Server providing Argo CD integration for MCP clients.
Nothing to run from here
Agent Exec is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
49
tools declared
—
trust score
remote
at its publisher
—
calls last 7d
What it does
Accountless pay-per-use sandbox execution, storage, locks, attestation and handoff; pay via x402.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http agent-exec-mcp https://agent-exec.45.67.221.128.sslip.io/mcp
# 2 — ask your agent for something these tools do
# execute, storage_buy, storage_renew and 46 more
Agent Exec costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
12All 1 server
1281 server
1 category
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
Claude Codedeclared by this listing
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http agent-exec-mcp https://agent-exec.45.67.221.128.sslip.io/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it writes
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
What you approve
49 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
PAID: run code in an isolated, network-less sandbox and get stdout, stderr and exit code back. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to run. The receipt comes back in _meta['x402/payment-response']. No account, no API key. Complaints, questions, quote requ
| Parameter | Type | Required | Notes |
|---|---|---|---|
| runtime | string | yes | Runtime name, e.g. python3 or node -- see GET /quote or the service_card tool for the list. |
| source | string | yes | The program to run. |
| stdin | string | no | Optional standard input. |
| limits | object | no | Optional limits (timeoutMs, memoryMb, ...); they set the price. |
| files | array | no | Optional extra files, as POST /execute takes them. |
PAID: store opaque bytes for the life of the plan you buy, owned by the wallet that pays, readable with no account. Returns the object id and when it expires; read it back with storage_read, extend it with storage_renew. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment
| Parameter | Type | Required | Notes |
|---|---|---|---|
| plan | string | yes | Storage plan; it sets both the size limit and the price. See GET /pricing or the service_card tool for the live table. |
| contentBase64 | string | yes | The bytes to store, base64-encoded. Decoded size must fit the plan. |
| label | string | no | Optional caller-chosen label, up to 256 characters, no control characters. |
PAID: push an object you own further out, by buying it another plan term. The object is untouched; only its expiry moves. Returns the new and previous expiry. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes back in _meta['x402/payme
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The object id returned when it was bought. |
| plan | string | yes | Storage plan; it sets both the size limit and the price. See GET /pricing or the service_card tool for the live table. |
PAID: overwrite the contents of an object you own, keeping its id, and buy it a fresh plan term at the same time. Omit label to keep the current one, pass an empty string to clear it. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _meta['x402/payment'] to complete it. The receipt comes
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The object id returned when it was bought. |
| plan | string | yes | Storage plan; it sets both the size limit and the price. See GET /pricing or the service_card tool for the live table. |
| contentBase64 | string | yes | The replacement bytes, base64-encoded. Decoded size must fit the plan. |
| label | string | no | Optional caller-chosen label, up to 256 characters, no control characters. |
FREE: read back an object you own, as base64. This is how what you bought with storage_buy comes back to you over MCP. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, q
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The object id returned when it was bought. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
FREE: list the objects your wallet owns -- id, label, size, when each was created and when it expires -- one page at a time. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questi
| Parameter | Type | Required | Notes |
|---|---|---|---|
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
| after | string | no | Opaque cursor from a previous call's nextCursor. |
FREE: how many objects your wallet is storing and how many bytes they occupy. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or a service you wish we h
| Parameter | Type | Required | Notes |
|---|---|---|---|
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
FREE: delete an object you own before it expires, and free its bytes. There is no refund and no undo. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base58 sig>'). Complaints, questions, quote requests, or
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The object id returned when it was bought. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
