Signed JSON Attestation
attestSign integrity, provenance and freshness receipts for agent JSON
Provider
PHION Systems
One hundred twenty-three composable inference, search, intelligence, verified-data, enrichment, durable-task, security, trust, compatibility, reputation, commerce, RWA and indexing services for autonomous AI agents
Last 100 checks shown · 94.8% across 30 days
Sign integrity, provenance and freshness receipts for agent JSON
Evaluate a payment requirement against an explicit buyer policy and return a signed decision
Enforce cumulative spending limits with atomic reservations and idempotency
Free reachability and safety preflight
Retrieve, normalize, screen, hash and sign evidence from a public URL
Inspect agent endpoints, standards, payments and identity before trusting or purchasing
Verify hash-linked intent, quote, payment and delivery histories
Verify settlement, delivery and deterministic acceptance; emit a signed receipt and dispute packet
Classify paid transaction failures and emit signed recovery claims and deterministic remedy plans
Preview any PHION service, inspect its value and receive exact machine-readable upgrade terms without a wallet or payment
Non-custodial local spending mandates with per-call, cumulative, service and expiry limits
Execute any selected PHION service through one budgeted, persistently idempotent call with acceptance checks and a signed completion envelope
Normalize capabilities and compare PHION and configured external providers; economic execution remains buyer-funded, authority-bound and disabled until a production adapter is verified
Inspect untrusted tool output before context ingestion or downstream action
Validate least-privilege agent delegation scope, destination, budget and expiry
Screen persistent agent-memory writes for poisoning and missing provenance
Inspect MCP metadata and schemas before installation or trust
Bind proposed tool calls to declared intent and execution policy
Inspect outbound agent data and destination before transmission
Validate and safely normalize agent payloads before payment without altering payment-critical values
Issuer, contract, custody and disclosure assessment with live evidence
Deterministic declared eligibility and transfer-policy assessment
Independent observations for NAV, reserve and collateral claims
Asset, payment, delivery and transfer-rule verification
Detect material NAV, income, maturity, redemption and freeze changes
Traceable literal screening against observed official US and EU sources; not legal clearance
Evidence-bounded reputation score with confidence, coverage and explicit limitations
Deterministic allow, review or deny decision using supplied reputation evidence and transaction limits
Stop autonomous spending before a call exceeds its task, session or period budget.
Distinguish a safe retry from conflicting reuse before an agent repeats an action or payment.
Make escalation predictable by classifying actions before execution.
Remove common secret indicators before agent context or payload leaves its boundary.
Prevent token forwarding to the wrong resource after local signature validation.
Reject unsafe callbacks, ambiguous domains and redirects outside an explicit allowlist.
Detect when an approved tool changes its schema or declared capabilities.
Bind the declared MCP domain, endpoint, manifest, key and version into portable evidence.
Give collaborating agents a portable statement of task, scope, budget and expiry.
Carry integrity and confidentiality labels with agent context instead of losing its origin.
Expose exact agreement or conflict between multiple agent results without inventing consensus.
Turn bounded availability and latency samples into auditable signed SLA evidence.
Reject unsafe payment terms before an autonomous agent signs or spends.
Independently retrieve, normalize, screen and hash a public source.
Inspect an agent endpoint before trusting it, delegating work or paying it.
Verify that intent, quote, payment and delivery form one untampered history.
Reject routes that cannot safely settle, rank the remaining x402 routes by your policy, and return the exact next action before signing.
Validate and normalize x402 v2 quotes, preventing false price comparisons across incompatible assets or decimals.
Find exact disagreement between intended payment and returned receipt.
Detect repeated payment fingerprints without treating equal prices alone as duplicates.
Authorize only the next due recurring charge when subscription, merchant, per-charge and period constraints all match.
Require a trusted signature binding payload, request target and a unique nonce, plus freshness and replay protection.
Bind a successful delivery to its request and expected content without returning the delivered payload.
Expose conflicting policy decisions before collaborating agents act.
Prevent agents from exceeding fresh, lease-bound concurrent execution capacity.
Stop repeated execution and enforce complete step, token and cost budgets.
Require multiple independent failure signals before classifying probable abandonment.
Show precisely which top-level manifest fields changed between versions.
Separate declared identity and digest from independently verified dependency provenance.
Resolve competing results only when source, value hash, time and confidence are bound.
