{"domain":"onyx-actions.onrender.com","count":11,"changes":[{"captured_at":"2026-07-03T22:31:21","card_hash":"e0646554b01c423ef9f35a5f4200c7116bbfe23ff2cade477bd72c9089298818","previous_card_hash":"3fbe14fe3937e500085a5183959dee8e93984aadd6d8e6c083bcbdf6742fa610","diff":{"skills_added":[{"id":"onyx_ai_visibility","name":"Ai Visibility","description":"AI answer-engine visibility (GEO) oracle. Give a brand/product (+ optional category and competitors); get a SIGNED reading of how a live web-grounded answer engine represents it right now — presence, whether it's in the 'best <category>' re","tags":["data","signed-data","ground-truth","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_market_rank","name":"Market Rank","description":"Signed, conflict-free rating of any agent/x402 service — 'Moody's for the agentic web'. Point it at a URL; it probes observable reality (live, discoverable, payable, breadth, transparency) and returns a 0-100 rating + A-F grade, Ed25519-sig","tags":["data","signed-data","ground-truth","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_research_intel","name":"Research Intel","description":"Research intel — has someone solved X already? Queries 240M+ academic works via OpenAlex (includes arXiv preprints, conference papers, journal articles), ranks by citation count + recency + relevance, returns top N papers with one-line abst","tags":["data","signed-data","ground-truth","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_retail_price_check","name":"Retail Price Check","description":"Ground-truth retail oracle. Give a product URL; get the real current price, currency, and in-stock state as actually fetched now — with the extraction source (JSON-LD / OpenGraph / microdata) as evidence. Covers the long tail of no-API shop","tags":["data","signed-data","ground-truth","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"rhinogent_verify_counterparty","name":"Rhinogent Verify Counterparty","description":"Know-your-counterparty for agents. Before your agent pays a merchant, get Ed25519-signed raw facts about who it's paying: domain registration age, live TLS cert, reachability + off-domain redirects, brand-impersonation similarity, and obser","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null}],"skills_removed":[],"skills_changed":[],"fields_changed":[],"other_changed":false,"is_empty":false,"human_summary":"added 5 skills"}},{"captured_at":"2026-06-27T19:55:46","card_hash":"3fbe14fe3937e500085a5183959dee8e93984aadd6d8e6c083bcbdf6742fa610","previous_card_hash":"6201e5493584d1551f03e6c17f8bb529b4d275fbb4d5f4f2def475258eb1d442","diff":{"skills_added":[],"skills_removed":[],"skills_changed":[],"fields_changed":[{"field":"protocolVersion","before":"0.3.0","after":null},{"field":"supportedInterfaces","before":null,"after":[{"url":"https://onyx-actions.onrender.com/a2a","protocolBinding":"HTTP+JSON","protocolVersion":"1.0"},{"url":"https://onyx-actions.onrender.com/a2a","protocolBinding":"JSONRPC","protocolVersion":"1.0"},{"url":"https://onyx-actions.onrender.com/v1/","protocolBinding":"HTTP+JSON","protocolVersion":"1.0"}]},{"field":"capabilities","before":{"streaming":false,"pushNotifications":false,"stateTransitionHistory":false,"extensions":[{"uri":"https://onyx-actions.onrender.com/ext/usage-rights/v0","description":"usage-rights-envelope/v0 — signed, hash-bound declaration of what a buyer may do with a purchased output (resale/redistribute/derivatives/retrain/cache_ttl). Data-only: envelope rides Artifact.metadata.usage_rights or the X-Onyx-Rights HTTP header.","required":false,"params":{"spec":"usage-rights-envelope/v0","free_verify":"https://onyx-actions.onrender.com/verify","policy":"https://onyx-actions.onrender.com/.well-known/rights.json"}}]},"after":{"streaming":false,"pushNotifications":false,"stateTransitionHistory":false,"extensions":[{"uri":"https://github.com/google-agentic-commerce/ap2/tree/v0.1","description":"Onyx participates in AP2 agentic-payment flows as a merchant: agents pay Onyx for signed verification under an AP2 Cart