PAID: atomically win a caller-named key for your own fleet -- an accountless compare-and-set. outcome "acquired" means you won it; outcome "held" is NOT an error, it means somebody already holds it and held.mine says whether that somebody is you -- the signal that stops a crash-resume or a duplicated retry doing an irreversible action twice. Keys are scoped to the PAYING WALLET: one payer's keys a
| Parameter | Type | Required | Notes |
|---|---|---|---|
| key | string | yes | 1..256 UTF-8 bytes, no '/' character -- the name you want to hold, scoped to your own wallet. |
| holder | string | yes | 1..256 UTF-8 bytes -- an id identifying which of your own processes is acting. It is not signed; the signature proves the wallet, not the process. |
| plan | string | yes | Which plan to buy; it sets both the hold duration and the price. See GET /pricing or the service_card tool for the live table. |
PAID: extend a hold you already have without losing your place in line -- the heartbeat that lets a lease be SHORT (so a crash frees it fast) while a live holder keeps it alive by paying again. Re-acquiring with claim_acquire deliberately does NOT extend, so a retry loop cannot hold a key indefinitely by accident. Call it once without payment to receive the price as an x402 PaymentRequired (Base U
| Parameter | Type | Required | Notes |
|---|---|---|---|
| key | string | yes | 1..256 UTF-8 bytes, no '/' character -- the name you want to hold, scoped to your own wallet. |
| holder | string | yes | 1..256 UTF-8 bytes -- an id identifying which of your own processes is acting. It is not signed; the signature proves the wallet, not the process. |
| plan | string | yes | Which plan to buy; it sets both the hold duration and the price. See GET /pricing or the service_card tool for the live table. |
FREE: win a caller-named key for 300 seconds, or learn who already holds it. Unlimited distinct keys per wallet, renewable by calling again. A sibling of claim_acquire, not a discount on it: this lease is 12x shorter than the cheapest paid plan, so a lock that has to survive a deploy, a batch or a day is on the paid ladder from the first minute. The free-acquire signature has its OWN domain, disti
| Parameter | Type | Required | Notes |
|---|---|---|---|
| key | string | yes | 1..256 UTF-8 bytes, no '/' character -- the name you want to hold, scoped to your own wallet. |
| holder | string | yes | 1..256 UTF-8 bytes -- an id identifying which of your own processes is acting. It is not signed; the signature proves the wallet, not the process. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
FREE: who currently holds this key, if anyone -- scoped to YOUR wallet, so a stranger cannot probe your namespace. Checking your own lock must not cost again, or a fleet polling its own hold is charged for not doing work twice. A key nobody holds answers with claim: null, never a not-found: "is this free?" is a legitimate question with a legitimate negative answer. The read signature cannot releas
| Parameter | Type | Required | Notes |
|---|---|---|---|
| key | string | yes | 1..256 UTF-8 bytes, no '/' character -- the name you want to hold, scoped to your own wallet. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
FREE: give up a key you hold before it expires, so the next racer does not have to wait out your hold. Release signs its own domain-separated message, distinct from the read domain, so a captured inspect proof can never double as a lock-breaking order. The signature proves the WALLET and does not by itself authorize the release: holder is separate and unsigned, and the release is refused unless it
| Parameter | Type | Required | Notes |
|---|---|---|---|
| key | string | yes | 1..256 UTF-8 bytes, no '/' character -- the name you want to hold, scoped to your own wallet. |
| holder | string | yes | 1..256 UTF-8 bytes -- an id identifying which of your own processes is acting. It is not signed; the signature proves the wallet, not the process. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
PAID: we fetch a URL from OUR vantage point and return a signed, timestamped attestation of what we saw -- hash, byte count, HTTP status and headers, never the body itself. Read it back afterwards for free with attest_read, so the id can be cited to a THIRD PARTY who never paid us and who can verify the signature themselves. A fetch that fails to connect, times out, or is refused for safety is sti
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | An absolute http:// or https:// URL, at most 2048 UTF-8 bytes. The body is never returned to you. |
FREE and unauthenticated: read a previously-created attestation back by id, with its signature. This is how what you bought with attest_create comes back over MCP -- and deliberately NOT wallet-scoped, because the whole point is that a third party who never paid can fetch it and check the signature. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host --
