{"audit":{"version":"1.5","generated_at":"2026-10-17T16:01:43.211598+00:00","generated_by":"Agenstry","report_url":"https://agenstry.com/agents/api.bitrovas.ch","methodology_url":"https://agenstry.com/methodology","verifier_jwks_url":"https://agenstry.com/.well-known/jwks.json","subject":{"domain":"api.bitrovas.ch","name":"Bitrovas L402 Services","url":"https://api.bitrovas.ch/.well-known/agent-card.json"}},"identity":{"provider":{"organization":"Bitrovas","url":"https://bitcoin.bitrovas.ch"},"registry_verification":null,"signature":{"signed":false,"signature_valid":null}},"protocol":{"version":"1.0","supports_streaming":false,"supports_push_notifications":false},"operational":{"live_state":"live","live_responds":true,"last_status_code":200,"last_elapsed_ms":803,"last_error":null},"track_record":{"first_seen":"2026-10-17T14:22:33.320374+00:00","last_checked":"2026-10-17T14:22:33.320374+00:00","last_seen_ok":"2026-10-17T14:22:33.320374+00:00","checks_total":1,"checks_ok":1,"uptime_pct":100.0,"uptime_window_days":30,"uptime_probes":1,"archived":false,"archived_reason":null},"conformance":{"score":64,"grade":"C","summary":"C-grade: usable but has clear conformance issues, review the breakdown below.","criteria":[{"key":"valid_card","label":"Valid AgentCard","points":10,"max_points":10,"status":"pass","detail":"Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification)."},{"key":"live_responds","label":"Live JSON-RPC","points":25,"max_points":25,"status":"pass","detail":"Endpoint responds to a negotiated A2A SendMessage probe (answers in ~666 ms)."},{"key":"protocol_version","label":"Protocol version","points":10,"max_points":10,"status":"pass","detail":"Declares A2A 1.0 with supportedInterfaces[] (current v1 card shape)."},{"key":"signature","label":"JWS signature","points":0,"max_points":10,"status":"info","detail":"Card is unsigned (most published agents are)."},{"key":"uptime","label":"Uptime track record","points":0,"max_points":15,"status":"info","detail":"Only 1 probe so far, need ≥5 for an uptime grade."},{"key":"skills","label":"Skill declaration","points":10,"max_points":10,"status":"pass","detail":"Declares 7 skills with structured metadata."},{"key":"verified_identity","label":"Verified Identity","points":5,"max_points":10,"status":"partial","detail":"Provider declared: Bitrovas (https://bitcoin.bitrovas.ch). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit."},{"key":"freshness","label":"Freshness + modern flags","points":4,"max_points":5,"status":"pass","detail":"seen in upstream source within 0d"},{"key":"security","label":"Security declaration","points":0,"max_points":5,"status":"info","detail":"Neither securitySchemes nor securityRequirements declared — how to authenticate is unstated."}]},"card_read":{"findings":[],"clean":true,"source_url":"https://api.bitrovas.ch/.well-known/agent-card.json"},"skills":[{"id":"psbtcheck","name":"Bitrovas PSBT-Check","description":"Pre-sign check of an unsigned Bitcoin PSBT: recipients, amounts, change, fee/sat-vB, RBF, sighash, missing UTXO info, dust, address-poisoning lookalikes. Verdict ok|warn|danger, JSON + text DE/EN. Never signs or broadcasts. Endpoint: POST https://api.bitrovas.ch/v1/psbtcheck (also POST https://api.bitrovas.ch/v1/psbtcheck/task with {\"task\": \"<free text>\"}). Price: 21 sats per request, paid via L402 (Lightning). Input (application/json): psbt: unsigned PSBT v0, base64 or hex (required); expected_address: optional; expected_amount_sats: optional integer; network: optional mainnet|testnet|signet|regtest. Output (application/json): service, verdict ok|warn|danger, result (recipients, amounts, change, fee, findings), text_de, text_en. A2A (JSON-RPC, https://api.bitrovas.ch/a2a): SendMessage with a DataPart {\"skill\": \"psbtcheck\", \"input\": {...same fields as REST...