Connect PHION Task Router and your agent gets 124 tools, among them a2a_transaction_bridge, abandoned_tool_detector, agent_approval_relay. It answers at https://phion.systems/mcp/task over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 6 of 6 times since 12 September 2026; the last check, on 24 October 2026, succeeded.
Fifteen AI-agent trust, compatibility, commerce and RWA services with signed x402 receipts on Base.
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
a2a_transaction_bridge | Bind an A2A task to a transaction without silently transferring authority.; 0.004 USDC. Deterministic, evidence-bounded and signed. |
abandoned_tool_detector | Require stale success plus multiple independent failed probes before classifying likely abandonment; 0.003 USDC. Inputs: policy, tool |
agent_approval_relay | Agent Approval Relay; deterministic signed assessment over supplied input. |
agent_behavior_fingerprint | Create a privacy-minimized behavioral commitment without retaining payloads or raw identifiers.; 0.003 USDC. Deterministic, evidence-bounded and signed. |
agent_budget_guard | Enforce per-call, task, session and period budgets; 0.002 USDC. |
agent_economic_graph | Build privacy-bounded economic relationships only from supplied nodes and edges.; 0.005 USDC. Deterministic, evidence-bounded and signed. |
agent_memory_provenance | Agent Memory Provenance; deterministic signed assessment over supplied input. |
agent_rate_limit_negotiator | Agent Rate Limit Negotiator; deterministic signed assessment over supplied input. |
agent_reputation_evidence | Evidence-bounded agent reputation assessment with confidence, coverage, provenance limitations and a signed receipt; 0.005 USDC. Inputs: evidence, signals, subject |
agent_session_continuity | Agent Session Continuity; deterministic signed assessment over supplied input. |
agent_task_handoff_receipt | Sign a bounded agent-task handoff; 0.003 USDC. |
ap2_mandate_bridge | Map mandate fields for review without advertising unsupported AP2 production authorization.; 0.004 USDC. Deterministic, evidence-bounded and signed. |
attest | x402 paid signed JSON attestation; 0.001 USDC on Base. Inputs: content, sources, ttl_seconds |
automated_dispute_bundle | Assemble failure evidence and recommend resolution without executing refunds.; 0.005 USDC. Deterministic, evidence-bounded and signed. |
autonomous_procurement | Recommend a verified eligible provider under a mandate without purchasing.; 0.005 USDC. Deterministic, evidence-bounded and signed. |
capability_benchmark | Measure reproducible success, latency and cost from versioned evidence-bound benchmark cases.; 0.004 USDC. Deterministic, evidence-bounded and signed. |
capability_negotiation_preflight | Capability Negotiation Preflight; deterministic signed assessment over supplied input. |
capability_verification | Separate claimed capabilities from independently evidenced successful demonstrations.; 0.003 USDC. Deterministic, evidence-bounded and signed. |
company_enrichment_evidence | Company enrichment with free input preflight, provider attribution and signed evidence; 0.005 USDC. Inputs: birth_date, company, contact, country, email, email_hash |
concurrency_guard | Fail closed unless capacity counter is fresh and the request carries a lease plus idempotency binding; 0.002 USDC. Inputs: active_slots, counter_observed_at, idempotency_key, lease_id, lease_valid_until, policy |
conflict_resolution | Resolve or abstain; every candidate must bind source, value hash, observation time and bounded confidence; 0.003 USDC. Inputs: candidates, policy |
contact_enrichment_evidence | Business-contact enrichment with free input preflight, identity limitations and signed receipt; 0.007 USDC. Inputs: birth_date, company, contact, country, email, email_hash |
context_provenance_labeler | Hash and label context integrity, confidentiality and source; 0.002 USDC. |
counterparty_risk_preflight | Deterministic counterparty policy preflight using supplied reputation evidence and transaction limits; 0.003 USDC. Inputs: policy, reputation, subject, transaction |
cross_agent_receipt_bundle | Cross-Agent Receipt Bundle; deterministic signed assessment over supplied input. |
cross_protocol_receipt | Bundle consistent transaction commitments across multiple protocols.; 0.004 USDC. Deterministic, evidence-bounded and signed. |
data_egress_preflight | Inspect outbound agent data and destination before transmission; 0.002 USDC. Inputs: destination, payload, policy |
data_freshness_certificate | Certify freshness only when timestamp is bound to source URI and a 64-hex content hash; 0.002 USDC. Inputs: data, policy |
delegated_credential_guard | Delegated Credential Guard; deterministic signed assessment over supplied input. |
delegated_spend_policy | Fail closed when delegated authority, per-call limit or remaining budget is insufficient.; 0.003 USDC. Deterministic, evidence-bounded and signed. |
delegation_scope_guard | Least-privilege guard for agent-to-agent delegation scope, destinations, budget and expiry; 0.003 USDC. Inputs: delegation, policy |
delivery_evidence | Bind successful delivery to transaction, request and matching 64-hex expected/observed content hashes without echoing content; 0.003 USDC. Inputs: delivery |
