Card snapshot

This is a frozen copy of the agent's agent-card.json as we observed it at the timestamp above. We capture a new snapshot every time the card's content hash changes. Useful for: forensic drift analysis, verifying downstream callers see the right version, reproducing routing decisions made historically.

{
  "capabilities": {
    "extendedAgentCard": false,
    "extensions": [
      {
        "description": "MCP server exposing analyze_domain_impact over streamable-HTTP: scores a batch of domains and buckets them by severity.",
        "params": {
          "discoveryUrl": "https://impact.webmesh.ai/.well-known/mcp.json",
          "endpoint": "https://impact.webmesh.ai/mcp",
          "protocolVersion": "2025-03-26",
          "transport": "streamable-http"
        },
        "required": false,
        "uri": "https://modelcontextprotocol.io"
      },
      {
        "description": "Identity and interoperability stack: ANS Trust Card (x5c chain + stapled SCITT receipt), DNS-AID SVCB with DNSSEC and DANE TLSA, DNSid organizational accountability, ARD / AI-Catalog discovery, and Web Bot Auth (RFC 9421 HTTP Message Signatures) outbound request signing.",
        "params": {
          "agentFacts": "https://impact.webmesh.ai/agentfacts.json",
          "ard": "https://impact.webmesh.ai/.well-known/ard.json",
          "httpMessageSignaturesDirectory": "https://impact.webmesh.ai/.well-known/http-message-signatures-directory",
          "identityAnchors": [
            "ans-x509",
            "did:web",
            "dns-aid",
            "dnssec",
            "dane-tlsa",
            "dnsid"
          ],
          "outboundSigning": "web-bot-auth",
          "trustCard": "https://impact.webmesh.ai/.well-known/ans/trust-card.json"
        },
        "required": false,
        "uri": "https://webmesh.ai/ext/ans-trust-stack/v1"
      }
    ],
    "pushNotifications": false,
    "streaming": false
  },
  "defaultInputModes": [
    "text/plain",
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/plain"
  ],
  "description": "MCP + A2A agent that scores domains for technical disruption and media impact before any action that removes them from DNS resolution. A safety check to run before ServerHold, ClientHold, registry actions, and abuse takedowns: it reports what breaks, which services fail as a result, and how public the damage would be, so operators see the highest-risk domains first.",
  "documentationUrl": "https://impact.webmesh.ai",
  "name": "Domain Impact Analyzer",
  "protocolVersion": "1.0",
  "provider": {
    "did": "did:web:impact.webmesh.ai",
    "organization": "Webmesh",
    "url": "https://webmesh.ai"
  },
  "securityRequirements": [
    {
      "noAuth": []
    }
  ],
  "securitySchemes": {
    "ansIdentityCert": {
      "description": "ANS Identity Certificate issued by the ANS Registration Authority. The agent presents this cert during the TLS handshake; clients verify against the chain advertised in the Trust Card's keys[].x5c. See https://impact.webmesh.ai/.well-known/ans/trust-card.json",
      "type": "mutualTLS"
    },
    "httpMessageSignatures": {
      "description": "RFC 9421 HTTP Message Signatures over response components, using the Ed25519 key advertised in the Trust Card. Public key directory at https://impact.webmesh.ai/.well-known/http-message-signatures-directory",
      "scheme": "signature",
      "type": "http"
    },
    "noAuth": {
      "description": "This agent is publicly accessible with no authentication required. All skills are available to any caller.",
      "type": "noAuth"
    }
  },
  "signatures": [
    {
      "header": {
        "kid": "DJZNSBIRIyRhRtG2lMEOa9wDq1P7TnUDNUzLVzq5C9s"
      },
      "protected": "eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vaW1wYWN0LndlYm1lc2guYWkvLndlbGwta25vd24vYW5zL3RydXN0LWNhcmQuanNvbiIsImtpZCI6IkRKWk5TQklSSXlSaFJ0RzJsTUVPYTl3RHExUDdUblVETlV6TFZ6cTVDOXMiLCJ0eXAiOiJhZ2VudC1jYXJkK2p3cyJ9",
      "signature": "Ey2-Cxns1moac_7ofHBW4QCPa1wFY7TgqYbI4Qhi6638H_ESfYXcbzYgudpiw0A2B8rVI-HxHWdZ3ocOgJuPSw"
    }
  ],
  "skills": [
    {
      "description": "Given one or more domains, scores each on disruption (how much breaks technically) and news (how fast the takedown spreads in the press), 1-10, and buckets them DO NOT TOUCH / MANAGEMENT APPROVAL / STANDARD PROCESSING with a concrete consequence for each. Run it before ServerHold, ClientHold, domain deletion, or an abuse suspension.",
      "examples": [
        "What breaks if we put zoom.us on ServerHold?",
        "Score disruption before we suspend these five domains from an abuse report",
        "Which domain in this bulk-hold batch has the highest news impact?",
        "Is github.com safe to take down for maintenance?"
      ],
      "id": "analyze",
      "inputModes": [
        "application/json",
        "text/plain"
      ],
      "name": "Domain Impact Analysis",
      "outputModes": [
        "application/json",
        "text/plain"
      ],
      "securityRequirements": [
        {
          "noAuth": []
        }
      ],
      "tags": [
        "domain-operations",
        "risk-assessment",
        "DNS",
        "compliance",
        "ServerHold",
        "abuse",
        "takedown"
      ]
    }
  ],
  "supportedInterfaces": [
    {
      "protocolBinding": "jsonrpc",
      "protocolVersion": "1.0",
      "url": "https://impact.webmesh.ai"
    }
  ],
  "url": "https://impact.webmesh.ai",
  "version": "1.0.7",
  "x-discovery": {
    "ans_name": "ans://v1.0.7.impact.webmesh.ai",
    "ans_registered": "prod",
    "dns_aid_svcb": "impact.webmesh.ai IN SVCB 1 . alpn=a2a,h2",
    "tl_badge": "https://transparency.ans.godaddy.com/v1/agents/c6f2032a-7d3c-43b6-a6ef-6aa2165b3c16",
    "trust_index": {
      "auth": "sso-key",
      "score_field": "scores.trustScore",
      "score_url": "https://api.godaddy.com/v1/ans/registered-agents?query=impact.webmesh.ai"
    }
  },
  "x-identity": {
    "ans": {
      "transparencyLog": "https://transparency.ans.godaddy.com/v1/agents/c6f2032a-7d3c-43b6-a6ef-6aa2165b3c16",
      "trustCard": "https://impact.webmesh.ai/.well-known/ans/trust-card.json",
      "uri": "ans://v1.0.7.impact.webmesh.ai"
    },
    "wimse": {
      "jwksUri": "https://impact.webmesh.ai/.well-known/jwks.json",
      "signingAlgs": [
        "EdDSA"
      ],
      "spiffeId": "spiffe://webmesh.ai/agents/impact",
      "supportedProfiles": [
        "urn:ietf:params:wimse:agent-delegation-chain"
      ]
    }
  },
  "x-security-note": "This agent is publicly accessible with no authentication required (noAuth). The ansIdentityCert scheme (mutual TLS, ANS private CA) is declared for future ANS-to-ANS production calls but is not currently enforced. The card accurately describes what is enforced."
}