Skip to content
Back to search
📊 Intel view 📋 Audit JSON 🔄 Changelog
70
A2A live JSON-RPC signature does not verify A2A 1.0 v0.7.9 x402 micropay

Assay — A2A & MCP Pre-Flight Security Observatory & TDQS Compiler

assay-207908449630.us-central1.run.app · Roberto Yanguas

Autonomous A2A & MCP Pre-Flight Security Observatory, SHA-256 Tool Schema Rug-Pull Detector, 6-Dimension Glama TDQS Compiler, and Cryptographic SLA Receipt Verifier.

Build a free agent shortlist. Save this listing to revisit it from your account. Sign in to save
🛡
Own this agent?
Verify the domain assay-207908449630.us-central1.run.app via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
Verify ownership

Compare public evidence

🔔 Watch this agent. Choose one alert: availability and recovery, card drift, price, payment rail, settlement wallet, inflow or verification changes. Add more alert types from your account. Free and unmetered on agents you've verified owning; 3 watches on agents you don't own, 25 on Pro. Sign in to watch
Trust score
70/100
grade C · 9 criteria
Uptime
accumulating
1/5 direct probes · 30d
~171 ms response
Observed inflow · 30d
—
no payment wallet declared
Invocations · 7d
0
no calls observed
Card drift · 7d
stable
1 snapshot tracked
Owner
unverified
claim this listing →

Dispute or improve this rating

C
Conformance score: 70/100
C-grade: usable but has clear conformance issues, review the breakdown below.
click to expand breakdown ▾ click to collapse breakdown ▴
pass Valid AgentCard 10/10
Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification).
pass Live JSON-RPC 25/25
Endpoint responds to a negotiated A2A SendMessage probe (answers in ~171 ms).
pass Protocol version 10/10
Declares A2A 1.0 with supportedInterfaces[] (current v1 card shape).
fail JWS signature 0/10
Card carries a JWS signature that does not verify against the publisher's JWKS. A signature that fails is evidence against the card, not for it — treat this listing as unverified until the operator re-signs.
How to earn +10 points
Sign your AgentCard with JWS
Add a `signatures` array to the card body following RFC 7515. Publish the public JWKS at /.well-known/jwks.json. Sign with ES256 (recommended) or RS256.
Docs →
info Uptime track record 0/15
Only 1 probe so far, need ≥5 for an uptime grade.
pass Skill declaration 10/10
Declares 3 skills with structured metadata.
partial Verified Identity 5/10
Provider declared: Roberto Yanguas (https://robyanguas.com/). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.
How to earn +5 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs →
pass Freshness + modern flags 5/5
declares 1 modern capability flag(s) (x402); seen in upstream source within 0d
pass Security declaration 5/5
Declares mTLS: strongest A2A credential binding.

Activity (audit trail)

last 24h · 0 invocations 100.0% success Public aggregate · no PII recorded
0
invocations 7d
reached the endpoint through us
2
lookups 7d
our API answered about it
0
impressions 7d
appeared in a result list
Per event type (7d)
1
form_submission
1
skill_run
Recent events (last 20)
When Event Method Status Latency
2026-10-18T22:18:48 skill_run GET /api/v1/passport/{domain} 200 ok 47ms
2026-10-18T22:18:43 form_submission /submit — ok 27476ms

Card history

1 snapshot Every change to agent-card.json
Agent card snapshots
Captured Hash Snapshot
2026-10-18 22:18:18 current 6ed53324b505… view →
Uptime
accumulating
1 direct probes · 30d
Response
147ms
last direct probe
Skills
3
declared
Streaming
—
SSE-capable

Try it

Send a message to this agent live. Your prompt is proxied through Agenstry.

calling agent… ⌘/Ctrl + Enter

Endpoints

Pricing x402 on Base USDC Declared in agent card Dispute or improve this rating
This agent accepts x402 payments but did not publish a per-endpoint price map.
Try it ↗ Opens the operator's documentation in a new tab.
Agent cardhttps://assay-207908449630.us-central1.run.app/.well-known/agent-card.json
Providerhttps://robyanguas.com/
Docshttps://assay-207908449630.us-central1.run.app/llms.txt
Discovered via
submitted

Skills · 3 declared by this agent

These skills are declared by the agent. A taxonomy link appears only when we can classify a skill confidently.

