Card snapshot

This is a frozen copy of the agent's agent-card.json as we observed it at the timestamp above. We capture a new snapshot every time the card's content hash changes. Useful for: forensic drift analysis, verifying downstream callers see the right version, reproducing routing decisions made historically.

{
  "name": "KushBitx AgentProof",
  "description": "Safety checks for AI agents that pay on Base: free SpendGuard policy checks, plus pay-per-call x402 checks for Base tokens, unsigned transactions and USDC payments. Also available as an MCP server at https://kushbitx.com/mcp. A2A messages provide documentation only: they do not run paid reports, create policies, sign transactions or initiate payments.",
  "version": "1.0.0",
  "supportedInterfaces": [
    {
      "url": "https://kushbitx.com/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    }
  ],
  "provider": {
    "organization": "KushBitx",
    "url": "https://kushbitx.com"
  },
  "documentationUrl": "https://kushbitx.com/quickstart",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false
  },
  "securitySchemes": {
    "spendguardBearer": {
      "httpAuthSecurityScheme": {
        "scheme": "Bearer",
        "bearerFormat": "Opaque SpendGuard admin or agent key",
        "description": "Only protected SpendGuard REST operations require Authorization: Bearer <key>. Policy creation returns separate one-time admin and agent keys. Use the admin key for policy reads/updates and human approval; use the agent key for protected decisions and decision retrieval. See https://kushbitx.com/openapi.json and https://kushbitx.com/quickstart. The public /a2a guidance endpoint requires no credentials; never send keys in A2A message parts."
      }
    }
  },
  "securityRequirements": [],
  "defaultInputModes": [
    "text/plain",
    "application/json"
  ],
  "defaultOutputModes": [
    "text/plain",
    "application/json"
  ],
  "skills": [
    {
      "id": "agentproof-service-discovery",
      "name": "AgentProof Service Discovery",
      "description": "Discover AgentProof routes, supported request methods, published input schemas and integration documentation, including the separate Quick Check GET endpoint. Returns guidance and links to the live service directory; does not invoke paid services.",
      "tags": [
        "agentproof",
        "discovery",
        "api",
        "x402",
        "base"
      ],
      "examples": [
        "List AgentProof services and their input schemas."
      ]
    },
    {
      "id": "base-token-risk-integration",
      "name": "Base Token Risk Integration",
      "description": "Explain how to integrate POST /api/token-risk with chain=base and a token contract address, check data coverage, and interpret evidence and INCOMPLETE results. Guidance is free; the separate REST report requires explicit x402 authorization and is not run through A2A.",
      "tags": [
        "base",
        "token-risk",
        "security",
        "integration",
        "x402"
      ],
      "examples": [
        "How do I integrate Base token-risk screening?"
      ]
    },
    {
      "id": "transaction-preflight-integration",
      "name": "Transaction Preflight Integration",
      "description": "Explain the unsigned transaction fields for POST /api/transaction-preflight and interpretation of simulation and approval findings. Returns integration instructions only; never signs, broadcasts, simulates a transaction or pays for a report through A2A.",
      "tags": [
        "base",
        "transaction",
        "preflight",
        "unsigned",
        "integration"
      ],
      "examples": [
        "Explain the unsigned transaction preflight request."
      ]
    },
    {
      "id": "usdc-payment-verification-integration",
      "name": "USDC Payment Verification Integration",
      "description": "Describe integration with POST /api/verify-payment using an existing Base transaction hash, expected recipient and USDC amount, including confirmation and verification outcomes. Returns documentation only; does not verify or settle a payment through A2A.",
      "tags": [
        "base",
        "usdc",
        "payment-proof",
        "verification",
        "integration"
      ],
      "examples": [
        "How do I verify an existing Base USDC transfer?"
      ]
    },
    {
      "id": "spendguard-policy-guidance",
      "name": "SpendGuard Policy Guidance",
      "description": "Explain advisory versus protected spending policies, separate admin and agent Bearer keys, budgets, recipient rules, idempotent request IDs and human approval. A2A guidance is public and never creates or changes policies or grants execution authority.",
      "tags": [
        "spendguard",
        "policy",
        "budgets",
        "bearer",
        "human-approval"
      ],
      "examples": [
        "Explain SpendGuard policy integration and Bearer keys."
      ]
    }
  ]
}