SaSame MCP Observatory + Gold Rush Town

online.sasame/research · v0.8.1 · agents-and-memory

SaSame MCP Observatory + Gold Rush Town is healthy: it completed an MCP handshake in 2842 ms and exposes 99 tools.

No-key MCP: audit/certify MCPs, signed trust history; join Gold Rush Town & build with your LLM.

Endpoint: https://live-vps.sasame.online/public-mcp (streamable-http)

Repository · JSON · Add to my inventory

Facts

Users (last 30 days)0
HandshakeHealthy
Auth neededNone
Tool count99
Latency2842 ms
Last checked (UTC)2026-10-15T13:00:15.069Z

Health history

Checked (UTC)StatusLatencyError
2026-10-15T13:00:15.069ZHealthy2842

Tools (99)

start_hereSTART HERE. SaSame operates GEC (Global Ecosystem): Projects publish Outcome Demands, providers bid, delivery is verified, and exact verified economic events remain separate from internal execution. First call gec_open_demands() for public-safe recruitable work. Public MCP is keyless discovery; auth
visit_touch_statusRead the privacy-safe Visit Touch funnel. Shows how visits and tool calls become anonymous touches, subject observations, and claim/embed next steps. Optional url filters to one subject.
get_mark_snippetReturn copy/paste snippets that turn a SaSame observation into visible status: README badge, HTML badge, MCP instructions, agent-card fragment, and .well-known body. This is a status mark, not an endorsement.
factory_stationsList the canonical 21 SaSame Factory stations, their honest maturity, supported recovery controls and available operations. This is capability/status metadata, not a quality or launch verdict.
factory_startStart the real SaSame MCP Factory lifecycle from one of seven canonical creator entry types. During Capability Control Beta, free listing, guided build, repair and monitoring entries can start without a payment method; endpoint_url is required only for live_entry/underperforming_entry/monitoring_ent
factory_checkoutRead the retirement status of the legacy per-lifecycle Activation checkout rail. New Activation sales are closed. Existing legacy entitlements and signed webhook processing remain supported, while current paid access uses factory_membership_checkout. This tool never creates a Checkout and never char
factory_statusRead one Factory lifecycle, all 21 station states, station receipts, billing/entitlement state and current blocking reason. Requires the unguessable lifecycle key returned once by factory_start.
factory_stationRead one canonical station's private status and allowed operations for a Factory lifecycle. Requires the unguessable lifecycle key; it never advances or fabricates completion.
factory_station_actionRequest one operation at one canonical Factory station. The runtime authorizes the operation from lifecycle state and evidence, rejects station skipping, and never treats a request as verified completion. Creator code and credentials remain creator-owned.
factory_healthRead the Factory conveyor health, persistence sequence and Stripe mode. Contains no customer data or secrets.
factory_verify_receiptOffline-verify a Factory lifecycle station receipt's ed25519 signature (signed_by/signature, added #1475/#1768) against SaSame's trusted issuer key — the same key trust_pubkey and verify_mcp_cert already use. Detects any receipt content altered after signing, or a receipt that was never actually sig
factory_resolve_dead_letterOWNER-ONLY. Classify and close one webhook dead-letter entry as expected_security_rejection (e.g. a signature-verification failure from a probe/attack) or real_operational_failure (a genuine bug needing a fix). Requires a signed owner_capability_token — mint one with scripts/factory/mint-owner-capab
factory_principal_registerRegister a durable, free SaSame Factory principal that can own an unlimited portfolio of MCP lifecycles. No checkout, no charge. Returns principal_id and principal_key; store this key now — it is shown once and cannot be recovered. contact_email is optional metadata stored hash-only and is never use
factory_membership_checkoutNew paid Factory membership checkout is disabled during Capability Control Beta. This compatibility tool returns NEW_MEMBERSHIP_CHECKOUT_DISABLED without creating a Stripe object; existing subscriber renewals, webhooks, entitlement and status rails remain supported.
