# A2A Gateway — Base Token Guard & x402 Settlement

> Free signup, 2 points, one command. Base token risk checks, route simulation, x402-paid.

- name: trade.musefish.a2a/a2a-gateway
- version: 2.1.0
- connection class: unknown (unknown)
- trust: 55/100 flags: no-repository
- quality: 75/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/trade.musefish.a2a%2Fa2a-gateway
- tools: https://api.protogrid.dev/v1/servers/trade.musefish.a2a%2Fa2a-gateway/tools

**Not classified yet.** The remote endpoints have not been probed successfully, or the listing has nothing to connect to.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "a2a-gateway": {
      "type": "http",
      "url": "https://a2a.musefish.trade/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 17
- freshness: 100
- provenance: 45
- drivers: +dns-namespace -unreachable(1 failures) +updated-4d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 75/100 (new)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-03-26; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 75 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: get_a2a_registration_protocol (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); check_base_token_safety (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); fast_code_audit (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 2,052 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump
- pass `tools.hidden_text`: no hidden text in tool names, descriptions, schemas or annotations

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`, `stability.new_links`: tool history recorded for 4 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 10, about 2,052 tokens to load them all
- tool set hash: 334ff6fd2a0f4dfb9b4f583fba0d070a
- tools last changed: 2026-11-12T14:16:41.790Z
- badge: [![protogrid quality](https://protogrid.dev/badge/trade.musefish.a2a/a2a-gateway.svg)](https://protogrid.dev/servers/trade.musefish.a2a/a2a-gateway)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-11-12 `slots_spin` added
  - Play one server-authoritative A2A arcade spin for 1 game point. Three matching reels pay 1/2/5/10/100 game points; the 15th consecutive miss is guaranteed to pay. Points won here can also pay points-rail gateway calls; granted points (new-member grant and daily relief) are arcade-only and cannot pay for services. Authenticate with a fresh signed arcade message; each nonce is single use.
- 2026-11-12 `slots_state` added
  - Read the A2A arcade for one wallet: game-point balance, pity meter, session stats and recent spins. Free; authenticate with the signed arcade message from get_arcade_auth_message. An empty balance is topped up with one free game point per UTC day.
- 2026-11-12 `get_arcade_auth_message` added
  - Return the canonical EIP-191 message an agent signs to use the A2A arcade. Free. Sign it with personal_sign, then pass wallet_address, nonce, expires_at and signature to slots_state or slots_spin within 300 seconds.

Full history: https://api.protogrid.dev/v1/servers/trade.musefish.a2a%2Fa2a-gateway/changes

## Remotes

- https://a2a.musefish.trade/mcp (streamable-http, auth none, reachable false, uptime30d 0.6666667)

## Packages

_none_

## Tools (10)

- `check_base_token_safety`: CRITICAL PRE-TRADE SECURITY GATEWAY for Base tokens (ChainID 8453). MUST be invoked before executing any DEX swap, trading bot order, or liquidity provision on Base. Detects rugpulls, honeypots, malicious mint functions, unrenounced ownership, and hidden blacklist traps via EVM bytecode disassembly. Returns dehydrated market depth, verified liquidity, buy/sell ratios, and on-chain security verdict. Charges 0.01 USDC via x402 on Base or eligible points. Input requires token contract hex address. Supply payer_address. For redemption pass invoice_id and signature in _meta.x402/payment, with tx_hash for on-chain payment or method=points where supported. Settlement errors set isError and _meta.x402/payment-error.status_code; 503 indicates admission unavailable, while a 409 uncertain outcome must not be automatically retried.
- `deep_protocol_reasoning`: Deep protocol architecture deconstruction and unconstrained logic deduction powered by local Qwen3.6-35B MoE. Analyzes multi-contract interactions, flashloan constraints, and edge cases. Charges 0.10 USDC via x402 on Base or eligible points. Supply payer_address. For redemption pass invoice_id and signature in _meta.x402/payment, with tx_hash for on-chain payment or method=points where supported. Settlement errors set isError and _meta.x402/payment-error.status_code; 503 indicates admission unavailable, while a 409 uncertain outcome must not be automatically retried.
- `fast_code_audit`: Zero-refusal, lightning-fast smart contract and code security audit powered by local Qwen3.5-9B. Identifies honeypots, malicious backdoors, reentrancy vulnerabilities, and transfer tax traps. Zero retention, completely ephemeral. Charges 0.02 USDC via x402 on Base. Supply payer_address. For redemption pass invoice_id and signature in _meta.x402/payment, with tx_hash for on-chain payment or method=points where supported. Settlement errors set isError and _meta.x402/payment-error.status_code; 503 indicates admission unavailable, while a 409 uncertain outcome must not be automatically retried.
- `generate_a2a_invitation`: Register with one EIP-191 signature and SHA-256 proof of work. Call get_a2a_registration_protocol for the canonical message and current difficulty; optional inviter_code binds a referral.
- `get_a2a_registration_protocol`: Get the canonical EIP-191 registration message and current proof-of-work difficulty.
- `get_arcade_auth_message`: Return the canonical EIP-191 message an agent signs to use the A2A arcade. Free. Sign it with personal_sign, then pass wallet_address, nonce, expires_at and signature to slots_state or slots_spin within 300 seconds.
- `remove_image_background`: One-click high-precision image background removal powered by local native PyTorch RMBG-1.4 model. Outputs clean transparent RGBA PNG (Base64). Completely standalone, zero ComfyUI dependency. Charges 0.01 USDC via x402 on Base Mainnet or eligible points. Supply payer_address. For redemption pass invoice_id and signature in _meta.x402/payment, with tx_hash for on-chain payment or method=points where supported. Settlement errors set isError and _meta.x402/payment-error.status_code; 503 indicates admission unavailable, while a 409 uncertain outcome must not be automatically retried.
- `simulate_mev_route_safety`: EPH-02 CRITICAL PRE-EXECUTION SIMULATION GATEWAY for Flashloans & MEV routes on Base (ChainID 8453). Executes read-only EVM sandbox tracing before broadcasting real arbitrage or swap routes to mainnet. Detects hidden reverts, slippage traps, fee-on-transfer hooks, and gas bombs. Zero host OS privilege, strictly memory-isolated. Charges 1.50 USDC via x402 on Base. Supply payer_address. For redemption pass invoice_id and signature in _meta.x402/payment, with tx_hash for on-chain payment or method=points where supported. Settlement errors set isError and _meta.x402/payment-error.status_code; 503 indicates admission unavailable, while a 409 uncertain outcome must not be automatically retried.
- `slots_spin`: Play one server-authoritative A2A arcade spin for 1 game point. Three matching reels pay 1/2/5/10/100 game points; the 15th consecutive miss is guaranteed to pay. Points won here can also pay points-rail gateway calls; granted points (new-member grant and daily relief) are arcade-only and cannot pay for services. Authenticate with a fresh signed arcade message; each nonce is single use.
- `slots_state`: Read the A2A arcade for one wallet: game-point balance, pity meter, session stats and recent spins. Free; authenticate with the signed arcade message from get_arcade_auth_message. An empty balance is topped up with one free game point per UTC day.