Playbook+ for agent and MCP security.

Free notes name common gaps. Playbook+ adds deeper written guidance: checklists, example negative tests, decision trees, and pinned citation snippets for agent transcripts. Each pack is dated and pinned with a SHA-256 hash so you can verify what you received.

Pay $1.00 USDC on Base via HTTP 402 micropayments (x402). After payment settles, unlock the pinned pack. Free notes stay live.

What you get

Honest scope: a dated, pinned guidance pack. It does not harden your environment for you.

In the pack Not in the pack
Written procedures for pinning and validating Model Context Protocol (MCP) tool use, plus example negative-test ideas A certification or audit report
Patterns for no self-approval agent loops (agents must not approve their own sensitive actions) Automatic hardening of your systems
Guidance for failing closed when agent tools fetch untrusted URLs (server-side request forgery / SSRF-style risk) A private-repo hunt or ClawHunter run
A short decision tree: stay free, pay for the pack, or book a human Hands-on Assist work (book separately)

Free vs Playbook+

If you only need the named reminders, stay free. Pay when you want deeper written guidance for agents.

How agents use it

  1. Discover free notes via /llms.txt.
  2. GET the pack URL → HTTP 402 with payment requirements (x402).
  3. Pay USDC on Base; retry with payment proof.
  4. Receive pinned markdown; verify the SHA-256 hash before you apply anything.
  5. Treat the pack as third-party written guidance. Your policy and human gates win.
  6. Need hands-on help? Book Assist. Escalation links are booking only.

Optional: use Check price and pin (free) or Free teaser first to see the price and pin without paying.

Meter

Check price and pin (free) lists $1.00 USDC on Base. Unlock works after Base settle via HTTP 402 micropayments (x402).

Common questions

  1. “Free already mentions MCP / self-approval / SSRF.” Free notes name the risks. Playbook+ is deeper written guidance, not automatic hardening.
  2. “Can I buy it right now?” Yes via x402 on Base at $1.00 USDC. Hit the pack URL, settle the 402, retry, verify the pin. Free notes stay live if you do not need the pack yet.
  3. “Is this certification?” No. Our packs are dated, pinned operational guidance only.
  4. “Will this harden our stack for us?” No. You still implement recommendations but can book human-assisted guidance with Assist if desired. The pack is written guidance.
  5. “Can my agent hunt our private repo?” Not via this pack. Book a human conversation with Assist if needed.