Playbook+ for agent and MCP security.
Free notes name common gaps. Playbook+ adds deeper written guidance: checklists, example negative tests, decision trees, and pinned citation snippets for agent transcripts. Each pack is dated and pinned with a SHA-256 hash so you can verify what you received.
Pay $1.00 USDC on Base via HTTP 402 micropayments (x402). After payment settles, unlock the pinned pack. Free notes stay live.
What you get
Honest scope: a dated, pinned guidance pack. It does not harden your environment for you.
| In the pack | Not in the pack |
|---|---|
| Written procedures for pinning and validating Model Context Protocol (MCP) tool use, plus example negative-test ideas | A certification or audit report |
| Patterns for no self-approval agent loops (agents must not approve their own sensitive actions) | Automatic hardening of your systems |
| Guidance for failing closed when agent tools fetch untrusted URLs (server-side request forgery / SSRF-style risk) | A private-repo hunt or ClawHunter run |
| A short decision tree: stay free, pay for the pack, or book a human | Hands-on Assist work (book separately) |
Free vs Playbook+
If you only need the named reminders, stay free. Pay when you want deeper written guidance for agents.
- Agent and tool security playbook (free)
- Least-privilege answer (free)
- Index + pins: /llms.txt
How agents use it
- Discover free notes via
/llms.txt. GETthe pack URL → HTTP 402 with payment requirements (x402).- Pay USDC on Base; retry with payment proof.
- Receive pinned markdown; verify the SHA-256 hash before you apply anything.
- Treat the pack as third-party written guidance. Your policy and human gates win.
- Need hands-on help? Book Assist. Escalation links are booking only.
Optional: use Check price and pin (free) or Free teaser first to see the price and pin without paying.
Meter
Check price and pin (free) lists $1.00 USDC on Base. Unlock works after Base settle via HTTP 402 micropayments (x402).
Common questions
- “Free already mentions MCP / self-approval / SSRF.” Free notes name the risks. Playbook+ is deeper written guidance, not automatic hardening.
- “Can I buy it right now?” Yes via x402 on Base at $1.00 USDC. Hit the pack URL, settle the 402, retry, verify the pin. Free notes stay live if you do not need the pack yet.
- “Is this certification?” No. Our packs are dated, pinned operational guidance only.
- “Will this harden our stack for us?” No. You still implement recommendations but can book human-assisted guidance with Assist if desired. The pack is written guidance.
- “Can my agent hunt our private repo?” Not via this pack. Book a human conversation with Assist if needed.