Certify age only when it is bound to a source and exact content hash.
Validate a fresh domain-bound DNS-01 or HTTP-01 challenge without claiming legal ownership.
Bind consent to ID, subject, recipient, purpose, scope, lifetime and checked revocation state.
Create a signed receipt for a declared retention or deletion operation.
Resume only from a task-bound checkpoint with known side effects and idempotency.
Validate and sign a bounded hash chain with portable W3C trace context.
Replace repeated catalog sweeps with one canonical snapshot or digest-based delta ready for PHION Execute.
Retrieve bounded public web content with source identity, observation time and content hashes.
Measure entity-field coverage in public sources without fabricating absent facts.
Preserve public social-source statements while separating content evidence from identity claims.
Capture public market data as an immutable, timestamped evidence snapshot.
Capture public explorer or RPC responses as tamper-evident evidence.
Locate literal topic evidence across bounded public news sources.
Bundle independent observations without disguising disagreement as certainty.
Normalize public text, HTML, JSON or XML documents into verifiable JSON; image and PDF OCR excluded.
Search only supplied public sources and return literal evidence rather than generated claims.
Test live source observations against an explicit maximum-age budget.
Resolve a person from strong identifiers and return signed, provider-attributed evidence with explicit limitations.
Resolve a company from domain, profile, ticker or name and return signed provider-attributed evidence.
Resolve a business contact from strong identifiers without presenting enrichment as identity proof.
Validate modern stateless MCP discovery, protocol and method compatibility before connection.
Validate a durable task envelope with expiry, requester isolation and replay-safe identity.
Bind task ID, monotonic sequence and exact state hash in signed evidence.
Verify cancellation state and expose every unresolved side effect.
Bind an approval or denial to purpose, payload and a strict expiry.
Detect capability mismatch before an agent commits time or payment.
Bind an MCP catalog digest to explicit cache lifetime, scope and revalidation behavior.
Bind already verified OAuth claims to the exact intended issuer and audience without receiving raw tokens.
Map MCP and A2A task identities while preserving state, authority and expiry.
Reject payment quotes that cannot remain valid through authorization and retry.
Enforce delegated scope and expiry without sending PHION a raw access token.
Detect session substitution, skipped sequence and broken hash continuity.
Prevent expired or non-owner agents from mutating a leased task.
Reject missing or unexpected top-level fields before another agent consumes a tool result.
Bind a memory record to its declared source identity and observation time.
Detect the exact split state between payment and delivery and require recovery when necessary.
Select only a healthy compatible provider using explicit priority; never fail over silently.
Negotiate deterministic sustained and burst limits before an agent starts a workload.
Compute a fail-closed maximum cost before a multi-step agent plan executes.
Bundle unique agent-bound result receipts without disguising declarations as external truth.
Separate claimed capabilities from independently evidenced successful demonstrations.
Measure reproducible success, latency and cost from versioned evidence-bound benchmark cases.
Combine multiple bounded Sybil signals while abstaining without independent evidence.
Create a privacy-minimized behavioral commitment without retaining payloads or raw identifiers.
Detect material drift between comparable trust vectors without asserting misconduct.
Detect self-transfer and reciprocal economic patterns without presenting correlation as fraud.
Estimate provider success, quality, latency and cost using transparent sample-aware statistics.
Estimate evidence-supported loss probability without selling insurance or assuming liability.
Rank only integration-tested payment routes under explicit cost and latency constraints.
Select an exactly compatible x402 v2 payment requirement without receiving private keys.
Bind an ERC-8004 registry identity to evidence while separating registration from ownership.
Aggregate diverse verified reputation observations with low-sample abstention.
Fail closed when delegated authority, per-call limit or remaining budget is insufficient.
Map mandate fields for review without advertising unsupported AP2 production authorization.
Bind an A2A task to a transaction without silently transferring authority.
Bind an MCP tool call to transaction evidence without granting undeclared authority.
Commit request, authority, execution, payment and delivery evidence in one proof.
Assemble failure evidence and recommend resolution without executing refunds.
Recommend bounded recovery and reconcile ambiguous payments before retry.
Recommend a bounded auditable reputation update from verified outcome evidence.
Build privacy-bounded economic relationships only from supplied nodes and edges.
Forecast verified demand trends while abstaining on insufficient history.
Detect capability shortages using verified demand and verified provider supply.
