{"protocolVersion":"1.0","name":"MolTrust Trust Registry","description":"Production trust infrastructure for autonomous AI agents. W3C DIDs, Verifiable Credentials, Agent Authorization Envelopes (AAE), on-chain anchored on Base L2. Reference implementation of the Trust Registry Binding for A2A v1.0.","author":"CryptoKRI GmbH","wellKnownURI":"https://api.moltrust.ch/.well-known/agent-card.json","url":"https://api.moltrust.ch/a2a","version":"1.0.1","provider":{"organization":"CryptoKRI GmbH","url":"https://moltrust.ch/"},"documentationUrl":"https://api.moltrust.ch/docs","iconUrl":"https://moltrust.ch/img/moltrust-logo.png","supportsAuthenticatedExtendedCard":true,"security":[{"apiKey":[]},{"moltrust-did":[]}],"securitySchemes":{"apiKey":{"in":"header","name":"X-API-Key","type":"apiKey","description":"Free API key from POST /auth/signup (email only, no card): Free tier is 100 requests/day, and POST /identity/register grants 100 credits. Paid tiers (Professional/Scale/Enterprise) raise usage limits but are not required to register."},"aae-envelope":{"type":"http","scheme":"bearer","description":"Agent Authorization Envelope as JWS-signed bearer token. MANDATE/CONSTRAINTS/VALIDITY blocks. Declared schema; HTTP-auth-layer implementation in progress.","bearerFormat":"AAE-JWS"},"moltrust-did":{"in":"header","name":"X-MolTrust-DID","type":"apiKey","description":"Agent DID for self-identification on trust-gated endpoints"}},"capabilities":{"streaming":false,"pushNotifications":false,"stateTransitionHistory":false,"extensions":[{"uri":"https://moltrust.ch/extensions/trust-score/v1","params":{"did_resolution":"https://uresolver.moltrust.ch/1.0/identifiers/{did}","min_score_header":"X-MolTrust-Min-Score","agent_type_endpoint":"https://api.moltrust.ch/identity/agent-type/{did}","agent_types_listing":"https://api.moltrust.ch/identity/agent-types","trust_score_endpoint":"https://api.moltrust.ch/skill/trust-score/{did}"},"required":false,"description":"W3C DID-based agent trust scoring with on-chain behavioral history"},{"uri":"https://moltrust.ch/extensions/aae/v1","params":{"blocks":["mandate","constraints","validity"],"delegation_lookup":"https://api.moltrust.ch/identity/delegations/{did}","delegation_configure":"https://api.moltrust.ch/delegation/configure"},"required":false,"description":"Agent Authorization Envelope - Storage-only declarative permission model with MANDATE/CONSTRAINTS/VALIDITY blocks; runtime enforcement is roadmap (Q3 2026)."},{"uri":"https://moltrust.ch/extensions/erc8004/v1","params":{"agentId":21023,"platformDid":"did:web:api.moltrust.ch","agentRegistry":"eip155:8453:0x8004A169FB4a3325136EB29fA0ceB6D2e539a432","registrationFile":"https://api.moltrust.ch/.well-known/agent-registration.json"},"required":false,"description":"ERC-8004 on-chain agent registration cross-link"},{"uri":"https://moltrust.ch/extensions/x402-payment/v1","params":{"chain":"eip155:8453","currency":"USDC","facilitator":"https://api.cdp.coinbase.com/platform/v2/x402"},"required":false,"description":"x402 micropayment protocol on Base L2 for paid skill endpoints"},{"uri":"https://moltrust.ch/extensions/discovery-surfaces/v1","params":{"jwks":"https://api.moltrust.ch/.well-known/jwks.json","llmsTxt":"https://api.moltrust.ch/llms.txt","didDocument":"https://api.moltrust.ch/.well-known/did.json","agentRegistration":"https://api.moltrust.ch/.well-known/agent-registration.json","perAgentCardEndpoint":"https://api.moltrust.ch/a2a/agent-card/{did}"},"required":false,"description":"Inventory of additional discovery files beyond agent-card"},{"uri":"https://moltrust.ch/extensions/caep/v1","required":false,"description":"Proprietary MolTrust event protocol (pending/acknowledge polling). Name-inspired by OpenID-CAEP but NOT SET/RFC 8417 compliant — not a Shared Signals stream/transmitter/receiver implementation."},{"uri":"https://moltrust.ch/extensions/registration/v1","params":{"cost":"free","docs":"https://api.moltrust.ch/docs","script":"https://github.com/MoltyCel/moltrust-api/blob/main/scripts/gate_probe.py","source_hint":"pass source=<where you found this> to /identity/register-pop","bind_endpoint":"https://api.moltrust.ch/identity/bind","register_endpoint":"https://api.moltrust.ch/identity/register-pop","challenge_endpoint":"https://api.moltrust.ch/identity/register-challenge"},"required":false,"description":"How a caller without a MolTrust identity gets one. Two calls, no account."