AKARI Keymaster

{
  "protocolVersion": "0.3.0",
  "name": "AKARI Keymaster",
  "description": "Read-only A2A credential agent for autonomous systems. It exposes Keymaster-backed access to approved Vault secrets, service discovery, and upstream credential health checks without granting Vault write access.",
  "supportedInterfaces": [
    {
      "url": "https://ai-akari.ai/a2a/keymaster/jsonrpc",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    },
    {
      "url": "https://ai-akari.ai/a2a/keymaster/rest",
      "protocolBinding": "HTTP+JSON",
      "protocolVersion": "1.0"
    }
  ],
  "provider": {
    "organization": "AInoAKARI",
    "url": "https://ai-akari.ai"
  },
  "version": "1.0.3",
  "documentationUrl": "https://github.com/AInoAKARI/keymaster-mcp#readme",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false
  },
  "securitySchemes": {
    "keymasterBearer": {
      "httpAuthSecurityScheme": {
        "description": "Bearer token issued for Keymaster access. Send it in the Authorization header.",
        "scheme": "Bearer",
        "bearerFormat": "opaque"
      }
    }
  },
  "securityRequirements": [
    {
      "keymasterBearer": []
    }
  ],
  "defaultInputModes": [
    "application/json",
    "text/plain"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/plain"
  ],
  "skills": [
    {
      "id": "get_secret",
      "name": "Get Secret",
      "description": "Fetch an approved secret for a given service and key name through the read-only Keymaster boundary.",
      "tags": [
        "secrets",
        "vault",
        "keymaster",
        "runtime-auth"
      ]
    },
    {
      "id": "list_services",
      "name": "List Services",
      "description": "List known service and key-name combinations that Keymaster can expose.",
      "tags": [
        "discovery",
        "service-catalog",
        "vault"
      ]
    },
    {
      "id": "list_secrets",
      "name": "List Secrets",
      "description": "Enumerate retrievable secret paths in service/key_name form for audit-safe discovery.",
      "tags": [
        "discovery",
        "secrets",
        "verification"
      ]
    },
    {
      "id": "healthcheck",
      "name": "Health Check",
      "description": "Check Keymaster reachability and validate known credentials against supported upstream services.",
      "tags": [
        "health",
        "monitoring",
        "ops"
      ]
    },
    {
      "id": "rotate_secret",
      "name": "Rotate Secret Instructions",
      "description": "Explain the safe Vault-side rotation path while keeping the A2A agent read-only.",
      "tags": [
        "rotation",
        "vault",
        "security",
        "read-only"
      ]
    }
  ],
  "additionalAgents": [
    {
      "name": "AI\uff89\u30a2\u30ab\u30ea\u2606 Result Receipt Auditor",
      "agentCard": "https://ai-akari.ai/a2a/result-receipt-auditor/.well-known/agent-card.json"
    }
  ]
}