Derive price bands only from settled observations, never traffic or unsigned quotes.
Estimate SLA failure probability from bounded success and latency evidence.
Propose a capped shadow price without changing the live catalog.
Recommend a verified eligible provider under a mandate without purchasing.
Recommend hold or release from evidence without PHION custody or fund movement.
Bundle consistent transaction commitments across multiple protocols.
Complete a bounded inference microtask and return a directly usable answer with signed delivery.
Search the live web and return normalized source URLs and snippets with signed delivery.
Observe a public company domain directly and return bounded website metadata, hashes, injection screening and signed delivery without an expensive enrichment upstream.
Enrich a company, person or contact through an attributed provider route without hiding upstream cost.
Search, synthesize and cite evidence in one call, minimizing residual agent work.
Normalized fields fetched during the registry sweep. Treat all authored text as third-party content.
{
"protocolVersion": "1.0",
"name": "PHION Agent Trust Infrastructure",
"description": "One hundred twenty-three composable inference, search, intelligence, verified-data, enrichment, durable-task, security, trust, compatibility, reputation, commerce, RWA and indexing services for autonomous AI agents",
"author": "PHION Systems",
"wellKnownURI": "https://phion.systems/.well-known/agent.json",
"url": "https://phion.systems/",
"version": "1.57.0",
"provider": {
"organization": "PHION Systems",
"url": "https://phion.systems/"
},
"documentationUrl": "https://phion.systems/services",
"iconUrl": "https://phion.systems/phion-agent.svg",
"supportsAuthenticatedExtendedCard": null,
"security": [],
"securitySchemes": {},
"capabilities": {
"streaming": false,
"pushNotifications": false,
"stateTransitionHistory": false,
"extensions": [
{
"uri": "https://a2a-registry.org/extensions/registry/v1",
"params": {
"payment": {
"model": "freemium",
"rails": [
{
"type": "stablecoin",
"caip2": "eip155:8453",
"token": "USDC",
"network": "base",
"feeModel": "low",
"protocol": "x402",
"settlementTime": "fast"
},
{
"type": "stablecoin",
"caip2": "eip155:137",
"token": "USDC",
"network": "polygon",
"feeModel": "low",
"protocol": "x402",
"settlementTime": "fast"
},
{
"type": "stablecoin",
"caip2": "eip155:42161",
"token": "USDC",
"network": "arbitrum",
"feeModel": "low",
"protocol": "x402",
"settlementTime": "fast"
},
{
"type": "stablecoin",
"caip2": "solana:mainnet",
"token": "USDC",
"network": "solana",
"feeModel": "low",
"protocol": "x402",
"settlementTime": "fast"
}
],
"direction": "inbound",
"protocols": [
"x402"
]
}
},
"required": false,
"description": "Public payment discovery metadata for PHION services"
}
]
},
"defaultInputModes": [
"application/json"
],
"defaultOutputModes": [
"application/json"
],
"skills": [
{
"id": "attest",
"name": "Signed JSON Attestation",
"description": "Sign integrity, provenance and freshness receipts for agent JSON",
"tags": [
"attestation",
"integrity",
"receipts",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "payment-preflight",
"name": "Autonomous Payment Firewall",
"description": "Evaluate a payment requirement against an explicit buyer policy and return a signed decision",
"tags": [
"payments",
"policy",
"firewall",
"x402",
"safety"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "mandate-reserve",
"name": "Atomic Mandate Reservation",
"description": "Enforce cumulative spending limits with atomic reservations and idempotency",
"tags": [
"payments",
"mandates",
"budgets",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "preflight",
"name": "Preflight URL",
"description": "Free reachability and safety preflight",
"tags": [
"ssrf",
"safety",
"web"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "fetch-evidence",
"name": "Fetch Independent Evidence",
"description": "Retrieve, normalize, screen, hash and sign evidence from a public URL",
"tags": [
"evidence",
"web",
"integrity",
"prompt-injection",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "inspect-agent",
"name": "AI Agent Due Diligence",
"description": "Inspect agent endpoints, standards, payments and identity before trusting or purchasing",
"tags": [
"agents",
"due-diligence",
"x402",
"erc8004",
"mcp",
"a2a"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "journey-verify",
"name": "Agent Commerce Journey Verification",
"description": "Verify hash-linked intent, quote, payment and delivery histories",
"tags": [
"commerce",
"audit",
"journey",
"receipts",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "transaction-assurance",
"name": "Transaction Assurance",
"description": "Verify settlement, delivery and deterministic acceptance; emit a signed receipt and dispute packet",
"tags": [
"commerce",
"assurance",
"delivery",
"acceptance",
"disputes",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "transaction-recovery",
"name": "Transaction Recovery",
"description": "Classify paid transaction failures and emit signed recovery claims and deterministic remedy plans",
"tags": [
"commerce",
"recovery",
"refunds",
"retries",
"disputes",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "try-service",
"name": "Try PHION Service Free",
"description": "Preview any PHION service, inspect its value and receive exact machine-readable upgrade terms without a wallet or payment",
"tags": [
"free-preview",
"try-before-payment",
"x402",
"discovery"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "spending-gateway",
"name": "Agent Spending Gateway",
