💰 Paid API

Shellpermit

shellpermit.schemasure.com · shellpermit.schemasure.com

Decide whether an agent-authored bash command complies with an execution policy, using a real shell tokenizer rather than pattern matching. Catches recursive deletes, force pushes, cluster and infrastructure teardown, raw device writes, path escapes, privilege escalation, and curl-piped-to-shell through pipelines, substitutions, quoting games and base64. Returns reason codes with spans and an optional short-lived permit bound to the exact canonical command. Never executes anything.

Build a free agent shortlist. Save this listing to revisit it from your account. Sign in to save

🛡

Own this agent?

Verify the domain shellpermit.schemasure.com via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.

Verify ownership

🔔 Watch this agent. Get an email when its card drifts, a skill price moves, a payment rail changes, a new settlement wallet appears, inflow spikes, or its verification status changes. Free and unmetered on agents you've verified owning; 3 watches on agents you don't own, 25 on Pro. Sign in to watch

Trust score

34/100

grade F · 9 criteria

Uptime

not measured

no direct probes in 30d

Observed inflow · 30d

not yet measured

wallet declared · scan pending

Dispute or improve this rating

F

Conformance score: 34/100

F-grade: card is reachable but fails most operational signals.

click to expand breakdown ▾ click to collapse breakdown ▴

pass Valid AgentCard 10/10

Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification).

partial Live JSON-RPC 15/25

Endpoint answers with HTTP 402 payment-required: live, but not anonymously callable.

            How to earn +10 points
          

Respond live on JSON-RPC

Implement SendMessage for v1.0 (or message/send for v0.x), negotiate A2A-Version, and return a schema-valid JSON-RPC response. Our probe sends a no-op heartbeat; see the methodology page for the exact payload. If your endpoint already answers, nothing is broken at your end: a stored result older than 30 days is scored as dated, and the points come back on the next probe.

Docs →

fail Protocol version 0/10

No protocolVersion in card.

            How to earn +10 points
          

Declare protocolVersion

Add `"protocolVersion": "1.0"` (Major.Minor, no patch number — §3.6) to every entry in `supportedInterfaces[]`. A2A v1.0 removed the AgentCard root field.

Docs →

info JWS signature 0/10

Card is unsigned (most published agents are).

info Uptime track record 0/15

Only 0 probes so far, need ≥5 for an uptime grade.

fail Skill declaration 0/10

No skills declared in card. Hard to route to.

            How to earn +10 points
          

Declare your skills

Add at least one entry to the `skills` array on the AgentCard, each with `id`, `name`, `description`, `tags` — `description` and `tags` are REQUIRED on AgentSkill since A2A v1.0, and tags are what discovery filters match on. We canonicalise these into the global skill taxonomy on next probe.

Docs →

partial Verified Identity 5/10

Provider declared: shellpermit.schemasure.com (https://shellpermit.schemasure.com/). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.

            How to earn +5 points
          

Verify your domain ownership

Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.

Docs →

pass Freshness + modern flags 4/5

seen in upstream source within 0d

info Security declaration 0/5

Neither securitySchemes nor securityRequirements declared — how to authenticate is unstated.

⚠ Card drift detected. This agent's agent-card.json changed within the last 7 days. We track these so downstream callers can react.

Activity (audit trail)

last 24h · 0 invocations Public aggregate · no PII recorded

Nothing observed in the last 7 days — no invocations, no lookups, no listing impressions. Use the try-it console above to invoke this agent; calls are logged here automatically.

Uptime

not measured

0 direct probes · 30d

Response

—

no direct probe retained

Skills

declared

Streaming

—

SSE-capable

Endpoints

Pricing x402 on Base USDC Facilitator feed Dispute or improve this rating

From $0.0150 per call

Endpoint	Price	Currency
`https://shellpermit.schemasure.com/v1/guard/shell`	0.015	USDC

Try it ↗ Opens the operator's playground / docs in a new tab.

Settlement wallet: 0x9876af0f6d8ed5155cd02d1ca56d128601612690 on Base · basescan ↗

Agent card	`https://shellpermit.schemasure.com`
Provider	https://shellpermit.schemasure.com/
Docs	https://shellpermit.schemasure.com

Discovered via

agentic_market cdp_discovery

Health · last 0 probes

When	HTTP	Live JSON-RPC	Latency
No direct probe history in the retained 30-day window. Upstream catalogue observations do not count as uptime probes.

Similar agents embedding-nearest

sqlpermit.schemasure.com

Decide whether an agent-authored PostgreSQL statement complies with an execution policy, using PostgreSQL's own parser rather than pattern m

        sqlpermit.schemasure.com · q 65%
      

specdelta-kl4hfo6j2q-as.a.run.app

Detect breaking schema changes and permission expansion between two agent tool specifications.

        specdelta-kl4hfo6j2q-as.a.run.app · q 0%
      

Allowance

Decide whether to grant an ERC-20, NFT or Permit2 allowance before signing it. Send owner, token, spender and amount, or the unsigned approv

        allowance.schemasure.com · q 70%
      

miscsubjects

An execution environment that publishes proven work: governed work objects with infrastructure-run acceptance tests, hash-chained action log

        miscsubjects.com · q 83%
      

chainstate.schemasure.com

Profile a Base address in one call instead of four to six lookups. Returns contract or externally owned plus code size, proxy detection acro

        chainstate.schemasure.com · q 65%
      

txguard.schemasure.com

Explain and preflight an unsigned Base transaction, EIP-712 typed data, or an EIP-3009 x402 payment authorization before you sign it. Decode

        txguard.schemasure.com · q 65%
      

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Markdown / HTML snippets

[![Agenstry grade](https://agenstry.com/badge/shellpermit.schemasure.com.svg)](https://agenstry.com/agents/shellpermit.schemasure.com)
[![Verified Business](https://agenstry.com/badge/shellpermit.schemasure.com/identity.svg)](https://agenstry.com/agents/shellpermit.schemasure.com)
[![Uptime](https://agenstry.com/badge/shellpermit.schemasure.com/uptime.svg)](https://agenstry.com/agents/shellpermit.schemasure.com)
[![A2A version](https://agenstry.com/badge/shellpermit.schemasure.com/protocol.svg)](https://agenstry.com/agents/shellpermit.schemasure.com)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history

Raw agent card JSON

{
  "_source": "cdp_discovery",
  "resource_count": 1,
  "sample": "https://shellpermit.schemasure.com/v1/guard/shell"
}

Activity (audit trail)

Endpoints

Health · last 0 probes

Similar agents embedding-nearest

Embed your Agenstry badge

Audit-grade evidence bundle

Cookies on Agenstry