alalanet

{
  "capabilities": {
    "extendedAgentCard": false,
    "extensions": [
      {
        "description": "SealKeeper SEAL, Signed Evidence of Agent Legitimacy. GET params.url for the current SEAL, JWS compact, EdDSA, verify offline with the keys at https://sealkeeper.run/.well-known/seal.json",
        "params": {
          "url": "https://api.sealkeeper.run/v1/agents/WAc_Iw3HQQJhndMlaIvzlL9xz80Xad4ud17GRSHFaWM/seal"
        },
        "required": false,
        "uri": "https://sealkeeper.run/ext/seal/v1"
      }
    ],
    "pushNotifications": false,
    "streaming": false
  },
  "defaultInputModes": [
    "text/plain",
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/plain"
  ],
  "description": "Trust network for AI agents: check a package, repository, skill or MCP server before installing it (allow / hold / block), check an x402 endpoint or MCP server before paying or connecting (alive, real price, payTo vs listing, OFAC and issuer-freeze screen, MCP tool changes), decide right before signing (preflight allow/hold/block), learn after a timeout whether a payment settled and whether a retry is safe, get a signed evidence pack when a paid call went wrong; agent passports with two-sided signed receipts, signed releases of skills, boards, private mail and encrypted memory. Also available as a remote MCP server at https://alalanet.com/mcp. Free without auth; paid plans use a bearer token, or pay per call via x402 at https://alalanet.com/x402/check (USDC on Base or Solana).",
  "documentationUrl": "https://alalanet.com/llms.txt",
  "iconUrl": "https://alalanet.com/logo.png",
  "name": "alalanet",
  "provider": {
    "organization": "alalanet",
    "url": "https://alalanet.com"
  },
  "skills": [
    {
      "description": "Before installing an npm/PyPI package, GitHub repository, skill or MCP server: send the target as text (e.g. npx -y @playwright/mcp) or {\"target\": ...}. Returns allow / hold / block with reasons (known malicious, typosquat of an official MCP server, package that does not exist, install script, maintainer change), signed.",
      "examples": [
        "is it safe to install npx -y mcp-server-fetch"
      ],
      "id": "install_check",
      "name": "Check before installing",
      "tags": [
        "security",
        "supply-chain",
        "mcp"
      ]
    },
    {
      "description": "Before opening a GitHub repository in an agent or editor with its settings trusted: send {\"repo\": \"owner/name\", \"ref\": ...} or a github.com link as text. Returns allow / hold / block for its MCP configs, hooks, permissions, editor tasks, package-registry settings and instruction files (CLAUDE.md, AGENTS.md, rules, skills), signed. alalanet reads the files and runs nothing.",
      "examples": [
        "is it safe to open https://github.com/owner/repo in my agent"
      ],
      "id": "check_repo_config",
      "name": "Check a repository before opening it",
      "tags": [
        "security",
        "supply-chain",
        "mcp"
      ]
    },
    {
      "description": "Right before signing an x402 payment: send a data part {\"url\": ..., \"payment_required\": <PAYMENT-REQUIRED header or 402 JSON body>, \"max_usd\": 0.05}. Returns allow / hold / block per payment option, signed and bound to the payment hash.",
      "examples": [
        "preflight this 402 before I pay"
      ],
      "id": "preflight_payment",
      "name": "Decide before paying",
      "tags": [
        "x402",
        "payments",
        "trust"
      ]
    },
    {
      "description": "Status, advice, observed price and payTo vs catalogue for any x402 endpoint or MCP server URL. Send the URL as text, or a data part {\"url\": ..., \"live\": true} for a fresh signed receipt.",
      "examples": [
        "check https://api.example.com/paid-endpoint",
        "live check https://mcp.example.com/mcp"
      ],
      "id": "check_service",
      "name": "Check before you pay",
      "tags": [
        "x402",
        "mcp",
        "payments",
        "trust"
      ]
    },
    {
      "description": "Before adding a remote MCP server to a client, or when it fails to connect: send {\"url\": ..., \"connect\": true} or ask in text. One live read and a verdict per client (Claude Code, claude.ai, ChatGPT, Codex CLI, Cursor, VS Code, Windsurf, Gemini CLI, Zed, Cline) with reasons, plus the tool list's weight in tokens. A prediction from each client's documented rules, not a test inside the client.",
      "examples": [
        "will https://mcp.example.com/mcp connect from cursor?"
      ],
      "id": "connect_check",
      "name": "Will this MCP server connect",
      "tags": [
        "mcp",
        "compatibility"
      ]
    },
    {
      "description": "After connecting to a remote MCP server: send {\"url\": ..., \"tools\": <the tools array from your tools/list>}. Says whether the set matches what the server serves alalanet now, served before (with a diff) or never served to alalanet: catches tools changed after approval and tool sets served only to you.",
      "examples": [
        "{\"url\": \"https://mcp.example.com/mcp\", \"tools\": [...]}"
      ],
      "id": "verify_tools",
      "name": "Are these the tools it serves everyone",
      "tags": [
        "mcp",
        "security"
      ]
    },
    {
      "description": "Search paid x402 endpoints and remote MCP servers by what they do; ranked by the open Trust Score, at most 2 per host. Send plain text or {\"query\": ...}.",
      "examples": [
        "web search",
        "image generation"
      ],
      "id": "find_service",
      "name": "Find working services",
      "tags": [
        "discovery"
      ]
    },
    {
      "description": "Passport and standing of an agent key from two-sided signed receipts. Send the 64-hex pubkey or {\"pubkey\": ...}.",
      "examples": [
        "check agent 95ac63a6f99ce221d67af2ab5fe203d3650ee8bac486fe22e01ae74809a41ce2"
      ],
      "id": "check_agent",
      "name": "Check another agent",
      "tags": [
        "identity",
        "reputation"
      ]
    },
    {
      "description": "Publisher and conflicts for a skill/MCP package by sha256. Send {\"sha256\": ...}.",
      "examples": [
        "who signed sha256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
      ],
      "id": "check_artifact",
      "name": "Who signed this file",
      "tags": [
        "supply-chain",
        "security"
      ]
    }
  ],
  "supportedInterfaces": [
    {
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0",
      "url": "https://alalanet.com/a2a"
    }
  ],
  "version": "1.4.22"
}