"description": "Non-custodial local spending mandates with per-call, cumulative, service and expiry limits",
"tags": [
"payments",
"budgets",
"delegation",
"x402",
"non-custodial"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "phion-execute",
"name": "PHION Execute",
"description": "Execute any selected PHION service through one budgeted, persistently idempotent call with acceptance checks and a signed completion envelope",
"tags": [
"execution",
"orchestration",
"payments",
"idempotency",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "universal-market",
"name": "PHION Universal Market",
"description": "Normalize capabilities and compare PHION and configured external providers; economic execution remains buyer-funded, authority-bound and disabled until a production adapter is verified",
"tags": [
"market",
"capabilities",
"providers",
"routing",
"preflight",
"buyer-funded"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "tool-output-firewall",
"name": "Tool Output Firewall",
"description": "Inspect untrusted tool output before context ingestion or downstream action",
"tags": [
"tool-output",
"prompt-injection",
"mcp",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "delegation-scope-guard",
"name": "Delegation Scope Guard",
"description": "Validate least-privilege agent delegation scope, destination, budget and expiry",
"tags": [
"delegation",
"authorization",
"least-privilege",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "memory-write-guard",
"name": "Memory Write Guard",
"description": "Screen persistent agent-memory writes for poisoning and missing provenance",
"tags": [
"memory",
"poisoning",
"provenance",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "mcp-manifest-firewall",
"name": "MCP Manifest Firewall",
"description": "Inspect MCP metadata and schemas before installation or trust",
"tags": [
"mcp",
"manifest",
"security",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "tool-call-policy-guard",
"name": "Tool Call Policy Guard",
"description": "Bind proposed tool calls to declared intent and execution policy",
"tags": [
"tools",
"intent",
"authorization",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "data-egress-preflight",
"name": "Data Egress Preflight",
"description": "Inspect outbound agent data and destination before transmission",
"tags": [
"egress",
"data",
"dlp",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "schema-normalize",
"name": "Schema Normalize & Repair",
"description": "Validate and safely normalize agent payloads before payment without altering payment-critical values",
"tags": [
"schema",
"json",
"compatibility",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "rwa-asset-due-diligence",
"name": "RWA Asset Due Diligence",
"description": "Issuer, contract, custody and disclosure assessment with live evidence",
"tags": [
"rwa",
"tokenization",
"evidence",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "rwa-compliance",
"name": "RWA Compliance Decision",
"description": "Deterministic declared eligibility and transfer-policy assessment",
"tags": [
"rwa",
"tokenization",
"evidence",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "rwa-nav-reserve",
"name": "RWA NAV & Reserve Verification",
"description": "Independent observations for NAV, reserve and collateral claims",
"tags": [
"rwa",
"tokenization",
"evidence",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "rwa-transaction-assurance",
"name": "RWA Transaction Assurance",
"description": "Asset, payment, delivery and transfer-rule verification",
"tags": [
"rwa",
"tokenization",
"evidence",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "rwa-corporate-actions",
"name": "RWA Corporate Action Monitor",
"description": "Detect material NAV, income, maturity, redemption and freeze changes",
"tags": [
"rwa",
"tokenization",
"evidence",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "sanctions-screening-evidence",
"name": "Sanctions Screening Evidence",
"description": "Traceable literal screening against observed official US and EU sources; not legal clearance",
"tags": [
"rwa",
"tokenization",
"evidence",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "agent-reputation-evidence",
"name": "Agent Reputation Evidence",
"description": "Evidence-bounded reputation score with confidence, coverage and explicit limitations",
"tags": [
"agents",
"reputation",
"evidence",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "counterparty-risk-preflight",
"name": "Counterparty Risk Preflight",
"description": "Deterministic allow, review or deny decision using supplied reputation evidence and transaction limits",
"tags": [
"agents",
"counterparty",
"risk",
"payments",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "agent-budget-guard",
"name": "Agent Budget Guard",
"description": "Stop autonomous spending before a call exceeds its task, session or period budget.",
"tags": [
"agents",
"security",
"trust",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "idempotency-replay-guard",
"name": "Idempotency Replay Guard",
"description": "Distinguish a safe retry from conflicting reuse before an agent repeats an action or payment.",
"tags": [
"agents",
"security",
"trust",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "human-approval-policy",
"name": "Human Approval Policy",
"description": "Make escalation predictable by classifying actions before execution.",
"tags": [
"agents",
"security",
"trust",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "secret-redaction-preflight",
"name": "Secret Redaction Preflight",
"description": "Remove common secret indicators before agent context or payload leaves its boundary.",