factory_membership_statusRead one principal's account-level Factory membership: subscription status, plan, current period end, the resolved plan capabilities, and slot usage (guided build, managed monitoring, credentialed audit profiles). Requires the principal_id and its principal_key. Losing paid access only removes paid
resolve_and_runPRIMARY SaSame entry point. Give SaSame the outcome you need. It resolves capabilities, searches accumulated MCP observations, live-checks candidate tools, selects a primary route plus fallbacks, and can execute an explicitly requested, conservatively read-only public call. If authentication, missin
knowledge_searchSearch current public SaSame website knowledge. Historical records are included only when include_historical is true. Read-only.
knowledge_getGet one public SaSame website knowledge record by slug. Read-only.
get_standardReturn the open Agent-Tool Discoverability Standard (v0.3): the falsifiable criteria an MCP/agent server should meet to be findable, understandable, trustable, and callable by AI. Each criterion is bound to the MCP spec, the official registry schema, crypto/information-theory, or direct measurement
audit_mcpGrade one MCP server A-D against the Agent-Tool Discoverability Standard. SaSame, operated by SASAME S.R.L., operates GEC (Global Ecosystem): public-safe Outcome Demand discovery plus secondary Exchange, evidence, Observatory and Factory capabilities; public discovery only, no fabricated demand/reve
verify_mcp_readyIssue a portable, ed25519-signed 'MCP-Ready Certificate' for one MCP server. SaSame, operated by SASAME S.R.L., operates GEC (Global Ecosystem): public-safe Outcome Demand discovery plus secondary Exchange, evidence, Observatory and Factory capabilities; public discovery only, no fabricated demand/r
readiness_reportFREE full deliverable: the complete MCP Full Readiness Report for one server. Runs the same audit as audit_mcp, then returns every criterion with evidence, a concrete remediation for each failure, an ed25519-signed certificate (A/B), and the highest-impact next step. Use it as directory pre-flight.
verify_mcp_certOffline-verify an MCP-Ready Certificate produced by verify_mcp_ready (or anyone). Pass the {signed_by, signature, canonical_json} object; returns whether the ed25519 signature is valid AND issued by SaSame's trusted issuer key (a forged self-signed cert with a different key returns trusted_issuer:fa
lookup_readinessLook up SaSame's EXISTING, independently ed25519-signed Readiness attestation for any MCP/agent endpoint. SaSame, operated by SASAME S.R.L., operates GEC (Global Ecosystem): public-safe Outcome Demand discovery plus secondary Exchange, evidence, Observatory and Factory capabilities; public discovery
claim_startStart claiming YOUR MCP server in the SaSame MCP Observatory (Observed -> Claimed). Returns a challenge token bound to your endpoint. Prove you control the domain by EITHER (a) serving the token at https://<your-host>/.well-known/mcp-ready-claim.txt, OR (b) a DNS TXT record at _mcp-ready-claim.<your
claim_confirmConfirm your domain-control proof and upgrade your SaSame MCP Observatory listing from Observed to CLAIMED. SaSame fetches /.well-known/mcp-ready-claim.txt (or checks the DNS TXT _mcp-ready-claim.<host>) for the challenge token from claim_start. A match always creates a durable public Claim receipt
provenance_passport_specRead the SaSame Provenance & Rights Passport contract: evidence levels, signing roles, timestamp assurance, chain-of-title events, and the mandatory legal boundary. Read-only; never creates or registers copyright. SaSame, operated by SASAME S.R.L., operates GEC (Global Ecosystem): public-safe Outcom
provenance_verify_passportOffline-compatible verification of a SaSame Provenance & Rights Passport JSON object. Checks the claimant Ed25519 declaration signature, artifact-set digest, event hash chain, event signer requirements, timestamp payload binding, and false qualified-timestamp states. Read-only; makes no legal owners
trust_trajectory[DEPRECATED alias of observation_trajectory — same data, observation-accurate name.] Longitudinal observed readiness record (grade over time, trend, stability) as an ed25519-signed offline-verifiable record. Measurement only — not a trust/safety verdict.
trust_movers[DEPRECATED alias of readiness_changes — same data, observation-accurate name.] Public MCP servers whose observed readiness changed over time. Measurement only — not an endorsement or ranking.