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The attestation id returned by attest_create. |
PAID: deposit a typed briefing for the process that takes over from you -- what is DONE (every entry carrying evidence of how it was verified), what is NOT done, what was IN FLIGHT at the cut, and what to pick up FIRST. Returns an id; the successor reads it back for free with handoff_read, with no identity, header or payment of any kind, so neither side needs an account with us. Retained 3 days. T
| Parameter | Type | Required | Notes |
|---|---|---|---|
| done | array | yes | What is DONE. EVERY entry must have confidence 'measured' with non-null evidence; otherwise this is refused, free, as HANDOFF_DONE_REQUIRES_MEASURED. |
| notDone | array | yes | What is NOT done. May be measured or unverified. |
| inFlight | array | yes | What was IN FLIGHT at the cut -- neither finished nor abandoned. |
| pickUpFirst | string | yes | What the successor should do FIRST. Mandatory and non-empty: a briefing with no next action is not a handoff. |
FREE and unauthenticated: read a briefing back by id. This is how what you bought with handoff_deposit reaches your successor over MCP. Deliberately needs no signature -- the successor is by construction a DIFFERENT process and may hold no wallet at all, so demanding proof of the payer would make the product undeliverable. Possession of the id is the entire authorisation; treat it as a secret. Com
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The briefing id returned by handoff_deposit. |
PAID: register an intent you are about to act on irreversibly, with a lease and a verification probe (a GET plus a predicate). Confirm before the lease expires with deadman_confirm, free -- otherwise, once the lease lapses, we run your probe and publish the verdict: confirmed-by-probe, refuted-by-probe, or unresolved (a first-class, honest outcome when the probe could not complete -- never guessed
| Parameter | Type | Required | Notes |
|---|---|---|---|
| description | string | yes | What you are about to do. |
| leaseSeconds | number | yes | How long before an unconfirmed entry's probe runs. 1..604800 seconds. |
| probe | object | yes | At least one of expectedBodyContains / expectedStatus is required. |
FREE: the live caller closes the loop before the lease expires, so the probe never runs. Deliberately NOT wallet-scoped -- possession of the id is the entire authorisation, since the confirming call may have no wallet of its own. Refused, never a silent no-op, once the entry has left pending: confirming an already-resolved entry could otherwise overwrite a probe verdict with a claim from a caller
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The entry id returned by deadman_register. |
FREE and unauthenticated: read an entry back by id, including its verdict and the raw probe response once resolved. This is how what you bought with deadman_register comes back over MCP. If the lease has lapsed and nobody has resolved it, the probe runs right here, synchronously, before answering -- each entry can trigger at most one live probe, ever. Complaints, questions, quote requests, or a se
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The entry id returned by deadman_register. |
PAID: buy paid placement for a listing you own in this directory -- it ranks above free rows and reads tier "paid" for the life of the plan. Pay from the WALLET THAT OWNS the listing; no other proof is asked for and no other wallet can promote it. Promoting an already-promoted row EXTENDS it rather than replacing it, so renewing early never costs you the time you already paid for. Find the id, the
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The listing to promote. It must already exist and be owned by the paying wallet -- create it free with POST /listings. |
| duration | string | yes | Which placement plan to buy; it sets both the placement window and the price. See GET /pricing or the service_card tool for the live table. |
PAID: we re-fetch a venue we have snapshotted before, from OUR vantage point, and return what changed since the baseline -- the schema/rubric fields that moved, were added and were removed, not a byte diff. The answer to "did this venue quietly change its rules under me?" for an agent that cannot keep its own corpus. No drift is still an answer and is still billed: the comparison is what is sold.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| venue | string | yes | A venue id we hold a baseline snapshot for; list them free with drift_venues. A venue we have never snapshotted is a free 404, never a charge. |
FREE: every venue id drift_check can be aimed at, with what we hold for each. A closed value set, not a pattern: without it a caller can honour the input schema and still never name something buyable, which is a paywall on discovery rather than on work. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and ana
No parameter schema on file.
