Twzrd Trust MCP Server

TWZRD Agent Intel

Live MCP • https://intel.twzrd.xyz/mcp (24 tools, streamable HTTP) Pre-sign seatbelt • twzrd-x402-gate @0.8.6 — installTwzrdAutoGate before any pay Seller graph • resources → merchant card → readiness → (optional) paid trust Facilitator (Path B, opt-in) • GET /supported feePayer 4LkEFj… → /verify + /settle → receipt attach Self-host mirror • public wiring only (scoring engine stays private)

TWZRD is the pre-spend trust layer for agents paying over x402 on Solana. Vet the seller and service before USDC leaves your wallet. Free tier needs no signup; pay only when you want the portable signed V6 receipt. Not a wallet product and not a payment network — a trust + receipt layer that can also facilitate settle (opt-in).

Live corpus (2026-07-13): ~515 listed services · ~143 payTos · ~498 challenge-verified (live_402). Listed ≠ live — see /health for live counts. Merchant cards expose payable_conformance (feePayer stability, live_402 density).

---

Default path (seller-first / resources-first)

Most agents should follow this order:

1. Resources (SOT) — GET /v1/intel/resources (listed | live_402; not the settlement graph)
2. Merchant card — GET /v1/intel/merchant_card/{pay_to} or MCP get_merchant_card
   • Refuse when wash_flagged=true (default in gate packages)
   • listed_unverified when catalog rows exist but no challenge-verified endpoint yet
3. Readiness — POST /v1/intel/preflight or MCP get_readiness_card_tool
   • block → do not pay
   • warn → thin/unknown seller (conservative default); buy paid trust if spend matters
   • allow → established organic seller — still not a vouch for large spends
4. Optional paid trust — GET /v1/intel/trust/{pubkey}?seller_wallet=<seller> (0.05 USDC)
5. Pay the resource — only after steps 1–3 (and optional 4) approve
6. Optional Path B settle — pin feePayer from GET /supported and settle via TWZRD for free twzrd_receipt + merchant_attach (see Facilitator)

Pre-sign enforcement: wrap your payment client with twzrd-x402-gate@0.8.6 so step 3 runs automatically before signing (see Buyer-side gate).

---

Quick Start

# 1) Free readiness on an established x402 seller (no signup, no payment)
curl -s -X POST https://intel.twzrd.xyz/v1/intel/preflight \
  -H 'content-type: application/json' \
  -d '{"seller_wallet":"BJGdsDXJFy63eCAnX3UmGfShp8BuqbtkTfcamyRGr7VQ","price_usdc":0.01,"agent_intent":"preflight"}'

# 2) Free merchant card (wash + catalog context)
curl -s https://intel.twzrd.xyz/v1/intel/merchant_card/BJGdsDXJFy63eCAnX3UmGfShp8BuqbtkTfcamyRGr7VQ

Read readiness_card.decision:

Free preflight is advisory unless you wire a gate package or payment-hook.

---

Packages

PayAI client seam (external, open): x402-solana #39 — vendor-neutral optional beforePayment pre-sign hook (no TWZRD dependency in core). Wire TWZRD separately via installTwzrdX402ClientHook / twzrdBeforePaymentCreation when you own the client.

Proof (zero funds, signer count 0 on strict block): seller-graph pay-guard closeout

---

Buyer-side gate (pre-sign enforcement)

Default machine rule: decision-only (gateOnCanSpend: false) + wash refuse (refuseWashFlagged: true).

import { installTwzrdAutoGate } from "twzrd-x402-gate";

// Guard RAW fetch, then hand to your x402 pay client
const payingFetch = installTwzrdAutoGate((guarded) =>
  yourPayClient.wrap(guarded),
);

Strict opt-in (also block when can_spend=false):

import { withTwzrdGuard } from "twzrd-x402-gate";

const fetch = withTwzrdGuard(globalThis.fetch, { gateOnCanSpend: true });