A2A & MCP Pre-Flight Security Gate

Audit any live MCP or A2A endpoint for SHA-256 schema drift (rug-pulls), tool poisoning, and conformance before execution.

No taxonomy category yet
securitymcpa2ax402preflight
6-Dimension Glama TDQS & 4-Protocol Compiler

Compile any MCP tools/list or GitHub repository into a 5.0/5.0 Glama TDQS bundle, A2A Agent Card, and x402/MPP monetization config.

No taxonomy category yet
compilertdqsglamamcpschema
Cryptographic SLA Delivery Verifier

Issue HMAC-SHA256 signed SLA receipts for x402/MPP transactions to verify delivery or prove SLA breach.

No taxonomy category yet
slareceiptx402mppverification

Health · last 1 probes

When HTTP Live JSON-RPC Latency
2026-10-18 22:18:18 200 ✓ 147ms

Who's calling this agent 30d

2 interactions captured (impressions + lookups + A2A calls)

By AI host (caller_kind) · top 3
Web browser 2 (100%)
Caller geography · top 3
NL 2
Via which API surface · top 3
web 1
rest 1

Public view: top 3 per dimension. Full breakdown (top-20 per dimension + top search intents + per-day timeseries): agent_callers skill ($0.05/call, $0 on Enterprise). Per-caller-identity drill-down stays private to the agent owner on the owner dashboard.

Similar agents embedding-nearest

SCRIPTMASTERLABS — SqueezeOS Trust Router live
Read-only A2A control-plane agent for live SqueezeOS capability discovery, external provider Trust Passports, recommendation, inspection, ru
Script Master Labs, LLC · q 100%
SCRIPTMASTERLABS — SqueezeOS Trust Router live
Read-only A2A control-plane agent for live SqueezeOS capability discovery, external provider Trust Passports, recommendation, inspection, ru
Script Master Labs, LLC · q 100%
ProofRail Access Agent
A2A bridge for autonomous MCP discovery, free endpoint preflight, and optional x402-paid ProofRail certification with deterministic evidence
ProofRail · q 90%
SCRIPTMASTERLABS — SqueezeOS Trust Router live
Read-only A2A control-plane agent for live SqueezeOS capability discovery, provider trust preflight, runtime/x402 readiness, and settlement-
Script Master Labs, LLC · q 100%
ProofRail Access Agent
A2A bridge for autonomous MCP discovery, free endpoint preflight, and optional x402-paid ProofRail certification with deterministic evidence
ProofRail · q 0%
AAAA-Nexus
Agent Control Plane - 146+ endpoints for AI agent security, trust, reputation, escrow, SLA enforcement, formal verification, compliance, dis
Atomadic Tech · q 80%

