OpenChainGraph Suite · ART-385 · wave 47

Agent Token Scope Checker

Compares a requested agent action against a token or mandate's declared scope: spend cap, currency, merchant-category (MCC) allow-list, and expiry. If a delegation chain of ancestor tokens is supplied, also checks that each link narrows rather than widens the parent's bounds. Pure evaluation only: never authorizes, blocks, or executes anything.

Scope VerdictAgent PaymentsVerify-OnlyZero PIIW3C VC §13.11
🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Scope
Pure evaluation of one requested action against one token's bounds: cap, currency, MCC, expiry, and attenuation-chain narrowing. Returns a verdict and receipt only; it never authorizes, blocks, or executes a payment. Part of the agentic-payment-interop family alongside the AP2 mandate-chain validator (art-01) and the AP2/x402 verifiers (art-26, art-31, art-61, art-62); this node answers a different question: is THIS requested action within THIS token's scope, not whether a mandate chain is structurally valid.
Presets
Requested Action
Token
Attenuation Chain (optional: one ancestor token per block, root first)
Result
Execution Hash & §4 Artifact
SHA-256 execution hash (JCS canonical, RFC 8785):

      

        
        
        
        
        
        
      

    

  


  
  

    

  







  

    
Ask your agent

    
  

  
Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.

  
Run the AINumbers MCP tool `check_agent_token_scope`. Task: Compare a requested agent action (amount, currency, merchant category, timestamp) against a token or mandate's declared scope: spend cap, currency, MCC allow-list, expiry, and optional attenuation-chain narrowing.
Call it with arguments: {"policy_parameters":{"requested_action":{"amount":50,"currency":"USD","mcc":"5411","requested_at":"2026-07-18T12:00:00Z"},"token":{"token_id":"tok_leaf_1","max_amount":100,"currency":"USD","allowed_mccs":["5411","5412"],"expires_at":"2026-08-01T00:00:00Z"}}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-385-agent-token-scope-checker.html#p=v1.H4sIAAAAAAAA_wHtABL_eyJyZXF1ZXN0ZWRfYWN0aW9uIjp7ImFtb3VudCI6NTAsImN1cnJlbmN5IjoiVVNEIiwibWNjIjoiNTQxMSIsInJlcXVlc3RlZF9hdCI6IjIwMjYtMDctMThUMTI6MDA6MDBaIn0sInRva2VuIjp7InRva2VuX2lkIjoidG9rX2xlYWZfMSIsIm1heF9hbW91bnQiOjEwMCwiY3VycmVuY3kiOiJVU0QiLCJhbGxvd2VkX21jY3MiOlsiNTQxMSIsIjU0MTIiXSwiZXhwaXJlc19hdCI6IjIwMjYtMDgtMDFUMDA6MDA6MDBaIn197RlDWu0AAAA