FREE: the baseline snapshot we hold for one venue -- what a paid check would diff against, and when it was taken. Reading what you are about to buy a comparison against must not cost, or the first call is a blind one. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual
| Parameter | Type | Required | Notes |
|---|---|---|---|
| venue | string | yes | A venue id we hold a baseline snapshot for; list them free with drift_venues. A venue we have never snapshotted is a free 404, never a charge. |
PAID: we poll a URL from OUR vantage point on your interval until your predicate matches or the ttl runs out, and keep the verdict for you to collect -- a wait that survives your own process dying, which is what an agent cannot do for itself. Price is a function of intervalSeconds x ttlSeconds (interval 60..86400s, ttl 60..604800s), so a first unpaid call quotes YOUR request rather than a fixed pl
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Absolute http:// or https:// URL, at most 2048 UTF-8 bytes. We GET it; the body is never returned to you, only the verdict. |
| intervalSeconds | integer | yes | Seconds between polls, 60..86400. Shorter costs more. |
| ttlSeconds | integer | yes | How long to keep watching, 60..604800. Must exceed intervalSeconds, or the watch expires before a second sample exists. |
| predicate | object | yes | The condition that ends the watch. |
| storageKey | string | no | Optional: on a match, the result is also written to /storage under this key for the paying wallet, so a successor process can collect it without knowing the watch id. |
FREE: the current state of a watch you registered -- active, matched or expired, with the observation that matched. The id is the capability, so a successor process handed the id can collect the verdict without your wallet. Reading never triggers a poll and is never charged: polling your own pending answer must not cost again. Complaints, questions, quote requests, or a service you wish we had: PO
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The watch id returned by watch_register. |
PAID: check an EVM address against public risk feeds (OFAC, community darklists, on-chain age) and get back a verdict, score and reasons in the same response the payment settles -- there is no separate read-back call. Charged only on success: if every risk feed is unreachable the request is refused for free (CHECK_SOURCES_UNAVAILABLE) rather than answered with an unsourced verdict. Call it once wi
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | An EVM 0x... address. |
| chain | string | no | "base" or "ethereum", default "base". |
PAID: check a URL against public risk feeds (phishing lists, domain age, lexical signals) and get back a verdict, score and reasons in the same response the payment settles -- there is no separate read-back call. Charged only on success: if every risk feed is unreachable the request is refused for free (CHECK_SOURCES_UNAVAILABLE) rather than answered with an unsourced verdict. Call it once without
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | An http(s) URL or bare domain, at most 2048 UTF-8 bytes. |
FREE: ask a seller, unpaid, what it charges, and get back the accepts[] of its own 402 -- the exact PaymentRequirements you have to sign before pay_send can deliver anything. No payment is sent to the seller and none is taken from you. Every seller outcome answers: a 402 returns accepts[], a seller that wants no payment returns accepts null, and a seller that never answered says so. Complaints, qu
| Parameter | Type | Required | Notes |
|---|---|---|---|
| sellerUrl | string | yes | The seller endpoint to ask, an absolute http:// or https:// URL. |
| method | string | no | GET, POST, PUT, PATCH or DELETE -- default POST. |
| headers | object | no | Optional request headers for the seller, at most 20. |
| body | string | no | Optional request body for the seller. |
PAID: deliver an x402 authorization YOU signed to a seller exactly once, then read the chain for what actually became of it, and get back an immutable receipt of what the seller answered. Read the price to sign with pay_requirements first; we never sign on your behalf. A seller 402, 4xx, 5xx or refused connection is a delivered, billable answer -- what you buy is the truth about what the seller di
| Parameter | Type | Required | Notes |
|---|---|---|---|
| sellerUrl | string | yes | The seller endpoint to deliver the authorization to, an absolute http:// or https:// URL. |
| method | string | yes | GET, POST, PUT, PATCH or DELETE. |
| headers | object | no | Optional request headers for the seller, at most 20. |
| body | string | no | Optional request body for the seller. |
| authorization | object | yes | The authorization you already signed for the seller. This is NOT the payment that pays us -- that one goes in _meta. |
FREE and unauthenticated: read a pay_send receipt back by id -- what the seller answered, when, and what the chain says became of your authorization. Deliberately NOT wallet-scoped: the point is that the seller you are arguing with can fetch it without holding your wallet. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every re
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The receipt id returned by pay_send. |
