TrustBench

A non-custodial routing and audit layer for x402 that produces signed evidence rather than opinion. Every paid call emits an Ed25519-signed receipt covering the routing decision and the on-chain settlement reference, verifiable offline against a published public key. The paywall is fail-safe by design: if the upstream merchant is non-conformant, the agent isn't charged, so money never moves on bad routes.

Cross-network: routes Base today, registers Solana endpoints (Heurist Mesh, Pay.sh skills), Solana settlement next; protocol-agnostic over time across x402, p402, and MPP.

What's live today

• Public registry of x402 endpoints across Base (Coinbase Agentic Market, ~650 services) and Solana (Heurist Mesh, ~150 endpoints) — Solana inventory is in the database today and surfaces on /rankings once the network filter is dropped (P4-3a, see phase4-p4-3-timing.md)
• Nightly liveness probe (HEAD requests from a single cloud host, 3 samples per provider, statuses 200/201/204/401/402/403/404/405/429 treated as alive)
• Score derivation: 15 + 45·successRate + 35·latencyHealth + 3·consistency, clamped to [40, 98], via linear-interpolation percentiles
• Ed25519-signed scorecards, public key at /.well-known/trustbench-pubkey
• Routing and settlement on Base + USDC (Phase 3); Solana is roadmap (P4-3)
• Methodology disclosure at /methodology

Phase 3 + 4 (live since 2026-05-04 / 2026-05-06)

• Authenticated POST /route endpoint with API-key auth (argon2id), idempotency keys, hard spend caps, and Ed25519-signed receipts
• /route/settle endpoint forwarding agent-signed EIP-3009 authorizations
• Queryable audit at /receipts/:id
• Strict reservation-based spend caps (P4-7)
• Discovery surfaces: /skill.md, /llms.txt, /.well-known/trustbench.json
• First paid x402 receipt against a real provider, settled on Base 2026-05-06: rcpt_01KQY7C44GAPSXZPFQYRZ1D10C — verifies SIGNATURE VALID + ON-CHAIN VERIFIED with no overrides.

In flight (Phase 4b)

• x402-paywalled API endpoints (per-call USDC pricing surface)
• Public receipt explorer at /explorer
• Formal partner integrations
• Solana routing (registry pre-built, network filter to drop)
• npm verifier package @trustbench/verify-receipt

Claude Desktop / MCP

TrustBench ships a native MCP server so agents in Claude Desktop, Claude Cowork, ChatGPT, or Cherry Studio can look up providers, fetch receipts, and verify signatures without any HTTP-fetch workaround.

Add to claude_desktop_config.json (or your host's equivalent MCP settings file):

{
  "mcpServers": {
    "trustbench": {
      "command": "npx",
      "args": ["-y", "@trustbench/mcp"]
    }
  }
}

Restart the host app after saving. Three tools become available:

• get_rankings — scored providers by capability. No API key.
• get_receipt — fetch any receipt by ID (rcpt_… / rrcpt_…). No API key.
• verify_receipt — confirm Ed25519 signature + on-chain status. No API key.

Routing tools (route_quote, route_settle) require a tb_live_… API key and ship in the next MCP release. Request access by DM'ing @TrustBench on X.

What we don't do

• We never hold agent funds, never submit transactions on-chain, never act as a payment facilitator. Agents sign EIP-3009 transferWithAuthorization payloads; providers submit them on-chain and pay gas. TrustBench observes the resulting tx_hash and records it in a signed receipt.

Pricing model

• x402-native paywalled API endpoints, per-call USDC settlement on Base
• No subscriptions, no contracts, no per-seat or per-month charge
• v0.1.0 ships POST /route at $0.005 per call (score-provider tier); full tier table at /pricing (HTML for humans, JSON for agents via Accept: application/json or ?format=json)
• Settlement through the Coinbase CDP facilitator at api.cdp.coinbase.com/platform/v2/x402 (the public `x402.org/fa

... View full README on GitHub