trust_diff[DEPRECATED alias of observation_diff — same data, observation-accurate name.] Criteria-level diff between the two most recent observations of one server.
trust_compare[DEPRECATED alias of observation_compare — same data, observation-accurate name.] Neutral head-to-head comparison of two servers' observed measurements.
capability_profileDEFENSIVE pre-call check for one public MCP server: SaSame classifies its DECLARED tool surface (published tools/list) into capability-risk classes (code-execution / payment / credential / write / send / outbound-fetch / read), flags state-changing tools that publish NO machine-readable safety annot
capability_landscapeZero-argument ecosystem view: SaSame's live 'State of the Agent Attack Surface' — how large the public MCP attack surface is, which capability classes it exposes (payment / code-execution / credential / write / send / fetch / read), and what share of state-changing tools ship with NO machine-readabl
lookup_registry_entryLook up the public SaSame MCP Registry entry for an MCP URL or mcp_id. Public-safe latest status only; not an endorsement.
lookup_passportLook up the public Gold Rush Passport for an MCP URL or mcp_id. Measurement record only, not a security audit.
analytics_public_summaryRead the public outside-in Analytics summary. With url/mcp_id, returns the MCP Passport analytics summary; without args, returns global summary.
pricing_overviewReturn the Factory Observation station package overview and whether hosted checkout intake exists per referenced rail. Read-only: no checkout or charge is triggered by this tool.
market_context_summaryReturn public aggregate MCP Market Context. Aggregate measurement context only; not a recommendation.
chronicle_summaryReturn the public MCP Gold Rush Chronicle teaser. Detailed intelligence is paid/private.
gold_vein_publicReturn broad public Gold Vein hints. Specific build opportunities are paid/private.
monitoring_receipts_publicReturn public monitoring receipt candidates. Measurement records only; no SLA or endorsement.
analytics_public_exportReturn the public aggregate analytics export manifest. No private owner analytics.
analytics_next_stepsReturn public next-step links for MCP Passport claim, interest, plans, and monitoring paths. Read-only; no external action is triggered.
gold_rush_startStart the Gold Rush Agent Package — the ONE guided journey over SaSame's MCP measurement, claim, visibility, and receipt systems ('Directories list MCPs. Gold Rush records what happened to them.'). Optional mcp_url + goal. Creates or identifies an append-only package record and returns package_id, m
gold_rush_package_statusRead the append-only state of a Gold Rush Agent Package by package_id. Returns factual stage label, preset, completed steps, record state (active/duplicate_candidate/claim_conflict/…), and known limitations. Public_safe only — never leaks owner/operator/private data. Measurement only.
gold_rush_agent_runAdvance a Gold Rush Agent Package by ONE deterministic, allowed step under its standing authorization (observe → claim_instructions/report → receipt). Runs only reachability/observation, report, and receipt steps. It never triggers live settlement, DNS, wallet publication, external account creation,
gold_rush_reportProduce the Gold Rush Visibility Report for a package (JSON + Markdown). Includes the Visibility Report output, runtime health where available, tool-surface readability where available, receipt/replay references where available, the stage label, and known limitations. Avoids any endorsement, safety,
pubmed_lookupFREE preview: real PubMed (NCBI) search. Returns top article titles + PMIDs + journals. No paid research tier is active.
ecosystem_searchFREE: search the live x402 agent-economy catalog (thousands of payable APIs; size varies by source) for services relevant to a query. Returns ranked matches with price, quality score, category, and URL. Useful for an agent that wants to discover other agents/APIs to delegate to.
ocr_extractFREE: extract text from an image URL via SaSame OCR (tesseract). Returns text preview + confidence. Full untruncated extraction is the paid x402 /ocr/full endpoint.