}}; the task answers TASK_STATE_INPUT_REQUIRED with a DataPart {\"l402\": {macaroon, token, invoice, amountSats, paymentHash}}; pay, then SendMessage with the same taskId and a DataPart {\"l402\": {\"token\": ..., \"preimage\": ...}} to get TASK_STATE_COMPLETED with the result as artifact (DataPart).","tags":["bitrovas","l402","lightning","psbtcheck"],"examples":["{\"skill\":\"psbtcheck\",\"input\":{\"psbt\":\"cHNidP8B...\",\"expected_address\":\"bc1q...\",\"expected_amount_sats\":50000}}","REST: POST https://api.bitrovas.ch/v1/psbtcheck with a JSON body; answer the 402 invoice, then repeat with Authorization: L402 <token>:<preimage>"],"inputModes":["application/json"],"outputModes":["application/json"]},{"id":"poisoncheck","name":"Bitrovas PoisonCheck","description":"Address-poisoning check: compares the address you are about to send to (used) with the address you know (expected) and detects lookalike/vanity patterns for Bitcoin, EVM and Tron. Level poison|review|clear, JSON + text DE/EN. Single 21 sats; batch up to 50 addresses 21 + 5 sats per address. Pattern, not proof; not a send approval. Endpoint: POST https://api.bitrovas.ch/v1/poisoncheck (also POST https://api.bitrovas.ch/v1/poisoncheck/task with {\"task\": \"<free text>\"}). Price: 21 sats per request, paid via L402 (Lightning). Input (application/json): used: address to check (string) – or list of up to 50 addresses for batch; expected: address you know is correct (string; for batch also a list of the same length); pricing: {'single': 21, 'batch': '21 + 5 per address (max 50)'}. Output (application/json): verdict ok|warn|danger per address, similarity findings vs. expected/known addresses, text DE/EN. A2A (JSON-RPC, https://api.bitrovas.ch/a2a): SendMessage with a DataPart {\"skill\": \"poisoncheck\", \"input\": {...same fields as REST...}}; the task answers TASK_STATE_INPUT_REQUIRED with a DataPart {\"l402\": {macaroon, token, invoice, amountSats, paymentHash}}; pay, then SendMessage with the same taskId and a DataPart {\"l402\": {\"token\": ..., \"preimage\": ...}} to get TASK_STATE_COMPLETED with the result as artifact (DataPart).","tags":["bitrovas","l402","lightning","poisoncheck"],"examples":["{\"skill\":\"poisoncheck\",\"input\":{\"used\":\"bc1q...\",\"expected\":\"bc1q...\"}}","REST: POST https://api.bitrovas.ch/v1/poisoncheck with a JSON body; answer the 402 invoice, then repeat with Authorization: L402 <token>:<preimage>"],"inputModes":["application/json"],"outputModes":["application/json"]},{"id":"jsonrepair","name":"Bitrovas JSON Validate & Repair","description":"Validate and repair a JSON array of flat records (max 1000 rows): syntax repair (trailing commas, code fences, Python literals), whitespace trim, NULL normalization, duplicate removal, optional type standardization, e-mail check and JSON Schema (2020-12) validation with flag|drop. Returns cleaned JSON + machine-readable report. Deterministic; no data stored. Endpoint: POST https://api.bitrovas.ch/v1/jsonrepair (also POST https://api.bitrovas.ch/v1/jsonrepair/task with {\"task\": \"<free text>\"}). Price: 10 sats per request, paid via L402 (Lightning). Input (application/json): data: JSON array of flat objects, or {\"records\": [...]