# Agent Custody MCP server

Agent View of the PolicyLayer registry record for Agent Custody: identity, probed posture, risk grade, and all 14 tools classified. HTML page: https://policylayer.com/tools/agent-custody

## Facts

- Server id: `ch4r10t33r/agent-custody`
- Homepage: https://github.com/ch4r10t33r/agent-custody
- Registry record: grade F, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 14
- Tool categories present: Destructive, Other, Write
- Tags: agent custody, admin
- Record last modified: 2026-09-27T11:38:57.915Z

## Tools (14)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `memory.forget` | Destructive | Critical | https://policylayer.com/tools/agent-custody/memory.forget.md |
| `memory.sweep` | Destructive | Critical | https://policylayer.com/tools/agent-custody/memory.sweep.md |
| `customer.lookup` | Other | Low | https://policylayer.com/tools/agent-custody/customer.lookup.md |
| `echo.say` | Other | Low | https://policylayer.com/tools/agent-custody/echo.say.md |
| `memory.confirm` | Other | Low | https://policylayer.com/tools/agent-custody/memory.confirm.md |
| `memory.get` | Other | Low | https://policylayer.com/tools/agent-custody/memory.get.md |
| `memory.history` | Other | Low | https://policylayer.com/tools/agent-custody/memory.history.md |
| `memory.hold` | Other | Low | https://policylayer.com/tools/agent-custody/memory.hold.md |
| `memory.read` | Other | Low | https://policylayer.com/tools/agent-custody/memory.read.md |
| `memory.release` | Other | Low | https://policylayer.com/tools/agent-custody/memory.release.md |
| `memory.retract` | Other | Low | https://policylayer.com/tools/agent-custody/memory.retract.md |
| `stripe.payout` | Other | Low | https://policylayer.com/tools/agent-custody/stripe.payout.md |
| `stripe.refund` | Other | Low | https://policylayer.com/tools/agent-custody/stripe.refund.md |
| `memory.write` | Write | Medium | https://policylayer.com/tools/agent-custody/memory.write.md |

## Tool descriptions

- `memory.forget` — Erase a fact
- `memory.sweep` — Retention: forget every fact the ledger learned of before an instant, in one space or all, skipping held facts, and remove each from every store. Without
- `customer.lookup` — Look up a customer record
- `echo.say` — Echo the input
- `memory.confirm` — Lift a quarantined (claimed) fact to attested. Only accepted through the gateway, so the confirming actor is the one named in the signed grant.
- `memory.get` — One fact by id, whatever its state: its space, actor, provenance, source receipt, validity. Meant for the gateway
- `memory.history` — Every event that touched a fact, oldest first.
- `memory.hold` — Legal hold: while it stands the fact cannot be forgotten, by request or by retention sweep.
- `memory.read` — The facts believed at a moment. validAt asks whether a fact was true then; txAt asks whether the ledger knew it then. Both default to now. Filter by space, subject, predicate. Quarantined (claimed, unconfirmed) facts are left out unless …
- `memory.release` — Lift a legal hold.
- `memory.retract` — Undo a belief: the fact leaves the present, stays visible to questions about the past, and whatever it superseded is believed again.
- `stripe.payout` — Pay out funds to the connected bank account. amount in minor units.
- `stripe.refund` — Refund a customer. amount is in minor units (pence).
- `memory.write` — Record a belief: subject, predicate, value, in a space. Optionally supersede an earlier fact. With evidence naming a fact the gateway fetched for this call, the value must equal it (or the field at path) and the write is verified; otherw…

## Related servers

- UnClick (1662 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md
- Apibase (1384 tools) — https://policylayer.com/tools/io-github-whiteknightonhorse-apibase.md
- Delx Mcp A2a (1068 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-a2a.md
- MCP Framework Personal (912 tools) — https://policylayer.com/tools/inggerman-mcps.md
- Hermoso (896 tools) — https://policylayer.com/tools/hermoso.md
- Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md
- Altium-MCP-Suite (817 tools) — https://policylayer.com/tools/altium-mcp-suite.md
- Eda Agent (777 tools) — https://policylayer.com/tools/eda-agent.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=agent-custody · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/agent-custody