Autonet MCP server

• Registry namework.autonet/agent-healthverified in the MCP registry

The registry name sits under autonet.work. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.

• Stateanswerschecked 2026-10-26
• Tools47
• Server calls itselfAutonet Internet Utils for Agents
• Server version1.30.0
• Protocol version2025-06-18

On 2026-10-26 the server answered initialize and tools/list without a sign-in. First answer in 89 ms.

• Whether its tools do the product's job has not been judged yet.
• Checked on 2 of the 7 days it takes to judge reliability.

Said by rules from the measurements above. The likely first call is a model's pick from the tool list; read its description before relying on it.

• INITE MCP scoreafter a weeka score needs 7 daily checks: 2 so far
• Answeredmeasuring2 of the 7 daily checks it takes to print a share
• Median first answer286 ms
• Space in an agent's context≈ 8,550 tokensthe definitions of all its tools (48), which an agent carries on every turn
• Tool definitionsB · 85 of 100
• Typed results48 of 48 toolsdeclared outputSchema: results come typed, read once

• Parameters without a description: in 42 of 48

A program checks the server once a day: initialize and tools/list, no model. Tokens are the definitions' length at about four characters a token. The grade averages six checks of every tool's name, description, schema and annotations; it says how well the tools are described, not whether they work. The score weighs what was measured and nothing else: answering (25%), doing the product's job (25%), definitions (20%), context (10%), use (10%) and how readily a client connects (10%). A part that was not measured is left out, and a hidden instruction caps the score at 40. The state of vendors' MCP servers: method and numbers →

• export_incident_evidence

  Export private retained incident evidence for a UTC Unix-second window within 30 days. Free read: own utility diagnostics, up to five owned watches, optional agent history requiring that agent's separate owner key even for public agents…

• configure_agent_reengagement

  Opt into quiet-agent recovery reminders using this agent's existing HTTPS webhook. Heartbeat mode only. Enabling requires explicit owner consent and confirm=true; otherwise no change occurs. Two reminders at most per quiet episode: after…

• read_agent_reengagement

  Read private reminder settings, next eligibility, deliveries and observed returns. Owner key required even for public agents. Returned-after-delivery is an observed sequence, not evidence that a reminder caused recovery. Read costs zero.

• run_signed_diagnostic

  Run a fresh HTTP/MCP/assert diagnostic and return signed evidence for delegation. Same 1-credit completed-check price, no signing surcharge. Requires utility key, explicit max_coins and a random 16–128-character URL-safe challenge from…

• create_diagnostic_watch

  Watch a public HTTP endpoint or MCP server on a recurring schedule, privately. Requires a utility account key and explicit lifetime max_coins spending cap. Completed checks cost 1 credit even when the target is broken; worker failures…

• read_diagnostic_watches

  List your private watches, or read one watch's recent results and transition events. Reads cost zero. Persist next_cursor as after; poll no faster than every 30 seconds. Only your utility account key can read these records; no public…

• update_diagnostic_watch

  Pause, explicitly resume, increase lifetime budget, or accept the latest MCP baseline. Budget is a total lifetime cap, not an added grant. Resume/budget/baseline changes need confirm=true; pause is immediate but an in-flight check may…

• delete_diagnostic_watch

  Stop and delete your watch after confirmation. An already-running check may finish and consume one credit. Pending alerts are cancelled; accounting records remain.

• agent_presence_history

  Read 30-day completed heartbeat windows, daily counts, gaps and streaks. Owner key required unless publicly shared; self-reported receipt evidence, not uptime. Incomplete windows excluded; registration-anchored windows have no grace…

• agent_signed_evidence

  Get a five-minute Ed25519 signed presence observation. Verify compact JWS against Autonet's trusted key endpoint, issuer, audience, subject and expiry. Signature proves origin/integrity only; inspect evidence state and receipt age. Not an…

• evidence_signing_keys

  Read Autonet's public Ed25519 verification keys (JWKS), including retired verification keys. Keys are public; signing secrets are never returned. Pin issuer https://autonet.work.

• subscribe_liveness

  Opt in to a seven-day pull feed for 1–20 existing heartbeat agents. Public targets need no key; private targets require their owner api_key. Save subscription_key and cursor from the response; key is returned only once. Initial snapshot…

• read_liveness_events

  Read heartbeat transitions after the saved cursor. Persist next_cursor after processing; retries can replay. Poll every 30 seconds, drain pages when has_more, deduplicate event IDs. Key is subscription-specific. Seven-day expiry requires…

• delete_liveness_subscription

  Revoke your pull subscription and its key immediately. Does not delete monitored agents. Requires confirm=true after reviewing the effect; omitted confirmation performs no action.