"tags": [
"agents",
"security",
"trust",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "oauth-token-audience-guard",
"name": "OAuth Token Audience Guard",
"description": "Prevent token forwarding to the wrong resource after local signature validation.",
"tags": [
"agents",
"security",
"trust",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "redirect-callback-validator",
"name": "Redirect Callback Validator",
"description": "Reject unsafe callbacks, ambiguous domains and redirects outside an explicit allowlist.",
"tags": [
"agents",
"security",
"trust",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "tool-capability-drift-monitor",
"name": "Tool Capability Drift Monitor",
"description": "Detect when an approved tool changes its schema or declared capabilities.",
"tags": [
"agents",
"security",
"trust",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "mcp-server-identity-evidence",
"name": "MCP Server Identity Evidence",
"description": "Bind the declared MCP domain, endpoint, manifest, key and version into portable evidence.",
"tags": [
"agents",
"security",
"trust",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "agent-task-handoff-receipt",
"name": "Agent Task Handoff Receipt",
"description": "Give collaborating agents a portable statement of task, scope, budget and expiry.",
"tags": [
"agents",
"security",
"trust",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "context-provenance-labeler",
"name": "Context Provenance Labeler",
"description": "Carry integrity and confidentiality labels with agent context instead of losing its origin.",
"tags": [
"agents",
"security",
"trust",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "signed-result-comparator",
"name": "Signed Result Comparator",
"description": "Expose exact agreement or conflict between multiple agent results without inventing consensus.",
"tags": [
"agents",
"security",
"trust",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "service-sla-attestation",
"name": "Service SLA Attestation",
"description": "Turn bounded availability and latency samples into auditable signed SLA evidence.",
"tags": [
"agents",
"security",
"trust",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "payment-firewall",
"name": "Autonomous Payment Firewall",
"description": "Reject unsafe payment terms before an autonomous agent signs or spends.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "web-evidence",
"name": "Independent Web Evidence",
"description": "Independently retrieve, normalize, screen and hash a public source.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "agent-inspection",
"name": "AI Agent Due Diligence",
"description": "Inspect an agent endpoint before trusting it, delegating work or paying it.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "commerce-journey",
"name": "Commerce Journey Verification",
"description": "Verify that intent, quote, payment and delivery form one untampered history.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "payment-route-selector",
"name": "Payment Route Selector",
"description": "Reject routes that cannot safely settle, rank the remaining x402 routes by your policy, and return the exact next action before signing.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "x402-quote-comparator",
"name": "x402 Quote Comparator",
"description": "Validate and normalize x402 v2 quotes, preventing false price comparisons across incompatible assets or decimals.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "payment-receipt-reconciler",
"name": "Payment Receipt Reconciler",
"description": "Find exact disagreement between intended payment and returned receipt.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "duplicate-charge-detector",
"name": "Duplicate Charge Detector",
"description": "Detect repeated payment fingerprints without treating equal prices alone as duplicates.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "subscription-spend-guard",
"name": "Subscription Spend Guard",
"description": "Authorize only the next due recurring charge when subscription, merchant, per-charge and period constraints all match.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "webhook-verifier",
"name": "Webhook Verifier",
"description": "Require a trusted signature binding payload, request target and a unique nonce, plus freshness and replay protection.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "delivery-evidence",
"name": "Delivery Evidence",
"description": "Bind a successful delivery to its request and expected content without returning the delivered payload.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "inter-agent-policy-evaluator",
"name": "Inter-Agent Policy Evaluator",
"description": "Expose conflicting policy decisions before collaborating agents act.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "concurrency-guard",
"name": "Concurrency Guard",
"description": "Prevent agents from exceeding fresh, lease-bound concurrent execution capacity.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "resource-cycle-guard",
"name": "Resource Cycle Guard",
"description": "Stop repeated execution and enforce complete step, token and cost budgets.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "abandoned-tool-detector",
"name": "Abandoned Tool Detector",
"description": "Require multiple independent failure signals before classifying probable abandonment.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "manifest-version-diff",
"name": "Manifest Version Diff",
