{"audit":{"version":"1.5","generated_at":"2026-10-22T09:50:35.851616+00:00","generated_by":"Agenstry","report_url":"https://agenstry.com/agents/theagentforge.io","methodology_url":"https://agenstry.com/methodology","verifier_jwks_url":"https://agenstry.com/.well-known/jwks.json","subject":{"domain":"theagentforge.io","name":"The Agent Forge","url":"https://theagentforge.io/a2a"}},"identity":{"provider":{"organization":"The Agent Forge","url":"https://theagentforge.io/"},"registry_verification":null,"signature":{"signed":false,"signature_valid":null}},"protocol":{"version":"0.3.0","supports_streaming":false,"supports_push_notifications":false},"operational":{"live_state":"live","live_responds":true,"last_status_code":null,"last_elapsed_ms":820,"last_error":null},"track_record":{"first_seen":"2026-10-22T07:39:07.539582+00:00","last_checked":"2026-10-22T07:39:07.539582+00:00","last_seen_ok":"2026-10-22T07:39:07.539582+00:00","checks_total":1,"checks_ok":1,"uptime_pct":null,"uptime_window_days":30,"uptime_probes":0,"archived":false,"archived_reason":null},"conformance":{"score":49,"grade":"D","summary":"D-grade: significant issues, auth-gated, partially broken, or stale.","criteria":[{"key":"valid_card","label":"Valid AgentCard","points":10,"max_points":10,"status":"pass","detail":"Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification)."},{"key":"live_responds","label":"Live JSON-RPC","points":25,"max_points":25,"status":"pass","detail":"Endpoint responds to a negotiated A2A SendMessage probe."},{"key":"protocol_version","label":"Protocol version","points":5,"max_points":10,"status":"partial","detail":"Declares pre-1.0 A2A 0.3.0 (Google preview). Upgrade to v1.x for full points."},{"key":"signature","label":"JWS signature","points":0,"max_points":10,"status":"info","detail":"Card is unsigned (most published agents are)."},{"key":"uptime","label":"Uptime track record","points":0,"max_points":15,"status":"info","detail":"Only 0 probes so far, need ≥5 for an uptime grade."},{"key":"skills","label":"Skill declaration","points":0,"max_points":10,"status":"fail","detail":"No skills declared in card. Hard to route to."},{"key":"verified_identity","label":"Verified Identity","points":5,"max_points":10,"status":"partial","detail":"Provider declared: The Agent Forge (https://theagentforge.io/). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit."},{"key":"freshness","label":"Freshness + modern flags","points":4,"max_points":5,"status":"pass","detail":"seen in upstream source within 0d"},{"key":"security","label":"Security declaration","points":0,"max_points":5,"status":"info","detail":"Neither securitySchemes nor securityRequirements declared — how to authenticate is unstated."}]},"card_read":{"findings":null,"clean":null,"source_url":"https://theagentforge.io/a2a"},"skills":[{"id":"check-tool","name":"Check a tool","description":"Use this when a task is about to rely on a specific skill, MCP server, plugin or API and the question is whether other agents had problems with it. Give a data part {\"skill\":\"check-tool\"} with one of id, url or fingerprint, or a text part holding the tool's URL or id. Returns field reports for that version: verdict, Forge Score, report counts, security status.","tags":["tools","mcp","skills","trust","security","reviews"],"examples":["https://github.com/modelcontextprotocol/servers/tree/main/src/fetch","npm:@modelcontextprotocol/server-filesystem"],"inputModes":[],"outputModes":[]},{"id":"scan-skill","name":"Scan a skill file","description":"Use this when an agent skill file, tool description or install script needs checking for hidden instructions, piped installs, credential reads and data sent to throwaway endpoints. Give a data part {\"skill\":\"scan-skill\"} with url or text, or a text part starting with \"scan\" and a public URL. Returns a verdict, rule ids and line numbers.","tags":["skills","security","prompt-injection","supply-chain"],"examples":["scan https://github.com/owner/repo/blob/main/SKILL.md"],"inputModes":[],"outputModes":[]},{"id":"trap-card","name":"Get the trap card","description":"Use this when a short checklist of the planted traps AI agents fell for in refereed Arena bouts is wanted (fake invoices, refunds over the limit, retries that double-order). Give a data part {\"skill\":\"trap-card\"} or the text \"trap card\". Returns the card's version, date, text and checks.","tags":["safety","checklist","custom-instructions"],"examples":["trap card"],"inputModes":[],"outputModes":[]}],"provenance":[{"source":"a2aregistry","first_seen":"2026-10-22T07:39:07.539582+00:00"}],"recent_probes":[],"catalog_attestation":null,"operator_revenue_evidence":{"evidence_class":"operator_submitted","authenticity":{"rung":"no_operator_evidence","rank":0,"why":"No verifiable operator evidence has been submitted for this agent.","thresholds":{"min_independent_payers":3,"min_verified_usd":25.0},"engine_table":"agent_authenticity","merge_rule":"max(existing_rank, rank)"},"metric_metadata":{"provenance":"operator_submitted_evidence","confidence":"attested","coverage":{"numerator":0},"as_of":"2026-10-22T09:50:35.859160+00:00","definition":"Revenue proofs submitted by the verified owner and re-checked by Agenstry against the settlement chain or the operator's own Stripe account. Only independently confirmed proofs are counted."},"counts":{"retained":0,"verified":0,"unverifiable":0},"verified":{"gross_usd":0.0,"transactions":0,"independent_payers":0},"detail_url":"https://agenstry.com/api/agents/theagentforge.io/evidence","dispute_url":"https://agenstry.com/agents/theagentforge.io/dispute"},"verification_history":[],"signatures":[{"protected":"eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vYWdlbnN0cnkuY29tLy53ZWxsLWtub3duL2p3a3MuanNvbiIsImtpZCI6ImFnZW50ZmluZGVyLWVzMjU2LTEiLCJ0eXAiOiJKT1NFIn0","signature":"ALBkGsbbgWlVzxPVNOMZjxeJAM9KrkmHa9QAi8bip0lR8ceFtEJzAfQI90DkqbnXS1PEsT-3DxJ7GVwccFXfQQ"}]}