Auditor Agent

{
  "capabilities": {
    "extendedAgentCard": false,
    "extensions": [
      {
        "description": "MCP server exposing audit_ucp_transaction and audit_transaction over streamable-HTTP.",
        "params": {
          "discoveryUrl": "https://auditor.webmesh.ai/.well-known/mcp.json",
          "endpoint": "https://auditor.webmesh.ai/mcp",
          "protocolVersion": "2025-03-26",
          "transport": "streamable-http"
        },
        "required": false,
        "uri": "https://modelcontextprotocol.io"
      },
      {
        "description": "Identity and interoperability stack: ANS Trust Card (x5c chain + stapled SCITT receipt), DNS-AID SVCB with DNSSEC and DANE TLSA, DNSid organizational accountability, ARD / AI-Catalog discovery, and Web Bot Auth (RFC 9421 HTTP Message Signatures) outbound request signing.",
        "params": {
          "agentFacts": "https://auditor.webmesh.ai/agentfacts.json",
          "ard": "https://auditor.webmesh.ai/.well-known/ard.json",
          "httpMessageSignaturesDirectory": "https://auditor.webmesh.ai/.well-known/http-message-signatures-directory",
          "identityAnchors": [
            "ans-x509",
            "did:web",
            "dns-aid",
            "dnssec",
            "dane-tlsa",
            "dnsid"
          ],
          "outboundSigning": "web-bot-auth",
          "trustCard": "https://auditor.webmesh.ai/.well-known/ans/trust-card.json"
        },
        "required": false,
        "uri": "https://webmesh.ai/ext/ans-trust-stack/v1"
      }
    ],
    "pushNotifications": false,
    "streaming": false
  },
  "defaultInputModes": [
    "text/plain",
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/plain"
  ],
  "description": "Checks the evidence of a completed purchase and returns a signed report. audit_ucp_transaction takes the output of traveler book_flight_ucp (13 checks, plus offer_expiry and gds_identifiers when those fields are present); audit_transaction takes the evidence_bundle of supplier book_flight (9 checks, plus settlement when tx_hash is present). Proof of concept: some audit_transaction checks only confirm a field is present, and each check's detail string says so. No privileged access.",
  "documentationUrl": "https://agent.webmesh.ai",
  "name": "Auditor Agent",
  "protocolVersion": "1.0",
  "provider": {
    "did": "did:web:auditor.webmesh.ai",
    "organization": "Webmesh",
    "url": "https://webmesh.ai"
  },
  "securityRequirements": [
    {
      "noAuth": []
    }
  ],
  "securitySchemes": {
    "ansIdentityCert": {
      "description": "ANS Identity Certificate issued by the ANS Registration Authority. The agent presents this cert during the TLS handshake; clients verify against the chain advertised in the Trust Card's keys[].x5c. See https://auditor.webmesh.ai/.well-known/ans/trust-card.json",
      "type": "mutualTLS"
    },
    "httpMessageSignatures": {
      "description": "RFC 9421 HTTP Message Signatures over response components, using the Ed25519 key advertised in the Trust Card. Public key directory at https://auditor.webmesh.ai/.well-known/http-message-signatures-directory",
      "scheme": "signature",
      "type": "http"
    },
    "noAuth": {
      "description": "This agent is publicly accessible with no authentication required. All skills are available to any caller.",
      "type": "noAuth"
    }
  },
  "signatures": [
    {
      "header": {
        "kid": "lQlHXJsapJ79kCN8DyQ96XejiHIxe_eOaCdevhNhN9I"
      },
      "protected": "eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vYXVkaXRvci53ZWJtZXNoLmFpLy53ZWxsLWtub3duL2Fucy90cnVzdC1jYXJkLmpzb24iLCJraWQiOiJsUWxIWEpzYXBKNzlrQ044RHlROTZYZWppSEl4ZV9lT2FDZGV2aE5oTjlJIiwidHlwIjoiYWdlbnQtY2FyZCtqd3MifQ",
      "signature": "5-bShN1GfUMy_uaHneyVZeN5JYCrJM7QJGKE1KQJqZIK-zWJeDnIpcnUzD3Bg6H3ZYXU1q5e5jFp-VQ8Uga_Vg"
    }
  ],
  "skills": [
    {
      "description": "MCP tool audit_transaction (legacy pov1 path). Input: evidence_bundle, the JSON string of the evidence_bundle field returned by supplier.webmesh.ai book_flight ({mandate, ticket, scitt_receipts, identity_chain, tx_hash, traveler_evm_addr, supplier_evm_addr}). 9 checks: identity_chain.traveler_ans, .supplier_ans and .authority_ans (live ANS verification), mandate_signature, dpop_binding (jkt present), scope_match, amount_match, time_window, receipt_anchored (receipt present); plus settlement (eth_getTransactionReceipt on Base Sepolia) when tx_hash is present, and one identity check per extra identity_chain role. verdict is valid only if every check passes, else invalid. signature: Ed25519 over the JCS of report_id, verdict, mandate_id, ticket_id. summary is LLM-written prose; the checks are deterministic.",
      "examples": [
        "audit_transaction evidence_bundle=<book_flight evidence_bundle JSON>"
      ],
      "id": "audit_transaction",
      "inputModes": [
        "application/json"
      ],
      "name": "Audit Transaction (EIP-3009)",
      "outputModes": [
        "application/json"
      ],
      "representativeQueries": [
        "Audit the evidence bundle from this supplier.webmesh.ai booking",
        "Verify that the on-chain settlement for this flight booking is legitimate",
        "Was the pov1 mandate valid for this EIP-3009 booking?"
