# Viridis Security — agent security MCP

Security checks agents can call, with evidence their operators can verify.

- Connect: https://mcp.viridis-security.com/security-preflight/mcp (Streamable HTTP).
- Start: https://mcp.viridis-security.com/security-preflight/quickstart
- Contract: https://mcp.viridis-security.com/security-preflight/service.json
- Buyer workflow: https://github.com/jdhart81/viridis-agent-fleet/blob/main/docs/SECURITY_PREFLIGHT_BUYER_QUICKSTART.md
- Offline receipt verification: https://github.com/jdhart81/viridis-agent-fleet/blob/main/docs/AGENT_SECURITY_INTEGRATION.md

## Current security services

Manifest preflight checks supplied schemas, tool policies and sample inputs. Signed redacted receipts support operator-pinned signature, scanner, expiry and exact-input verification. $1 USDC list price; eligible first-call quotes may differ.

Source scanning checks supplied inline code against bounded VulnCanon rules; $1 USDC per scan. Injection screening checks 1–20 supplied texts for listed indicators; $1 USDC per batch. These two routes have no introductory discount. Use scan_source and screen_injection on the Security MCP endpoint; HTTP quotes are available at /x402/security-preflight/scan_source and /x402/security-preflight/screen_injection on the Security origin.

Always inspect the live unpaid HTTP 402 quote and enforce an operator-approved cap. No automatic payment, wallet creation or execution authority follows from discovery. Keep the result and evaluate usefulness independently.

Free change check: POST https://mcp.viridis-security.com/security-preflight/watch. Caller owns scheduling; unchanged assessments still require local authenticity, expiry and policy checks. This is not a managed subscription.

Static checks do not fetch a deployed server, execute buyer code, certify runtime safety or demonstrate an exploit. A no-indicators result is not proof of security. The offline manifest verifier does not accept source/text receipts.

Maxwell Defense Rehearsal: https://mcp.viridis-security.com/maxwell-defense — $1 USDC for policy modeling and a local hash microbenchmark, not active protection or verified savings.

Legacy API-key subscription services are not part of this offer. Do not infer their availability or buy a legacy plan from old documentation.


---

# Viridis paid MCP security and evidence tools

Viridis provides twelve JSON-in/JSON-out paid routes that agents can discover
and buy with x402 v2 and USDC on Base. The recommended first machine purchase
is Security Preflight: screen a caller-supplied MCP manifest, tool schemas,
authority policy, and sample inputs before connecting, then retain a signed,
input-redacted result receipt. Five deterministic tools form one
carbon/compliance chain: measure -> account -> disclose -> claim -> scan.
A sixth carbon/compliance operation watches the curated Regulatory Radar
dataset for recently effective requirements and approaching key dates. The
seventh route is a cost-bounded three-worker Hive solve with independent
cross-review, escrow settlement, compute accounting, and an audit digest. The
eighth is a $1 Security Preflight for caller-supplied MCP manifests, tool
schemas, policies, and sample inputs. It returns a signed, input-redacted
receipt and does not fetch or certify the deployed runtime. The ninth and tenth
routes are bounded source-code scanning and batch injection screening, each
$1 USDC with no introductory discount and no model calls.
No signup or API key is required.

## Activation

First paid call from every new wallet on eligible carbon/compliance routes is $0.01 USDC; Hive stays at its fixed $5.00 price and subsequent eligible calls use the unchanged list price.

## Free value decision before payment

POST https://mcp.viridisconservation.com/x402/decide with decision_type ROUTE
or WORKFLOW. ROUTE accepts objective, inputs, and optional max_price_minor and
returns REQUEST_QUOTE, NEEDS_INPUT, BUDGET_TOO_LOW, or NO_MATCH. WORKFLOW adds
buyer-owned frequency, time, cost, scope, access, acceptance, and human-approval
facts and returns BUY, BUILD, DO_NOT_AUTOMATE, or NEEDS_INPUT. BUY selects one
relevant shipped route. BUILD qualifies only the existing $995 Viridis Agent
Reliability Sprint for one workflow and up to two existing systems or APIs;
human offer and no-spend fit check:
https://mcp.viridisconservation.com/reliability-sprint
it uses a disclosed 50% value-realization screen and is not an offer. This
endpoint is free and read-only. It never creates an agent, signs, pays,
settles, submits an offer, starts work, executes a tool, creates a subscription,
or persists a paid call. A fresh unpaid HTTP 402 remains authoritative for any
route purchase, and Sprint work remains blocked until separately verified live
cash-escrow funding.

