{"audit":{"version":"1.4","generated_at":"2026-08-19T17:09:25.029985+00:00","generated_by":"Agenstry","report_url":"https://agenstry.com/agents/fullmakt.ai","methodology_url":"https://agenstry.com/methodology","verifier_jwks_url":"https://agenstry.com/.well-known/jwks.json","subject":{"domain":"fullmakt.ai","name":"fullmakt-a2a","url":"https://fullmakt.ai/.well-known/agent-card.json"}},"identity":{"provider":{"organization":null,"url":null},"registry_verification":null,"signature":{"signed":false,"signature_valid":null}},"protocol":{"version":"0.3.0","supports_streaming":false,"supports_push_notifications":false},"operational":{"live_state":"auth_required","live_responds":false,"last_status_code":200,"last_elapsed_ms":73,"last_error":null},"track_record":{"first_seen":"2026-08-17T07:16:24.405521+00:00","last_checked":"2026-08-19T09:25:28.584719+00:00","last_seen_ok":"2026-08-19T09:25:28.584719+00:00","checks_total":6,"checks_ok":6,"uptime_pct":100.0,"archived":false,"archived_reason":null},"conformance":{"score":61,"grade":"C","summary":"C-grade: usable but has clear conformance issues, review the breakdown below.","criteria":[{"key":"valid_card","label":"Valid AgentCard","points":10,"max_points":10,"status":"pass","detail":"Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification)."},{"key":"live_responds","label":"Live JSON-RPC","points":15,"max_points":25,"status":"partial","detail":"Endpoint requires auth, real agent but not anonymously callable."},{"key":"protocol_version","label":"Protocol version","points":5,"max_points":10,"status":"partial","detail":"Declares pre-1.0 A2A 0.3.0 (Google preview). Upgrade to v1.x for full points."},{"key":"signature","label":"JWS signature","points":0,"max_points":10,"status":"info","detail":"Card is unsigned (most published agents are)."},{"key":"uptime","label":"Uptime track record","points":15,"max_points":15,"status":"pass","detail":"6/6 probes succeeded (100% uptime)."},{"key":"skills","label":"Skill declaration","points":10,"max_points":10,"status":"pass","detail":"Declares 31 skills with structured metadata."},{"key":"verified_identity","label":"Verified Identity","points":0,"max_points":10,"status":"fail","detail":"No provider organisation declared. Anonymous agent."},{"key":"freshness","label":"Freshness + modern flags","points":4,"max_points":5,"status":"pass","detail":"seen in upstream source within 0d"},{"key":"security","label":"Security declaration","points":2,"max_points":5,"status":"partial","detail":"Declares 1 security scheme(s) but none use PKCE or mTLS."}]},"card_read":{"findings":[],"clean":true,"source_url":"https://fullmakt.ai/.well-known/agent-card.json"},"skills":[{"id":"workspace.get","name":"Get workspace","description":"Summary of the workspace this token manages.","tags":["WorkspaceRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{}}},{"id":"collection.list","name":"List collections","description":"List the collections in the workspace.","tags":["CollectionRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{}}},{"id":"collection.create","name":"Create collection","description":"Create a collection in the workspace.","tags":["CollectionWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"name":{"type":"string","description":"Collection name"},"description":{"type":"string","description":"Optional description"}},"required":["name"]}},{"id":"collection.get","name":"Get collection","description":"Full collection detail: items tree, variables, scripts.","tags":["CollectionRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"collectionId":{"type":"string","description":"Collection GUID"}},"required":["collectionId"]}},{"id":"collection.update","name":"Update collection","description":"Update name/description/auth/default environment/scripts.","tags":["CollectionWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"collectionId":{"type":"string","description":"Collection GUID"},"collection":{"type":"object","description":"UpdateCollectionRequest: name, description?, authConfigJson?, preRequestScript?, testScript?, defaultEnvironmentId?"}},"required":["collectionId","collection"]}},{"id":"collection.delete","name":"Delete collection","description":"Delete a collection and everything in it.","tags":["CollectionWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"collectionId":{"type":"string","description":"Collection GUID"}},"required":["collectionId"]}},{"id":"item.create","name":"Create item","description":"Create a folder or request (HTTP/GraphQL/WebSocket/gRPC/MCP) in a collection.","tags":["ItemWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"collectionId":{"type":"string","description":"Collection GUID"},"item":{"type":"object","description":"CreateCollectionItemRequest: itemType, name, description?, parentItemId?, protocolType?, request?, graphQlRequest?, webSocketRequest?, grpcRequest?, mcpRequest?"