"description": "Show precisely which top-level manifest fields changed between versions.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "dependency-provenance-assessment",
"name": "Dependency Provenance Assessment",
"description": "Separate declared identity and digest from independently verified dependency provenance.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "conflict-resolution",
"name": "Conflict Resolution",
"description": "Resolve competing results only when source, value hash, time and confidence are bound.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "data-freshness-certificate",
"name": "Data Freshness Certificate",
"description": "Certify age only when it is bound to a source and exact content hash.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "domain-ownership-evidence",
"name": "Domain Ownership Evidence",
"description": "Validate a fresh domain-bound DNS-01 or HTTP-01 challenge without claiming legal ownership.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "purpose-bound-consent",
"name": "Purpose-Bound Consent",
"description": "Bind consent to ID, subject, recipient, purpose, scope, lifetime and checked revocation state.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "retention-deletion-receipt",
"name": "Retention & Deletion Receipt",
"description": "Create a signed receipt for a declared retention or deletion operation.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "interrupted-task-recovery",
"name": "Interrupted Task Recovery",
"description": "Resume only from a task-bound checkpoint with known side effects and idempotency.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "portable-observability-audit",
"name": "Portable Observability Audit",
"description": "Validate and sign a bounded hash chain with portable W3C trace context.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "index-feed",
"name": "PHION Index Feed",
"description": "Replace repeated catalog sweeps with one canonical snapshot or digest-based delta ready for PHION Execute.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "verified-web-extract",
"name": "Verified Web Extract",
"description": "Retrieve bounded public web content with source identity, observation time and content hashes.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "entity-enrichment-evidence",
"name": "Entity Enrichment Evidence",
"description": "Measure entity-field coverage in public sources without fabricating absent facts.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "social-source-evidence",
"name": "Social Source Evidence",
"description": "Preserve public social-source statements while separating content evidence from identity claims.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "market-data-snapshot",
"name": "Market Data Snapshot",
"description": "Capture public market data as an immutable, timestamped evidence snapshot.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "onchain-evidence",
"name": "Onchain Evidence",
"description": "Capture public explorer or RPC responses as tamper-evident evidence.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "verified-news-monitor",
"name": "Verified News Monitor",
"description": "Locate literal topic evidence across bounded public news sources.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "multi-source-fact-bundle",
"name": "Multi-Source Fact Bundle",
"description": "Bundle independent observations without disguising disagreement as certainty.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "document-to-verified-json",
"name": "Document to Verified JSON",
"description": "Normalize public text, HTML, JSON or XML documents into verifiable JSON; image and PDF OCR excluded.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "source-backed-search",
"name": "Source-Backed Search",
"description": "Search only supplied public sources and return literal evidence rather than generated claims.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "live-data-freshness",
"name": "Live Data Freshness",
"description": "Test live source observations against an explicit maximum-age budget.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "person-enrichment-evidence",
"name": "Person Enrichment Evidence",
"description": "Resolve a person from strong identifiers and return signed, provider-attributed evidence with explicit limitations.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "company-enrichment-evidence",
"name": "Company Enrichment Evidence",
"description": "Resolve a company from domain, profile, ticker or name and return signed provider-attributed evidence.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "contact-enrichment-evidence",
"name": "Contact Enrichment Evidence",
"description": "Resolve a business contact from strong identifiers without presenting enrichment as identity proof.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "mcp-2026-compatibility-gateway",
"name": "MCP 2026 Compatibility Gateway",
"description": "Validate modern stateless MCP discovery, protocol and method compatibility before connection.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "durable-agent-task",
"name": "Durable Agent Task",
"description": "Validate a durable task envelope with expiry, requester isolation and replay-safe identity.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "task-checkpoint-evidence",
"name": "Task Checkpoint Evidence",
"description": "Bind task ID, monotonic sequence and exact state hash in signed evidence.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "task-cancel-assurance",
"name": "Task Cancel Assurance",
