{"audit":{"version":"1.5","generated_at":"2026-11-10T00:20:21.298906+00:00","generated_by":"Agenstry","report_url":"https://agenstry.com/agents/alalanet.com","methodology_url":"https://agenstry.com/methodology","verifier_jwks_url":"https://agenstry.com/.well-known/jwks.json","subject":{"domain":"alalanet.com","name":"alalanet","url":"https://alalanet.com/.well-known/agent-card.json"}},"identity":{"provider":{"organization":"alalanet","url":"https://alalanet.com"},"registry_verification":null,"signature":{"signed":false,"signature_valid":null}},"protocol":{"version":"1.0","supports_streaming":false,"supports_push_notifications":false},"operational":{"live_state":"live","live_responds":true,"last_status_code":200,"last_elapsed_ms":54,"last_error":null},"track_record":{"first_seen":"2026-11-06T20:26:34.038103+00:00","last_checked":"2026-11-09T21:22:53.034606+00:00","last_seen_ok":"2026-11-09T21:22:53.034606+00:00","checks_total":6,"checks_ok":6,"uptime_pct":100.0,"uptime_window_days":30,"uptime_probes":1,"archived":false,"archived_reason":null},"conformance":{"score":65,"grade":"C","summary":"C-grade: usable but has clear conformance issues, review the breakdown below.","criteria":[{"key":"valid_card","label":"Valid AgentCard","points":10,"max_points":10,"status":"pass","detail":"Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification)."},{"key":"live_responds","label":"Live JSON-RPC","points":25,"max_points":25,"status":"pass","detail":"Endpoint responds to a negotiated A2A SendMessage probe (answers in ~77 ms)."},{"key":"protocol_version","label":"Protocol version","points":10,"max_points":10,"status":"pass","detail":"Declares A2A 1.0 with supportedInterfaces[] (current v1 card shape)."},{"key":"signature","label":"JWS signature","points":0,"max_points":10,"status":"info","detail":"Card is unsigned (most published agents are)."},{"key":"uptime","label":"Uptime track record","points":0,"max_points":15,"status":"info","detail":"Only 1 probe so far, need ≥5 for an uptime grade."},{"key":"skills","label":"Skill declaration","points":10,"max_points":10,"status":"pass","detail":"Declares 9 skills with structured metadata."},{"key":"verified_identity","label":"Verified Identity","points":5,"max_points":10,"status":"partial","detail":"Provider declared: alalanet (https://alalanet.com). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit."},{"key":"freshness","label":"Freshness + modern flags","points":5,"max_points":5,"status":"pass","detail":"declares 1 modern capability flag(s) (x402); seen in upstream source within 0d"},{"key":"security","label":"Security declaration","points":0,"max_points":5,"status":"info","detail":"Neither securitySchemes nor securityRequirements declared — how to authenticate is unstated."}]},"card_read":{"findings":[],"clean":true,"source_url":"https://alalanet.com/.well-known/agent-card.json"},"skills":[{"id":"install_check","name":"Check before installing","description":"Before installing an npm/PyPI package, GitHub repository, skill or MCP server: send the target as text (e.g. npx -y @playwright/mcp) or {\"target\": ...}. Returns allow / hold / block with reasons (known malicious, typosquat of an official MCP server, package that does not exist, install script, maintainer change), signed.","tags":["security","supply-chain","mcp"],"examples":["is it safe to install npx -y mcp-server-fetch"],"inputModes":[],"outputModes":[]},{"id":"check_repo_config","name":"Check a repository before opening it","description":"Before opening a GitHub repository in an agent or editor with its settings trusted: send {\"repo\": \"owner/name\", \"ref\": ...