}]},"defaultInputModes":["text/plain"],"defaultOutputModes":["text/plain","application/json"],"skills":[{"id":"trust-score","name":"Agent Trust Score","description":"Returns W3C DID-based trust score (0-100) with behavioral history breakdown, sybil penalty, anomaly flags, on-chain proof. Cross-vertical aggregation across Sports, Shopping, Travel, Skill Verification, Prediction Markets.","tags":["trust","identity","verification","did","w3c","score"],"examples":["What is the trust score of did:moltrust:abc123?","Verify this agent's behavioral history","Check if this agent meets minimum trust requirements"],"inputModes":["text/plain"],"outputModes":["text/plain","application/json"]},{"id":"did-resolution","name":"DID Resolution","description":"Resolves W3C Decentralized Identifiers (did:moltrust) to DID Documents with verification methods and service endpoints. DIF Universal Resolver compatible (driver published at uresolver.moltrust.ch).","tags":["did","identity","w3c","resolution","dif"],"examples":["Resolve did:moltrust:abc123","Get the public key for this agent DID"],"inputModes":["text/plain"],"outputModes":["application/json"]},{"id":"credential-verification","name":"Verifiable Credential Verification","description":"Verifies W3C Verifiable Credentials including Agent Authorization Envelopes (AAE) with delegation chain validation. Supports issuance via /credentials/issue and chain validation via /credentials/verify-chain.","tags":["vc","credential","aae","delegation","w3c"],"examples":["Verify this agent's authorization credential","Check if this AAE delegation chain is valid","Validate agent permissions for payment:write"],"inputModes":["text/plain","application/json"],"outputModes":["application/json"]},{"id":"wallet-binding","name":"Wallet Binding Verification","description":"Verifies cryptographic binding between agent DID and blockchain wallet address (EVM Base + Solana). Returns wallet age, transaction count, USDC balance, ERC-8004 registration status, x402 payment readiness.","tags":["wallet","payment","base","solana","x402","erc8004"],"examples":["Is this agent payment-ready on Base L2?","Verify wallet binding for did:moltrust:abc123"],"inputModes":["text/plain"],"outputModes":["application/json"]},{"id":"track-record","name":"Wallet Track Record Credential","description":"Issues a TrackRecordCredential over a wallet bound to the DID, stating what that wallet has done on Base: transactions sent, age in days, transfer count, USDC volume, next to the thresholds the issuance was judged against. Issued via /credentials/track-record; the first one per DID is free. A gate configured for it reads the anchored credential in place of a trust score that has not been computed, which is the route open to an agent with no endorsers yet.","tags":["credential","wallet","base","track-record","x402","gate"],"examples":["Issue a track record for did:moltrust:abc123","What does this agent's bound wallet qualify it for?"],"inputModes":["application/json"],"outputModes":["application/json"]},{"id":"sybil-detection","name":"Sybil & Anomaly Detection","description":"Two-layer sybil detection: (1) embedded in trust-score response (flags array + sybil_penalty in breakdown), (2) dedicated paid endpoint via MoltGuard with on-chain wallet age, counterparty graph, funding-source clustering. Paid via x402 ($0.10 USDC).","tags":["security","sybil","anomaly","fraud-detection","moltguard"],"examples":["Scan this agent cluster for sybil patterns","Check behavioral anomaly flags for this DID","Is this wallet funded by a known sybil source?"],"inputModes":["text/plain","application/json"],"outputModes":["application/json"]},{"id":"compliance-assess","name":"EU AI Act risk classification","description":"Classify an AI system under Regulation (EU) 2024/1689: risk tier (prohibited/high/limited/minimal), obligations checklist, gap analysis, with EUR-Lex article pins.","tags":["compliance","eu-ai-act","risk","classification","annex-iii"],"examples":["Is a CV-screening agent high-risk under the EU AI Act?","Assess this use case against Annex III"],"inputModes":["text/plain","application/json"],"outputModes":["text/plain","application/json"]},{"id":"compliance-declaration","name":"EU declaration of conformity (Annex V)","description":"Issue an Annex V EU declaration of conformity as