}, or a JSON string to repair (required, max 1000 rows); json_schema: optional JSON Schema 2020-12 applied per row; json_schema_action: optional flag|drop (default flag); options: optional DataCleanBot options, e.g. {\"operations\": [...], \"schema\": {col: type}, \"dedupe_keys\": [...]}. Output (application/json): repaired/cleaned JSON data plus a list of applied fixes. A2A (JSON-RPC, https://api.bitrovas.ch/a2a): SendMessage with a DataPart {\"skill\": \"jsonrepair\", \"input\": {...same fields as REST...}}; the task answers TASK_STATE_INPUT_REQUIRED with a DataPart {\"l402\": {macaroon, token, invoice, amountSats, paymentHash}}; pay, then SendMessage with the same taskId and a DataPart {\"l402\": {\"token\": ..., \"preimage\": ...}} to get TASK_STATE_COMPLETED with the result as artifact (DataPart).","tags":["bitrovas","l402","lightning","jsonrepair"],"examples":["{\"skill\":\"jsonrepair\",\"input\":{\"data\":\"[{'a': 1,},]\"}}","REST: POST https://api.bitrovas.ch/v1/jsonrepair with a JSON body; answer the 402 invoice, then repeat with Authorization: L402 <token>:<preimage>"],"inputModes":["application/json"],"outputModes":["application/json"]},{"id":"walletaddr","name":"Bitrovas Wallet-Adressen","description":"Watch-only address derivation from xpub/ypub/zpub/tpub or an output descriptor: receive + change addresses (configurable gap, max 1000) and ownership check of given addresses with derivation path. Offline, nothing stored. Private keys/seeds are rejected. Endpoint: POST https://api.bitrovas.ch/v1/walletaddr (also POST https://api.bitrovas.ch/v1/walletaddr/task with {\"task\": \"<free text>\"}). Price: 21 sats per request, paid via L402 (Lightning). Input (application/json): xpub: xpub/ypub/zpub/tpub/upub/vpub (account level) – or –; descriptor: output descriptor with * (e.g. wpkh([fp/84h/0h/0h]xpub/<0;1>/*)); addresses: optional list of addresses to check (max 50); script: optional override for xpub/tpub: p2pkh|p2wpkh|p2sh-p2wpkh|p2tr; gap: optional, addresses per chain (default 20, max 1000). Output (application/json): derived addresses (index, address, path), optional match result for a searched address. A2A (JSON-RPC, https://api.bitrovas.ch/a2a): SendMessage with a DataPart {\"skill\": \"walletaddr\", \"input\": {...same fields as REST...}}; the task answers TASK_STATE_INPUT_REQUIRED with a DataPart {\"l402\": {macaroon, token, invoice, amountSats, paymentHash}}; pay, then SendMessage with the same taskId and a DataPart {\"l402\": {\"token\": ..., \"preimage\": ...}} to get TASK_STATE_COMPLETED with the result as artifact (DataPart).","tags":["bitrovas","l402","lightning","walletaddr"],"examples":["{\"skill\":\"walletaddr\",\"input\":{\"xpub\":\"zpub...\",\"addresses\":[\"bc1q...\"]}}","REST: POST https://api.bitrovas.ch/v1/walletaddr with a JSON body; answer the 402 invoice, then repeat with Authorization: L402 <token>:<preimage>"],"inputModes":["application/json"],"outputModes":["application/json"]},{"id":"qrbill","name":"Bitrovas QR-Rechnung-Check","description":"Technical offline check of a Swiss QR-bill (SPC payload) or IBAN + reference: format, IBAN checksum, CH/LI, QR-IBAN vs reference type (QRR/SCOR/NON), QR-reference mod10, ISO 11649, amount/currency, mandatory fields, lengths, character set. Optional: compares the bill's IBAN with expected supplier IBAN(s) supplied by the customer (plain or