A2A Trust Plane

{
  "name": "A2A Trust Plane",
  "description": "Multi-agent continuity for small teams. Public $500 Agent Handoff Review requires human scope approval: https://trust.the825.co/handoff-review. See all offers at https://trust.the825.co/offers.json. Governed recovery across A2A, MCP, and REST.",
  "supportedInterfaces": [
    {
      "url": "https://trust.the825.co/a2a/jsonrpc",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    },
    {
      "url": "https://trust.the825.co/a2a/rest",
      "protocolBinding": "HTTP+JSON",
      "protocolVersion": "1.0"
    }
  ],
  "provider": {
    "url": "https://the825.co",
    "organization": "The 825"
  },
  "version": "0.1.0",
  "documentationUrl": "https://trust.the825.co/docs",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false
  },
  "securitySchemes": {
    "apiKey": {
      "apiKeySecurityScheme": {
        "description": "Tenant-scoped A2A Trust Plane API key.",
        "location": "header",
        "name": "X-A2A-Trust-Key"
      }
    }
  },
  "securityRequirements": [
    {
      "schemes": {
        "apiKey": {}
      }
    }
  ],
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json"
  ],
  "skills": [
    {
      "id": "readiness.scan",
      "name": "A2A Production Readiness",
      "description": "Assess an A2A agent card and optionally probe its declared interfaces.",
      "tags": [
        "readiness",
        "conformance",
        "security"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "conformance.assess_report",
      "name": "A2A TCK Report Assessment",
      "description": "Validate and recompute an official A2A TCK compatibility report without claiming independent execution.",
      "tags": [
        "conformance",
        "tck",
        "evidence"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "gateway.route",
      "name": "Governed A2A Gateway",
      "description": "Route a bounded request to a registered agent under tenant, schema, idempotency, and approval policy.",
      "tags": [
        "gateway",
        "policy",
        "routing"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "gateway.inspect",
      "name": "Gateway Execution Status",
      "description": "Inspect a caller-owned gateway execution without retrying an uncertain external action.",
      "tags": [
        "gateway",
        "status",
        "reconciliation"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "handoff.manage",
      "name": "Governed Agent Handoffs",
      "description": "Create and manage leased, fenced, approval-aware agent handoffs with completion evidence.",
      "tags": [
        "handoff",
        "authority",
        "audit"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "capsule.manage",
      "name": "Context Capsules",
      "description": "Create minimized, expiring, provenance-bound context capsules from registered transforms.",
      "tags": [
        "context",
        "privacy",
        "provenance"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "registry.manage",
      "name": "Private Agent Registry",
      "description": "Register, assess, compare, and revoke tenant-scoped agents and their policies.",
      "tags": [
        "registry",
        "discovery",
        "trust"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "evidence.run",
      "name": "Evidence Services",
      "description": "Produce deterministic document, claim-support, and policy-change evidence packets.",
      "tags": [
        "evidence",
        "verification",
        "diff"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "workflow.compose",
      "name": "Governed Workflows",
      "description": "Validate and run bounded agent workflows with exact data references, inherited approvals, and aggregate evidence.",
      "tags": [
        "workflow",
        "orchestration",
        "evidence"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "policy_packs.manage",
      "name": "Versioned Policy Packs",
      "description": "List, assess, and enforce versioned registration controls for common trust boundaries.",
      "tags": [
        "policy",
        "governance",
        "registration"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "audit.export",
      "name": "Approved Audit Export",
      "description": "Export signed, checkpointed audit batches to a configured external sink after exact approval.",
      "tags": [
        "audit",
        "export",
        "approval"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "onboarding.verify",
      "name": "Verified Agent Onboarding",
      "description": "Bind readiness, policy, and reported conformance evidence to an exact registration before committing it.",
      "tags": [
        "onboarding",
        "registry",
        "evidence"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "operations.assess_package",
      "name": "Agent Operations Readiness Pack",
      "description": "Assess declared operating controls and return a prioritized Trust Plane adoption bundle without claiming runtime verification.",
      "tags": [
        "operations",
        "assessment",
        "adoption"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "discovery.scan_candidates",
      "name": "Bounded Agent Discovery",
      "description": "Inspect caller-supplied public HTTPS Agent Cards and rank literal capability matches with readiness evidence.",
      "tags": [
        "discovery",
        "a2a",
        "qualification"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "city.catalog",
      "name": "Agent City Catalog",
      "description": "Discover The 825 services by capability, category, availability, and machine interface.",
      "tags": [
        "catalog",
        "discovery",
        "commerce"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "city.quote",
      "name": "Agent City Quote",
      "description": "Request a deterministic quote without invoking a provider or creating a charge.",
