NOMOS Cross-Border Broker

{
  "name": "NOMOS Cross-Border Broker",
  "description": "AgentNOMOS is the governance, authorization and evidence layer for autonomous agent actions \u2014 the NOMOS Machine Economy Trust Chain (eleven stages, S0-S10): Discovery, Identity, Capability, Intent, Offer, Authorization, Execution, Proof, Outcome, Governance. Before authorization, OracleNet contributes provenance-bound, signed security-freshness evidence from external sources (CISA KEV), verified fail-closed by the NOMOS authority. This public A2A interface exposes read-only / advisory broker skills: governed-action preflight, market intelligence, MCP tool discovery, x402 payment quotes and signed-receipt verification. Boundaries: public demo is read-only; no autonomous outreach, no wallet signing, no settlement; the governance stage (S10) is observational shadow governance, not production authorization. Evidence claims are execution-bound proof from the operator's own estate \u2014 not independent third-party execution control, not a certification. Component map: ToolOracle = discovery/tools, OracleNet = presence/signals/security-evidence transport, NOMOS = verification/policy/authorization/evidence.",
  "url": "https://tooloracle.io/a2a/jsonrpc",
  "version": "0.4.0",
  "protocolVersion": "0.3.0",
  "provider": {
    "organization": "FeedOracle Technologies",
    "url": "https://agentnomos.com"
  },
  "iconUrl": "https://agentnomos.com/favicon.svg",
  "documentationUrl": "https://agentnomos.com/intro",
  "capabilities": {
    "streaming": false,
    "pushNotifications": true,
    "stateTransitionHistory": false,
    "extendedAgentCard": true,
    "extensions": [
      {
        "uri": "https://agentnomos.com/extensions/nomos-broker-v0.1",
        "description": "NOMOS broker policy metadata: governance policy, evidence receipts, x402 quotes and cross-border preflight. Preflight-only \u2014 no autonomous outreach, no wallet signing, no settlement.",
        "required": false,
        "params": {
          "execution_policy": {
            "autonomous_outreach": false,
            "payment_execution": "x402_quote_or_capped_only",
            "human_review_required_for_external_contact": true,
            "wallet_signing": false,
            "settlement": false
          },
          "a2a_protocol_support": {
            "declared_protocol_version": "0.3.0",
            "ingress_accepted_versions": [
              "0.3",
              "1.0"
            ],
            "egress_response_shape": "0.3",
            "ingress_note": "The JSON-RPC endpoint accepts BOTH A2A 0.3 and A2A 1.0 request syntax: 1.0 PascalCase method names (SendMessage, GetTask, CancelTask, GetExtendedAgentCard) are aliased onto their 0.3 equivalents, and text parts are accepted with the 0.3 'kind' discriminator as well as in the 1.0 kind-less form. 1.0 methods with no 0.3 equivalent (SendStreamingMessage, ListTasks, SubscribeToTask) are NOT implemented and return -32601.",
            "egress_note": "Responses are still A2A 0.3-shaped (artifact parts carry \"kind\":\"text\"). Full A2A 1.0 compatibility is therefore NOT claimed: ingress only. The declared protocolVersion stays 0.3.0 deliberately, so this card never claims more than the runtime can serve.",
            "verified_at": "2026-08-15"
          }
        }
      },
      {
        "uri": "https://ap2-protocol.org/extension/v1",
        "description": "Google Agent Payments Protocol (AP2) \u2014 x402 compatible. Quote and capped payment only. No autonomous settlement, no delegated purchasing.",
        "required": false,
        "params": {
          "mode": "x402_quote_and_capped",
          "x402Network": "eip155:8453",
          "payTo": "0x11f591C3496C0632e7B173184f5Bc71dC941125D",
          "wellKnownX402": "https://tooloracle.io/v2/.well-known/x402"
        }
      },
      {
        "uri": "https://agentnomos.com/extensions/nomos-trust-chain-v1",
        "description": "Machine-readable NOMOS S0-S10 trust-chain metadata (vendor extension, not an external standard). Claim ceiling: execution-bound proof.",
        "required": false,
        "params": {
          "model": "S0-S10",
          "stage_count": 11,
          "manifest": "https://agentnomos.com/.well-known/nomos-capabilities.json",
          "compatibility_map": "https://agentnomos.com/.well-known/nomos-compatibility.json",