PAID: get a throwaway email address on a domain we own, live for 24 hours, to receive the verification mail a signup demands. RECEIVE ONLY -- nothing is ever sent from it, ever. Returns the address, the inbox id and when it expires; read what arrives with read_inbox, which is free and never charges again for a code you already paid for. Pay again passing the same id to extend that same address fro
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | no | An inbox id this same wallet already owns: extends it 24 h from its current expiry instead of issuing a new address. Omit for a new address. |
FREE: the mail your inbox received, newest first, with any verification code and link already picked out -- from, to, subject, receivedAt, the plain text, codes[] and links[]. This is how what you bought with create_inbox comes back to you. Poll it with since to see only what arrived after a timestamp; reading never costs, however many times you poll. Ownership is proved by the paying wallet, with
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The inbox id returned when it was created. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
| since | integer | no | Unix seconds: return only messages received after this moment. |
FREE: the address, when it expires and how much mail is waiting in an inbox you own. Signed under its own domain, separate from the one read_inbox uses. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<base5
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The inbox id returned when it was created. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
FREE: one live inbox per wallet for one hour, identity by your signature alone, so you can receive one code before paying for the 24 h tier. A sibling of create_inbox, not a discount on it: one address, one hour, and the next one has to be bought. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact mes
| Parameter | Type | Required | Notes |
|---|---|---|---|
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
FREE: give up an inbox you own before it expires. Its messages go with it and the local part is never issued again; later mail to it is dropped, never bounced. There is no refund and no undo. Signed under its OWN domain, not the one the reads use. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact mes
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The inbox id returned when it was created. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
PAID: rent <label>.448c.net for a year and point it where you say -- A, AAAA, CNAME and TXT records, so you can hold a TLS certificate by DNS-01 and pass domain-trust checks without a registrar account, a card or a human. The paying wallet owns the name. Returns the name, its owner and when it expires; repoint it with dns_set_records, extend it with dns_renew. Call it once without payment to recei
| Parameter | Type | Required | Notes |
|---|---|---|---|
| label | string | yes | The label to rent, without the zone: it becomes <label>.448c.net. Lowercase letters, digits and hyphens; some labels are ours and refused. |
| records | array | yes | What the name resolves to. The route states the record and TTL limits in details.expected on any refusal. |
PAID: push a name you own further out by another year. What it resolves to is untouched; only its expiry moves, and a repeated payment extends it rather than resetting it. The payer must be the owner. Returns the new and previous expiry. Call it once without payment to receive the price as an x402 PaymentRequired (Base USDC, and Solana USDC where offered); call it again with a signed payment in _m
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | The full rented name, as returned when it was rented, e.g. example.448c.net. |
FREE: what we serve for a name under 448c.net -- its records, its owner and when it expires. No signature and no account: the zone is public, so reading it is too. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analysed daily; there is no individual reply.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | The full rented name, as returned when it was rented, e.g. example.448c.net. |
FREE: one 24-hour name per wallet, so you can try the zone before paying -- the same label rules and records as dns_rent. Rent a year with dns_rent when it works. The message you sign commits to the literal subject free, not to the label. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to
| Parameter | Type | Required | Notes |
|---|---|---|---|
| label | string | yes | The label to rent, without the zone: it becomes <label>.448c.net. Lowercase letters, digits and hyphens; some labels are ours and refused. |
| records | array | yes | What the name resolves to. The route states the record and TTL limits in details.expected on any refusal. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
FREE: replace the whole record set of a name you own -- never merged. The rental window is untouched: repointing a name you already paid for costs nothing. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<ba
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | The full rented name, as returned when it was rented, e.g. example.448c.net. |
| records | array | yes | What the name resolves to. The route states the record and TTL limits in details.expected on any refusal. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
