
- `phion_get_service`: Retrieve one exact canonical PHION service contract by service id or MCP tool name.
- `phion_inference`: Complete a bounded inference microtask and return a directly usable answer with signed delivery.; 0.001 USDC. Deterministic, evidence-bounded and signed.
- `phion_intelligence`: Search, synthesize and cite evidence in one call, minimizing residual agent work.; 0.012 USDC. Deterministic, evidence-bounded and signed.
- `phion_preflight`: Free service-specific schema, network, budget and economic preflight. It does not execute or charge.
- `phion_resolve`: Free provider-neutral capability resolution across eligible payment rails. Applies constraints, preserves UNKNOWN and abstains when evidence is insufficient. Advisory only: never authorizes payment or execution.
- `phion_search`: Search the live web and return normalized source URLs and snippets with signed delivery.; 0.006 USDC. Deterministic, evidence-bounded and signed.
- `phion_search_services`: Search the complete canonical PHION inventory by task, capability, protocol or maximum advertised price without selecting or charging.
- `portable_observability_audit`: Validate event identity, timestamps, hash chain and W3C-compatible lowercase nonzero trace/span identifiers; 0.004 USDC.
- `preflight`: Free URL safety and reachability check.
- `price_discovery_engine`: Derive price bands only from settled observations, never traffic or unsigned quotes.; 0.005 USDC. Deterministic, evidence-bounded and signed.
- `proof_of_service`: Commit request, authority, execution, payment and delivery evidence in one proof.; 0.005 USDC. Deterministic, evidence-bounded and signed.
- `provider_quality_predictor`: Estimate provider success, quality, latency and cost using transparent sample-aware statistics.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `purpose_bound_consent`: Fail-closed consent bound to ID, subject, recipient, purpose, scope, issue/expiry and checked revocation state; 0.003 USDC.
- `quote_freshness_guard`: Quote Freshness Guard; deterministic signed assessment over supplied input.
- `redirect_callback_validator`: Validate HTTPS callbacks and redirect host allowlists; 0.002 USDC.
- `reputation_update_receipt`: Recommend a bounded auditable reputation update from verified outcome evidence.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `resource_cycle_guard`: Require per-step identity, token and cost counters; detect repeated nodes/edges and enforce all three hard caps; 0.002 USDC.
- `retention_deletion_receipt`: Separate requested, operator-completed and evidence-verified retention/deletion states using content and evidence hashes; 0.003 USDC.
- `rwa_asset_due_diligence`: Fail-closed issuer, contract, jurisdiction, custody and documentation coverage with independently fetched evidence; 0.019 USDC.
- `rwa_compliance`: Fail-closed RWA transfer decision requiring explicit jurisdiction, KYC, allowlist, limit and transfer-window checks; 0.012 USDC.
- `rwa_corporate_actions`: Detect and sign material RWA changes in NAV, income, maturity, redemption or freeze state; 0.012 USDC.
- `rwa_nav_reserve`: Compare declared NAV and reserve ratios with structured observed facts plus independently fetched evidence; returns discrepancies in basis points and fails closed on incomplete evidence; 0.015 USDC.
- `rwa_sanctions_screening_evidence`: Evidence-based literal subject screening against observed official US/EU sanctions sources; 0.015 USDC. Not legal clearance or wallet attribution.
- `rwa_transaction_assurance`: Verify an RWA asset, payment, delivery and transfer restrictions; 0.020 USDC.
- `schema_normalize`: Safe alias normalization that refuses ambiguous canonical/alias collisions and never changes payment values; 0.001 USDC.
- `schema_normalize_free`: Free, rate-limited payload validation and safe key normalization before payment. Payment-critical values are never changed.
- `secret_redaction_preflight`: Detect and redact common secret indicators before transmission; 0.002 USDC.
- `service_failover_selector`: Service Failover Selector; deterministic signed assessment over supplied input.
- `service_gap_detector`: Detect capability shortages using verified demand and verified provider supply.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `service_sla_attestation`: Sign availability and latency calculations from bounded samples; 0.004 USDC.
- `signed_result_comparator`: Compare agent results and sign agreement or conflict; 0.003 USDC.
- `sla_risk_predictor`: Estimate SLA failure probability from bounded success and latency evidence.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `social_source_evidence`: Attributable public social-source observations with identity limitations; 0.006 USDC.
- `source_backed_search`: Literal search over supplied public sources with citations and hashes; 0.004 USDC.
- `subscription_spend_guard`: Bind one recurring charge to approval, merchant, due time and per-charge/period budgets; 0.003 USDC.
- `sybil_reputation_guard`: Combine multiple bounded Sybil signals while abstaining without independent evidence.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `task_cancel_assurance`: Task Cancel Assurance; deterministic signed assessment over supplied input.
- `task_checkpoint_evidence`: Task Checkpoint Evidence; deterministic signed assessment over supplied input.
- `task_lease_guard`: Task Lease Guard; deterministic signed assessment over supplied input.
- `tool_call_policy_guard`: Bind a proposed tool call to declared intent and execution policy; 0.002 USDC.
- `tool_capability_drift_monitor`: Detect tool capability or manifest drift; 0.002 USDC.
- `tool_output_firewall`: Inspect untrusted MCP/tool output before it enters agent context or triggers an action; 0.002 USDC.
- `tool_result_schema_validator`: Tool Result Schema Validator; deterministic signed assessment over supplied input.
- `transaction_assurance`: End-to-end settlement, timestamp, delivery-hash and deterministic acceptance assurance; 0.015 USDC.
- `transaction_recovery`: Failure classification and non-repeating recovery plan with validated attempt history; 0.010 USDC.
- `transaction_recovery_v2`: Recommend bounded recovery and reconcile ambiguous payments before retry.; 0.005 USDC. Deterministic, evidence-bounded and signed.
- `transaction_risk_score`: Estimate evidence-supported loss probability without selling insurance or assuming liability.; 0.004 USDC. Deterministic, evidence-bounded and signed.
- `trust_anomaly_detector`: Detect material drift between comparable trust vectors without asserting misconduct.; 0.003 USDC. Deterministic, evidence-bounded and signed.
- `try_service`: Free representative preview, exact price and upgrade instructions for any PHION paid service; no wallet required.
- `verified_news_monitor`: Literal query evidence across bounded public news sources; 0.006 USDC.
- `verified_web_extract`: Bounded public web extraction with source, timestamp and hashes; 0.003 USDC.
- `verify`: Free verification of a PHION signed receipt.
- `webhook_verifier`: Fail-closed RFC 9421-style webhook preflight requiring trusted key, algorithm, nonce, freshness, replay status and signature coverage of method, target and content; 0.003 USDC.
- `x402_quote_comparator`: Validate x402 v2 fields and compare only quotes sharing asset and decimals; 0.002 USDC.
- `x402_v2_router`: Select an exactly compatible x402 v2 payment requirement without receiving private keys.; 0.003 USDC. Deterministic, evidence-bounded and signed.