          "claim_ceiling": "execution_bound_proof",
          "outbound_purchase_evidence": "https://agentnomos.com/.well-known/nomos-x402-purchase.json",
          "outbound_purchase_evidence_note": "One demonstrated outbound x402 paid-service purchase (OneSource erc20-balance, USDC on Base via x402 exact / EIP-3009), operator-authorized and value-capped, with published evidence, a signed receipt and a public verifier. Not autonomous, not generalized x402 support, no refund path, no independent third-party verification.",
          "acp_purchase_evidence": "https://agentnomos.com/.well-known/nomos-acp-purchase.json",
          "acp_purchase_evidence_note": "One completed outbound Virtuals ACP v2 purchase (provider TheMetaBot, offering agentRiskCheck, job 72830) funded in USDC on Base, accepted under an operator-defined gate and settled on-chain, with published evidence, a signed receipt and a public verifier. The deliverable was a provider-advertised CACHE HIT \u2014 freshness is not claimed. Intent and authorization are operator-attested, not cryptographically bound; no security assessment of the counterparty was performed (ABSENT). Not autonomous, not generalized Virtuals ACP support, no independent third-party verification.",
          "cross_ecosystem_trust_graph": "https://agentnomos.com/.well-known/nomos-cross-ecosystem.json",
          "cross_ecosystem_trust_graph_note": "Machine-readable Cross-Ecosystem Trust Graph normalizing four sealed proofs \u2014 external cross-operator A2A interop in a NANDA-registered context (CodeMinder), a local governed AgentBeats-protocol evaluation realpath, a local real AGNTCY/SLIM transport run, and one operator-authorized outbound x402 purchase (economic full chain) \u2014 around one unchanged NOMOS governance boundary. Star topology; NOT one serial transaction across ecosystems; no endorsement, certification or validation by any referenced project is claimed; unproven cells stay explicit (payment_is_authority NOT_TESTED; x402 same-core NOT_PROVEN)."
        }
      },
      {
        "uri": "https://agentnomos.com/extensions/nomos-discovery-v1",
        "description": "Canonical machine-discovery pointers for AgentNOMOS (vendor extension): AI catalog, compatibility matrix, MCP server card, signed operator identity, trust passport verification, llms.txt.",
        "required": false,
        "params": {
          "ai_catalog": "https://agentnomos.com/.well-known/ai-catalog.json",
          "compatibility": "https://agentnomos.com/compatibility.json",
          "mcp_server_card": "https://agentnomos.com/.well-known/mcp-server.json",
          "operator_identity": "https://agentnomos.com/.well-known/nomos-identity.json",
          "trust_passport_verify_template": "https://agentnomos.com/api/passports/{passport_id}/verify",
          "llms_txt": "https://agentnomos.com/llms.txt",
          "legacy_agent_card_a2a_0_3": "https://agentnomos.com/.well-known/agent.json",
          "openapi_spec_only": "https://agentnomos.com/v1/openapi",
          "openapi_runtime_live": false
        }
      },
      {
        "uri": "https://agentnomos.com/extensions/nomos-x402-invocation-v1",
        "description": "Explicit invocation semantics for the paid skill nomos_full_chain_verification: discovery via this A2A card, invocation via a separate x402 HTTP POST (payment required). See params.",
        "required": false,
        "params": {
          "skill_id": "nomos_full_chain_verification",
          "discovery_protocol": "A2A (this card is discovery-only for this skill)",
          "invocation_protocol": "x402 HTTP",
          "invocation_endpoint": "https://tooloracle.io/v2/nomos_full_chain_verification",
          "method": "POST",
          "payment_required": true,
          "price": "$0.001 USDC per call (1000 atomic units)",
          "payment_network": "eip155:8453",
          "settlement_direction": "inbound only \u2014 the operator accepts x402 payment; no autonomous outbound wallet settlement is implied",
          "underlying_capability": "RWA_REGISTRY_STATS_READ",
          "reproducibility": "https://agentnomos.com/.well-known/nomos-reproducibility.json",
          "note": "A2A message/send against this agent's runtime endpoint does NOT execute this skill; the x402 POST above is the only invocation path."
