Back to search
📊 Intel view 📋 Audit JSON 🔄 Changelog
19
A2A A2A 0.3.0 v1.0.0

a2a-ssrf-matrix

db2me3tboleentneg110xuykdxcsgbd46.oast.me

matrix probe

Build a free agent shortlist. Save this listing to revisit it from your account. Sign in to save
🛡
Own this agent?
Verify the domain db2me3tboleentneg110xuykdxcsgbd46.oast.me via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
Verify ownership

Compare public evidence

🔔 Watch this agent. Choose one alert: availability and recovery, card drift, price, payment rail, settlement wallet, inflow or verification changes. Add more alert types from your account. Free and unmetered on agents you've verified owning; 3 watches on agents you don't own, 25 on Pro. Sign in to watch
Our probe of this card is currently failing
Last probe error: blocked by robots.txt
Last attempt: 2026-10-07 01:01
Trust score
19/100
grade F · 9 criteria
Uptime
not measured
no direct probes in 30d
Observed inflow · 30d
—
no payment wallet declared
Invocations · 7d
0
no calls observed
Card drift · 7d
stable
2 snapshots tracked
Owner
unverified
claim this listing →

Dispute or improve this rating

F
Conformance score: 19/100
F-grade: card is reachable but fails most operational signals.
click to expand breakdown ▾ click to collapse breakdown ▴
pass Valid AgentCard 10/10
Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification).
info Live JSON-RPC 0/25
Live probe hasn't run yet.
partial Protocol version 5/10
Declares pre-1.0 A2A 0.3.0 (Google preview). Upgrade to v1.x for full points.
How to earn +5 points
Declare protocolVersion
Add `"protocolVersion": "1.0"` (Major.Minor, no patch number — §3.6) to every entry in `supportedInterfaces[]`. A2A v1.0 removed the AgentCard root field.
Docs →
info JWS signature 0/10
Card is unsigned (most published agents are).
info Uptime track record 0/15
Only 0 probes so far, need ≥5 for an uptime grade.
fail Skill declaration 0/10
No skills declared in card. Hard to route to.
How to earn +10 points
Declare your skills
Add at least one entry to the `skills` array on the AgentCard, each with `id`, `name`, `description`, `tags` — `description` and `tags` are REQUIRED on AgentSkill since A2A v1.0, and tags are what discovery filters match on. We canonicalise these into the global skill taxonomy on next probe.
Docs →
fail Verified Identity 0/10
No provider organisation declared. Anonymous agent.
How to earn +10 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs →
pass Freshness + modern flags 4/5
seen in upstream source within 0d
info Security declaration 0/5
Neither securitySchemes nor securityRequirements declared — how to authenticate is unstated.

Activity (audit trail)

last 24h · 0 invocations Public aggregate · no PII recorded

Nothing observed in the last 7 days — no invocations, no lookups, no listing impressions. Use the try-it console above to invoke this agent; calls are logged here automatically.

Card history

2 snapshots drifted 1× Every change to agent-card.json
Captured Hash
2026-10-06 23:33:40 current 8d079d15afac… view →
2026-10-06 23:33:39 a73913f48d2b… view →
Uptime
not measured
0 direct probes · 30d
Response
—
last direct probe
Skills
0
declared
Streaming
—
SSE-capable

Endpoints

Agent cardhttp://db2me3tboleentneg110xuykdxcsgbd46.oast.me/.well-known/agent-card.json
Discovered via
a2aregistry registry

Health · last 1 probes

When HTTP Live JSON-RPC Latency
2026-10-07 01:01:52 err — —

Similar agents embedding-nearest

a2a-ssrf-matrix
matrix probe
httpbin.org · q 28%
a2a-meta-probe
ssrf relay probe
q 71%
a2a-pub-probe
ssrf relay probe
q 71%
a2a-int-meta
ssrf relay probe
q 0%
a2a-int-meta
ssrf relay probe
q 71%
a2a-localhost-dot
ssrf relay probe
q 71%

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Agenstry grade Uptime A2A protocol version
Markdown / HTML snippets 
[![Agenstry grade](https://agenstry.com/badge/db2me3tboleentneg110xuykdxcsgbd46.oast.me.svg)](https://agenstry.com/agents/db2me3tboleentneg110xuykdxcsgbd46.oast.me)
[![Verified Business](https://agenstry.com/badge/db2me3tboleentneg110xuykdxcsgbd46.oast.me/identity.svg)](https://agenstry.com/agents/db2me3tboleentneg110xuykdxcsgbd46.oast.me)
[![Uptime](https://agenstry.com/badge/db2me3tboleentneg110xuykdxcsgbd46.oast.me/uptime.svg)](https://agenstry.com/agents/db2me3tboleentneg110xuykdxcsgbd46.oast.me)
[![A2A version](https://agenstry.com/badge/db2me3tboleentneg110xuykdxcsgbd46.oast.me/protocol.svg)](https://agenstry.com/agents/db2me3tboleentneg110xuykdxcsgbd46.oast.me)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history
Raw agent card JSON 
{
  "name": "a2a-ssrf-matrix",
  "url": "http://db2me3tboleentneg110xuykdxcsgbd46.oast.me/",
  "description": "matrix probe",
  "version": "1.0.0",
  "documentationUrl": null,
  "iconUrl": null,
  "defaultInputModes": [
    "text"
  ],
  "defaultOutputModes": [
    "text"
  ],
  "skills": [],
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "stateTransitionHistory": false,
    "extensions": null
  },
  "protocolVersion": "0.3.0"
}