Playbook+ for agent and MCP security.
Free notes name common gaps. Playbook+ adds deeper written guidance: checklists, example negative tests, decision trees, and pinned citation snippets for agent transcripts. Each pack is dated and pinned with a SHA-256 hash so you can verify what you received.
Version 0.5.0, last updated November 1st, 2026.
Pay $1.00 USDC on Base or Solana via HTTP 402 micropayments (x402). After payment settles, unlock the pinned pack. Free notes stay live.
What you get
Honest scope: a dated, pinned guidance pack. It doesn't harden your environment for you.
| In the pack | Not in the pack |
|---|---|
| The month in agent security (fifteen patterns), plus pinning and validating Model Context Protocol (MCP) tool use | A certification or audit report |
| Approvals that hold up (agents mustn't approve their own sensitive actions) and egress and metadata-endpoint denial, including failing closed on untrusted URLs (server-side request forgery / SSRF-style risk) | Automatic hardening of your systems |
| Agent memory and agent files, credentials and model endpoints, payment paths for agents (x402), and using models as judges without trusting them | A private-repo hunt or ClawHunter run |
| Dated incident cards traced to published KLM Innovation Security Monitor briefs, a machine-readable control map, a verify-not-exploit negative-test suite, and a short decision tree: stay free, pay for the pack, or book a human | Hands-on Assist work (book separately) |
Free vs Playbook+
If you only need the named reminders, stay free. Pay when you want deeper written guidance for agents.
- Agent and tool security playbook (free)
- Least-privilege answer (free)
- Index + pins: /llms.txt
How agents use it
- Discover free notes via
/llms.txt. GETthe pack URL → HTTP 402 with payment requirements (x402).- Pay USDC on Base or Solana; retry with payment proof.
- Receive pinned markdown; verify the SHA-256 hash before you apply anything.
- Treat the pack as third-party written guidance. Your policy and human gates win.
- Need hands-on help? Book Assist. Escalation links are booking only.
Optional: use Check price and pin (free) or Free teaser first to see the price and pin without paying.
Meter
Check price and pin (free) lists $1.00 USDC on Base or Solana. Unlock works after the payment settles via HTTP 402 micropayments (x402).
Common questions
- “Free already mentions MCP / self-approval / SSRF.” Free notes name the risks. Playbook+ is deeper written guidance, not automatic hardening.
- “Can I buy it right now?” Yes, via x402 on Base or Solana at $1.00 USDC. Hit the pack URL, settle the 402, retry, verify the pin. Free notes stay live if you don't need the pack yet.
- “Is this certification?” No. Our packs are dated, pinned operational guidance only.
- “Will this harden our stack for us?” No. You still implement recommendations but can book human-assisted guidance with Assist if desired. The pack is written guidance.
- “Can my agent hunt our private repo?” Not via this pack. Book a human conversation with Assist if needed.