}},"required":["collectionId","item"]}},{"id":"item.get","name":"Get item","description":"Fetch one item with its request definition and children.","tags":["CollectionRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"itemId":{"type":"string","description":"Item GUID"}},"required":["itemId"]}},{"id":"item.update","name":"Update item","description":"Update an item's name, request definition and scripts.","tags":["ItemWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"itemId":{"type":"string","description":"Item GUID"},"item":{"type":"object","description":"UpdateCollectionItemRequest payload"}},"required":["itemId","item"]}},{"id":"item.delete","name":"Delete item","description":"Delete an item (and its children).","tags":["ItemWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"itemId":{"type":"string","description":"Item GUID"}},"required":["itemId"]}},{"id":"item.move","name":"Move item","description":"Re-parent and/or re-order an item within its collection.","tags":["ItemWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"itemId":{"type":"string","description":"Item GUID"},"newParentId":{"type":"string","description":"New parent item GUID, omit for root"},"newSortOrder":{"type":"integer","description":"New sort position"}},"required":["itemId","newSortOrder"]}},{"id":"environment.list","name":"List environments","description":"List the workspace's environments.","tags":["EnvironmentRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{}}},{"id":"environment.create","name":"Create environment","description":"Create an environment with variables. Variables may reference existing vault entries (vault://local/<name>) but LLM provider credentials cannot be set over A2A.","tags":["EnvironmentWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"name":{"type":"string","description":"Environment name"},"variables":{"type":"array","description":"Variables: {key, initialValue, currentValue, enabled}"}},"required":["name"]}},{"id":"environment.update","name":"Update environment","description":"Rename an environment and/or replace its variables. Any stored LLM credential config is preserved untouched.","tags":["EnvironmentWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"environmentId":{"type":"string","description":"Environment GUID"},"name":{"type":"string","description":"Environment name"},"variables":{"type":"array","description":"Replacement variables"}},"required":["environmentId","name"]}},{"id":"environment.delete","name":"Delete environment","description":"Delete an environment.","tags":["EnvironmentWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"environmentId":{"type":"string","description":"Environment GUID"}},"required":["environmentId"]}},{"id":"globals.get","name":"Get global variables","description":"List the workspace's global variables.","tags":["EnvironmentRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{}}},{"id":"globals.set","name":"Set global variables","description":"Replace the workspace's global variables.","tags":["EnvironmentWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"variables":{"type":"array","description":"Variables: {key, initialValue, currentValue, enabled}"}},"required":["variables"]}},{"id":"policy.get","name":"Get collection policy","description":"Read the policy document governing broker calls to a collection.","tags":["PolicyRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"collectionId":{"type":"string","description":"Collection GUID"}},"required":["collectionId"]}},{"id":"policy.set","name":"Set collection policy","description":"Set the policy document (hardDeny / requireApproval / behavior rules) for a collection.","tags":["PolicyWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"collectionId":{"type":"string","description":"Collection GUID"},"policyJson":{"type":"string","description":"The policy document as a JSON string"}},"required":["collectionId","policyJson"]}},{"id":"approval.list","name":"List pending approvals","description":"List approvals awaiting a human decision. Deciding them is human-only.","tags":["ApprovalRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"status":{"type":"string","description":"Pending|Approved|Rejected|Expired|Used"},"limit":{"type":"integer","description":"Max rows (default 100)"}}}},{"id":"principal.list","name":"List agent principals","description":"List the account's agent principals. Principals are account-level identities (not workspace-scoped), so this spans the owner's whole account.","tags":["PrincipalRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{}}},{"id":"principal.create","name":"Create agent principal","description":"Create a named account-level agent identity for execution-side auditing and policy.","tags":["PrincipalWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"name":{"type":"string","description":"Principal name"}},"required":["name"]}},{"id":"client.list","name":"List execution clients","description":"List account-level OAuth clients for the remote MCP execution surface (no secrets returned).","tags":["ClientRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{}}},{"id":"client.create","name":"Create execution client","description":"Create an OAuth client scoped to collections in this workspace. The secret is returned exactly once.","tags":["ClientWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"principalId":{"type":"string","description":"Principal