} or a github.com link as text. Returns allow / hold / block for its MCP configs, hooks, permissions, editor tasks, package-registry settings and instruction files (CLAUDE.md, AGENTS.md, rules, skills), signed. alalanet reads the files and runs nothing.","tags":["security","supply-chain","mcp"],"examples":["is it safe to open https://github.com/owner/repo in my agent"],"inputModes":[],"outputModes":[]},{"id":"preflight_payment","name":"Decide before paying","description":"Right before signing an x402 payment: send a data part {\"url\": ..., \"payment_required\": <PAYMENT-REQUIRED header or 402 JSON body>, \"max_usd\": 0.05}. Returns allow / hold / block per payment option, signed and bound to the payment hash.","tags":["x402","payments","trust"],"examples":["preflight this 402 before I pay"],"inputModes":[],"outputModes":[]},{"id":"check_service","name":"Check before you pay","description":"Status, advice, observed price and payTo vs catalogue for any x402 endpoint or MCP server URL. Send the URL as text, or a data part {\"url\": ..., \"live\": true} for a fresh signed receipt.","tags":["x402","mcp","payments","trust"],"examples":["check https://api.example.com/paid-endpoint","live check https://mcp.example.com/mcp"],"inputModes":[],"outputModes":[]},{"id":"connect_check","name":"Will this MCP server connect","description":"Before adding a remote MCP server to a client, or when it fails to connect: send {\"url\": ..., \"connect\": true} or ask in text. One live read and a verdict per client (Claude Code, claude.ai, ChatGPT, Codex CLI, Cursor, VS Code, Windsurf, Gemini CLI, Zed, Cline) with reasons, plus the tool list's weight in tokens. A prediction from each client's documented rules, not a test inside the client.","tags":["mcp","compatibility"],"examples":["will https://mcp.example.com/mcp connect from cursor?"],"inputModes":[],"outputModes":[]},{"id":"verify_tools","name":"Are these the tools it serves everyone","description":"After connecting to a remote MCP server: send {\"url\": ..., \"tools\": <the tools array from your tools/list>}. Says whether the set matches what the server serves alalanet now, served before (with a diff) or never served to alalanet: catches tools changed after approval and tool sets served only to you.","tags":["mcp","security"],"examples":["{\"url\": \"https://mcp.example.com/mcp\", \"tools\": [...]}"],"inputModes":[],"outputModes":[]},{"id":"find_service","name":"Find working services","description":"Search paid x402 endpoints and remote MCP servers by what they do; ranked by the open Trust Score, at most 2 per host. Send plain text or {\"query\": ...}.","tags":["discovery"],"examples":["web search","image generation"],"inputModes":[],"outputModes":[]},{"id":"check_agent","name":"Check another agent","description":"Passport and standing of an agent key from two-sided signed receipts. Send the 64-hex pubkey or {\"pubkey\": ...}.","tags":["identity","reputation"],"examples":["check agent 95ac63a6f99ce221d67af2ab5fe203d3650ee8bac486fe22e01ae74809a41ce2"],"inputModes":[],"outputModes":[]},{"id":"check_artifact","name":"Who signed this file","description":"Publisher and conflicts for a skill/MCP package by sha256. Send {\"sha256\": ...}.","tags":["supply-chain","security"],"examples":["who signed sha256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"],"inputModes":[],"outputModes":[]}],"provenance":[{"source":"cdp_discovery","first_seen":"2026-11-06T20:26:34.038103+00:00"},{"source":"agentic_market","first_seen":"2026-11-09T15:52:23.755931+00:00"},{"source":"recrawl_paid","first_seen":"2026-11-09T21:22:53.034606+00:00"}],"recent_probes":[{"fetched_at":"2026-11-09T21:22:53.034606+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":54,"live_responds":true}],"catalog_attestation":null,"operator_revenue_evidence":{"evidence_class":"operator_submitted","authenticity":{"rung":"no_operator_evidence","rank":0,"why":"No verifiable operator evidence has been submitted for this agent.","thresholds":{"min_independent_payers":3,"min_verified_usd":25.0},"engine_table":"agent_authenticity","merge_rule":"max(existing_rank, rank)"},"metric_metadata":{"provenance":"operator_submitted_evidence","confidence":"attested","coverage":{"numerator":0},"as_of":"2026-11-10T00:20:21.307943+00:00","definition":"Revenue proofs submitted by the verified owner and re-checked by Agenstry against the settlement chain or the operator's own Stripe account. Only independently confirmed proofs are counted."},"counts":{"retained":0,"verified":0,"unverifiable":0},"verified":{"gross_usd":0.0,"transactions":0,"independent_payers":0},"detail_url":"https://agenstry.com/api/agents/alalanet.com/evidence","dispute_url":"https://agenstry.com/agents/alalanet.com/dispute"},"verification_history":[]}