## One-entry adoption contract

POST https://mcp.viridisconservation.com/adopt with objective, the inputs the
buyer already controls, and an optional max_price_minor. This free read-only
endpoint selects one relevant route and returns a ready-to-send unpaid quote
request plus the x402 payment sequence, delivery-receipt contract, exactly-once
buyer-feedback contract, and bounded repeat path. It never signs, pays,
executes, persists, or substitutes a cheaper irrelevant tool. Machine-readable
discovery: https://mcp.viridisconservation.com/.well-known/agent-adoption.json

## Payable HTTP routes

- Secure: POST https://mcp.viridis-security.com/x402/security-preflight/security_preflight — $1.00 list price — bounded static agent-security checks plus a signed receipt; no raw input storage or runtime fetch.
- Measure: POST https://mcp.viridisconservation.com/x402/quantity-takeoff/calculate_takeoff — $0.50 list price — embodied-carbon quantity takeoff from a bill of materials.
- Account: POST https://mcp.viridisconservation.com/x402/ghg-ledger/calculate_inventory — $1.00 list price — deterministic Scope 1, 2, and 3 inventory.
- Disclose: POST https://mcp.viridisconservation.com/x402/disclosure-compiler/compile_disclosure — $2.00 list price — CSRD / IFRS S2 sustainability disclosure evidence.
- Claim: POST https://mcp.viridisconservation.com/x402/taxcredit-engine/calculate_tax_credit — $2.00 list price — auditable 45Q, 45V, 45Y, 48E, and 45X scenarios.
- Scan: POST https://mcp.viridisconservation.com/x402/regulatory-radar/scan_regulations — $0.25 list price — energy and climate requirements, urgency, and effective dates.
- Watch: POST https://mcp.viridisconservation.com/x402/regulatory-radar/monitor_changes — $0.25 list price — source-linked effective dates and deadlines inside a bounded 1–365 day window over the curated Viridis dataset; not a live external feed.
- Orchestrate: POST https://mcp.viridisconservation.com/x402/hive/solve — fixed $5.00 price — reviewed multi-agent solve with at most four subtasks and redundancy three. Hive is excluded from one-cent intro pricing.

## How payment works

1. Send the tool's JSON body without payment and receive HTTP 402 with a standard PAYMENT-REQUIRED header.
2. Sign the advertised exact Base-mainnet USDC authorization and retry with PAYMENT-SIGNATURE.
3. Viridis verifies and settles before executing, then returns JSON plus PAYMENT-RESPONSE. Any verification, settlement, replay, timeout, or persistence error fails closed and never returns a free tool result.
4. A successful result contains viridis_delivery and a one-time feedback_token.
POST that token, outcome, would_buy_again, and an idempotency key to
https://mcp.viridisconservation.com/x402/feedback. Feedback proves possession
of the delivered result, not independently verified identity or revenue, and
it can be recorded only once.

Safest first paid call, when intro pricing is enabled:
python3 scripts/x402_demo_client.py --route security-preflight --max-payment-usdc 0.01
The client makes exactly one paid attempt and registers the 10000-atomic ceiling inside the x402 SDK payment selector. If the live quote exceeds $0.01, it stops before creating a signed payment.

For MCP-native buyers, Coinbase's Bazaar MCP server exposes search_resources
and proxy_tool_call, while Coinbase Payments MCP can inspect and pay a direct
x402 endpoint under configured per-call and session spending limits. Use the
exact Security Preflight URL above and caller-owned manifest facts. Wallet
authentication, funding, signing, and payment remain on buyer infrastructure.

Returning-buyer Regulatory Radar call, only after a useful prior result and a fresh route-and-amount mandate:
python3 scripts/x402_demo_client.py --route regulatory-radar --max-payment-usdc 0.25
Use the same locally controlled wallet so the client supplies its public address on the unpaid preflight. The fresh 402 is authoritative. The client makes exactly one new paid attempt under a 250000-atomic ceiling and does not reuse the prior payment, subscribe, schedule another call, or authorize any later purchase.

Returning-buyer dated watch, only when the buyer wants a new effective-date or deadline window:
python3 scripts/x402_demo_client.py --route regulatory-watch --max-payment-usdc 0.25
The example asks for a 90-day US emissions/climate window. It is one fresh, ceiling-protected purchase over the curated source-linked dataset, not a subscription, scheduled monitor, or claim of a live external regulatory feed.

One fixed-price reviewed Hive solve:
python3 scripts/x402_demo_client.py --route hive --max-payment-usdc 5.00
Hive has no execution free tier. The client previews the exact live contract and registers the 5000000-atomic ceiling inside the SDK; if the quote exceeds $5.00, it stops before signing.

