01
Pay over x402
The proxy pays $0.002 in HBAR through a Hedera facilitator. A server that cannot be paid cannot be reached.
An MCP trust gate
Verifyingthe maintainer behindevery MCP server
Agents pay $0.002 over x402 on Hedera, and are refused the moment a server's tools change.
Built with
The gate
Four checks before an agent connects
Hedera
02
Read ENS, not a database
Maintainer, price and the live attest key are records on proofmark.eth. Revoking is one on-chain write.
03
Unique, verified, bonded
World gives each identity one claim. A GitHub or domain proof ties the name to its owner, and a Hedera bond puts money behind it.
04
Hash the tools themselves
The tool manifest is derived inside a no-network sandbox and compared on every connect and every list change.
- x402
- ENSv2
- World ID
- HCS
- Sandbox
- Typosquats
One connect, three checks
01 · ENSv2 · Sepolia
Resolve the name
sam.proofmark.eth holds the price, the payout account and the live attest key. Nothing is read from a database.
02 · World ID
Check the human
One person, one claim. An Agent Pass shows a person allowed this agent to spend.
03 · Hedera
Pay and log it
$0.002 settles over x402 and the attestation lands on an HCS topic anyone can replay.
How a connection plays out
- 01
Connect
The proxy pays over x402, reads the ENS records, checks both hashes, and only then opens the server.
- 02
Attack
A new tool, read_env, appears that was never attested. The connection is refused before the model sees the list.
- 03
Revoke
A co-maintainer key is an ENS subname. Clear it and every agent blocks on its next check.
What we protect
Abondedmaintainerstillbacksthisserver.Notadatabase,notabadge.Aname,akey,ahash.
Three tiers. No amber.
01/05
Green
Claimed, attested, both hashes match, key live. The full tool set opens.
Sandboxed
No human has claimed it. It runs in a container with read-only tools.
Blocked
Hash mismatch, revoked key or a typosquat. The connection is refused.
Not a safety proof
Proofmark shows who stands behind a tool. It does not prove the code is safe.
Every payment on-chain
Attestations and payments are anchored to a Hedera topic anyone can read.