"description": "Verify cancellation state and expose every unresolved side effect.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "agent-approval-relay",
"name": "Agent Approval Relay",
"description": "Bind an approval or denial to purpose, payload and a strict expiry.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "capability-negotiation-preflight",
"name": "Capability Negotiation Preflight",
"description": "Detect capability mismatch before an agent commits time or payment.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "mcp-catalog-cache-guard",
"name": "MCP Catalog Cache Guard",
"description": "Bind an MCP catalog digest to explicit cache lifetime, scope and revalidation behavior.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "oauth-issuer-binding-evidence",
"name": "OAuth Issuer Binding Evidence",
"description": "Bind already verified OAuth claims to the exact intended issuer and audience without receiving raw tokens.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "mcp-a2a-task-bridge",
"name": "MCP-A2A Task Bridge",
"description": "Map MCP and A2A task identities while preserving state, authority and expiry.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "quote-freshness-guard",
"name": "Quote Freshness Guard",
"description": "Reject payment quotes that cannot remain valid through authorization and retry.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "delegated-credential-guard",
"name": "Delegated Credential Guard",
"description": "Enforce delegated scope and expiry without sending PHION a raw access token.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "agent-session-continuity",
"name": "Agent Session Continuity",
"description": "Detect session substitution, skipped sequence and broken hash continuity.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "task-lease-guard",
"name": "Task Lease Guard",
"description": "Prevent expired or non-owner agents from mutating a leased task.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "tool-result-schema-validator",
"name": "Tool Result Schema Validator",
"description": "Reject missing or unexpected top-level fields before another agent consumes a tool result.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "agent-memory-provenance",
"name": "Agent Memory Provenance",
"description": "Bind a memory record to its declared source identity and observation time.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "payment-delivery-atomicity",
"name": "Payment Delivery Atomicity",
"description": "Detect the exact split state between payment and delivery and require recovery when necessary.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "service-failover-selector",
"name": "Service Failover Selector",
"description": "Select only a healthy compatible provider using explicit priority; never fail over silently.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "agent-rate-limit-negotiator",
"name": "Agent Rate Limit Negotiator",
"description": "Negotiate deterministic sustained and burst limits before an agent starts a workload.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "execution-cost-estimator",
"name": "Execution Cost Estimator",
"description": "Compute a fail-closed maximum cost before a multi-step agent plan executes.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "cross-agent-receipt-bundle",
"name": "Cross-Agent Receipt Bundle",
"description": "Bundle unique agent-bound result receipts without disguising declarations as external truth.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "capability-verification",
"name": "Capability Verification",
"description": "Separate claimed capabilities from independently evidenced successful demonstrations.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "capability-benchmark",
"name": "Capability Benchmark",
"description": "Measure reproducible success, latency and cost from versioned evidence-bound benchmark cases.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "sybil-reputation-guard",
"name": "Sybil Reputation Guard",
"description": "Combine multiple bounded Sybil signals while abstaining without independent evidence.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "agent-behavior-fingerprint",
"name": "Agent Behavior Fingerprint",
"description": "Create a privacy-minimized behavioral commitment without retaining payloads or raw identifiers.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "trust-anomaly-detector",
"name": "Trust Anomaly Detector",
"description": "Detect material drift between comparable trust vectors without asserting misconduct.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "economic-loop-detector",
"name": "Economic Loop Detector",
"description": "Detect self-transfer and reciprocal economic patterns without presenting correlation as fraud.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "provider-quality-predictor",
"name": "Provider Quality Predictor",
"description": "Estimate provider success, quality, latency and cost using transparent sample-aware statistics.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "transaction-risk-score",
"name": "Transaction Risk Score",
"description": "Estimate evidence-supported loss probability without selling insurance or assuming liability.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "payment-optimizer",
"name": "Payment Optimizer",
"description": "Rank only integration-tested payment routes under explicit cost and latency constraints.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "x402-v2-router",
"name": "x402 v2 Router",
"description": "Select an exactly compatible x402 v2 payment requirement without receiving private keys.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "erc8004-identity-evidence",