Mandate.","required":false,"params":{"roles":["merchant"]}},{"uri":"https://github.com/google-a2a/a2a-x402/v0.1","description":"Supports payments using the x402 protocol for on-chain settlement (USDC on Base). Activate via the X-A2A-Extensions header.","required":false},{"uri":"https://onyx-actions.onrender.com/ext/usage-rights/v0","description":"usage-rights-envelope/v0 — signed, hash-bound declaration of what a buyer may do with a purchased output (resale/redistribute/derivatives/retrain/cache_ttl). Data-only: envelope rides Artifact.metadata.usage_rights or the X-Onyx-Rights HTTP header.","required":false,"params":{"spec":"usage-rights-envelope/v0","free_verify":"https://onyx-actions.onrender.com/verify","policy":"https://onyx-actions.onrender.com/.well-known/rights.json"}}]}}],"other_changed":false,"is_empty":false,"human_summary":"protocolVersion 0.3.0 → ∅ · supportedInterfaces ∅ → https://onyx-actions.onrender.com/a2a (H · capabilities extensions, pushNotifications, stateTran → extensions, pushNotifications, stateTran"}},{"captured_at":"2026-06-23T01:32:12","card_hash":"66a40bb8609a1897389e35fdcef4604f90683ba95cbf02f2b3797529ac80354c","previous_card_hash":"4c8e69c645955c496519e67825bb80ef498c44bdd26d7731045cb3f82e5caba4","diff":{"skills_added":[],"skills_removed":[],"skills_changed":[],"fields_changed":[{"field":"provider","before":{"organization":"Onyx Protocol","url":"https://onyxprotocol.io"},"after":{"organization":"Onyx Protocol","url":"https://onyx-actions.onrender.com"}}],"other_changed":true,"is_empty":false,"human_summary":"provider Onyx Protocol → Onyx Protocol"}},{"captured_at":"2026-06-22T15:50:53","card_hash":"4c8e69c645955c496519e67825bb80ef498c44bdd26d7731045cb3f82e5caba4","previous_card_hash":"486a9820554a7feb4085a2c503a7d6e48d2ce259192bbb1e9151653c0f5e7c47","diff":{"skills_added":[],"skills_removed":[],"skills_changed":[],"fields_changed":[{"field":"description","before":"The independent trust layer for the agentic web — the signed verdict an agent checks BEFORE it transacts. Onyx verifies merchants, retail prices, contracts, and counterparty agents and returns Ed25519-signed FACTS any third party can verify offline (tamper -> rejected). Neutral by design: Onyx earns nothing from any transaction, rail, or marketplace, so it can grade what the conflicted incumbents structurally cannot. Facts, not judgments.","after":"The independent trust & verification layer for the agentic web — the signed check an AI agent runs BEFORE it pays or transacts. Returns a hard PROCEED / REVIEW / HOLD clearance plus Ed25519-signed FACTS any third party can verify offline (tamper -> rejected). Neutral by design — earns nothing from any tx, so it grades what conflicted incumbents structurally cannot. Facts, not judgments."}],"other_changed":true,"is_empty":false,"human_summary":"description The independent trust layer for the agen → The independent trust & verification lay"}},{"captured_at":"2026-06-22T03:12:33","card_hash":"333f551c250e304e649e1c84fbdba63dd62471e7556bc85f25cbb1b4b12aba8c","previous_card_hash":"3d026130aaff0e5bca1de41d30cffd0d04b8407853fc007662c70d447bfd21b3","diff":{"skills_added":[],"skills_removed":[{"id":"onyx_agent_audit_trail","name":"Agent Audit Trail","description":"Full payment + action audit trail for any agent wallet on Base. Returns every USDC outflow with resolved x402 destination, tool name where known, timestamp, tx hash, cumulative spend, velocity, and behavioral risk flags. The audit log every","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_agent_reputation","name":"Agent Reputation","description":"Vet another AI agent before you trust it — via the live ERC-8004 registries on Base. Give an agent's ERC-8004 id; get its on-chain identity (is it registered? owner), its verified receiving wallet, its AgentCard URI, and its reputation summ","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_aml_screen","name":"Aml Screen","description":"KYC/AML sanctions + risk screen for any EVM address. Returns OFAC sanctions hit (via Chainalysis on-chain oracle), 0-100 risk score, verdict (sanctioned/safe/caution/high_risk/blocked), and ranked risk_factors (address