Official x402 client hook (same policy engine):

import { installTwzrdX402ClientHook } from "twzrd-x402-gate";
installTwzrdX402ClientHook(x402Client, { gateOnCanSpend: false, refuseWashFlagged: true });

Run attribution (opt-in, preflight-only): stamp X-TWZRD-Integration / X-TWZRD-Run-Id on free preflight so integrator transcripts join server-observed decisions. Counts as external only when the same runId appears in your transcript and intel logs a real policy decision with non-internal lineage.

import { twzrdBeforePaymentCreation } from "twzrd-x402-gate";

beforePaymentCreation: (ctx) =>
  twzrdBeforePaymentCreation(ctx.selectedRequirements, {
    gateOnCanSpend: false,
    attribution: { integration: "my-stack", runId: crypto.randomUUID() },
  }),

---

Facilitator (Path B, opt-in)

Settle through TWZRD when you want money-move and trust memory in one hop:

curl -s https://intel.twzrd.xyz/supported
# exact · Solana mainnet · feePayer 4LkEFjJdXARkKx8FBx4LBFa2SvJNmjQpgGDLoJcypZUE
# + twzrd.merchant_attach

1. Pin payment extra.feePayer to the feePayer from /supported (not blindly accepts[0]).
2. POST /verify then POST /settle on https://intel.twzrd.xyz.
3. Success returns on-chain USDC move + twzrd_receipt (V6) + merchant_attach on payTo (best-effort; never voids settle).

Path A (default for paid trust 402 today): multi-rail external feePayers (CDP / PayAI / Dexter). That is not Path B. Path A feePayer ≠ Path B feePayer until you pin /supported.

Pitch: Settle through TWZRD. Get on-chain settlement, a signed V6 receipt, and merchant track-record attach on the payTo for free.

Full agent contract: intel.twzrd.xyz/llms.txt · skill: intel.twzrd.xyz/skill.md

---

Live MCP Surface (24 tools — free tier, no auth)

Connect any MCP client to https://intel.twzrd.xyz/mcp (requires Accept: application/json and Accept: text/event-stream).

Seller / service graph (start here)

Wallet intel (secondary)

Receipts & verification

Solana market data (optional / ancillary)

Full tool reference: intel.twzrd.xyz/llms.txt · .well-known/mcp.json

---

Paid Trust Call (x402, 0.05 USDC)

GET https://intel.twzrd.xyz/v1/intel/trust/{pubkey}?seller_wallet=<seller>

Returns the renormalized trust model + portable Ed25519-signed V6 receipt anchored to settlement.

Pass seller_wallet on paid calls to arm settle-time gating where enabled. First paid mint may be cold until a wallet funds the challenge; free preflight works without USDC.

Cheap teaser: GET /v1/intel/quick/{pubkey} (0.001 USDC, no full receipt).

---

Verify Receipts Offline (trust no one)

Pin the issuer key from the well-known endpoint (do not invent keys):

curl -s https://intel.twzrd.xyz/.well-known/twzrd-receipt-pubkey

npx twzrd-receipt-verifier@1.2.5 receipt.json \
  --pubkey 9V6Pn19kiUA5Rn6JpQfNduanvGt2aXGwsarosNfa2Ldf
# or: pip install 'twzrd-receipt-verifier>=1.2.5'

---

Related

• Trust assurance and reproducible security boundaries — receipt integrity, pre-sign enforcement, trust assumptions, and current limitations
• Security policy — disclosure scope and response targets
• Pay-guard closeout proof — zero-funds strict block, signer count 0
• Zero-spend guard check — runnable harness
• Receipt Verifier — offline crypto
• Live orientation — full agent guide (source of truth)
• API spec — OpenAPI 3.1 with x402
• twzrd-x402-gate on npm · twzrd-mcp-server on npm

---

License

MIT — see LICENSE. Each package is independently MIT-licensed.

Scoring engine IP is protected. Proprietary intel scoring, wash detection, and trust renormalization remain private. Agents consume through the live API — no engine source required.