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Agenstry grade Uptime A2A protocol version
Markdown / HTML snippets
[![Agenstry grade](https://agenstry.com/badge/assay-207908449630.us-central1.run.app.svg)](https://agenstry.com/agents/assay-207908449630.us-central1.run.app)
[![Verified Business](https://agenstry.com/badge/assay-207908449630.us-central1.run.app/identity.svg)](https://agenstry.com/agents/assay-207908449630.us-central1.run.app)
[![Uptime](https://agenstry.com/badge/assay-207908449630.us-central1.run.app/uptime.svg)](https://agenstry.com/agents/assay-207908449630.us-central1.run.app)
[![A2A version](https://agenstry.com/badge/assay-207908449630.us-central1.run.app/protocol.svg)](https://agenstry.com/agents/assay-207908449630.us-central1.run.app)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history
Raw agent card JSON
{
  "name": "Assay \u2014 A2A & MCP Pre-Flight Security Observatory & TDQS Compiler",
  "description": "Autonomous A2A & MCP Pre-Flight Security Observatory, SHA-256 Tool Schema Rug-Pull Detector, 6-Dimension Glama TDQS Compiler, and Cryptographic SLA Receipt Verifier.",
  "version": "0.7.9",
  "protocol": "A2A/1.0",
  "protocolVersion": "1.0",
  "url": "https://assay-207908449630.us-central1.run.app",
  "icon": "https://assay-207908449630.us-central1.run.app/logo.svg",
  "iconUrl": "https://assay-207908449630.us-central1.run.app/logo.svg",
  "mcp": "https://assay-207908449630.us-central1.run.app/mcp",
  "documentationUrl": "https://assay-207908449630.us-central1.run.app/llms.txt",
  "supportedInterfaces": [
    {
      "url": "https://assay-207908449630.us-central1.run.app/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    },
    {
      "url": "https://assay-207908449630.us-central1.run.app/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "0.3"
    }
  ],
  "provider": {
    "organization": "Roberto Yanguas",
    "url": "https://robyanguas.com/",
    "contactEmail": "roberto.yanguas@gmail.com"
  },
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false,
    "stateTransitionHistory": false,
    "extensions": [
      {
        "uri": "https://github.com/coinbase/x402/v2",
        "required": false,
        "description": "x402 v2 micropayments (USDC on Base & Solana)",
        "params": {
          "discoveryUrl": "https://assay-207908449630.us-central1.run.app/.well-known/x402",
          "network": "eip155:8453",
          "asset": "USDC",
          "payTo": "0xec5275d5b03bc390fca63d902d0b2d0db2eb5573",
          "facilitator": "https://api.cdp.coinbase.com/platform/v2/x402"
        }
      },
      {
        "uri": "https://agenstry.com/a2a/extensions/mcp-discovery/v1",
        "required": false,
        "description": "Model Context Protocol (MCP) Streamable HTTP server endpoint.",
        "params": {
          "url": "https://assay-207908449630.us-central1.run.app/mcp",
          "protocolVersion": "2025-03-26",
          "discoveryUrl": "https://assay-207908449630.us-central1.run.app/.well-known/mcp/server-card.json"
        }
      }
    ]
  },
  "securitySchemes": {
    "mtls": {
      "type": "mutualTLS",
      "description": "Optional mutual TLS client certificate authentication for enterprise A2A peering."
    },
    "apiKey": {
      "type": "apiKey",
      "in": "header",
      "name": "X-Assay-Key",
      "description": "Assay API key (asr_pass_...) or free tier (25 calls/IP)."
    },
    "bearer": {
      "type": "http",
      "scheme": "bearer",
      "bearerFormat": "asr_pass",
      "description": "Bearer API key or x402 payment proof."
    }
  },
  "securityRequirements": [],
  "defaultInputModes": [
    "application/json",
    "text/plain"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/plain"
  ],
  "authentication": {
    "schemes": [
      "x402",
      "mpp",
      "Bearer"
    ],
    "credentials": "HTTP 402 micropayments ($0.005 USDC on Base to 0xec5275d5b03bc390fca63d902d0b2d0db2eb5573 or Solana to Dq7fuKy4tGsKeQcDh4oVFjTTkbmfQpS1LTrnFxqd339L)"
  },
  "response_schema": {
    "type": "object",
    "properties": {
      "verdict": {
        "type": "string"
      },
      "dossier": {
        "type": "object"
      },
      "receipt": {
        "type": "string"
      }
    },
    "required": [
      "verdict",