age, transaction thro","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_approval_guard","name":"Approval Guard","description":"Pre-approval firewall — the safety check before your agent signs a token approve(). Give the spender (and optionally the amount + token); get a SIGNED ALLOW/REVIEW/BLOCK verdict: is the amount unlimited (the #1 drain vector — we recommend a","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_base_contract_verify","name":"Base Contract Verify","description":"Contract verification + ABI metadata for any Base address. Returns is_verified, contract name, compiler version, language, optimization, ABI entry count, license, source code size. Auto-detects EIP-1967/OZ/UUPS proxies and resolves to the i","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_base_token_risk_scan","name":"Base Token Risk Scan","description":"Risk-scan any ERC-20 token on Base mainnet. Returns ownership status (renounced or active owner address), mint authority (still mintable?), top-1 / top-10 holder concentration via balanceOf probes, contract age in days, basic honeypot signa","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_browser_screenshot","name":"Browser Screenshot","description":"Capture a PNG screenshot of the current CDP-controlled Chrome page and return it as base64. Use to feed a vision-LLM (Claude / GPT-4V) for screen-understanding agents, or to archive an action's visual result. Returns also the page title, UR","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_fact_check","name":"Fact Check","description":"Fact-check any claim by fetching real-time web evidence. Returns supporting sources, contradicting sources, a 0-100 confidence score, and a short summary. Use for prediction-market resolvers, news-fact agents, journalist-bot pipelines, or a","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_geo_verify","name":"Geo Verify","description":"Geo ground-truth oracle. Give a URL (optionally an expected price / currency / keyword); get what a real regional vantage actually sees — final URL after geo-redirects, region price + currency, geo-block / 'not available in your country' wa","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_kya_verify","name":"Kya Verify","description":"Verify an Onyx Protocol KYA (Know Your Agent) credential. Pass a credential id (e.g. 'kya_01KSHZ...'); returns ok + scope + spend cap + issuer + revocation status. Use to gate paid tool access, audit agent operations, or compose with x402 s","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_mcp_oauth_audit","name":"Mcp Oauth Audit","description":"OAuth 2.1 + RFC 7591 DCR compliance audit for any MCP server. Probes the 5 standard discovery + registration + token endpoints, validates each against the relevant RFC, returns a composite 0-100 score and remediation list. Free tier — usefu","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_solana_token_risk_scan","name":"Solana Token Risk Scan","description":"Rug-vector risk scan for any SPL token on Solana mainnet. Checks mint authority (active = can mint unlimited supply), freeze authority (active = can freeze any holder's wallet), top-10 holder concentration (whale risk), supply rationality, ","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null}],"skills_changed":[],"fields_changed":[],"other_changed":false,"is_empty":false,"human_summary":"removed 12 skills"}},{"captured_at":"2026-06-21T20:33:09","card_hash":"3d026130aaff0e5bca1de41d30cffd0d04b8407853fc007662c70d447bfd21b3","previous_card_hash":"428b4f1e4f8ed1e6c9627df98f5b417069320fc57ad001d3997f61231026ed6c","diff":{"skills_added":[{"id":"onyx_agent_verify","name":"Agent Verify","description":"Signed agent liveness + authenticity oracle. Give an A2A agent's card URL or endpoint; Onyx sends two distinct challenge messages and reports whether it is ALIVE (different, on-topic replies), HOLLOW (same canned string to both — passes reg","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null}],"skills_removed":[],"skills_changed":[],"fields_changed":[],"other_changed":false,"is_empty":false,"human_summary":"added 1 