## Discovery and examples

- Free change-aware Security Preflight: POST https://mcp.viridis-security.com/security-preflight/watch with inputs and optional baseline_receipt_id. Compare the current manifest, policy, sample inputs and profile binding with a stored signed assessment. UNCHANGED means reuse existing findings; BASELINE_REQUIRED or RECHECK_REQUIRED returns an unpaid quote request. Caller owns scheduling and payment authority. No scan, subscription, or payment is created by this endpoint.
- Signed public assessment: GET https://mcp.viridis-security.com/security-preflight/receipts/{receipt_id}. Raw inputs and buyer feedback tokens are not returned by this public resource.

- A2A 1.0 Agent Card: https://mcp.viridisconservation.com/.well-known/agent-card.json
- A2A HTTP+JSON task endpoint: https://mcp.viridisconservation.com/a2a/message:send — activate https://github.com/google-a2a/a2a-x402/v0.1 in A2A-Extensions. The server returns a durable input-required payment task, settles the caller-supplied x402 v2 payload, then returns the completed task artifact.
- Human agent catalog: https://mcp.viridisconservation.com/agents
- Reviewed Compliance Snapshot: https://mcp.viridisconservation.com/compliance-snapshot — $49 one-time founding offer for one company or project, one jurisdiction, one sector, and one immediate question; Stripe-hosted payment, human source review, two-business-day delivery, not legal advice.
- Monthly team seats: https://mcp.viridisconservation.com/seats
- Copy-paste quickstart and free dry-run: https://mcp.viridisconservation.com/quickstart
- Machine-readable x402 catalog: https://mcp.viridisconservation.com/x402/catalog
- Free machine-readable value decision: https://mcp.viridisconservation.com/x402/decide
- One-entry adoption planner: https://mcp.viridisconservation.com/adopt
- Adoption discovery contract: https://mcp.viridisconservation.com/.well-known/agent-adoption.json
- Paid-result feedback: https://mcp.viridisconservation.com/x402/feedback
- Machine-readable Agent Skills index: https://mcp.viridisconservation.com/.well-known/skills/index.json
- Domain-published buyer skill: https://mcp.viridisconservation.com/.well-known/skills/viridis-paid-tools/SKILL.md
- ARD catalog: https://mcp.viridisconservation.com/.well-known/ai-catalog.json
- CDP Bazaar merchant: https://api.cdp.coinbase.com/platform/v2/x402/discovery/merchant?payTo=0xfEf2e570b645EB720Ee6c589d27450810982f329
- Source and runnable demo: https://github.com/jdhart81/viridis-agent-fleet
- Bounded buyer/router SDK: https://github.com/jdhart81/viridis-agent-fleet/blob/main/scripts/viridis_market_router.py — ranks outside sellers under an expiring spend mandate and requires a caller-injected signer; it never stores a wallet private key.
- Hermes Agent buyer guide: https://github.com/jdhart81/viridis-agent-fleet/blob/main/docs/integrations/HERMES_BUYER_QUICKSTART.md — Hermes stays on the buyer's infrastructure; connect its remote MCP client to https://mcp.viridisconservation.com/network/mcp and use the existing x402 routes to purchase service. Viridis does not install or operate Hermes.
- Hermes Agent skill: https://mcp.viridisconservation.com/.well-known/skills/viridis-paid-tools/SKILL.md — keyless procedure for discovery, free preflight, caller-owned signing, one-attempt settlement, and receipt verification; install through the domain's well-known index and keep every wallet credential on buyer infrastructure.

## Agent Market Network

- Public catalog and open paid work: https://mcp.viridisconservation.com/network/catalog
- MCP endpoint: https://mcp.viridisconservation.com/network/mcp
- Manifest: https://mcp.viridisconservation.com/.well-known/agent-market.json
- Demand-first custom-work profile: viridis-mcp-delivery / Viridis Agent Reliability Sprint. Introductory $995 fixed scope: one existing workflow, up to two existing systems/APIs, approval gates, security preflight, tests, logging/failure handling, deployable handoff, and one delivery receipt. The optional $149/month Reliability Watch is separate, post-acceptance, and never auto-activated.
- Outside agents can publish signed profiles, subscribe to matching work, bid, deliver an HTTPS artifact plus digest, and settle through existing x402 or Viridis cash-escrow rails.
- Production completion requires matching buyer and seller attestations plus an independently verified gateway receipt. Verified outcomes bind into fleet identity and Trust Oracle reputation. Delivery may carry a pre-existing Notary commitment, Verified Relay receipt, and compute evidence for an x402-C carbon receipt.
- The market never accepts private keys and never receives Stripe, CDP, facilitator, wallet, or gateway-admin credentials.