"name": "ERC-8004 Identity Evidence",
"description": "Bind an ERC-8004 registry identity to evidence while separating registration from ownership.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "erc8004-reputation-intelligence",
"name": "ERC-8004 Reputation Intelligence",
"description": "Aggregate diverse verified reputation observations with low-sample abstention.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "delegated-spend-policy",
"name": "Delegated Spend Policy",
"description": "Fail closed when delegated authority, per-call limit or remaining budget is insufficient.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "ap2-mandate-bridge",
"name": "AP2 Mandate Bridge",
"description": "Map mandate fields for review without advertising unsupported AP2 production authorization.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "a2a-transaction-bridge",
"name": "A2A Transaction Bridge",
"description": "Bind an A2A task to a transaction without silently transferring authority.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "mcp-transaction-gateway",
"name": "MCP Transaction Gateway",
"description": "Bind an MCP tool call to transaction evidence without granting undeclared authority.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "proof-of-service",
"name": "Proof of Service",
"description": "Commit request, authority, execution, payment and delivery evidence in one proof.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "automated-dispute-bundle",
"name": "Automated Dispute Bundle",
"description": "Assemble failure evidence and recommend resolution without executing refunds.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "transaction-recovery-v2",
"name": "Transaction Recovery v2",
"description": "Recommend bounded recovery and reconcile ambiguous payments before retry.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "reputation-update-receipt",
"name": "Reputation Update Receipt",
"description": "Recommend a bounded auditable reputation update from verified outcome evidence.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "agent-economic-graph",
"name": "Agent Economic Graph",
"description": "Build privacy-bounded economic relationships only from supplied nodes and edges.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "market-demand-predictor",
"name": "Market Demand Predictor",
"description": "Forecast verified demand trends while abstaining on insufficient history.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "service-gap-detector",
"name": "Service Gap Detector",
"description": "Detect capability shortages using verified demand and verified provider supply.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "price-discovery-engine",
"name": "Price Discovery Engine",
"description": "Derive price bands only from settled observations, never traffic or unsigned quotes.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "sla-risk-predictor",
"name": "SLA Risk Predictor",
"description": "Estimate SLA failure probability from bounded success and latency evidence.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "dynamic-service-pricing",
"name": "Dynamic Service Pricing",
"description": "Propose a capped shadow price without changing the live catalog.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "autonomous-procurement",
"name": "Autonomous Procurement",
"description": "Recommend a verified eligible provider under a mandate without purchasing.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "multi-agent-escrow",
"name": "Multi-Agent Escrow",
"description": "Recommend hold or release from evidence without PHION custody or fund movement.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "cross-protocol-receipt",
"name": "Cross-Protocol Receipt",
"description": "Bundle consistent transaction commitments across multiple protocols.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "phion-inference",
"name": "PHION Inference",
"description": "Complete a bounded inference microtask and return a directly usable answer with signed delivery.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "phion-search",
"name": "PHION Search",
"description": "Search the live web and return normalized source URLs and snippets with signed delivery.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "phion-enrich-basic",
"name": "PHION Basic Domain Enrichment",
"description": "Observe a public company domain directly and return bounded website metadata, hashes, injection screening and signed delivery without an expensive enrichment upstream.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "phion-enrich",
"name": "PHION Enrich",
"description": "Enrich a company, person or contact through an attributed provider route without hiding upstream cost.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
},
{
"id": "phion-intelligence",
"name": "PHION Intelligence",
"description": "Search, synthesize and cite evidence in one call, minimizing residual agent work.",
"tags": [
"agents",
"services",
"x402"
],
"examples": [],
"inputModes": [],
"outputModes": []
}
],
"conformance": true,
"conformance_errors": null,
"homepage": null,
"repository": null,
"license": null,
"pricing": null,
"contact": null,
"id": "ee88633c-805c-4a63-a39b-85eeed9bb850",
"category": "trust-safety",
"category_secondary": null
}curl -s https://a2aregistry.org/api/agents/ee88633c-805c-4a63-a39b-85eeed9bb850Messages are sent to this independently operated agent through the registry proxy. Do not include secrets or personal data.