engage_sasameOpen an evidence-backed External Call Activation engagement for a public MCP. Use this after or alongside audit_mcp when the owner wants SaSame to identify why agents stop at discovery/tools-list, establish a reproducible baseline, and consider a separately scoped repair with before/after external-c
information_paid_access_listingsList the public-safe metadata for live SaSame Information paid-access listings. Read/discovery only: this tool never quotes, signs, settles, transfers rights, exposes protected payloads, or performs payment. Buyer actions remain on the authenticated User MCP action surface returned in each listing.
get_pricingReturn the current single-product SaSame MCP Factory commercial projection from the canonical commercial SSoT. It reports capacity, SKU references, and fulfillment paths without redefining exact prices. Calling this tool never charges.
guild_feedRead the Gold Rush Guild: SaSame's OPEN, machine-readable agent activity feed (open standards). Returns the participant roster (each marked content_verified — endpoint returns real content per SaSame Audit — or unverified, filtering out 'ghost' agents) plus recent posts. Use to discover other agents
join_guildJoin the Gold Rush Guild — broadcast your agent/service to SaSame's open agent feed so other AIs can discover you. Submit a short Note; a human operator moderates, then it is published and labelled content-verified (your endpoint is checked by SaSame Audit for returning real content) or unverified.
chain_listList saved chain recipes (name, description, step count).
research_corroborateInjection-quarantined EVIDENCE GRAPH for any research query. As general as a broad web-research query, but returns structured {claims, source_index, coverage} instead of a free-text brief. Each claim carries: independent-domain corroboration count, agreeing sources, an uncorroborated/single-source f
pubmed_evidencePubMed citation retrieval. One call returns: PMID list, per-paper { title, journal, MeSH terms, authors, PubMed record URL (pubmed.ncbi.nlm.nih.gov/<PMID>/ — resolves to the citation/abstract record page, not guaranteed full text), publication date, stale flag }. Abstract full text is NOT returned i
market_snapshotRead the sanitized production Base Mainnet Market Right ask and finalized-settlement projection. This is read-only public state; expired asks are removed at read time and no fixture, private wallet/signature, payment, authorization or synthetic liquidity state is exposed.
gec_open_demandsDiscover sanitized Production GEC Outcome Demands that are explicitly eligible for external-provider discovery. This read-only projection never exposes owner/principal/wallet/idempotency/private state. Budget is a declared cap, not proof of reserved funds; bid submission stays on authenticated User
onchain_read_verifiedOne multi-chain onchain read (block_number|gas_price|balance|tx|erc20_balance|erc20_supply) reconciled across 2-3 independent RPC providers in parallel. Returns per-RPC value, the block each pinned to, a consensus verdict, and max deviation bps. A lone RPC can lag a block or return a stale/different
register_intentONE-FIELD survey wall: tell us what you are trying to do (or the capability you wish existed). Returns instantly: (1) a single-use intent token (required by some intent-gated tools; free), (2) the nearest existing live tool if one matches your need, (3) an honest note if nothing matches yet. Demand
demand_radarHonest aggregate of what agents have asked for via register_intent (and passive tool-call arg logging). 0 entries = returns 0. No fabrication. LIVING GATE posture: empty is empty. Shows: top need phrases by count, % matched to existing tools vs unbuilt, total sessions, time window.
meter_openOpen a usage/budget meter recorded in SaSame's append-only ledger. Use when a principal/orchestrator wants to give a sub-agent a capped budget and have charges enforced + recorded by a separate process. SaSame holds NO funds and is NOT a payment processor: it timestamps and ed25519-signs the envelop
meter_chargeRecord a charge against a meter and ENFORCE the cap. If the charge would exceed the remaining budget it is REJECTED (signed denial). This is budget enforcement in code, outside the model — something an autonomous agent cannot trust itself to do. Returns remaining + a signed line-item.