SHA-256); mismatch = danger. Only checks structure and this comparison, not whether a bill is genuine. Verdict ok|warn|danger, DE/EN + JSON. Nothing stored or logged. Endpoint: POST https://api.bitrovas.ch/v1/qrbill (also POST https://api.bitrovas.ch/v1/qrbill/task with {\"task\": \"<free text>\"}). Price: 10 sats per request, paid via L402 (Lightning). Input (application/json): payload: QR-bill SPC payload text (all lines) – or –; iban: IBAN; reference: optional QRR/SCOR reference; amount: optional; currency: optional CHF|EUR; expected_iban: optional: expected supplier IBAN or list (max 20); normalized (no spaces, uppercase); expected_iban_sha256: optional: hex SHA-256 of normalized IBAN (no spaces, uppercase, ASCII) or list. Output (application/json): verdict ok|warn|danger, list of technical findings, IBAN comparison result if expected IBANs were supplied, text DE/EN. A2A (JSON-RPC, https://api.bitrovas.ch/a2a): SendMessage with a DataPart {\"skill\": \"qrbill\", \"input\": {...same fields as REST...}}; the task answers TASK_STATE_INPUT_REQUIRED with a DataPart {\"l402\": {macaroon, token, invoice, amountSats, paymentHash}}; pay, then SendMessage with the same taskId and a DataPart {\"l402\": {\"token\": ..., \"preimage\": ...}} to get TASK_STATE_COMPLETED with the result as artifact (DataPart).","tags":["bitrovas","l402","lightning","qrbill"],"examples":["{\"skill\":\"qrbill\",\"input\":{\"iban\":\"CH4431999123000889012\",\"expected_iban\":\"CH4431999123000889012\"}}","REST: POST https://api.bitrovas.ch/v1/qrbill with a JSON body; answer the 402 invoice, then repeat with Authorization: L402 <token>:<preimage>"],"inputModes":["application/json"],"outputModes":["application/json"]},{"id":"formatcheck","name":"Bitrovas FormatCheck","description":"Validate CSV, YAML, XML, TOML or JSON (data max 1 MiB, 1M elements). Price: 10 sats + 1 sat per started KB of data, free quote at POST /v1/formatcheck/quote. Converts to JSON (or flat JSON -> CSV); optional JSON Schema 2020-12 validation (local $ref only). Safe parsers (defusedxml, yaml.safe_load, tomllib), size and time limits, in-memory only. Invalid input = free 400 with error position. Nothing stored or logged. Endpoint: POST https://api.bitrovas.ch/v1/formatcheck (also POST https://api.bitrovas.ch/v1/formatcheck/task with {\"task\": \"<free text>\"}). Price: from 11 sats (10 + 1 per started KB), paid via L402 (Lightning). Input (application/json): data: input text (required, UTF-8, max 1 MiB); format: csv|yaml|xml|toml|json (required); action: optional validate (default) | to_json | to_csv (to_csv: format json, flat records); json_schema: optional JSON Schema 2020-12 for the parsed document (local $ref only, max 8 KB). Output (application/json): valid true|false, errors (line/path, message), converted output (JSON or CSV), optional JSON-Schema errors. A2A (JSON-RPC, https://api.bitrovas.ch/a2a): SendMessage with a DataPart {\"skill\": \"formatcheck\", \"input\": {...same fields as REST...}}; the task answers TASK_STATE_INPUT_REQUIRED with a DataPart {\"l402\": {macaroon, token, invoice, amountSats, paymentHash}}; pay, then SendMessage with the same taskId and a DataPart {\"l402\": {\"token\": ..., \"preimage\": ...