Robin Saige we check the tools AI agents call

Agent Broker

dev.hatchloop/agent-broker

23 MCP tools: compliance, verification, messaging, booking, US contracts. 15 need no key.

— the operator's own registry description reported

Publisher dev.hatchloop · first seen 2026-08-24 · endpoint https://hatchloop.dev/mcp/agent-broker

allow
verdict
stale-mid-shared
cluster
ok_tools
answers
23
tools served

Dependency rating derived

allow
allow — alive & usable · retrieval-public ● · V3W answer key in hand ◐
allow — because answers ●, 23 tools legible (band A) ●, no confirmed drift in 2 probes ●, truth 2/2 agree vs primary ●

Cluster stale-mid-shared · distinctiveness 0.615 (unusual). Every figure is a percentile or class within the 15,472-server censussee the whole spectrum.

Does it answer? Q1 · observed
answersalive_tools
latency303 ms
vs populationtypical
protocolstale
authopen
Can it be used? Q4 · observed
tools23
vs populationhigh
capabilities4
harnessA
Did it hold when checked? Q3–Q4 · derived
identityshared
servers on its host6
verifiabilityunassessed
duplicate inventoryyes
drift events0
answers true2/2 agree

🔏 Signed receipt rr_a2af76026eb4bbfa5803f175 · ed25519 · key rs-rcpt-2026-08 — this rating is tamper-evident; an agent gets the full signature from check_server and can verify it against the published key.

Q1Does it answer?alive & usable — 2 probes ●evidence ↓
Q2What is it?retrieval-public ● evidence ↓
Q3Can it be checked?V3W answer key in hand ◐evidence ↓
Q4Did it hold?harness A · truth 2/2 agree · no drift ●evidence ↓
Q5What company does it keep?stale-mid-shared · 6 on its host (context, not verdict) ◐evidence ↓

● observed · ◐ derived · ○ reported — the verdict synthesizes Q1–Q4; Q5 is context. Methodology →

History observed

Every probe we made, oldest → newest (2 shown, 2026-08-30 → 2026-09-06). Green answered · amber answered-but-walled · red no useful answer. A gap in our cadence is a gap in coverage, not evidence about the server.

changelog (2 events)
datetypewhat changed
2026-09-06inventorytools 20 → 23
2026-08-30outcomefirst probe: ok_tools

What kind of tools these are derived

Verification only means something relative to a tool's NATURE — an email-sender has no "true answer", a generator has no answer key. Classification evidence: classified from tool names/descriptions/annotations WE OBSERVED. What checking applies to each kind (the full methodology →):

naturetoolsmeaning what checking applies
retrieval-public12serves public factstruth-checkable against a public source — the V-ladder applies in full
action9changes the worldno true answer exists; we check the CONTRACT (destructive/read-only/idempotent declarations, error legibility) and never fire real actions
computational2deterministic transformsself-checkable by re-computation and known-answer tests

Tools last seen observed

call_business capture_lead check_booking_link check_compliance check_quota escalate_to_human find_business get_conversation get_outcome get_status handle_inbound import_booking_url lookup_us_contracts map_trade_restriction mint_key preview_cost schedule_appointment screen_sanctions self_test send_message send_transactional_confirmation verify_business verify_company_record

Harness readiness observed

Can an agent's harness pick this tool and call it correctly? Graded on the three things an agent reads — name, description, typed parameters. Band A — an agent can pick and call these reliably.

legibility checktools passingok
name is clear & specific23/23
has a description23/23
description is substantive23/23
parameters are typed23/23
parameters are described11/2311/23

23 of 23 tools graded · 23 with a captured input schema. RS-008, Tier-1 — no domain knowledge, applies to any tool. “Alive” is not the same as “usable”.

Truth checks observed

2/2 answers agree with the published primary source.

claim classkeyverdictprimary source
OFAC SDN screening (vs the official list)ISLAMIC REVOLUTIONARY GUARD CORPSagreesofac-sdn
OFAC SDN screening (vs the official list)MAERSK LINEagreesofac-sdn

Protocol conformance observed

2024-11-05
protocol version
session model
0.2.12
server version agent-broker

Capabilities: logging prompts resources tools

Drift observed

No confirmed drift on record. Baseline set 2026-09-06; changes appear here after human review.

raw probe records
probed (UTC) outcomehttpmsprotocol
2026-09-06T06:13:21Zok_tools2003032024-11-05
2026-08-30T06:13:01Zok_tools2002472024-11-05

Watch or embed this verdict

verdict badge

Operators: put the live verdict in your README — it updates with every census, links back here, and is a dated observation, never a warranty:

[![Robin Saige verdict](https://robinsaige.com/badge/dev.hatchloop/agent-broker.svg)](https://robinsaige.com/s/dev.hatchloop/agent-broker)

Depend on it? Subscribe to its change feed — outcome changes and confirmed drift, no account needed. Building on it? The full dossier as JSON — verdict, rating, truth checks, history — stable enough to gate CI on.

← overview

Operator of this server? Everything we hold about it is on this page — free, no account, for anyone. Wrong attribution, stale probe, misclassification? Dispute this record →