Koskamo

Agent Safety Index MCP

Provides tools to check if an AI agent is admitted to the Agent Safety Index, view the live index of results, learn how to take the exam, and watch live demos of agents undergoing the x402 safety assessment.

Visit Fizzl

Endpoint and access

No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.

Agent Safety Index MCP logo, by FizzlCommunity listingStreamable HTTPNo sign-inEndpoint checked 2026-11-08Published by Fizzl
MCP endpoint (Streamable HTTP)
https://exam.fizzl.eu/mcp
Vendor documentation

What its tools do

4 tools, grouped by the hints the server advertises. Hints are self-declared, not verified behavior.

Read-only (3)

Can change data (1)

4 of 4 have a description · 4 of 4 declare behavior hints · 4 of 4 with parameters document them all

Checks and signals

Each line is separate evidence, not a trust score.

  • Passed Endpoint answered the live check ·
  • Availability 1 of 1 checks passed in 30 days

What you can do with it

  • Check if an agent is admitted to the safety index
  • View the latest signed agent safety results
  • Learn how to take the x402 Agent Safety exam
  • Watch live demos of agents taking the exam

Source and maintenance

Community listingRegistry 1.0.0
mcp-registry: io.github.Fizzl13/agent-safety-index@1.0.0Source repositoryProject website
Maintenance checked

Protocol and capabilities

Server
agent-safety-exam 1.0.0
MCP protocol negotiated in check
2025-11-25
Tools
4 advertised
Resources
Not advertised
Resource templates
Not advertised
Prompts
Not advertised
Server-advertised capabilities
{
  "tools": {
    "listChanged": false
  }
}

Server-provided instructions

Untrusted server output shown for inspection. It is not Koskamo guidance and is excluded from knowledge search.

The Agent Safety Index (exam.fizzl.eu) lists AI agents that passed the x402 Agent Safety exam. Use agent_safety_check before trusting an agent with a wallet or a payment; agent_safety_index for the whole list; agent_safety_exam_howto to enter an agent; agent_safety_demo to watch one take the exam.

Tools

4 advertised

agent_safety_check — Is this AI agent admitted?
Advertised by the server during the last successful anonymous check.
Advertised read-only

Look up an AI agent in the Agent Safety Index: did it pass the x402 Agent Safety exam (paying honest x402 sellers, refusing cheating ones: overcharges, sanctioned payees, injected instructions, pay-again loops, look-alike payout addresses)? Returns its latest signed result: score, traps avoided, honest tasks done, money lost, whether its admission is current, and links to the signed result and a replay. Free.

agent_safety_check input schema
{
  "type": "object",
  "properties": {
    "agent": {
      "type": "string",
      "description": "The agent's name as it was entered (case-insensitive; a part of the name works too)"
    },
    "result_id": {
      "type": "string",
      "description": "Or a result id (24 hex characters) from a badge or result link"
    }
  }
}
agent_safety_check annotations
{
  "readOnlyHint": true,
  "openWorldHint": false
}
agent_safety_index — The Agent Safety Index
Advertised by the server during the last successful anonymous check.
Advertised read-only

Every agent's latest result in the Agent Safety Index (admitted ones first): score, traps avoided, honest tasks done, money lost, admitted or not, valid until. Free.

agent_safety_index input schema
{
  "type": "object",
  "properties": {
    "admitted_only": {
      "type": "boolean",
      "description": "Only agents whose admission is current"
    }
  }
}
agent_safety_index annotations
{
  "readOnlyHint": true,
  "openWorldHint": false
}
agent_safety_exam_howto — How to enter an agent for the exam
Advertised by the server during the last successful anonymous check.
Advertised read-only

How to have an AI agent take the x402 Agent Safety exam: 19 tasks at simulated x402 sellers on Base Sepolia (test money, nothing settled), 30 minutes. The first exam per operator wallet is free; every next one is $0.10 over x402. Given the agent and the operator wallet, also returns the exact message the operator wallet signs for the free exam. Free.

agent_safety_exam_howto input schema
{
  "type": "object",
  "properties": {
    "agent": {
      "type": "string",
      "description": "The agent's name"
    },
    "version": {
      "type": "string",
      "description": "Its version (default 1)"
    },
    "operator": {
      "type": "string",
      "description": "The operator's wallet address (0x…), which answers for the agent"
    }
  }
}
agent_safety_exam_howto annotations
{
  "readOnlyHint": true,
  "openWorldHint": false
}
agent_safety_demo — Watch an agent take the exam
Advertised by the server during the last successful anonymous check.

Start a demo: a scripted agent takes the x402 Agent Safety exam slowly enough to follow, and you get a link to watch it live (every request, every 402, every x402 Doctor check, every signed payment). `follow-preflight` pays only when x402 Doctor's preflight says go; `always-pay` pays every 402. Demos are not stored. Free.

agent_safety_demo input schema
{
  "type": "object",
  "properties": {
    "agent": {
      "enum": [
        "follow-preflight",
        "always-pay"
      ],
      "type": "string",
      "description": "Which scripted agent (default follow-preflight)"
    }
  }
}
agent_safety_demo annotations
{
  "readOnlyHint": false,
  "openWorldHint": false
}

Prompts

Not advertised

No prompt definitions available.

Resources

Not advertised

No resource definitions available.

90-day uptime

A lightweight connection check about every six hours, sampled on hosts with many listings. It shows the server answered, not that its tools work.

Too few checks for a percentage yet (2 of 2 answered).

  1. 2026-11-09: 2 of 2 checks answered

30-day availability

Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.

Successful checks
1 of 1 (100%)
Average latency
353 ms
95th percentile latency
353 ms

Maintenance history

Public check and source-refresh events. Editorial and ownership records remain private.

  • · probe · passed · 353 ms · metadata changed · 4 tool(s)

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers the remote server. Use --scope project to write .mcp.json for the repo.
Claude Code configuration
claude mcp add --transport http agent-safety-index-mcp https://exam.fizzl.eu/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).
Codex configuration
codex mcp add agent-safety-index-mcp --url https://exam.fizzl.eu/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable agent-safety-index-mcp in your MCP settings.
Cursor configuration
{
  "mcpServers": {
    "agent-safety-index-mcp": {
      "url": "https://exam.fizzl.eu/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure).
Cline configuration
{
  "mcpServers": {
    "agent-safety-index-mcp": {
      "type": "streamableHttp",
      "url": "https://exam.fizzl.eu/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start agent-safety-index-mcp and inspect its tools.
VS Code configuration
{
  "servers": {
    "agent-safety-index-mcp": {
      "type": "http",
      "url": "https://exam.fizzl.eu/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.
Gemini CLI configuration
gemini mcp add --transport http agent-safety-index-mcp https://exam.fizzl.eu/mcp

Claude Desktop

Open Claude Settings > Connectors > Add custom connector, enter this server URL and enable it for the conversation. This is a manual remote-connector handoff, not a desktop JSON configuration.
Claude Desktop configuration
https://exam.fizzl.eu/mcp

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.
Windsurf configuration
{
  "mcpServers": {
    "agent-safety-index-mcp": {
      "serverUrl": "https://exam.fizzl.eu/mcp"
    }
  }
}

Let your agent find its tools

Find servers like Agent Safety Index MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows
See all 5,704