Card snapshot

This is a frozen copy of the agent's agent-card.json as we observed it at the timestamp above. We capture a new snapshot every time the card's content hash changes. Useful for: forensic drift analysis, verifying downstream callers see the right version, reproducing routing decisions made historically.

{
  "name": "GSC-Marketplace",
  "description": "CPG sourcing for AI Agents with x402 \u2014 Beauty & Personal Care brands found, verified and answerable across 50 markets on the CPG Knowledge Graph; Instant Messaging for agents, the GSC Trading Desk for humans. The fifth GSC surface: selection.",
  "supportedInterfaces": [
    {
      "url": "https://mcp.gsc-marketplace.ai/mcp",
      "protocolBinding": "HTTP+JSON",
      "protocolVersion": "1.0"
    },
    {
      "url": "https://mcp.gsc-marketplace.ai/",
      "protocolBinding": "HTTP+JSON",
      "protocolVersion": "1.0"
    }
  ],
  "provider": {
    "url": "https://gsc-em.com",
    "organization": "GreenCore Solutions Corp."
  },
  "version": "1.4.0",
  "documentationUrl": "https://mcp.gsc-marketplace.ai/llms.txt",
  "capabilities": {
    "streaming": true,
    "pushNotifications": false,
    "extensions": [
      {
        "uri": "https://gsc-em.com/a2a/ext/scope-of-authority/v1",
        "description": "GSC scope of authority: read, resolve and discovery calls are autonomous; every transactional commit (order, RFQ acceptance, terms) is human-signed at the GSC Trading Desk / Navigator HITL boundary.",
        "required": false,
        "params": {
          "autonomous": [
            "read",
            "resolve",
            "discover"
          ],
          "humanSigned": [
            "transactional-commit",
            "order",
            "rfq-acceptance",
            "terms"
          ],
          "hitlBoundary": "https://gsc-navigator.ai/",
          "transactionSurface": "https://mcp.cpghumanintheloop.ai/mcp"
        }
      },
      {
        "uri": "https://gsc-em.com/a2a/ext/marketplace/v1",
        "description": "The fifth GSC surface \u2014 selection. Eleven read tools over MCP; x402 capability on the single paid HTTP endpoint /api (terms in its 402 payload only).",
        "required": false,
        "params": {
          "protocol": "ACM-68000",
          "registry": "io.github.greencore-solutions/gsc-marketplace",
          "mcpEndpoint": "https://mcp.gsc-marketplace.ai/mcp"
        }
      },
      {
        "uri": "https://gsc-em.com/a2a/ext/enforcement-posture/v1",
        "description": "These endpoints are open by design. When the buy side's credential standard reaches GA \u2014 expected Q4 2026-Q1 2027 \u2014 transactional methods migrate to OAuth 2.1 challenge per the MCP 2025-11-25 specification. Read access stays open. That is not pending work; that is the published plan.",
        "required": false,
        "params": {
          "enforcement_posture": "open-by-declaration",
          "migration_standard": "OAuth 2.1 + PKCE challenge (401 + WWW-Authenticate) on mcp:transact methods, per MCP spec 2025-11-25",
          "migration_trigger": "ecosystem GA of credentialed counterparties (enterprise A2A/MCP buy-side GA)",
          "migration_window": "Q4 2026 - Q1 2027",
          "declared": "2026-08-24",
          "operator": "GreenCore Solutions Corp.",
          "duns": "24-336-6774"
        }
      }
    ]
  },
  "securitySchemes": {
    "entraOAuth2": {
      "oauth2SecurityScheme": {
        "description": "Microsoft Entra OAuth 2.0 client credentials, GSC-provisioned after human review. Public reads on this surface are open by design; tokens are required where commitments are made.",
        "flows": {
          "clientCredentials": {
            "tokenUrl": "https://login.microsoftonline.com/54939635-2f2e-465a-8526-a907cb3c8ebd/oauth2/v2.0/token",
            "scopes": {
              "mcp:read": "Read/resolve/discovery calls on GSC-Marketplace over MCP."
            }
          }
        },
        "oauth2MetadataUrl": "https://mcp.gsc-marketplace.ai/.well-known/oauth-authorization-server"
      }
    },
    "bearerJwt": {
      "httpAuthSecurityScheme": {
        "scheme": "Bearer",
        "bearerFormat": "JWT",
        "description": "Bearer access token presented in the Authorization header."
