TWZRD Agent Intelligence

TWZRD

Muse pilot (Meta Global AI Developer Hackathon): a read-only MCP connector at

https://intel.twzrd.xyz/muse/mcp with 6 tools covering one listing (Vuori Kore Short,

Ink, US). check_listing returns advertised, check_failed, or unknown_seller, and

every result carries authorizes_spend: false. Discovery:

/.well-known/mcp.json.

Demo: video.

Pre-spend trust for agents that buy. Before an agent pays an x402 seller or buys a product from a store, TWZRD answers one question from public evidence: should this payment go ahead? The buyer-side gate turns that answer into a refusal before the wallet signs. This repository is the public source of truth for the hosted checks, the npm packages, the receipt and record formats, and the proofs behind them.

Guard an agent's paying fetch: a caller-supplied USDC cap, an explicit recipient allowlist, mandatory free preflight, and a local decision record before signing. createBuyerFetch is the front door (since twzrd-x402-gate@0.12.3); its expectedAmount quote binding needs twzrd-x402-gate@0.12.4 or later. Install the current release, twzrd-x402-gate@0.16.2, and start with the runnable buyer wrapper quickstart. The other toolkit APIs below remain available with their existing defaults.

• x402 services: vet the seller before USDC leaves the wallet, cap and ledger every spend, and bind each settled payment to the exact offer it paid for (bind-v1, verifiable from public chain data). Advisory preflight is free ($0). The paid quickCheck is $0.001 USDC, paid by the buyer over x402 (seller wash risk, tier and score; no receipt). Separately, the gate can issue a portable twzrd.payment_decision.v1 record from its own decision, signed locally with your own signer; TWZRD never holds a key.
• Product listings: a free check of a store product URL and its asking price against a card TWZRD published from the store's public pages. The card is an observer card, not a merchant attestation, and a match is never permission to spend (details).

Not a wallet. Not a payment network. The commerce walkthrough lives in docs/COMMERCE-KIT.md.

Canonical skill (always refresh) • https://intel.twzrd.xyz/skill.md (skill twzrd-trust; the live copy carries its version) · ClawHub skill twzrd-trust Spend-control SDK (npm) • twzrd-x402-gate@0.16.2 + seat x402-solana@3.0.1

Live MCP • https://intel.twzrd.xyz/mcp (streamable HTTP; free tools for x402 service checks and product-listing checks) Shopping check • free check_listing on the hosted MCP · report: https://twzrd.xyz/shopping-check/vuori-kore/ Agent contract • https://intel.twzrd.xyz/llms.txt · https://intel.twzrd.xyz/.well-known/agent.json

What is live, what is a pilot, what is not claimed

• Live on mainnet: the hosted checks (https://intel.twzrd.xyz/mcp and the REST routes below), twzrd-x402-gate on npm, the offline twzrd-receipt-verifier, the receipt transparency log with on-chain anchors (one per advanced tree head, hourly cadence), and the no-spend recorded demonstration at /v1/intel/demo-gate.
• Networks: the free checks score x402 sellers on Solana mainnet and Base mainnet (eip155:8453), and the gate runs the scored preflight on both. The paid /quick and /trust endpoints accept the buyer's $0.001 or $0.05 USDC payment on either chain but score a Solana seller wallet only, so signed V7 receipts cover Solana sellers. EVM chains other than Base are recognized but not scored. The examples below use the Solana seat; see the gate's network table for Base.
• Pilot: the product-listing lane runs against a single listing-evidence card (Vuori Kore Short, Ink, US). Vouch-mode calibration (#5) and token-safety previews (#207, #214) are open work, not shipped features.
• Not yet attempted: the seven-day external integration milestone. Every proof in this repository is TWZRD-operated mechanism evidence, not outside adoption.
• Not claimed: identity of a person, company or agent; checkout, purchase completion or delivery; permission to spend (authorizes_spend is always false). See What TWZRD does not claim.

Start here, by what you came to do

Versions, verified 2026-10-31

Registry latest as read on that date. The tree column is what this checkout mirrors; a difference is a pending resync, not a second product.

---

Run one blocked payment locally

npm ci

npm run build npm run buyer-demo --workspace=twzrd-x402-gate

This uses the real x402 client against an offline 402 fixture. It prints reason: price_cap_exceeded, signer_invocations: 0 and usdc_spent: 0, and writes .twzrd/demo-decisions.jsonl locally. It makes no network request and needs no wallet. This is internal demonstration evidence, not outside use.

For an installed consumer, pack the gate and install the tarball with its optional @x402/core and @x402/fetch peers; then run npx twzrd-buyer-demo. See the package README for the install and live client wiring. /quick and /trust stay optional seller-score products; the wrapper buys neither and makes no fulfillment claim.

Hosted recorded demonstration

Run this one-line command with no wallet, no API key, and no configuration:

curl -fsS https://intel.twzrd.xyz/v1/intel/demo-gate | jq '{verdict: (.steps[] | select(.name == "block_path") | .verdict), approved: (.steps[] | select(.name == "block_path") | .approved), signerInvocations: (.steps[] | select(.name == "block_path") | .signer_invocations), mode, ok}'

Without jq, run: curl -fsS https://intel.twzrd.xyz/v1/intel/demo-gate

Expected output:

{

"verdict": "block", "approved": false, "signerInvocations": 0, "mode": "no_spend", "ok": true }

*Blocks happen before your signer is invoked (signerInvocations: 0) — zero USDC at risk.*

---

How the pieces fit

Pre-spend trust for AI agents that buy: check x402 services and product listings before paying.

Each piece below works alone. Plugged into the hosted checks, they form one pre-spend path.

| twzrd-mcp-server / twzrd-mcp | A local MCP client with 6 tools that pays the $0.001 and $0.05 calls itself under a spend cap (a wallet only if you enable paid calls). | Calls the hos