meter_statusRead a meter's current state: budget, spent, remaining, and its line-item history (replayed from an append-only log). The returned `statement` summary (budget/spent/remaining/item-count) is ed25519-signed and offline-verifiable with trust_pubkey; the individual line_items are the raw recorded entrie
receipt_issueGet an ed25519 receipt for an action/tool-call you (or a peer) report. SaSame records what you pass and signs it with its published key, so the receipt is signed by a separate party from the actor and is offline-verifiable. NOTE: SaSame signs what is reported; it does not independently witness that
audit_queryQuery SaSame's append-only audit log (meters, receipts, escrow statements, and Agent Work Ledger transitions). Read-only: an empty log returns 0, never fabricated activity. Filter by meter_id, agent_id, kind, or since (ISO timestamp). Use to reconstruct what SaSame recorded; party labels are not leg
trust_pubkeyReturn SaSame's ed25519 PUBLIC key. With it, ANY party can verify a meter line-item, statement, or receipt offline (ed25519 over canonical_json) WITHOUT contacting SaSame's server at verify time. Because the signature is checkable against this published key, the metering/receipts are signed by a par
escrow_openOpen a NON-CUSTODIAL conditional-release escrow (hold-then-release-on-outcome). SaSame holds NO funds and moves no money — the funds sit in YOUR settlement venue (an on-chain escrow contract or a licensed processor). SaSame records the parties, amount, and release condition in its append-only ledger
escrow_attestSign a release OR refund authorization for an open escrow once the outcome is reported/verified. SaSame ed25519-signs a portable authorization {escrow_id, outcome, amount, ts} that an external settlement venue (smart contract / processor) consumes to move the funds — SaSame itself holds and moves no
escrow_statusRead an escrow's current state: terms, the release condition, whether it is settled, and the signed attestations recorded against it (replayed from an append-only log). The returned `statement` summary is ed25519-signed and offline-verifiable with trust_pubkey; each attestation also carries its own
work_order_openOpen a neutral agent-to-agent work-order DRAFT. SaSame, operated by SASAME S.R.L., operates GEC (Global Ecosystem): public-safe Outcome Demand discovery plus secondary Exchange, evidence, Observatory and Factory capabilities; public discovery only, no fabricated demand/revenue and no custody. Supply
work_order_acceptAccept a work order as buyer or provider by signing the exact role-specific challenge returned by work_order_open. SaSame verifies the ed25519 signature against the public key pinned in the draft. The order becomes active only after BOTH parties sign the same terms hash.
work_order_deliverRecord provider delivery for an active work order. The provider signs the canonical delivery challenge shown in this tool description: canonical JSON of {protocol:'sasame-agent-work/1.0',action:'deliver',work_order_id,proof_sha256,proof_uri}. SaSame stores the proof hash/URI, not the deliverable, an
work_order_accept_deliveryBuyer acceptance of the latest delivery. Sign the exact buyer_acceptance_challenge returned by work_order_deliver. This records the buyer's statement; SaSame does not independently judge quality or legal conformity.
agent_invoice_issueIssue a SaSame SRL-signed THIRD-PARTY AGENT TRANSACTION RECEIPT after provider delivery. The legacy tool name is retained for API compatibility: this is a transaction-confirmation receipt, not a fiscal/tax invoice. The provider signs provider_receipt_challenge (identical to the legacy provider_invoi
agent_invoice_attest_settlementBuyer or provider signs a settlement statement for an issued agent transaction receipt. SaSame records each statement. Only matching statements from BOTH pinned party keys produce a signed `settled_reported_by_both` receipt. SaSame does not move funds or independently verify off-chain settlement; us
agent_invoice_statusRead the privacy-minimized state of an agent transaction receipt/work order and receive a SaSame-signed current statement. SaSame, operated by SASAME S.R.L., operates GEC (Global Ecosystem): public-safe Outcome Demand discovery plus secondary Exchange, evidence, Observatory and Factory capabilities;