      "tags": [
        "quote",
        "budget",
        "commerce"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "city.prepare_invocation",
      "name": "Agent City Invocation Plan",
      "description": "Check service availability, configured price, delegated spend, and data sensitivity before invocation.",
      "tags": [
        "authorization",
        "routing",
        "receipt"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "demo.counselorai_continuity",
      "name": "Cross-Agent Continuity Proof",
      "description": "Run an isolated synthetic proof of checkpointing, provider failover, approval rebinding, independent verification, and audit integrity.",
      "tags": [
        "demo",
        "continuity",
        "evidence"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "demo.breadcrumbs_memory",
      "name": "Governed Memory Continuity Proof",
      "description": "Run an isolated synthetic proof of context minimization, public PII rejection, correction supersession, and audit integrity.",
      "tags": [
        "demo",
        "memory",
        "evidence"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "trial.assess",
      "name": "Multi-Agent Continuity Score",
      "description": "Score public interface readiness and declared continuity controls, preserve unverified runtime points, and recommend the shortest path to an observed recovery proof.",
      "tags": [
        "continuity",
        "handoff",
        "recovery",
        "assessment"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "continuity.report",
      "name": "Recorded Continuity Evidence",
      "description": "Calculate up to 30 runtime-evidence points from tenant-scoped handoff, recovery, approval, verification, and completion events.",
      "tags": [
        "continuity",
        "runtime",
        "recovery",
        "evidence"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "plan.status",
      "name": "Plan and Usage Status",
      "description": "Return the authenticated agent plan, monthly governed-operation usage, and machine-readable upgrade guidance.",
      "tags": [
        "plan",
        "usage",
        "entitlement"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "billing.create_checkout",
      "name": "Create Subscription Checkout",
      "description": "Create an idempotent subscription checkout for an eligible paid plan in the configured billing environment.",
      "tags": [
        "billing",
        "checkout",
        "entitlement"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "billing.status",
      "name": "Subscription Status",
      "description": "Return the authenticated agent subscription state and its latest evidence receipt.",
      "tags": [
        "billing",
        "subscription",
        "evidence"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "credential.rotate",
      "name": "Rotate Credential",
      "description": "Replace the current short-lived credential without extending its expiration or authority.",
      "tags": [
        "credential",
        "rotation",
        "security"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "credential.revoke_self",
      "name": "Revoke Credential",
      "description": "Immediately revoke the current short-lived credential and record the action.",
      "tags": [
        "credential",
        "revocation",
        "security"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "handoff_confirmed.create",
      "name": "HandoffConfirmed Create",
      "description": "Create a bounded metadata-only request for a named recipient.",
      "tags": [
        "handoff",
        "receipt",
        "pilot"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "handoff_confirmed.status",
      "name": "HandoffConfirmed Status",
      "description": "Read participant-scoped receipt status without claiming delivery or completion.",
      "tags": [
        "handoff",
        "status",
        "pilot"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "handoff_confirmed.receive",
      "name": "HandoffConfirmed Received",
      "description": "Record a recipient-authored receipt distinct from acceptance or completion.",
      "tags": [
        "handoff",
        "acknowledgment",
        "pilot"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "handoff_confirmed.accept",
      "name": "HandoffConfirmed Accepted",
      "description": "Record recipient acceptance after receipt.",
      "tags": [
        "handoff",
        "acceptance",
        "pilot"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "handoff_confirmed.working",
      "name": "HandoffConfirmed Working",
      "description": "Record that the recipient started work.",
      "tags": [
        "handoff",
        "progress",
        "pilot"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "handoff_confirmed.complete",
      "name": "HandoffConfirmed Completed Claim",
      "description": "Record a recipient-authored completion claim bound to an evidence digest.",
      "tags": [
        "handoff",
        "completion",
        "pilot"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "handoff_confirmed.confirm",
      "name": "HandoffConfirmed Sender Confirmation",
      "description": "Bind sender acceptance to the exact recipient completion receipt without claiming independent verification.",
      "tags": [
        "handoff",
        "confirmation",
        "pilot"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    },
    {
      "id": "handoff_confirmed.fail",
      "name": "HandoffConfirmed Failed",
      "description": "Record a recipient-authored bounded failure code.",
      "tags": [
        "handoff",
        "failure",
        "pilot"
      ],
      "inputModes": [
        "application/json"
      ],
      "outputModes": [
        "application/json"
      ],
      "securityRequirements": [
        {
          "schemes": {
            "apiKey": {}
          }
        }
      ]
    }
  ]
}