a signed W3C Verifiable Credential (MolTrustConformityDeclaration).","tags":["compliance","annex-v","declaration","verifiable-credential"],"examples":["Issue a declaration of conformity for my AI system","Create an Annex V VC"],"inputModes":["text/plain","application/json"],"outputModes":["text/plain","application/json"]},{"id":"compliance-report","name":"Compliance report","description":"HTML/JSON report: identity, latest risk assessment, obligations, gaps, declarations on record, audit summary.","tags":["compliance","report","audit"],"examples":["Show the compliance report for did:moltrust:abc123"],"inputModes":["text/plain","application/json"],"outputModes":["text/plain","application/json"]},{"id":"compliance-incident","name":"Article 73 serious-incident recording","description":"Record an Article 73 serious incident and compute its staggered reporting deadline (2/10/15 days) with deadline status.","tags":["compliance","incident","article-73","deadline"],"examples":["Record a serious incident and tell me the reporting deadline"],"inputModes":["text/plain","application/json"],"outputModes":["text/plain","application/json"]},{"id":"delegation-create","name":"UCAN delegation minting","description":"Mint a UCAN 0.10.0 delegation token with scoped capabilities, attenuation and a proof chain.","tags":["delegation","ucan","authorization","capabilities"],"examples":["Delegate scoped authority to another agent"],"inputModes":["text/plain","application/json"],"outputModes":["text/plain","application/json"]},{"id":"delegation-verify","name":"UCAN delegation verification","description":"Verify a UCAN token and its proof chain: signature, time bounds, iss/aud alignment, attenuation monotonicity, revocation.","tags":["delegation","ucan","verification"],"examples":["Verify this UCAN delegation token"],"inputModes":["text/plain","application/json"],"outputModes":["text/plain","application/json"]},{"id":"reputation-batch-sync","name":"Batch reputation","description":"Reputation scores and ratings for up to 500 agent DIDs in a single call.","tags":["reputation","batch","score"],"examples":["Get reputation for these 300 agents"],"inputModes":["text/plain","application/json"],"outputModes":["text/plain","application/json"]},{"id":"anchors-batch","name":"Merkle batch anchoring","description":"Merkle-batch a set of evidence hashes into a single root with per-leaf proof paths.","tags":["anchoring","merkle","evidence","provenance"],"examples":["Anchor these evidence hashes into one Merkle root"],"inputModes":["text/plain","application/json"],"outputModes":["text/plain","application/json"]},{"id":"ads-verdict-gate","name":"Amazon Ads Verdict Gate","description":"Allow, hold or forbid for an intended Amazon Ads MCP Server tool call (budgets, bids, campaigns), checked against the agency's mandate for that ad account before the call runs. Deny-by-default; user-access tools are never grantable; every verdict carries a recomputable record. MolTrust holds no Amazon credentials and never calls Amazon. MCP tools ads_onboard, ads_mandate_template, ads_check at https://api.moltrust.ch/mcp; REST POST /enforce/check (X-API-Key), POST /ads/demo. Free: 1 ad account, 1,000 checks/month; Pro USD 49 per ad account/month.","tags":["advertising","amazon-ads","mcp","authorization","mandate","budget","aae","guardrail"],"examples":["May my agent raise the daily budget of campaign C1 to 350 USD under our mandate?","Build a mandate for ad account ENTITY1ABC, brand Acme, daily cap 500 USD","Check this campaign_management-update_target_bid call before it goes to Amazon"],"inputModes":["application/json","text/plain"],"outputModes":["application/json"]}],"conformance":true,"conformance_errors":null,"homepage":null,"repository":null,"license":null,"pricing":null,"contact":null,"id":"68673be8-e667-425f-9dcd-36ef150942e4","created_at":"2026-06-30T20:21:00.672679Z","updated_at":"2026-10-13T00:44:16.056367Z","hidden":false,"flag_count":0,"maintainer_notes":"Verified working at registration. Agent responds to `message/send` correctly via the A2A SDK.","category":"trust-safety","category_secondary":null,"uptime_percentage":100.0,"avg_response_time_ms":1999,"last_health_check":"2026-10-13T00:44:15.847874Z","is_healthy":true,"status_notes":[],"task_conformance":{"category":"WORKING","passed":true,"checked_at":"2026-10-12T07:07:19.334089Z","response_ms":1285}}