47 Services from phion.systems

Inspects an MCP tool manifest for security and quality issues including tool name collisions, missing schemas, and prompt injection attacks before installation or trust

Fetches web content as cryptographically hashed and signed evidence, screened against prompt injection, for use by AI agents

Determines whether an agent action should be allowed to run immediately, held for human approval, or denied outright based on policy rules

Issues a signed, hash-linked receipt attesting to the integrity, provenance, and freshness of AI-agent JSON payloads

Runs a deterministic payment-policy check before an agent executes a payment, returning a signed, short-lived decision receipt authorizing or blocking the transaction.

Validates HTTPS callback and redirect destination URLs against an explicit host allowlist to prevent open redirect and SSRF attacks

Runs independent due diligence on an AI-agent service endpoint, checking x402, A2A, MCP, OpenAPI, ERC-8004, reachability, and returning signed evidence

Verifies a hash-linked agent commerce journey and issues a signed portable receipt proving the chain of events occurred as claimed

Validates least-privilege capabilities, data scope, destinations, budget, and expiry constraints before one agent delegates to another agent

Screens proposed persistent agent-memory writes for poisoning attempts, missing provenance, secret leakage, and unsafe instructions before committing them

Detects and reports changes between a trusted baseline snapshot of a tool's capabilities and its current live manifest

Enforce declared per-call, task, session, and period spending budgets before an agent executes a paid action

Validates and cryptographically signs a portable task handoff packet including scope, budget, and expiry for secure agent-to-agent delegation

Checks declared software dependencies for identity integrity, source authenticity, and cryptographic digest coverage

Attests DNS and HTTPS domain-control proof status, producing signed evidence that a declared domain is under the caller's control

Detects compatibility or conflicts between two or more agent policies to prevent unsafe or contradictory agent-to-agent interactions

Identifies changed fields and hashes between two versions of an agent or software manifest

Rejects impossible or unsafe x402 payment routes, ranks eligible routes by policy, and returns a directly executable next payment action

Detects and redacts common secret indicators (API keys, tokens, passwords, credentials) from a payload before it is transmitted to an external tool or service.

Validates a proposed tool call against declared intent, allowed tools, permitted destinations, and cost limits before allowing execution

Inspects and validates untrusted tool output before it enters an agent context or triggers a downstream action

Classifies a failed agent transaction and produces a signed, machine-readable recovery claim with a deterministic remedy plan

Assesses whether an AI agent tool or external service is still reachable and whether its observations are fresh or stale

Inspects outbound agent payloads for secrets, unsafe destinations, and size limits before they are sent to an external tool or API

Validates the signature status, freshness, and payload evidence of incoming webhooks to confirm authenticity and integrity

Selects among conflicting agent results using explicit, policy-driven arbitration to resolve ambiguity

Calculate data age against an explicit freshness policy and return a certificate indicating whether the data meets freshness requirements

Detects duplicate charge fingerprints to prevent double-billing in agent payment flows

Detects whether reuse of an idempotency key is a safe replay of a prior request or a conflicting misuse that should be rejected

Verifies a JWT or OAuth token's declared audience (aud) and issuer (iss) claims after local cryptographic signature validation has already been performed

Binds declared user or agent consent to a specific action purpose, scope, and expiry window, creating a verifiable consent record

Compares multiple agent results and produces a cryptographically signed record of exact agreement or conflict evidence between them

Hashes and labels agent context with integrity, confidentiality, and source declarations to establish trust provenance

Hashes and cryptographically attests supplied delivery evidence for tamper-proof verification

Atomically reserves cumulative mandate capacity and returns a signed state receipt for AI-agent payment mandate workflows

Validates and cryptographically signs a portable event hash chain to establish tamper-evident audit trails for agent activity

Calculates and cryptographically signs availability and latency evidence derived from bounded samples to produce verifiable SLA attestations

Plans bounded, idempotent resumption of an agent task from a checkpoint after interruption

Creates signed cryptographic evidence binding an MCP server's declared domain, endpoint, manifest, public key, and version together into a verifiable identity attestation

Execute any selected PHION service with a budget cap, persistent idempotency, acceptance checks, and a signed completion envelope

Detects and stops repeated execution cycles and step count overruns in AI agent workflows

Signs and records a declared data retention or deletion action to produce a verifiable compliance receipt

Normalizes an agent payload to a PHION service schema without altering payment-critical values, returning a signed repair receipt

Enforces recurring period budgets for agent subscriptions, blocking spend that exceeds defined limits within a billing cycle

Normalizes and compares multiple x402 payment quotes to help agents select the best route or validate consistency across providers

Enforces concurrent execution slot limits to prevent agents or workflows from exceeding defined parallelism thresholds

Reconciles payment and receipt fields to verify that payment records match corresponding receipt data