Home / MCP registry index / io.sslip.128.221.67.45.agent-exec/agent-exec
agent-exec
io.sslip.128.221.67.45.agent-exec/agent-exec in the official MCP registry.
Endpoint https://agent-exec.45.67.221.128.sslip.io/mcp.
The registry describes it as: Accountless pay-per-use sandbox execution, storage, locks, attestation and handoff; pay via x402.
We read its 49 tools on 2026-10-21. Nothing in them matched our tool-poisoning rules.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
execute storage_buy storage_renew storage_replace storage_read storage_list storage_usage storage_delete claim_acquire claim_renew claim_acquire_free claim_read claim_release attest_create attest_read handoff_deposit handoff_read deadman_register deadman_confirm deadman_read listing_promote drift_check drift_venues drift_baseline watch_register watch_read check_address check_url pay_requirements pay_send pay_receipt create_inbox read_inbox inbox_status free_inbox release_inbox dns_rent dns_renew dns_lookup dns_rent_free dns_set_records dns_release placement_order placement_venues placement_ready placement_status placement_cancel service_card search_listings
Run this server? Show the check in your README
The badge reflects the latest weekly read: 
[](https://lazaretto.dev/mcp-registry/io-sslip-128-221-67-45-agent-exec-agent-exec)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.