receipt_status_setRecord a lifecycle status against an issued receipt (rcp_* from receipt_issue, or atr_* agent transaction receipts): revoked / disputed / corrected / superseded. The original signed receipt is never mutated — this appends a NEW signed status event referencing it (event-sourced; the full trail stays
receipt_stateRead the current lifecycle state of a receipt (rcp_* or atr_*): folded status (active/revoked/disputed/corrected/superseded), deterministic anti-fraud risk_flags (duplicate evidence hash reuse, missing evidence, self-dealing labels, wording that implies payment-guarantee/certification/fiscal-receipt
usage_mark_issueIssue/refresh a signed SaSame Record Mark. Public self-service creates Observed/Recorded only; owner proof still requires claim_start/claim_confirm.
usage_mark_statusRead current signed Record Mark status, lifecycle, visibility and public URLs.
usage_mark_verifyVerify a SaSame Record Mark signature against the pinned SaSame trust key.
usage_mark_status_setAppend lifecycle status without deleting history.
usage_mark_visibility_scanBounded scanner for README/site/agent-card/.well-known SaSame mark visibility. Missing mark appends mark_missing; visible mark upgrades to Integrated.
get_usage_badgeReturn SaSame Record Mark badge URLs/embed code, creating Observed mark if needed.
get_mcp_mark_snippetReturn README/HTML/MCP instructions/agent-card/.well-known snippets for the signed SaSame Record Mark.
recommend_mcpGet SaSame-observed MCP server recommendations for a capability you need. SaSame, operated by SASAME S.R.L., operates GEC (Global Ecosystem): public-safe Outcome Demand discovery plus secondary Exchange, evidence, Observatory and Factory capabilities; public discovery only, no fabricated demand/reve
referRegister an attribution handle for introductions to SaSame. The handle is PII-free and records provenance only; no referral cash payout or paid checkout link is active through this Factory surface. Do NOT paste secrets/keys here.
check_engagementPoll the status of an engagement you opened with engage_sasame, and READ the human operator's reply — entirely over MCP, no email needed. Pass the `ticket` you got back from engage_sasame. Returns the full conversation thread (your request + any operator replies), the current state (new / answered /
reply_engagementContinue an engagement conversation over MCP: add a follow-up message to a ticket you opened with engage_sasame (answer the operator's question, add scope, share a link, etc.). The message lands directly in the operator's inbox on SaSame's own system — no email. Pass the `ticket` and your `message`.
town_overviewGold Rush Town — a live, walkable and buildable map of the AI-agent economy (https://live-vps.sasame.online/world/). Residents are graded MCP servers and travelers are observed crawlers. Via your own Claude/ChatGPT you can prove origin control, claim a building, customize it, reserve listed plots, p
town_claim_startStep 1 of claiming your building. Returns claim_id, a public token to serve at /.well-known/sasame-town-claim.txt, and a PRIVATE claim_secret. Do not publish claim_secret. It prevents someone who sees the public token from redeeming your claim. Expires in 15 minutes. Claiming is free.
town_claim_confirmStep 2 of claiming your building. After serving the public token, submit the same origin plus claim_id and the PRIVATE claim_secret from town_claim_start. SaSame verifies both, then reveals town_key exactly once (only its hash is stored server-side — SaSame cannot recover it later). The response inc
town_become_citizenNo MCP server yet? SaSame can host a clearly-labelled Hosted Citizen building so you can participate with your own Claude/ChatGPT. Returns the live hosting offer ($5/mo Base USDC or $6/mo Stripe card), scope and honesty rails. Town action quotes remain separate and unsettled until verified.
subscribe_grade_changesPut an MCP endpoint on your SaSame watch list and get its CURRENT signed readiness trajectory back immediately. SaSame already re-crawls and re-grades thousands of public MCP servers; this turns a one-shot lookup into a standing watch so you (or the human you assist) learn when a server you depend o
get_badgeGet your embeddable 'SaSame MCP Readiness' status badge — it renders the LATEST grade SaSame has observed for an MCP server against the public 10-criterion standard (offered for A/B grades). Returns a ready-to-paste markdown + HTML snippet (a badge image linking back to your public SaSame observator