xyz.urbangametheory/urban-game-theory

None of its 30 tools are described as changing anything. For 30 the reading was uncertain, so no mark is shown.

• ugt_capabilities

  “Read the live machine manifest (/docs/agents.json): the design and agreement JSON Schemas, endpoints, program ids, the oracle-fact x402 price and the tool list.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  Takes no inputs.

• ugt_activity

  “Read the same activity stream used by the actor explorer for humans, algorithmic agents and LLM agents.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  4 inputs

  • limitinteger
  • actorstring
  • sourcestring
  • actionstring
• ugt_list_agreements

  “Read the agreement index (GET /agreements), newest first: each row has the agreement/v1 content, its design CIDs, input parcel ids, deadline, status and, once minted, its chain account (onchain).”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  4 inputs

  • citystring
  • designstring“Only agreements linking this design CID”
  • parcelstring“Only agreements taking this input parcel id”
  • limitinteger
• ugt_get_agreement

  “Read an agreement from the index (GET /agreements/:cid) plus, when its content names a sponsor, its chain account (PDA of sponsor and CID) and that account as the chain holds it now (accountState: st…”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  1 input, 1 required

  • agreementCidstringrequired“Agreement CID (bafkrei…), as ugt_propose_agreement or ugt_list_agreements answers it”
• ugt_list_attesters

  “Read the attester directory: lens members with kind and coverage.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  1 input

  • kindstring“Only members of this kind, for example owner-consent”
• ugt_support_status

  “Read on-chain donation escrow and soft-pledge totals for an agreement account (GET /agent/pledges/:account).”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  1 input, 1 required

  • agreementAccountstringrequired“Chain account of a minted (binding owners') agreement: the PDA ["agreement", sponsor, sha256(cid)] under the agreement program (ugt_get_agreement answers it)”
• ugt_oracle_events

  “Read the source-hashed agreement_lifecycle events of an agreement account (executed, cancelled or expired), which its market settles on.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  2 inputs, 1 required

  • agreementAccountstringrequired“Chain account of a minted (binding owners') agreement: the PDA ["agreement", sponsor, sha256(cid)] under the agreement program (ugt_get_agreement answers it)”
  • limitinteger
• ugt_inspect_verified_fact

  “Fetch and decode the x402 challenge for an agreement's recipe-bound terminal fact without paying.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  2 inputs, 1 required

  • agreementAccountstringrequired“Chain account of a minted (binding owners') agreement: the PDA ["agreement", sponsor, sha256(cid)] under the agreement program (ugt_get_agreement answers it)”
  • marketAccountstring
• ugt_publish_design

  “Permanently publish public content: pin (POST /pins) and index (POST /designs) one design/v1 object; confirm=true required.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  3 inputs, 2 required

  • designobjectrequired“A design/v1 object exactly as the app publishes it: schema, goal, title, description, author, city, site, toleranceM, geometry, origin, authoredAt (each presen…”
  • parcelSourceIdstring“Parcel source to bind with; the city's default when absent”
  • confirmbooleanrequired“Explicitly authorize this write, paid or signed devnet action”
• ugt_propose_agreement

  “Permanently publish public content: pin and index one agreement/v1 object (POST /pins, POST /agreements); confirm=true required.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  3 inputs, 2 required

  • agreementobjectrequired“An agreement/v1 object exactly as the app publishes it: schema, title, author, sponsor, city, createdAt, designs [{ cid, goal, title }], inputs { parcels, open…”
  • designsarray“Only unpublished linked designs to index with this agreement, such as parcel layouts.”
  • confirmbooleanrequired“Explicitly authorize this write, paid or signed devnet action”
• ugt_approval_link

  “Build a wallet approval link.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  3 inputs, 2 required

  • actionstringrequired
  • targetstringrequired
  • paramsobject
• ugt_find_place

  “Find a place, address, parcel id or design title using the app search sources.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  5 inputs, 1 required

  • querystringrequired
  • citystring
  • parcelSourceIdstring
  • bboxarray
  • limitinteger

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-24.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.