GUID"},"collectionIds":{"type":"array","description":"Collection GUIDs the client may scope tokens to"}},"required":["principalId","collectionIds"]}},{"id":"vault.listEntries","name":"List vault entry references","description":"Metadata for existing vault entries (names + vault://local/<name> references). Values are never returned, and secrets can only be created, rotated or deleted by a human in the UI.","tags":["VaultRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{}}},{"id":"audit.list","name":"Query the audit trail","description":"Recent broker/A2A audit entries for this account.","tags":["AuditRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"collectionId":{"type":"string","description":"Filter by collection GUID"},"surface":{"type":"string","description":"Filter by surface, e.g. 'a2a'"},"limit":{"type":"integer","description":"Max rows (default 100)"}}}},{"id":"collection.import","name":"Import Postman collection","description":"Import a Postman v2.1 collection JSON into the workspace.","tags":["ImportExport"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"json":{"type":"string","description":"The Postman collection JSON"}},"required":["json"]}},{"id":"collection.export","name":"Export Postman collection","description":"Export a collection as Postman v2.1 JSON.","tags":["ImportExport"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"collectionId":{"type":"string","description":"Collection GUID"}},"required":["collectionId"]}},{"id":"discovery.probe","name":"Probe an API surface","description":"Run the discovery ladder (OpenAPI/GraphQL/MCP/A2A) against a URL and return the normalized operations and auth summary. Reads only — persists nothing.","tags":["DiscoveryRun"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"url":{"type":"string","description":"Absolute http(s) URL of the API/server to probe"}},"required":["url"]}},{"id":"discovery.generate","name":"Generate a collection from a URL","description":"Discover an API and generate a persisted, authenticated collection wired to credential references (never plaintext secrets). Same pipeline as the REST generate endpoint.","tags":["CollectionWrite"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{"url":{"type":"string","description":"Absolute http(s) URL of the API to generate from"},"environmentId":{"type":"string","description":"Environment GUID providing the LLM config"},"hint":{"type":"string","description":"Optional intent hint to filter/name endpoints"}},"required":["url","environmentId"]}},{"id":"grant.list","name":"List upstream OAuth grant references","description":"Metadata for existing upstream OAuth grants (names + oauth://<name> references, provider, scopes, status). Secrets and tokens are never returned; grants are created, connected and deleted by a human in the UI.","tags":["GrantRead"],"examples":[],"inputModes":["application/json"],"outputModes":["application/json"],"inputSchema":{"type":"object","properties":{}}}],"provenance":[{"source":"mcp_registry","first_seen":"2026-08-17T07:16:24.405521+00:00"}],"recent_probes":[{"fetched_at":"2026-08-19T09:25:28.584719+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":73,"live_responds":false},{"fetched_at":"2026-08-19T01:24:45.066758+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":50,"live_responds":false},{"fetched_at":"2026-08-18T18:04:45.826702+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":50,"live_responds":false},{"fetched_at":"2026-08-18T06:23:18.296986+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":51,"live_responds":false},{"fetched_at":"2026-08-18T01:43:56.407579+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":54,"live_responds":false},{"fetched_at":"2026-08-17T07:16:24.405521+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":63,"live_responds":false}],"catalog_attestation":null,"operator_revenue_evidence":{"evidence_class":"operator_submitted","authenticity":{"rung":"no_operator_evidence","rank":0,"why":"No verifiable operator evidence has been submitted for this agent.","thresholds":{"min_independent_payers":3,"min_verified_usd":25.0},"engine_table":"agent_authenticity","merge_rule":"max(existing_rank, rank)"},"metric_metadata":{"provenance":"operator_submitted_evidence","confidence":"attested","coverage":{"numerator":0},"as_of":"2026-08-19T17:09:25.037743+00:00","definition":"Revenue proofs submitted by the verified owner and re-checked by Agenstry against the settlement chain or the operator's own Stripe account. Only independently confirmed proofs are counted."},"counts":{"retained":0,"verified":0,"unverifiable":0},"verified":{"gross_usd":0.0,"transactions":0,"independent_payers":0},"detail_url":"https://agenstry.com/api/agents/fullmakt.ai/evidence","dispute_url":"https://agenstry.com/agents/fullmakt.ai/dispute"},"verification_history":[],"signatures":[{"protected":"eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vYWdlbnN0cnkuY29tLy53ZWxsLWtub3duL2p3a3MuanNvbiIsImtpZCI6ImFnZW50ZmluZGVyLWVzMjU2LTEiLCJ0eXAiOiJKT1NFIn0","signature":"6F9x7oH_cQ-upCGLAYbojJJig-Nk_el3XaipXKcKc-DZXQyKITHc6_0aMUikZnPYfz6dgfFZtxBofBcasUJsfw"}]}