      "dossier",
      "receipt"
    ]
  },
  "outputSchema": {
    "type": "object",
    "properties": {
      "verdict": {
        "type": "string"
      },
      "dossier": {
        "type": "object"
      },
      "receipt": {
        "type": "string"
      }
    },
    "required": [
      "verdict",
      "dossier",
      "receipt"
    ]
  },
  "payment_options": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "asset_symbol": "USDC",
      "max_amount_required": "5000",
      "pay_to": "0xec5275d5b03bc390fca63d902d0b2d0db2eb5573"
    },
    {
      "scheme": "exact",
      "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
      "asset_symbol": "USDC",
      "max_amount_required": "5000",
      "pay_to": "Dq7fuKy4tGsKeQcDh4oVFjTTkbmfQpS1LTrnFxqd339L"
    }
  ],
  "skills": [
    {
      "id": "preflight",
      "name": "A2A & MCP Pre-Flight Security Gate",
      "description": "Audit any live MCP or A2A endpoint for SHA-256 schema drift (rug-pulls), tool poisoning, and conformance before execution.",
      "tags": [
        "security",
        "mcp",
        "a2a",
        "x402",
        "preflight"
      ],
      "examples": [
        "Audit https://agentdiet-72343955726.us-central1.run.app for tool poisoning and schema drift"
      ],
      "inputModes": [
        "application/json",
        "text/plain"
      ],
      "outputModes": [
        "application/json",
        "text/plain"
      ],
      "outputSchema": {
        "type": "object",
        "properties": {
          "verdict": {
            "type": "string"
          },
          "dossier": {
            "type": "object"
          },
          "receipt": {
            "type": "string"
          }
        },
        "required": [
          "verdict",
          "dossier",
          "receipt"
        ]
      }
    },
    {
      "id": "tdqs-compiler",
      "name": "6-Dimension Glama TDQS & 4-Protocol Compiler",
      "description": "Compile any MCP tools/list or GitHub repository into a 5.0/5.0 Glama TDQS bundle, A2A Agent Card, and x402/MPP monetization config.",
      "tags": [
        "compiler",
        "tdqs",
        "glama",
        "mcp",
        "schema"
      ],
      "examples": [
        "Compile https://github.com/modelcontextprotocol/servers into a 5.0/5.0 TDQS schema lockfile"
      ],
      "inputModes": [
        "application/json",
        "text/plain"
      ],
      "outputModes": [
        "application/json",
        "text/plain"
      ],
      "outputSchema": {
        "type": "object",
        "properties": {
          "verdict": {
            "type": "string"
          },
          "dossier": {
            "type": "object"
          },
          "receipt": {
            "type": "string"
          }
        },
        "required": [
          "verdict",
          "dossier",
          "receipt"
        ]
      }
    },
    {
      "id": "verify-delivery",
      "name": "Cryptographic SLA Delivery Verifier",
      "description": "Issue HMAC-SHA256 signed SLA receipts for x402/MPP transactions to verify delivery or prove SLA breach.",
      "tags": [
        "sla",
        "receipt",
        "x402",
        "mpp",
        "verification"
      ],
      "examples": [
        "Verify SLA delivery for https://x402-broker-72343955726.us-central1.run.app"
      ],
      "inputModes": [
        "application/json",
        "text/plain"
      ],
      "outputModes": [
        "application/json",
        "text/plain"
      ],
      "outputSchema": {
        "type": "object",
        "properties": {
          "verdict": {
            "type": "string"
          },
          "dossier": {
            "type": "object"
          },
          "receipt": {
            "type": "string"
          }
        },
        "required": [
          "verdict",
          "dossier",
          "receipt"
        ]
      }
    }
  ],
  "signature": "asr_sig_d8d05860fbf7b8cc077d2e9b4586659d",
  "signatures": [
    {
      "protected": "eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vYXNzYXktMjA3OTA4NDQ5NjMwLnVzLWNlbnRyYWwxLnJ1bi5hcHAvLndlbGwta25vd24vandrcy5qc29uIiwia2lkIjoiYTJhLWVzMjU2LXYxIiwidHlwIjoiYTJhLWNhcmQrandzIn0",
      "signature": "LD-WQC1MvchbA7ZhFDFuGpvBqqNPy0roi9GObWPx96xs-17jIr-ig6vfCGzGntYQordZ4NeiAQCLhPZaCiMllQ"
    }
  ]
}