}} to get TASK_STATE_COMPLETED with the result as artifact (DataPart). Max 1 MiB data; free price quote: POST https://api.bitrovas.ch/v1/formatcheck/quote.","tags":["bitrovas","l402","lightning","formatcheck"],"examples":["{\"skill\":\"formatcheck\",\"input\":{\"format\":\"yaml\",\"data\":\"a: 1\",\"action\":\"to_json\"}}","REST: POST https://api.bitrovas.ch/v1/formatcheck with a JSON body; answer the 402 invoice, then repeat with Authorization: L402 <token>:<preimage>"],"inputModes":["application/json"],"outputModes":["application/json"]},{"id":"timestamp","name":"Bitrovas Zeitstempel (OpenTimestamps)","description":"Bitcoin timestamp for a SHA-256 hash or Nostr event id via OpenTimestamps. Returns a pending .ots proof (base64) immediately; the free GET /v1/timestamp/<id> returns the upgraded proof and block height after confirmation (usually 1–12 h). Only the hash is sent, never the file. Endpoint: POST https://api.bitrovas.ch/v1/timestamp (also POST https://api.bitrovas.ch/v1/timestamp/task with {\"task\": \"<free text>\"}). Price: 21 sats per request, paid via L402 (Lightning). Input (application/json): hash: SHA-256 hex (64) of your file – or –; event_id: Nostr event id (hex, note1…, nevent1…); status: GET /v1/timestamp/<id> (free). Output (application/json): id, pending OpenTimestamps proof (.ots, base64), status_url (free GET /v1/timestamp/<id> for the upgraded proof). A2A (JSON-RPC, https://api.bitrovas.ch/a2a): SendMessage with a DataPart {\"skill\": \"timestamp\", \"input\": {...same fields as REST...}}; the task answers TASK_STATE_INPUT_REQUIRED with a DataPart {\"l402\": {macaroon, token, invoice, amountSats, paymentHash}}; pay, then SendMessage with the same taskId and a DataPart {\"l402\": {\"token\": ..., \"preimage\": ...}} to get TASK_STATE_COMPLETED with the result as artifact (DataPart).","tags":["bitrovas","l402","lightning","timestamp"],"examples":["{\"skill\":\"timestamp\",\"input\":{\"hash\":\"<sha256 hex, 64 chars>\"}}","REST: POST https://api.bitrovas.ch/v1/timestamp with a JSON body; answer the 402 invoice, then repeat with Authorization: L402 <token>:<preimage>"],"inputModes":["application/json"],"outputModes":["application/json"]}],"provenance":[{"source":"a2a_registry_org","first_seen":"2026-10-17T14:22:33.320374+00:00"}],"recent_probes":[{"fetched_at":"2026-10-17T14:22:33.320374+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":803,"live_responds":true}],"catalog_attestation":null,"operator_revenue_evidence":{"evidence_class":"operator_submitted","authenticity":{"rung":"no_operator_evidence","rank":0,"why":"No verifiable operator evidence has been submitted for this agent.","thresholds":{"min_independent_payers":3,"min_verified_usd":25.0},"engine_table":"agent_authenticity","merge_rule":"max(existing_rank, rank)"},"metric_metadata":{"provenance":"operator_submitted_evidence","confidence":"attested","coverage":{"numerator":0},"as_of":"2026-10-17T16:01:43.219146+00:00","definition":"Revenue proofs submitted by the verified owner and re-checked by Agenstry against the settlement chain or the operator's own Stripe account. Only independently confirmed proofs are counted."},"counts":{"retained":0,"verified":0,"unverifiable":0},"verified":{"gross_usd":0.0,"transactions":0,"independent_payers":0},"detail_url":"https://agenstry.com/api/agents/api.bitrovas.ch/evidence","dispute_url":"https://agenstry.com/agents/api.bitrovas.ch/dispute"},"verification_history":[],"signatures":[{"protected":"eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vYWdlbnN0cnkuY29tLy53ZWxsLWtub3duL2p3a3MuanNvbiIsImtpZCI6ImFnZW50ZmluZGVyLWVzMjU2LTEiLCJ0eXAiOiJKT1NFIn0","signature":"lPoucGZ5j8nWFr1rMJr88DWIiwOoD_S3KslyvVc9qayw6TtSs-Sm-fJWF4c5ozamUaQ4_4VA6X6wwGJYhI9RHA"}]}