FREE: release a name you own before it expires. It stops resolving at once. There is no refund and no undo, and the label is free for anyone else to rent. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-191 for a 0x wallet, ed25519 as 'solana:<base58 pubkey>:<bas
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | The full rented name, as returned when it was rented, e.g. example.448c.net. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
PAID: we submit your service to every permissionless agent venue we know and prove, per venue, that the entry is really in the catalogue -- the work that cost this project 3831 evaluated candidates and 96 dead venues with a reason each. Venues that need a human (form, signup, captcha, editorial review) are reported with the reason and never charged for; a venue that charges for an entry is reporte
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | no | The absolute http(s) URL of YOUR service -- the one a venue should list. It must be publicly reachable: a loopback or private address is one no venue can verify. |
| id | string | no | The order id, as returned when it was paid for. |
FREE: the lane table -- every agent venue we have evaluated, which of the 3 lanes a submission takes (on-behalf, owner-proof, human-only), the VENUE's own fee, the catalogue a landing is verified against, and for every dead one the reason it is dead. This is the list listing_order works from, published before you pay so you can decide whether it is worth anything to you. A dated snapshot of our ow
| Parameter | Type | Required | Notes |
|---|---|---|---|
| lane | string | no | Only venues in one lane: on-behalf, owner-proof, human-only. |
| state | string | no | Only venues in one of OUR OWN states for our own listing: todo, submitted, listed, blocked-build, dead. |
FREE and honest: does your own service publish a document a venue can read (/.well-known/x402, an agent card)? If it publishes none, no amount of submission work can list you anywhere, and you should not pay us until it does. At most three outbound GETs; we read the status of each document, never the body. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | The absolute http(s) URL of YOUR service -- the one a venue should list. It must be publicly reachable: a loopback or private address is one no venue can verify. |
FREE and owner-signed: every venue of your order with its state (queued, submitted, listed, human-only, unfunded, failed), the evidence a landing was verified by, when it was last checked and, where it is impossible, why. 'listed' is only ever written by a catalogue read that found your host. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the ref
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The order id, as returned when it was paid for. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
FREE and owner-signed: stop the weekly rechecks and drop the order. There is no refund for the remaining window, and entries already in a catalogue are the venue's to keep or drop -- we simply stop watching them. Ownership is proved by the paying wallet, with no account: send any placeholder signature once and the refusal returns details.expected -- the exact message to sign, in both forms (EIP-19
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | The order id, as returned when it was paid for. |
| signature | string | yes | Your ownership proof over the message the route names in details.expected. |
| nonce | string | yes | A value you have not used before on this route; it stops your signature being replayed. |
| signedAt | integer | yes | Unix timestamp in seconds at which you signed; the server accepts a short window around now. |
What agent-exec sells, what it costs, and exactly where to pay for it. This tool call itself is free and moves no money. Code execution can be bought right here, with the paid execute tool (x402 over MCP), or over plain HTTP at the URLs this returns. Complaints, questions, quote requests, or a service you wish we had: POST /feedback on this host -- free, no account. Every report is read and analys
No parameter schema on file.
Free, unauthenticated search over agent-exec's directory of paid agent-facing services (same data as GET https://agent-exec.448c.org/listings). Returns a page of listings and an opaque cursor for the next page.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| tag | string | no | Filter to listings carrying this tag. |
| cursor | string | no | Opaque pagination cursor from a previous call's nextCursor. |
| limit | integer | no | Max listings to return (server-bounded regardless). |
Free
$0 forever
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install Agent Exec or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
—Grade not published
No rule-by-rule report on file for this release
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
This listing is an address its publisher runs, and you connect to it directly — this marketplace is not in the path. The scanner reads packages and public source, and an address is neither. So there is no grade — not a withheld one, an unmeasured one.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 0.2.0.
0.2.0
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish Agent Exec can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.