skill"}},{"captured_at":"2026-06-20T00:51:18","card_hash":"428b4f1e4f8ed1e6c9627df98f5b417069320fc57ad001d3997f61231026ed6c","previous_card_hash":"cf12b871fd36ad9f7fb9d365f718057a678a26cc068db573aef26bc77969dc9b","diff":{"skills_added":[],"skills_removed":[],"skills_changed":[],"fields_changed":[],"other_changed":true,"is_empty":false,"human_summary":"internal fields changed"}},{"captured_at":"2026-06-17T03:04:35","card_hash":"cf12b871fd36ad9f7fb9d365f718057a678a26cc068db573aef26bc77969dc9b","previous_card_hash":"aaf4edac9191d0cd1a8f76515dbb4d86b1ac7f2b16fdb1836dd6f44a7cffb435","diff":{"skills_added":[{"id":"onyx_token_risk","name":"Token Risk","description":"Signed token-security oracle. Give a token contract (and chain); get the real on-chain risk facts as read right now — honeypot status, buy/sell tax, mintable, ownership-reclaim, transfer-pausable, proxy, LP-lock, holder count — plus a trans","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null}],"skills_removed":[],"skills_changed":[],"fields_changed":[],"other_changed":true,"is_empty":false,"human_summary":"added 1 skill"}},{"captured_at":"2026-06-16T20:42:50","card_hash":"aaf4edac9191d0cd1a8f76515dbb4d86b1ac7f2b16fdb1836dd6f44a7cffb435","previous_card_hash":"9b80e04d2c9223615129b9441a46d8cffb23f713c976f7510f701b6c20f479b1","diff":{"skills_added":[],"skills_removed":[],"skills_changed":[],"fields_changed":[{"field":"description","before":"The security & trust layer for the agentic web. Signed, pre-transaction security checks over x402: recipient firewall, contract audit, ERC-8004 agent reputation, AML/sanctions, and a one-call secure-payment clearance. Every verdict Ed25519-signed.","after":"The independent trust layer for the agentic web — the signed verdict an agent checks BEFORE it transacts. Onyx verifies merchants, retail prices, contracts, and counterparty agents and returns Ed25519-signed FACTS any third party can verify offline (tamper -> rejected). Neutral by design: Onyx earns nothing from any transaction, rail, or marketplace, so it can grade what the conflicted incumbents structurally cannot. Facts, not judgments."},{"field":"url","before":"https://onyx-actions.onrender.com","after":"https://onyx-actions.onrender.com/a2a"}],"other_changed":false,"is_empty":false,"human_summary":"description The security & trust layer for the agent → The independent trust layer for the agen · url https://onyx-actions.onrender.com → https://onyx-actions.onrender.com/a2a"}},{"captured_at":"2026-06-12T22:43:43","card_hash":"9b80e04d2c9223615129b9441a46d8cffb23f713c976f7510f701b6c20f479b1","previous_card_hash":"ad07a9dc42c38f0058743644b1fb76d6728772dc38a9746ed2e2e7e64ed8e92d","diff":{"skills_added":[],"skills_removed":[],"skills_changed":[],"fields_changed":[{"field":"capabilities","before":{"streaming":false,"pushNotifications":false,"stateTransitionHistory":false},"after":{"streaming":false,"pushNotifications":false,"stateTransitionHistory":false,"extensions":[{"uri":"https://onyx-actions.onrender.com/ext/usage-rights/v0","description":"usage-rights-envelope/v0 — signed, hash-bound declaration of what a buyer may do with a purchased output (resale/redistribute/derivatives/retrain/cache_ttl). Data-only: envelope rides Artifact.metadata.usage_rights or the X-Onyx-Rights HTTP header.","required":false,"params":{"spec":"usage-rights-envelope/v0","free_verify":"https://onyx-actions.onrender.com/verify","policy":"https://onyx-actions.onrender.com/.well-known/rights.json"}}]}}],"other_changed":true,"is_empty":false,"human_summary":"capabilities none → extensions, pushNotifications, stateTran"}},{"captured_at":"2026-06-11T21:47:55","card_hash":"ad07a9dc42c38f0058743644b1fb76d6728772dc38a9746ed2e2e7e64ed8e92d","previous_card_hash":null,"diff":{"skills_added":[{"id":"onyx_agent_audit_trail","name":"Agent Audit Trail","description":"Full payment + action audit trail for any agent wallet on Base. Returns every USDC outflow with resolved x402 destination, tool name where known, timestamp, tx hash, cumulative spend, velocity, and behavioral risk flags. The audit log