        }
      }
    ]
  },
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json"
  ],
  "skills": [
    {
      "id": "crossborder_preflight",
      "name": "Cross-Border Regulatory Preflight",
      "description": "Preflight classification for cross-border data flows between agent jurisdictions. Returns verdict (ALLOW/ALLOW_PUBLIC_SIGNAL_ONLY/REVIEW/BLOCK), blocked_fields, SCCs required, and evidence_hash. Advisory only \u2014 not legal advice, no regulatory certification.",
      "tags": [
        "regulatory",
        "compliance",
        "cross-border",
        "gdpr",
        "lgpd",
        "ndpa",
        "popia",
        "data-transfer",
        "preflight",
        "eu"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "examples": [
        "Can I transfer EU agent signals to a Brazil-based MCP server?",
        "Preflight: EU source, Nigeria target, data_category: mcp_capability_signal"
      ]
    },
    {
      "id": "asia_market_scan",
      "name": "Global Market Intelligence Scan",
      "description": "Market intelligence from six regions (Japan, Singapore/China, India, Korea, Brazil/LatAm, Africa): MCP-ready companies, funded entities, compliance signals and EU-interest flags.",
      "tags": [
        "japan",
        "singapore",
        "india",
        "korea",
        "brazil",
        "nigeria",
        "africa",
        "latam",
        "mcp-ready",
        "market-intelligence",
        "funded"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "examples": [
        "Find MCP-ready fintech companies in Nigeria today",
        "Scan for EU-interest signals in Brazil/LatAm fintech"
      ]
    },
    {
      "id": "mcp_tool_discovery",
      "name": "MCP Tool Discovery",
      "description": "Discover MCP-compatible tools and servers across the OracleNet mesh. Returns capability profiles, endpoint URLs and protocol compatibility. Live counts are published in the mesh snapshot at https://tooloracle.io/.well-known/agent-pulse and are not frozen here.",
      "tags": [
        "mcp",
        "discovery",
        "tools",
        "oraclenet",
        "protocol"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "examples": [
        "Find MCP servers with compliance tools for DORA",
        "List available MCP tools for stablecoin risk assessment"
      ]
    },
    {
      "id": "a2a_handshake",
      "name": "A2A Protocol Handshake",
      "description": "Structured A2A handshake for agent discovery and capability negotiation. Returns protocol fit, supported modes and outreach queue status. The live endpoint speaks A2A 0.3 JSON-RPC (message/send, tasks/get, tasks/cancel) and additionally accepts A2A 1.0 request syntax on ingress (SendMessage, GetTask, CancelTask, and kind-less text parts). Responses are 0.3-shaped.",
      "tags": [
        "a2a",
        "handshake",
        "discovery",
        "protocol",
        "negotiation"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "examples": [
        "Initiate A2A handshake with target agent in Singapore jurisdiction"
      ]
    },
    {
      "id": "x402_quote",
      "name": "x402 Payment Quote",
      "description": "Returns an x402 payment quote for AgentNOMOS purchase routes (USDC on Base, eip155:8453). Authoritative routes, prices and input schemas are published in the purchase manifest at https://agentnomos.network/.well-known/x402.json. Current routes: compliance_preflight $0.01, nomos/preflight $0.05, macro_snapshot $0.01. Quote and capped payment only \u2014 no autonomous settlement.",
      "tags": [
        "x402",
        "payment",
        "quote",
        "usdc",
        "base",
        "micropayment"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "examples": [
        "Get payment quote for crossborder_preflight EU to Japan"
      ]
    },
    {
      "id": "signed_receipt",
      "name": "Signed Evidence Receipt",
      "description": "Returns and verifies cryptographically signed receipts for completed NOMOS operations (SHA-256 sealed, Ed25519 signatures, public JWKS verification). Suitable for audit trails. Receipts prove what the NOMOS estate executed \u2014 execution-bound proof, not independent third-party attestation.",
      "tags": [
        "receipt",
        "evidence",
        "signing",
        "audit",
        "compliance",
        "sha256"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "examples": [
        "Get signed receipt for preflight operation receipt_id:xyz"
      ]
    },
    {
      "id": "agent_card_a2a_readiness",
      "name": "NOMOS Agent-Card & A2A Readiness Check",
      "description": "Deterministic readiness assessment of a public agent card / A2A discovery surface: identity, skills, protocol, authentication, commercial readiness, trust and security. Returns READY/WARN/NOT_READY with findings, machine-readable improvement suggestions, and a signed evidence digest. Offer descriptor: https://agentnomos.com/.well-known/nomos-a2a-offer.json.",
      "tags": [
        "agent-card",
        "a2a",
        "readiness",
        "trust",
        "x402"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json",
        "text/html"
      ],
      "examples": [
        "Assess https://example.com/.well-known/agent-card.json for A2A readiness"
      ],
      "x402": {
        "price": "$0.10",
        "currency": "USDC",
        "network": "eip155:8453",
        "scheme": "exact",
        "resource": "https://tooloracle.io/v2/agent_card_a2a_readiness_v1",
        "task_endpoint": "https://tooloracle.io/deal/a2a"
      },
      "transparency": {
        "schema": "nomos.transparency_disclosure.v1",
        "component": "DealOracle",
        "component_role": "automated NOMOS commercial-intake and demand-observation component",
        "llm_use": "some DealOracle market- and intent-analysis functions may use an LLM",
        "paid_product_method": "deterministic validation and decision rules (no LLM) for the paid Agent-Card/A2A Readiness Check",
        "output_nature": "technical assessments and signed evidence",
        "output_is_not": [
          "certification",
          "regulatory approval",
          "legal opinion",
          "legal-compliance determination",
          "AI-Act conformity declaration",
          "penetration test",
          "security guarantee"
        ],
        "operator_review": "operator review may be required for ambiguous or blocked cases",
        "human_readable": "DealOracle is an automated NOMOS commercial-intake and demand-observation component. Some of its market- and intent-analysis functions may use an LLM. The paid Agent-Card / A2A Readiness Check itself runs on deterministic validation and decision rules and returns a technical assessment with signed evidence. It is not a certification, regulatory approval, legal opinion, legal-compliance determination, AI-Act conformity declaration, penetration test, or security guarantee. Operator review may be required for ambiguous or blocked cases."
