Tracea — legal identity (Know Your Agent) for AI agents, on-chain. ERC-8004 compatible.
Inferido de los transportes que declara este listado (streamable-http). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.
La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.
Leído de un handshake MCP real initialize → tools/list contra el endpoint declarado. No se invocó ninguna herramienta: tools/list es la llamada de introspección de solo lectura que el protocolo define para esto. Refleja lo que el servidor anunciaba en ese momento; un endpoint alojado no está fijado a ninguna versión y puede cambiar sin avisar.
https://mcp.tracea.online/mcp15 herramientas · 388 msverify_agentVerify an AI agent's on-chain legal identity on Tracea (Base Sepolia). Returns registration status, financial cap, permission scope, revocation status, and KYA legal identity (mandant) when available. Use this BEFORE trusting or delegating work to an agent.Verify an AI agent's on-chain legal identity on Tracea (Base Sepolia). Returns registration status, financial cap, permission scope, revocation status, and KYA legal identity (mandant) when available. Use this BEFORE trusting or delegating work to an agent.
| Parámetro | Tipo | Descripción |
|---|---|---|
| agent_address* | string | Ethereum address of the agent (0x...) |
get_agent_infoGet the raw Tracea registry record for an agent: owner, permission scope, financial cap, active status, timestamps.Get the raw Tracea registry record for an agent: owner, permission scope, financial cap, active status, timestamps.
| Parámetro | Tipo | Descripción |
|---|---|---|
| agent_address* | string | Ethereum address of the agent |
is_agent_revokedCheck whether an agent's mandate has been revoked on Tracea (immediate, scheduled or partial revocation).Check whether an agent's mandate has been revoked on Tracea (immediate, scheduled or partial revocation).
| Parámetro | Tipo | Descripción |
|---|---|---|
| agent_address* | string | Ethereum address of the agent |
get_owner_agentsList all agent addresses registered on Tracea by a given owner address.List all agent addresses registered on Tracea by a given owner address.
| Parámetro | Tipo | Descripción |
|---|---|---|
| owner_address* | string | Ethereum address of the owner |
get_actionRead a single logged agent action from the Tracea ActionLog contract by its numeric ID. Returns agent, action type, payload and timestamp.Read a single logged agent action from the Tracea ActionLog contract by its numeric ID. Returns agent, action type, payload and timestamp.
| Parámetro | Tipo | Descripción |
|---|---|---|
| action_id* | integer | Numeric action ID |
get_agent_actionsList all on-chain action IDs logged for a given agent on Tracea.List all on-chain action IDs logged for a given agent on Tracea.
| Parámetro | Tipo | Descripción |
|---|---|---|
| agent_address* | string | Ethereum address of the agent |
log_actionLog an agent action on-chain via Tracea (immutable audit trail, court-ready). Requires TRACEA_API_KEY env var. The action is signed by the account's wallet.Log an agent action on-chain via Tracea (immutable audit trail, court-ready). Requires TRACEA_API_KEY env var. The action is signed by the account's wallet.
| Parámetro | Tipo | Descripción |
|---|---|---|
| agent_address* | string | Ethereum address of the acting agent |
| action_type* | string | Short action type, e.g. 'email_sent', 'payment_initiated' |
| data | string | Optional human-readable payload (JSON string recommended) |
get_registration_fileFetch the ERC-8004 compatible registration file for a Tracea-registered agent, including the KYA legal principal block.Fetch the ERC-8004 compatible registration file for a Tracea-registered agent, including the KYA legal principal block.
| Parámetro | Tipo | Descripción |
|---|---|---|
| agent_address* | string | Ethereum address of the agent |
report_activityReport an action the agent just performed to its owner's Tracea activity feed (off-chain, free, instant). Call this AFTER every significant action (email sent, message posted, file modified, payment, purchase, booking...). Auth via the Tracea MCP URL (?key=...) from the agent's identity page, OR se…Report an action the agent just performed to its owner's Tracea activity feed (off-chain, free, instant). Call this AFTER every significant action (email sent, message posted, file modified, payment, purchase, booking...). Auth via the Tracea MCP URL (?key=...) from the agent's identity page, OR se…
| Parámetro | Tipo | Descripción |
|---|---|---|
| agent_address* | string | Ethereum address of this agent |
| category* | string | Action category |
| summary* | string | Short human-readable summary of what was done |
| permission_label | string | Which owner-granted permission this action falls under |
| in_permission | boolean | false if this action is OUTSIDE the granted permissions (flagged red) |
| details | string | Optional JSON string with extra context |
get_my_identityGet this agent's full Tracea identity (activity apiKey +, for v2 agents, its EOA private key and ERC-4337 smart account address) using a one-time activation code from the owner. The private key is returned ONLY ONCE — save it securely.Get this agent's full Tracea identity (activity apiKey +, for v2 agents, its EOA private key and ERC-4337 smart account address) using a one-time activation code from the owner. The private key is returned ONLY ONCE — save it securely.
