MCP preflight
Check a tool surface before an agent uses it.
curl -s https://hekategate.com/v1/mcp/preflight \ -H 'content-type: application/json' \ --data @https://hekategate.com/examples/hekate-lite/mcp-preflight.json
Hekate Lite
Each fixture is public JSON that can be submitted directly to Hekate Lite. Use these to test allow, warn, block, receipt output, and Ergo/Sage testnet boundaries before wiring your own agent.
Check a tool surface before an agent uses it.
curl -s https://hekategate.com/v1/mcp/preflight \ -H 'content-type: application/json' \ --data @https://hekategate.com/examples/hekate-lite/mcp-preflight.json
Check price, rail, recipient, input sensitivity, and receipt support before payment.
curl -s https://hekategate.com/v1/x402/preflight \ -H 'content-type: application/json' \ --data @https://hekategate.com/examples/hekate-lite/x402-preflight.json
Minimize OAuth/API scopes against the declared task.
curl -s https://hekategate.com/v1/permissions/diff \ -H 'content-type: application/json' \ --data @https://hekategate.com/examples/hekate-lite/permissions-diff.json
Detect risky data-flow chains such as sensitive reads into public sends.
curl -s https://hekategate.com/v1/tool-chain/risk \ -H 'content-type: application/json' \ --data @https://hekategate.com/examples/hekate-lite/tool-chain-risk.json
Verify AgentSec-compatible Hekate receipt structure and evidence hash.
curl -s https://hekategate.com/v1/receipts/verify \ -H 'content-type: application/json' \ --data @https://hekategate.com/examples/hekate-lite/receipt-verify.json
Check Sage quote price, rail, reserve, task hash, deadline, and mainnet boundary.
curl -s https://hekategate.com/v1/ergo/sage/preflight \ -H 'content-type: application/json' \ --data @https://hekategate.com/examples/hekate-lite/sage-preflight.json
Check Ergo Note fields before trusting a paid-agent flow.
curl -s https://hekategate.com/v1/ergo/note/check \ -H 'content-type: application/json' \ --data @https://hekategate.com/examples/hekate-lite/ergo-note-check.json
Check Agreement, Verification Receipt, Settlement Receipt, chain anchor, and task hash consistency.
curl -s https://hekategate.com/v1/ergo/sage/receipts/verify \ -H 'content-type: application/json' \ --data @https://hekategate.com/examples/hekate-lite/sage-receipts-verify.json
Public web receipts currently remain private-beta unless production Ed25519 custody is configured. Treat these examples as integration fixtures, not production certification.
Review claim boundaries