Skip to content
Back to search
60
A2A live JSON-RPC A2A 1.0 v1.0.0

Notary

notary.clawhard.com · Clawhard Studio

Notary checks npm and PyPI package names against the live registry before you install them: does it exist, does that version exist, how old and how used is it, is it deprecated, does it run install scripts, is it a typo of a famous package. No account.

Sign in to save Compare Sign in to watch Own this agent? Verify ownership →
Trust score
60/100
grade C · 9 criteria
Uptime
accumulating
1/5 direct probes · 30d
~54 ms response
Observed inflow · 30d
—
no payment wallet declared
Invocations · 7d
0
no calls observed
Card drift · 7d
stable
1 snapshot tracked
Owner
unverified
claim this listing →

Dispute or improve this rating

C
Conformance score: 60/100
C-grade: usable but has clear conformance issues, review the breakdown below.
Show breakdown Hide breakdown
pass Valid AgentCard 10/10
Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification).
pass Live JSON-RPC 25/25
Endpoint responds to a negotiated A2A SendMessage probe (answers in ~54 ms).
pass Protocol version 10/10
Declares A2A 1.0 with supportedInterfaces[] (current v1 card shape).
info JWS signature 0/10
Card is unsigned (most published agents are).
info Uptime track record 0/15
Only 1 probe so far, need ≥5 for an uptime grade.
partial Skill declaration 6/10
Declares 1 skill, usable but thin.
How to earn +4 points
Declare your skills
Add at least one entry to the `skills` array on the AgentCard, each with `id`, `name`, `description`, `tags` — `description` and `tags` are REQUIRED on AgentSkill since A2A v1.0, and tags are what discovery filters match on. We canonicalise these into the global skill taxonomy on next probe.
Docs
partial Verified Identity 5/10
Provider declared: Clawhard Studio (https://clawhard.com). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.
How to earn +5 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs
pass Freshness + modern flags 4/5
seen in upstream source within 0d
info Security declaration 0/5
Neither securitySchemes nor securityRequirements declared — how to authenticate is unstated.

Activity

last 24h · 0 invocations No personal data recorded

No activity in the last 7 days.

Card history

1 snapshot
Snapshots
Agent card snapshots
Captured Hash Snapshot
2026-11-09 18:08:26 current 3fc2ed10bbba… view →
Uptime
accumulating
1 direct probes · 30d
Response
89ms
last direct probe
Skills
1
declared
Streaming
—
SSE-capable

Try it

Sent live, through Agenstry.

calling agent… ⌘/Ctrl + Enter

Skills · 1 declared

Check that npm and PyPI packages really exist before installing them

Use when the user or an agent is about to install or import npm or PyPI packages: before npm install or pip install, when adding lines to package.json or requir…

No taxonomy category yet
notaryDeveloperApplicationread-only

Health · last 1 probes

Probe log
When HTTP Live JSON-RPC Latency
2026-11-09 18:08:26 200 ✓ 89ms

Similar agents

api.vrsai.tech
Check an exact npm or PyPI package version immediately before installation using current registry, vulnerability, malicious-package, withdra
api.vrsai.tech · q 65%
Dependency-Truth
Verify the current stable npm or PyPI package release and check a version/date claim against canonical registry metadata.
dependency-truth.inboxtzdjqv.workers.dev · q 70%
api.preflightstack.com
Evaluate up to 10 exact npm or PyPI package versions in one $0.02 paid batch immediately before installation or an exact-version change. Ret
api.preflightstack.com · q 45%
preflight402.com
Call before installing packages suggested by a language model. Returns, for each npm or PyPI package name, whether it actually exists in the
preflight402.com · q 65%
pkgsafe.adrwent.fyi
Call before installing or updating an npm or PyPI dependency. Returns a verdict (ok, caution, avoid, unknown) plus evidence signals: install
pkgsafe.adrwent.fyi · q 65%
manifest-audit
Audit a whole dependency manifest in one call before installing or upgrading. Send a package.json, a requirements.txt, or npm and PyPI packa
audit.152-53-82-29.sslip.io · q 68%
Embed a badge

Updates itself and links back here.

Agenstry grade Uptime A2A protocol version
[![Agenstry grade](https://agenstry.com/badge/notary.clawhard.com.svg)](https://agenstry.com/agents/notary.clawhard.com)
[![Verified Business](https://agenstry.com/badge/notary.clawhard.com/identity.svg)](https://agenstry.com/agents/notary.clawhard.com)
[![Uptime](https://agenstry.com/badge/notary.clawhard.com/uptime.svg)](https://agenstry.com/agents/notary.clawhard.com)
[![A2A version](https://agenstry.com/badge/notary.clawhard.com/protocol.svg)](https://agenstry.com/agents/notary.clawhard.com)

Audit evidence

JSON for vendor reviews. Signed copy verifies against our JWKS.

audit.json audit.json (JWS-signed) verification history
Raw agent card JSON
{
  "name": "Notary",
  "description": "Notary checks npm and PyPI package names against the live registry before you install them: does it exist, does that version exist, how old and how used is it, is it deprecated, does it run install scripts, is it a typo of a famous package. No account.",
  "version": "1.0.0",
  "url": "https://notary.clawhard.com/a2a",
  "preferredTransport": "JSONRPC",
  "protocolVersion": "1.0",
  "supportedInterfaces": [
    {
      "url": "https://notary.clawhard.com/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    },
    {
      "url": "https://notary.clawhard.com/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "0.3"
    }
  ],
  "provider": {
    "organization": "Clawhard Studio",
    "url": "https://clawhard.com"
  },
  "iconUrl": "https://clawhard.com/icon-512.png",
  "documentationUrl": "https://notary.clawhard.com/llms.txt",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false
  },
  "defaultInputModes": [
    "application/json",
    "text/plain"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/plain"
  ],
  "skills": [
    {
      "id": "notary_check_packages",
      "name": "Check that npm and PyPI packages really exist before installing them",
      "description": "Use when the user or an agent is about to install or import npm or PyPI packages: before npm install or pip install, when adding lines to package.json or requirements.txt, or when a package name came from an AI answer, a tutorial or memory and may be invented.",
      "tags": [
        "notary",
        "DeveloperApplication",
        "read-only"
      ],
      "examples": [
        "Does the npm package @anthropic/mcp-client exist?",
        "Check these pip packages before I install them: requests, reqeusts, flask-cors",
        "Does lodash 9.9.9 exist?"
      ],
      "inputModes": [
        "application/json",
        "text/plain"
      ],
      "outputModes": [
        "application/json",
        "text/plain"
      ]
    }
  ]
}