      ],
      "securityRequirements": [
        {
          "noAuth": []
        }
      ],
      "tags": [
        "audit",
        "verification",
        "compliance",
        "eip3009",
        "settlement"
      ]
    },
    {
      "description": "MCP tool audit_ucp_transaction. Input: evidence, a JSON string; pass the completed result of traveler.webmesh.ai book_flight_ucp, which carries buyer_host, seller_host, authority_host, transaction_timestamp, checkout_mandate, payment_mandate, checkout_receipt, payment_receipt, settlement {rail, payment_id} ans_status_tokens and trust_path. Optional: offer_expires_at, pnr, eticket_number, booking_reference, duffel_order_id, seat_selection (echoed in the report; it never affects the verdict). 13 checks: buyer_ans_at_tx_time, seller_ans_at_tx_time, authority_ans_at_tx_time (live ANS verification, current status), authority_trusted_by_seller (the seller's live /.well-known/ucp mandate_issuers), settlement_confirmed (Stripe test PaymentIntent retrieved), and signature checks checkout_mandate_chain, payment_mandate_chain, buyer_key_binding, buyer_ans_ucp_key_match, checkout_receipt_sig, payment_receipt_sig, mandate_window (keys from each party's published profile), and status_at_sale_time (each party's TL-signed status token covers the seller-signed sale time, names its agent and identity certificate, and matches the digest the seller signed into the receipt); plus offer_expiry when offer_expires_at is given and gds_identifiers when a GDS field is given. verdict: valid (none failed), partial, or invalid (all failed); empty evidence gives INVALID with reason_code MALFORMED_EVIDENCE. trust_path is relayed, not checked. signature: EdDSA JWS over the report.",
      "examples": [
        "audit_ucp_transaction evidence=<book_flight_ucp result JSON>"
      ],
      "id": "audit_ucp_transaction",
      "inputModes": [
        "application/json"
      ],
      "name": "Audit UCP Transaction",
      "outputModes": [
        "application/json"
      ],
      "representativeQueries": [
        "Did this UCP flight booking settle and were all parties ANS-registered?",
        "Audit the evidence from a traveler.webmesh.ai book_flight_ucp purchase",
        "Was the Stripe test payment for this UCP purchase confirmed?",
        "Does the seller list the authority that issued this mandate?"
      ],
      "securityRequirements": [
        {
          "noAuth": []
        }
      ],
      "tags": [
        "audit",
        "verification",
        "compliance",
        "ucp",
        "ap2"
      ]
    }
  ],
  "supportedInterfaces": [
    {
      "protocolBinding": "jsonrpc",
      "protocolVersion": "1.0",
      "url": "https://auditor.webmesh.ai"
    }
  ],
  "url": "https://auditor.webmesh.ai",
  "version": "1.0.7",
  "x-discovery": {
    "ans_name": "ans://v1.0.7.auditor.webmesh.ai",
    "ans_registered": "prod",
    "dns_aid_svcb": "auditor.webmesh.ai IN SVCB 1 . alpn=a2a,h2",
    "tl_badge": "https://transparency.ans.godaddy.com/v1/agents/dc450f61-a212-45ed-8db7-37a8e72758d3",
    "trust_index": {
      "auth": "sso-key",
      "score_field": "scores.trustScore",
      "score_url": "https://api.godaddy.com/v1/ans/registered-agents?query=auditor.webmesh.ai"
    }
  },
  "x-identity": {
    "ans": {
      "transparencyLog": "https://transparency.ans.godaddy.com/v1/agents/dc450f61-a212-45ed-8db7-37a8e72758d3",
      "trustCard": "https://auditor.webmesh.ai/.well-known/ans/trust-card.json",
      "uri": "ans://v1.0.7.auditor.webmesh.ai"
    },
    "wimse": {
      "jwksUri": "https://auditor.webmesh.ai/.well-known/jwks.json",
      "signingAlgs": [
        "EdDSA"
      ],
      "spiffeId": "spiffe://webmesh.ai/agents/auditor",
      "supportedProfiles": [
        "urn:ietf:params:wimse:agent-delegation-chain"
      ]
    }
  },
  "x-security-note": "This agent is publicly accessible with no authentication required (noAuth). The ansIdentityCert scheme (mutual TLS, ANS private CA) is declared for future ANS-to-ANS production calls but is not currently enforced. The card accurately describes what is enforced."
}