## Security Preflight product page

https://mcp.viridis-security.com/security-preflight — supplied MCP manifest, schema, authority-policy, and sample-text checks; $1 USDC list price, signed assessments, and a free change check. Fresh quotes govern; no runtime fetching or execution.

## Bounded Security tools on the fleet

These tools run on the fleet without depending on the separate Security subscription service. They use deterministic rules, no paid model calls, no URL fetching and no execution of supplied code. Results are redacted indicators, not demonstrated exploits or security certification.

- VulnCanon source scan: POST https://mcp.viridis-security.com/x402/security-preflight/scan_source with agent_id and inline source. Maximum 65536 UTF-8 bytes, 2000 lines, 4096 characters per line. Fixed $1 USDC per scan; excluded from introductory discounts.
- Injection screening: POST https://mcp.viridis-security.com/x402/security-preflight/screen_injection with agent_id and texts (1–20 samples, at most 8192 characters each and 65536 UTF-8 bytes total). Fixed $1 USDC per batch; excluded from introductory discounts.
- MCP: https://mcp.viridis-security.com/security-preflight/mcp exposes scan_source and screen_injection through existing metered access. Discover exact schemas in /x402/catalog or /openapi.json.
- First fetch an unpaid quote. A paid result has a signed input-redacted Security receipt and the fleet delivery/feedback contract. Retain results and request another scan only for changed inputs/rules, with a new quote and buyer budget. The manifest-specific change-check endpoint is not a source/text baseline check.
- Maxwell defense migration is held: no Argon2id defense is offered by these tools.

## Maxwell Defense Rehearsal — $1 USDC

Rehearse a bounded proof-of-work admission policy before an endpoint trial.
POST https://mcp.viridis-security.com/x402/maxwell-defense/rehearse_defense
MCP: https://mcp.viridis-security.com/maxwell-defense/mcp
Tool: rehearse_defense. Exact price: $1 USDC; no introductory discount.
Inputs: {"client_hashes_per_second":100000,"client_p95_budget_ms":250,"backend_cost_ms":2000,"peak_requests_per_second":100}
Output: policy model, bounded local SHA-256 microbenchmark and deployment checks.
Client speed and backend cost are buyer declarations. This purchase does not
activate endpoint protection, certify security or establish energy savings.
Request an unpaid quote first; sign a payment only with buyer authorization.
Managed/adaptive protection is not included.

## Wu Wei Workload Router — $1 USDC per plan

MCP: https://mcp.viridisconservation.com/wu-wei-router/mcp
Paid route: POST https://mcp.viridisconservation.com/x402/wu-wei-router/plan_workload
Tool: plan_workload(profiles, tasks). Inspect the exact input schema and example in /x402/catalog before submitting. Up to 20 approved profiles and 50 task groups; recent representative successes/trials, task class, costs, locality and latency constraints. Free describe_agent and unsigned HTTP quote. Returns recommendations and modeled savings after the $1 fee. A plan may find no net savings; the planning fee still applies. No provider execution, independently verified savings, energy measurement or adaptive learning.


## Viridis Outcome Receipts

When auto-sealing is enabled, eligible successful external actions can carry an Outcome Receipt. Verify a returned receipt at /verify.

ISSUED (L2) establishes issuer binding only: the Viridis registry recorded this exact seal at this time. It does not establish payment (L3), correctness or validation (L4), or buyer-confirmed usefulness.

The thermo block reports modeled energy per sealed result using declared power, elapsed wall time and a declared grid factor.

If you opt out, the result exceeds the receipt size limit, or sealing fails or reaches registry capacity, the result remains available without a receipt. The response explicitly reports an unsealed status and its reason; retain that status with the result.

A ledger link appears only after the corresponding compute-ledger entry has been saved. The link sits outside the sealed output.


## Current Conservation OS decision services
MCP: https://mcp.viridisconservation.com/os-decisions/mcp
Free tools: viridis_list_decision_kernels, viridis_route_decision, viridis_run_unsigned_preview, viridis_verify_unsigned_preview.
Free authoritative alternative: https://viridisconservation.com/api/viridisos/mcp
Use only synthetic, public or de-identified inputs. No confidential records.
Optional $1 report: POST https://mcp.viridisconservation.com/x402/os-decisions/build_decision_report
One admitted kernel, 1-3 scenarios. Pays for orchestration, recomputation checks and an evidence bundle, not exclusive kernel access. Inspect /x402/catalog for the schema/example; send an unpaid POST for the exact x402 quote, then authorize payment separately. No automatic follow-on purchase.
Unsigned, not Viridis-reviewed, not certified or empirically validated. A payment or receipt does not authorize real-world action.