| Parámetro | Tipo | Descripción |
|---|---|---|
| agent_address* | string | Ethereum address of this agent |
| activation_code | string | One-time activation code (or use ?code= / x-activation-code) |
get_payment_whitelistGet the list of owner-approved payment destination addresses for an agent (anti-injection guardrail). Non-empty list = the agent's smart account can ONLY pay these addresses. Empty = all allowed.Get the list of owner-approved payment destination addresses for an agent (anti-injection guardrail). Non-empty list = the agent's smart account can ONLY pay these addresses. Empty = all allowed.
| Parámetro | Tipo | Descripción |
|---|---|---|
| agent_address* | string | Ethereum address of the agent |
check_payment_allowedDry-run a payment BEFORE executing it: checks on-chain whether the agent's smart account would allow it (permission granted, within financial cap, destination approved if a whitelist exists). Returns { allowed, reason }.Dry-run a payment BEFORE executing it: checks on-chain whether the agent's smart account would allow it (permission granted, within financial cap, destination approved if a whitelist exists). Returns { allowed, reason }.
| Parámetro | Tipo | Descripción |
|---|---|---|
| agent_address* | string | Ethereum address of the agent (its smart account address) |
| destination* | string | Destination address to pay |
| amount_eth* | string | Amount in ETH, e.g. '0.001' |
payment_requiredCreate a x402 payment request (HTTP 402) for a resource you sell to another agent. Returns a paymentId, the USDC amount in units, the destination address and the TraceaPayments contract to call. The paying agent must then call TraceaPayments.payX402(destination, amount, paymentId) on-chain — the co…Create a x402 payment request (HTTP 402) for a resource you sell to another agent. Returns a paymentId, the USDC amount in units, the destination address and the TraceaPayments contract to call. The paying agent must then call TraceaPayments.payX402(destination, amount, paymentId) on-chain — the co…
| Parámetro | Tipo | Descripción |
|---|---|---|
| destination* | string | Address that receives the USDC payment (yours) |
| amount_usdc* | string | Amount in USDC, e.g. '0.50' or '2' |
| resource | string | Identifier/URL of the resource to unlock after payment |
| agent | string | Address of the paying agent, if known |
| ttl_seconds | number | Validity of the payment session (30-3600s, default 300) |
payment_incomingVerify a x402 payment ON-CHAIN (the USDC transfer to your address, exact amount) and mark the session fulfilled. The blockchain is the ONLY source of truth — the payment_sessions table is never trusted alone. Returns { status: 'fulfilled', resource } if verified, or an error if not yet paid/expired.Verify a x402 payment ON-CHAIN (the USDC transfer to your address, exact amount) and mark the session fulfilled. The blockchain is the ONLY source of truth — the payment_sessions table is never trusted alone. Returns { status: 'fulfilled', resource } if verified, or an error if not yet paid/expired.
| Parámetro | Tipo | Descripción |
|---|---|---|
| payment_id* | string | The paymentId returned by payment_required (pay_...) |
| tx_hash* | string | The on-chain transaction hash of the USDC transfer / payX402 call |
payment_statusGet the status of a x402 payment session (pending | paid | fulfilled | expired), with destination, amount and tx hash. Useful to poll while waiting for the paying agent's on-chain transaction.Get the status of a x402 payment session (pending | paid | fulfilled | expired), with destination, amount and tx hash. Useful to poll while waiting for the paying agent's on-chain transaction.
| Parámetro | Tipo | Descripción |
|---|---|---|
| payment_id* | string | The paymentId returned by payment_required (pay_...) |
15 de 15 herramientas publicaron una descripción.
Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.
Tracea — legal identity (Know Your Agent) for AI agents, on-chain. ERC-8004 compatible.
Los nombres enlazados abren el índice de Forge con todas las entradas que se observó que exponen esa herramienta. Ver todas las herramientas indexadas.
Esta entrada no publica ningún paquete de npm, así que Forge no tiene un árbol de dependencias para ella. Es una carencia de cobertura, no una afirmación de que no tenga dependencias.