      },
      "disclosure": "DealOracle is an automated NOMOS commercial-intake and demand-observation component. Some of its market- and intent-analysis functions may use an LLM. The paid Agent-Card / A2A Readiness Check itself runs on deterministic validation and decision rules and returns a technical assessment with signed evidence. It is not a certification, regulatory approval, legal opinion, legal-compliance determination, AI-Act conformity declaration, penetration test, or security guarantee. Operator review may be required for ambiguous or blocked cases.",
      "role_binding": {
        "schema": "nomos.role_binding.v1",
        "statement": "DealOracle operates as a delegated commercial-intake and demand-observation component of NOMOS under the published NOMOS operator identity and delegation credential.",
        "operator_identity": "nomos.operator_identity.v1",
        "operator_identity_url": "https://agentnomos.com/.well-known/nomos-identity.json",
        "delegation_credential": "nomos.delegation_credential.v1",
        "delegation_covers": [
          "receiving paid self-service orders",
          "delivering scans and reports",
          "reading and attributing revenue"
        ],
        "delegation_forbids": [
          "autonomous spending",
          "autonomous discounts",
          "self-granting permissions",
          "uncontrolled outreach"
        ]
      },
      "limitations": [
        "automated readiness assessment only",
        "not certified",
        "not regulator-approved",
        "not AI-Act-compliant",
        "not legally-compliant",
        "not guaranteed-secure",
        "not a penetration test"
      ],
      "inputSchema": {
        "type": "object",
        "properties": {
          "job_id": {
            "type": "string",
            "description": "Job id from the x402 challenge binding"
          },
          "quote_id": {
            "type": "string",
            "description": "Quote id from the x402 challenge binding"
          }
        }
      },
      "inputSchemaSource": {
        "origin": "https://tooloracle.io/openapi.json",
        "path": "/v2/agent_card_a2a_readiness_v1",
        "method": "POST",
        "note": "Verbatim copy of the published requestBody schema for the invocation endpoint. Not authored for this card."
      }
    },
    {
      "id": "nomos_full_chain_verification",
      "name": "Full-Chain Governed Verification",
      "description": "Run one safe, read-only machine action through the complete NOMOS Machine Economy Trust Chain and receive a cryptographically verifiable execution receipt. The call binds the x402 payment, your stated intent (incl. your client_nonce), the pinned capability and offer, the NOMOS admission decision (which enforces current OracleNet security-freshness evidence), the execution and the response bytes into one Ed25519-signed receipt, verifiable against the public JWKS at https://feedoracle.io/.well-known/nomos-execution-jwks.json. Live x402 endpoint: POST https://tooloracle.io/v2/nomos_full_chain_verification \u2014 $0.001 USDC per call (USDC on Base, eip155:8453). Claim ceiling: execution-bound proof \u2014 not an independent third-party attestation, not a certification. Reproducibility references (ALLOW + DENY case, stateless verifier): https://agentnomos.com/.well-known/nomos-reproducibility.json Invocation note: this card is DISCOVERY ONLY for this skill \u2014 invoke it via x402 HTTP POST https://tooloracle.io/v2/nomos_full_chain_verification (payment required, $0.001 USDC on Base eip155:8453); A2A message/send does not execute this skill.",
      "tags": [
        "nomos",
        "full-chain",
        "verification",
        "x402",
        "receipts",
        "governance"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "examples": [
        "run one safe machine action through the full governed NOMOS chain and give me the signed receipt",
        "prove end-to-end that intent, authorization, security evidence and execution are bound for this call"
      ],
      "inputSchema": {
        "type": "object",
        "properties": {
          "intent": {
            "type": "string",
            "description": "Fixed action selector."
          },
          "client_nonce": {
            "type": "string",
            "description": "Your correlation nonce; echoed and bound into the signed intent digest."
          }
        },
        "required": [
          "intent",
          "client_nonce"
        ]
      },
      "inputSchemaSource": {
        "origin": "https://tooloracle.io/openapi.json",
        "path": "/v2/nomos_full_chain_verification",
        "method": "POST",
        "note": "Verbatim copy of the published requestBody schema for the invocation endpoint. Not authored for this card."
      }
    }
  ],
  "canonical_agent_card": "https://agentnomos.network/.well-known/agent-card.json",
  "supportedInterfaces": [
    {
      "url": "https://tooloracle.io/a2a/jsonrpc",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "0.3.0"
    }
  ]
}