onyx_perm_check
ActiveTool of onyx-paid-mcp
declared in 1.26.0
Check whether an agent's proposed action stays inside its declared permission grant (allowed action, allowed merchant/domain, spend cap, rolling-window + velocity + per-counterparty budgets, expiry, principal, consent). Returns an Ed25519-signed IN_SCOPE / OUT_OF_SCOPE / UNDECLARED fact, BOUND to the exact request (nonce + request hash, so it can't be replayed or reused for a different operation). Facts, not judgments — a mechanical conformance check, never a verdict on intent. Verify free with onyx_attestation_verify. (price: $0.00 USDC, tier: free)
Parameters schema
{
"type": "object",
"required": [
"action",
"grant"
],
"properties": {
"grant": {
"type": "object",
"description": "The agent's permission grant (onyx-perm-grant/v0): allowed_actions, allowed_merchants, allowed_domains, spend_max_usdc, spend_window_usdc, spend_window_sec, velocity_max, per_counterparty_budget, principal, consent_ref, expires_at"
},
"action": {
"type": "object",
"properties": {
"type": {
"type": "string",
"description": "e.g. transact, verify, read"
},
"domain": {
"type": "string"
},
"merchant": {
"type": "string"
},
"amount_usdc": {
"type": "number"
}
},
"description": "The proposed action: {type, amount_usdc?, merchant?, domain?}"
},
"history": {
"type": "array",
"items": {
"type": "object"
},
"description": "Optional: recent settled actions for window/velocity checks, each {amount_usdc, ts (unix), counterparty?}. Stateless — the caller supplies the tally; the fact binds to it."
}
}
}Parent server
onyx-paid-mcp
https://github.com/dimitrilaouanis-tech/onyx-mcp
2/7 registries