      }
    }
  },
  "defaultInputModes": [
    "application/json",
    "text/plain"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/markdown"
  ],
  "skills": [
    {
      "id": "brand-sourcing",
      "name": "Brand sourcing",
      "description": "search_brands \u2192 get_brand \u2192 get_brand_identifiers on mcp.gsc-marketplace.ai: a brand found, verified, answerable. Depth 24,126 brands \u00b7 5,928 makers \u00b7 2,020 banners \u00b7 50 markets.",
      "tags": [
        "cpg",
        "bpc",
        "sourcing",
        "mcp"
      ]
    },
    {
      "id": "marketplace-operators",
      "name": "Marketplace operator map",
      "description": "Neutral operator map per market, sorted by agentic posture. No tiers, no relationship claims.",
      "tags": [
        "marketplace",
        "retail"
      ]
    },
    {
      "id": "instant-messaging",
      "name": "Instant Messaging for agents",
      "description": "https://x-gsi.ai/ingest \u2192 https://mcp.cpghumanintheloop.ai/mcp \u2014 typed, identified, ticketed, human-signed.",
      "tags": [
        "ia-message",
        "hitl"
      ]
    },
    {
      "id": "trading-desk",
      "name": "GSC Trading Desk",
      "description": "https://gsc-navigator.ai/ \u2014 the human channel, informed by Navigator.",
      "tags": [
        "contact",
        "hitl"
      ]
    },
    {
      "id": "hitl-contact",
      "name": "Human-in-the-Loop Contact",
      "description": "Reach GreenCore Solutions Corp. through this surface's live, human-reviewed contact endpoint (POST https://formspree.io/f/mppannbj with fields name, email, message). Every transactional commit is human-signed via the GSC Trading Desk.",
      "tags": [
        "contact",
        "hitl",
        "registration"
      ]
    },
    {
      "id": "x402-capability",
      "name": "x402 capability",
      "description": "x-gsc-x402: ready \u00b7 Base eip155:8453 USDC \u00b7 live \u00b7 single paid endpoint https://gsc-marketplace.ai/api, terms in its 402 payload only.",
      "tags": [
        "x402",
        "capability"
      ]
    },
    {
      "id": "x402-settlement",
      "name": "x402 settlement",
      "description": "Settle against https://gsc-marketplace.ai/api unassisted: v2 402 \u2192 EIP-3009 USDC on Base \u2192 PAYMENT-SIGNATURE \u2192 signed receipt, verifiable offline against /x402/jwks.json, durable at /x402/receipt/ plus nonce. Skill: /.well-known/agent-skills/x402-settlement/SKILL.md",
      "tags": [
        "x402",
        "payments",
        "base",
        "usdc",
        "conformance"
      ]
    },
    {
      "id": "aio-agent-fleet",
      "name": "AIO Agent fleet",
      "description": "Resolve and verify the 10,000 AIO Agents: us mx br fr uk de in sg jp kr hosts, slot Cards signed Ed25519 (kid gsc-aio-cards-2026-08) against each host's JWKS; get_aio_agent_fleet on the MCP. Skill: /.well-known/agent-skills/aio-agent-fleet/SKILL.md",
      "tags": [
        "aio",
        "fleet",
        "identity",
        "ed25519"
      ]
    },
    {
      "id": "cpg-68000-signals",
      "name": "CPG-68000 signals",
      "description": "The seven CPG-68000 signals (000 200 300 403 404 451 500), each resolving to its ACM-68000 definition; register at https://cpg-68000.ai/signals.json. Skill: /.well-known/agent-skills/cpg-68000-signals/SKILL.md",
      "tags": [
        "cpg-68000",
        "acm-68000",
        "signals"
      ]
    }
  ],
  "signatures": [
    {
      "protected": "eyJhbGciOiJFUzI1NiIsImtpZCI6ImdzYy1jYXJkcy0yMDI2LTA4In0",
      "signature": "u3Is0gCN-eoWaa7dczK5oBQzsf99tUlzfq9DR2BaCxO1B5mGBhp5aBVoAhNi5xrKBu94T7HTHsVLHRAGrmK2og"
    }
  ]
}