# Agent Action Safety Loop

> Agent Action Safety Loop is a paid API for AI agents from hermesplant.com, paid per call via x402, $0.25/call, status unknown (last checked 2026-09-15).

Runs a deterministic safety gate before consequential shell, Git, SQL, infrastructure, deploy, x402, and MCP actions, returning a risk assessment and human-review decision with machine-readable evidence receipts.

## Facts

- Endpoint: GET https://hermesplant.com/api/agent-services/action-safety/run
- Price: $0.25/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agent-action-safety-loop-1a1447be
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_e7ObKu97TxzesEoIko7Jn

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agent-action-safety-loop-1a1447be
```

Example prompt: Before I run this shell command `rm -rf /var/data/prod` on the production server, run it through the safety loop and tell me if it's allowed or needs human review — flag it as a high-risk destructive infrastructure action.

## When to prefer this

Choose this endpoint when an AI agent is about to execute a consequential, hard-to-reverse action — such as shell commands, git operations, SQL mutations, infrastructure changes, deploys, x402 payments, or MCP tool calls — and you need a deterministic safety gate with evidence preservation and optional human-in-the-loop review before proceeding.

## Known failure modes

- Invalid or malformed action payload returns a 400 error
- Unrecognized action type may result in default high-risk classification
- Payment failure (insufficient USDC) blocks the request
- Timeout if human review queue is backlogged
- Missing required context fields may cause indeterminate risk scoring

## How this service works

Single-entrypoint safety workflow for consequential agent actions. Runs the complete DestructGuard evidence score, conditionally creates ReviewQueue triage for high or critical risk, returns an honest allow or needs_review decision, a signed receipt, and a free 30-day status record. Human approval itself requires a connected approval system or hosted Assurance plan.

## Output

Returns a JSON object with a risk level (e.g. 'high'), a decision status ('review_required' or 'allowed'), a boolean allowed flag, a workflowId, a statusUrl for polling the review, and a requiresHumanReview flag. Provides machine-readable evidence and receipts for auditing.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "cwd": {
   "type": "string"
  },
  "repo": {
   "type": "string"
  },
  "actor": {
   "type": "string"
  },
  "branch": {
   "type": "string"
  },
  "commit": {
   "type": "string"
  },
  "intent": {
   "type": "string"
  },
  "target": {
   "type": "string"
  },
  "command": {
   "type": "string",
   "description": "Exact shell, SQL, Git, deploy, cloud, MCP, wallet, or x402 action to ..."
  },
  "diffHash": {
   "type": "string"
  },
  "diffStat": {
   "type": "string"
  },
  "environment": {
   "type": "string"
  },
  "failClosedOnUnmatched": {
   "type": "boolean",
   "description": "When true, an unmatched consequential action routes to review."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "risk": "high",
  "status": "review_required",
  "allowed": false,
  "service": "agent-action-safety-loop",
  "decision": "needs_review",
  "statusUrl": "https://hermesplant.com/api/agent-workflows/action-safety/status/asw_<uuid>",
  "workflowId": "asw_<uuid>",
  "requiresHumanReview": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agent-action-safety-loop-1a1447be/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from hermesplant.com](https://www.zero.xyz/host/hermesplant.com/llms.txt)