every","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_agent_reputation","name":"Agent Reputation","description":"Vet another AI agent before you trust it — via the live ERC-8004 registries on Base. Give an agent's ERC-8004 id; get its on-chain identity (is it registered? owner), its verified receiving wallet, its AgentCard URI, and its reputation summ","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_aml_screen","name":"Aml Screen","description":"KYC/AML sanctions + risk screen for any EVM address. Returns OFAC sanctions hit (via Chainalysis on-chain oracle), 0-100 risk score, verdict (sanctioned/safe/caution/high_risk/blocked), and ranked risk_factors (address age, transaction thro","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_approval_guard","name":"Approval Guard","description":"Pre-approval firewall — the safety check before your agent signs a token approve(). Give the spender (and optionally the amount + token); get a SIGNED ALLOW/REVIEW/BLOCK verdict: is the amount unlimited (the #1 drain vector — we recommend a","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_attestation_verify","name":"Attestation Verify","description":"Verify an Onyx-signed security verdict. Paste back any result from an Onyx tool (the full JSON including its onyx_attestation block); get a cryptographic verdict: is the Ed25519 signature valid, was it signed by Onyx (kid), and has any fiel","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_base_contract_verify","name":"Base Contract Verify","description":"Contract verification + ABI metadata for any Base address. Returns is_verified, contract name, compiler version, language, optimization, ABI entry count, license, source code size. Auto-detects EIP-1967/OZ/UUPS proxies and resolves to the i","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_base_token_risk_scan","name":"Base Token Risk Scan","description":"Risk-scan any ERC-20 token on Base mainnet. Returns ownership status (renounced or active owner address), mint authority (still mintable?), top-1 / top-10 holder concentration via balanceOf probes, contract age in days, basic honeypot signa","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_browser_screenshot","name":"Browser Screenshot","description":"Capture a PNG screenshot of the current CDP-controlled Chrome page and return it as base64. Use to feed a vision-LLM (Claude / GPT-4V) for screen-understanding agents, or to archive an action's visual result. Returns also the page title, UR","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_contract_audit","name":"Contract Audit","description":"Full smart-contract security audit for any Base address — source + DEPLOYED reality + AI, SIGNED. Fetches verified source, runs curated static vuln detectors (tx.origin auth, delegatecall, selfdestruct, unchecked calls, unprotected init, ow","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_fact_check","name":"Fact Check","description":"Fact-check any claim by fetching real-time web evidence. Returns supporting sources, contradicting sources, a 0-100 confidence score, and a short summary. Use for prediction-market resolvers, news-fact agents, journalist-bot pipelines, or a","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_geo_verify","name":"Geo Verify","description":"Geo ground-truth oracle. Give a URL (optionally an expected price / currency / keyword); get what a real regional vantage actually sees — final URL after geo-redirects, region price + currency, geo-block / 'not available in your country' wa","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_kya_verify","name":"Kya Verify","description":"Verify an Onyx Protocol KYA (Know Your Agent) credential. Pass a credential id (e.g. 