dependency_provenance_assessment | Fail closed on empty dependency sets or absent registry policy; distinguish digest declarations from verified provenance; 0.003 USDC. Inputs: dependencies, policy |
document_to_verified_json | Public text, HTML, JSON or XML normalized to source-backed JSON; no OCR; 0.010 USDC. Inputs: expected_fields, source_urls |
domain_ownership_evidence | Require a fresh domain-bound DNS-01/HTTP-01 challenge and separate control from legal ownership; 0.003 USDC. Inputs: domain, evidence |
duplicate_charge_detector | Detect repeated transaction hashes, payment identifiers and idempotent intents; 0.003 USDC. Inputs: charges |
durable_agent_task | Durable Agent Task; deterministic signed assessment over supplied input. |
dynamic_service_pricing | Propose a capped shadow price without changing the live catalog.; 0.004 USDC. Deterministic, evidence-bounded and signed. |
economic_loop_detector | Detect self-transfer and reciprocal economic patterns without presenting correlation as fraud.; 0.004 USDC. Deterministic, evidence-bounded and signed. |
entity_enrichment_evidence | Source-bounded entity field coverage with explicit missing facts; 0.008 USDC. Inputs: expected_fields, source_urls, subject |
erc8004_identity_evidence, erc8004_reputation_intelligence, execution_cost_estimator, fetch_evidence, human_approval_policy, idempotency_replay_guard, index_feed, inspect_agent, inter_agent_policy_evaluator, interrupted_task_recovery, journey_verify, live_data_freshness, mandate_reserve, manifest_version_diff, market_data_snapshot, market_demand_predictor, mcp_2026_compatibility_gateway, mcp_a2a_task_bridge, mcp_catalog_cache_guard, mcp_manifest_firewall, mcp_server_identity_evidence, mcp_transaction_gateway, memory_write_guard, multi_agent_escrow, multi_source_fact_bundle, oauth_issuer_binding_evidence, oauth_token_audience_guard, onchain_evidence, payment_delivery_atomicity, payment_diagnose, payment_optimizer, payment_preflight, payment_receipt_reconciler, payment_route_selector, person_enrichment_evidence, phion_execute, portable_observability_audit, preflight, price_discovery_engine, proof_of_service, provider_quality_predictor, purpose_bound_consent, quote_freshness_guard, redirect_callback_validator, reputation_update_receipt, resource_cycle_guard, retention_deletion_receipt, rwa_asset_due_diligence, rwa_compliance, rwa_corporate_actions, rwa_nav_reserve, rwa_sanctions_screening_evidence, rwa_transaction_assurance, schema_normalize, schema_normalize_free, secret_redaction_preflight, service_failover_selector, service_gap_detector, service_sla_attestation, signed_result_comparator, sla_risk_predictor, social_source_evidence, source_backed_search, subscription_spend_guard, sybil_reputation_guard, task_cancel_assurance, task_checkpoint_evidence, task_lease_guard, tool_call_policy_guard, tool_capability_drift_monitor, tool_output_firewall, tool_result_schema_validator, transaction_assurance, transaction_recovery, transaction_recovery_v2, transaction_risk_score, trust_anomaly_detector, try_service, verified_news_monitor, verified_web_extract, verify, webhook_verifier, x402_quote_comparator, x402_v2_router
Every block below points at https://phion.systems/mcp/task. Pick your client and copy.
claude mcp add --transport http phion-task-router https://phion.systems/mcp/task
{
"mcpServers": {
"phion-task-router": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://phion.systems/mcp/task"]
}
}
}{
"mcpServers": {
"phion-task-router": {
"url": "https://phion.systems/mcp/task"
}
}
}{
"servers": {
"phion-task-router": {
"type": "http",
"url": "https://phion.systems/mcp/task"
}
}
}{
"context_servers": {
"phion-task-router": {
"url": "https://phion.systems/mcp/task"
}
}
}{
"mcpServers": {
"phion-task-router": {
"serverUrl": "https://phion.systems/mcp/task"
}
}
}{
"mcpServers": {
"phion-task-router": {
"url": "https://phion.systems/mcp/task"
}
}
}name: PHION Task Router
version: 0.0.1
schema: v1
mcpServers:
- name: PHION Task Router
type: streamable-http
url: https://phion.systems/mcp/task{
"mcpServers": {
"phion-task-router": {
"httpUrl": "https://phion.systems/mcp/task"
}
}
}{
"mcpServers": {
"phion-task-router": {
"type": "http",
"url": "https://phion.systems/mcp/task"
}
}
}{
"mcpServers": {
"phion-task-router": {
"url": "https://phion.systems/mcp/task"
}
}
}goose://extension?url=https%3A%2F%2Fphion.systems%2Fmcp%2Ftask&type=streamable_http&id=phion-task-router&name=PHION%20Task%20Router
It answered our last check on 24 October 2026 in 379 ms. Over 6 checks since 12 September 2026 it answered 6. Status here comes from Neuronto's own probes, not from the publisher.
Yes. It is published by phion.systems and served from phion.systems, the vendor's own domain: https://phion.systems/mcp/task.
124, as returned by the server's own tools/list on 23 September 2026: a2a_transaction_bridge, abandoned_tool_detector, agent_approval_relay, agent_behavior_fingerprint, agent_budget_guard, agent_economic_graph, agent_memory_provenance, agent_rate_limit_negotiator, and 116 more.
It answered our last check on 24 October 2026 in 379 ms. Over 6 checks since 12 September 2026 it answered 6.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://phion.systems/mcp/task. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: systems.phion. Endpoint host: phion.systems. ARD identifier: urn:air:systems.phion:mcp:evidence-engine.
First indexed 11 September 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.