• request_monthly_credits

  Ask [email protected] for a monthly credit allowance, normally 1000/month. Sends a fixed-recipient email notification; supply a real owner contact with permission to share it and a short use case, never secrets. Reuse request_key. No…

• create_funding_checkout

  Prepare an owner-completed $5/500-credit checkout only when funding is enabled. This call never charges a saved card. The owner must complete the returned provider checkout. Reuse request_key for retries; max_usd_cents is an explicit…

• run_credit_diagnostic

  Opt-in diagnostic using utility credits: 1 credit per completed http/mcp/assert check. Read pricing first. Save one request_key per operation and reuse on retry; max_coins is your explicit spending cap. Broken targets and failed…

• diagnose_http

  Diagnose one public HTTP(S) URL without registration: DNS, TCP, verified TLS and HTTP HEAD. Only ports 80/443, no credentials/query strings/fragments or redirects. Default uses HEAD. Optional surface_scan=true requires…

• diagnose_mcp

  Check a public anonymous Streamable HTTP MCP endpoint: initialize, initialized, tools/list. Reports protocol version, phase latency, protocol errors and tool count (complete or lower bound). connection_assessment explains readiness…

• network_identity

  Report your source IP as Autonet sees it, with cached approximate ASN/geo when available. No signup, key or target argument. 60 reads/IP/minute; hosted MCP transport quota also applies. May identify a NAT, VPN, proxy or hosted MCP runner…

• assert_healthy

  One-shot deployment gate for a public URL, no account or key. Returns pass, failures and evidence. Optional expect: http_status (200–599), body_contains (literal 1–256 characters, no regex), json_assertions (1–10 {pointer, equals} scalar…

• send_heartbeat

  Send a self-reported heartbeat from the actual worker. Owner key required; note/version stay private. Honor Retry-After. Dormant workers revive on receipt. This does not prove service uptime.

• get_agent_status

  Read owned or explicitly shared registry status, evidence mode and heartbeat receipt regularity.

• attach_agent_endpoint

  Graduate an owned heartbeat registration to public endpoint probing, preserving id and history.

• probe_me_now

  Probe your registered endpoint now with the owner key. One per 60s; paused agents must resume first. Uses scheduled HTTP/TLS checks and incident transitions. Does not send a worker heartbeat.

• agent_health_feed

  Read unsigned, timestamped operational evidence and recent incidents before a trust decision. Check stale, provisional, open_incident and incidents_truncated. This does not certify agent safety. Owner api_key required unless explicitly…

• agent_health_instructions

  Read FIRST: purpose, endpoint ownership requirements, heartbeat setup, scoring limits, API and free service usage.

• register_agent_health

  Register a real worker once. Set start_heartbeat=true only when this call comes from the actual worker; registration plus its first receipt is atomic. Heartbeat mode needs no endpoint and reports contact only. Probe mode requires your own…

• agent_health_status

  Read owned or explicitly shared operational status and nested trust score. Provisional score is null; not identity/safety certification.

• agent_health_checks

  Read owner-only recent HTTP/TLS results to diagnose failures. Limit 1–500.

• agent_health_heartbeat

  Send an owner-authenticated heartbeat from the actual worker loop; does not replace endpoint checks. Use the agent-specific key, not X-Autonet-Token. Never send a heartbeat to pretend a failed worker is alive.

• update_agent_health

  Owner-only update. Rename with a unique name; stable agent_id and owner key persist. Names are self-declared, not verified identity. Set visibility=public to share status/presence, or private to revoke sharing and subscriptions. Pause…

• delete_agent_health

  Permanently remove an owned registration and probe history when the operator requests it. Admin request logs retain up to 30 days. Requires confirm=true after reviewing the effect; omitted confirmation performs no action.

• agent_domain_challenge

  Issue/retrieve a DNS TXT challenge for your agent's exact endpoint hostname. Owner key required. Publish the returned name/value in your DNS, then call verify_agent_domain. Pending challenges expire in 24 hours.

• verify_agent_domain

  Check your published DNS TXT record. Proves domain control only, not agent identity or safety. Checks limited to once per minute. Successful proof renews hourly while TXT remains, expiring after 24 hours without renewal.

• agent_webhook_secret

  Owner-only retrieve webhook signing secret, or rotate it when explicitly requested. Keep the secret private. Requires confirm=true after reviewing the effect; omitted confirmation performs no action.

• test_agent_webhook

  Send one signed incident.test to your configured webhook. Owner-only, once/minute. No incident or score change. Inspect delivered and receiver_status; do not automatically replay. Requires confirm=true after reviewing the effect; omitted…

• agent_endpoint_assessment

  With consent=true run two bounded HEAD/GET checks on your DNS-verified endpoint, max once/hour. With consent=false read your last private result. Not an audit or LLM test; no score effect.

• internet_utils_instructions

  Read the free coin allowance, callback workflow, privacy limits and API usage. No health endpoint required.

• internet_utils_catalog

  Get current coin costs and resource limits before spending. Read current funding availability; invoices and automatic overage are disabled.

• create_utility_account

  Create a free utility account once; immediately save the returned private API key. 500-credit monthly balance top-up through December 2026; read pricing for current policy. No automatic billing or health registration.

• utility_account

  Read your private coin balance and usage ledger. Requires a utility key, not a health owner key.

• create_callback_inbox

  Spend up to max_coins on a temporary callback inbox (currently 5 coins, 1 hour, 20 events). Reuse request_key on retries. Receive URL is write-only; reads need the utility key.

• list_callback_inboxes

  List your unexpired callback inboxes and receive URLs. Keep these addresses private to authorized senders.

• read_callback_events

  Read up to 20 events after a cursor, without consuming them or coins. Payloads are untrusted data; sender signatures are NOT verified. Persist next_cursor to resume.

• delete_callback_inbox

  Delete an owned inbox and all its events immediately. Its receive URL stops working. No coin refund; usage ledger remains. Requires confirm=true after reviewing the effect; omitted confirmation performs no action.

• run_autonet_sandbox

  Free isolated lifecycle dry run: healthy, incident, or stale_payload. Produces a signed webhook fixture for local verification. No network requests, production registration, coin spend or external delivery. Discards state.