'kya_01KSHZ...'); returns ok + scope + spend cap + issuer + revocation status. Use to gate paid tool access, audit agent operations, or compose with x402 s","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_mcp_oauth_audit","name":"Mcp Oauth Audit","description":"OAuth 2.1 + RFC 7591 DCR compliance audit for any MCP server. Probes the 5 standard discovery + registration + token endpoints, validates each against the relevant RFC, returns a composite 0-100 score and remediation list. Free tier — usefu","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_merchant_fact_check","name":"Merchant Fact Check","description":"Pre-checkout merchant fact oracle. Give a storefront domain (optionally the brand you believe it is, and an expected price); get Ed25519-signed raw observations: domain registration age + registrar (RDAP), live TLS certificate age + issuer,","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_secure_payment","name":"Secure Payment","description":"Secure-transaction RAIL: one signed clearance before an agent sends funds. Give recipient + amount (and optionally a contract address or counterparty ERC-8004 agent id); Onyx runs the full security stack — recipient firewall, contract audit","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_signature_guard","name":"Signature Guard","description":"Pre-signature firewall for OFF-CHAIN drains — the check before your agent signs an EIP-712 typed-data message (Permit, Permit2, Seaport order). These drain a wallet with no on-chain approval: the signature itself is the authorization. Give ","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_solana_token_risk_scan","name":"Solana Token Risk Scan","description":"Rug-vector risk scan for any SPL token on Solana mainnet. Checks mint authority (active = can mint unlimited supply), freeze authority (active = can freeze any holder's wallet), top-10 holder concentration (whale risk), supply rationality, ","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_tx_guard","name":"Tx Guard","description":"Pre-payment security firewall. Give the recipient address your agent is about to pay (Base); get a SIGNED ALLOW/REVIEW/BLOCK verdict + risk score from real on-chain checks: EOA-vs-contract, contract code/verification, account age (tx count)","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_verify_explain","name":"Verify Explain","description":"Diagnose a failing x402 v2 /verify. Decodes a captured X-PAYMENT header, runs 10 rules (decode, schema, network/asset/payTo match, value sufficiency, EIP-3009 timing, signature shape, scheme) against expected paymentRequirements, and return","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null},{"id":"onyx_x402_receipt_verify","name":"X402 Receipt Verify","description":"Verify an x402 USDC settlement on Base or Base Sepolia. Given a tx hash, decodes the USDC Transfer log and confirms (or refutes) a claim of the form: 'tx X moved $Y USDC from A to B'. Returns success status, actual decoded values, and a cle","tags":["security","verification","trust","x402","ed25519-signed"],"inputModes":null,"outputModes":null}],"skills_removed":[],"skills_changed":[],"fields_changed":[{"field":"name","before":null,"after":"onyx-actions"},{"field":"description","before":null,"after":"The security & trust layer for the agentic web. Signed, pre-transaction security checks over x402: recipient firewall, contract audit, ERC-8004 agent reputation, AML/sanctions, and a one-call secure-payment clearance. Every verdict Ed25519-signed."},{"field":"version","before":null,"after":"1.0.0"},{"field":"protocolVersion","before":null,"after":"0.3.0"},{"field":"url","before":null,"after":"https://onyx-actions.onrender.com"},{"field":"preferredTransport","before":null,"after":"HTTP+JSON"},{"field":"securitySchemes","before":null,"after":{"x402":{"type":"x402","description":"Pay-per-call via x402 USDC on Base; the payment is the auth."}}},{"field":"capabilities","before":null,"after":{"streaming":false,"pushNotifications":false,"stateTransitionHistory":false}},{"field":"provider","before":null,"after":{"organization":"Onyx Protocol","url":"https://onyxprotocol.io"}}],"other_changed":true,"is_empty":false,"human_summary":"added 20 skills · name ∅ → onyx-actions · description ∅ → The security & trust layer for the agent · version ∅ → 1.0.0 · protocolVersion ∅ → 0.3.0 · url ∅ → https://onyx-actions.onrender.com · preferredTransport ∅ → HTTP+JSON · securitySchemes ∅ → x402 · capabilities ∅ → none · provider ∅ → Onyx Protocol"}}]}