78trust / 100

Task Scope

by TrollBridge in Productivity & SaaS

x402 APIPassing, checked 31 min ago

NOT A SANDBOX — task-scoped least-privilege tool allowlisting ($0.10): hand it the task description and tool registry, get the minimal allowlist with per-tool justification plus phase-change re-scoping guidance. Heuristic keyword/effect matching — a tool that hides its effects escapes the screen. Blast-radius control for honest agents, not containment. Toll: $0.10 USDC on Base or Solana.

GET https://mini-tollbooth.onrender.com/task-scope

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
228 ms typical, 256 ms slowest 5%
Last check
31 min ago
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://mini-tollbooth.onrender.com/task-scope?task_description=Search+for+open+bounties%2C+then+send+the+payout+to+the+winner"
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fmini-tollbooth.onrender.com%2Ftask-scope
const res = await pay("https://mini-tollbooth.onrender.com/task-scope?task_description=Search+for+open+bounties%2C+then+send+the+payout+to+the+winner");
console.log(await res.json());

Example input

{
  "task_description": "Search for open bounties, then send the payout to the winner",
  "tool_registry": [
    {
      "description": "search the web, read only",
      "name": "web_search"
    },
    {
      "description": "transfer USDC to an address",
      "effects": [
        "transfer",
        "pay"
      ],
      "name": "usdc_send"
    }
  ]
}

Example output

{
  "allowlist": [
    {
      "effect_class": "read_only",
      "justification": "…",
      "phase": "discovery",
      "tool": "web_search"
    }
  ],
  "description": "NOT A SANDBOX — task-scoped least-privilege tool allowlisting ($0.10): hand it the task description and tool registry, get the minimal allowlist with per-tool justification plus phase-change re-scoping guidance. Heuristic keyword/effect matching — a tool that hides its effects escapes the screen. Blast-radius control for honest agents, not containment.",
  "excluded": [
    {
      "effects": [
        "persistent_write"
      ],
      "reason": "…",
      "tool": "file_write"
    }
  ],
  "lane": "/task-scope",
  "rescope_triggers": [
    "…"
  ],
  "task_phases": [
    "discovery",
    "money"
  ],
  "tools_evaluated": 3,
  "warning": "NOT_A_SANDBOX — heuristic keyword/effect matching on declared registry entries, not containment of a lying tool."
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
31 min agoPassed402256 ms$0.1
5 h agoPassed402230 ms$0.1
8 h agoPassed402206 ms$0.1
12 h agoPassed402228 ms$0.1
16 h agoPassed402627 ms$0.1
18 h agoPassed402195 ms$0.1
24 h agoPassed402202 ms$0.1