{ "automatic_evidence_credit": false, "captures": [], "change_log": [ { "after_hash": "631f3cdd116fe9d2eb640dbc941fce0208c513b40422b85d34213c4432d5374f", "before_hash": "89a83f20bb9cee1559448a64625f4eeaabc0c299b3bec2047e37388d8fe765ad", "diff": { "changes": [ { "compatibility_class": "NON_BREAKING", "fact": "skill added", "kind": "SKILL_ADDED", "path": "skills[check]", "security_relevant_field": false }, { "compatibility_class": "NON_BREAKING", "fact": "skill added", "kind": "SKILL_ADDED", "path": "skills[verify_receipt]", "security_relevant_field": false }, { "compatibility_class": "BREAKING", "fact": "version downgrade", "kind": "VERSION_DOWNGRADE", "path": "version", "security_relevant_field": false } ], "classified": true, "counts_by_class": { "BREAKING": 1, "INFO": 0, "NON_BREAKING": 2 }, "taxonomy_version": "1.0.0", "total": 3, "truncated": false }, "entry_sha256": "929dbf4d4236d4b3c099c0aa8ea1fa2b3d7074eb99e958a7250eb3a7935cf54f", "evidence_class": "MANIFEST_CHANGE", "labels": [ "MANIFEST_CHANGED" ], "observed_at_utc": "2026-10-12T11:39:26Z", "previous_entry_sha256": "9f4bb732cf961d3c8c5a1fd944ec75550bfcee45f5713b032d103edc129072d4", "receipt_id": "e5740408-ed42-543c-a75a-f24366fdca5e", "receipt_url": "https://www.gaipagents.com/v1/free/receipts/e5740408-ed42-543c-a75a-f24366fdca5e", "sequence": 26548, "target_id": "obs_74ef4195ba1448eaf20a5af5", "target_kind": "A2A_CARD", "target_locator": "https://api.inamprotocol.org/.well-known/agent-card.json" } ], "check_outcomes": { "ask": { "changed_since": "https://www.gaipagents.com/v1/free/observatory/changed-since?url=", "changes_and_reachability": "https://www.gaipagents.com/v1/free/changes/subscribe?url=", "conformance": "https://www.gaipagents.com/v1/free/conformance/check?url=" }, "published": false, "why": "Outcomes of GAIP's own checks (whether the endpoint answered, HTTP status, response time, conformance findings) are given only to a caller who asks about the URL, never on a public page, list or feed. The same applies to every target." }, "conformance": { "findings": "GIVEN_TO_CALLER_ONLY", "meaning": "The rule catalogue this manifest was read against at the observed time. The finding codes go only to a caller who checks the URL (check_outcomes.ask.conformance).", "observed_at_utc": "2026-10-17T01:54:44Z", "protocol": "A2A", "rule_catalogue_route": "/v1/free/knowledge/conformance-rules", "rule_catalogue_version": "1.0.0" }, "corrections": { "contact": "https://www.gaipagents.com/contact", "exclusion": "https://www.gaipagents.com/v1/free/observatory/corrections/exclusion", "opt_out": "POST kind OPT_OUT to the route; the target is withdrawn from public view at once (a pause). The site's owner makes it permanent at https://www.gaipagents.com/v1/free/observatory/corrections/exclusion.", "queued_for_review": 0, "route": "https://www.gaipagents.com/v1/free/observatory/corrections" }, "declared_derivations": { "data_appetite": null, "dependency_domains": [], "last_observed_at_utc": "2026-10-17T01:54:44Z", "meaning": "Derived by GAIP from what this agent declared, at the stated time: the categories of data its tools' input fields ask for (counts, by keyword rules gaip.data-appetite-rules.v1), the outside domains its declarations point to, and the operator as the agent itself publishes it. Facts about declarations, not an assessment of the agent or its operator.", "operator": { "as_published": "INAM Protocol", "source_kind": "card_provider_organization" }, "rules_version": "gaip.data-appetite-rules.v1", "schema_version": "gaip.declared-derivations.v1" }, "latest": { "baseline_at_utc": "2026-10-07T23:27:06Z", "manifest_sha256": "631f3cdd116fe9d2eb640dbc941fce0208c513b40422b85d34213c4432d5374f", "observed_at_utc": "2026-10-17T01:54:44Z" }, "metadata_signals": { "meaning": "Pattern rules are published only as aggregate rates across all observed targets (see the summary), never per party. GAIP issues no overall verdict and does not rank parties.", "overall_verdict": null, "per_target_results": null, "published": "AGGREGATE_ONLY_IN_SUMMARY", "rules": [ { "rationale": "Zero-width, bidirectional-control and Unicode tag characters are not visible to a human reader but are read by language models. GAIP reports whether any occur; many have ordinary uses.", "rule_id": "OBS-SIG-001", "title": "Invisible or bidirectional-control Unicode characters in names or descriptions" }, { "rationale": "Tool and skill descriptions are read by models. GAIP reports whether a description contains phrases shaped like instructions to a model (the patterns in GAIP's public conformance rule catalogue, plus the phrases listed in the Observatory method). Such phrases can be benign.", "rule_id": "OBS-SIG-002", "title": "Instruction-like text in descriptions" }, { "rationale": "When a description refers to a tool name that only a different observed server publishes, a model using both servers may connect the two. GAIP reports whether such a reference occurs; shared names are common and often coincidental.", "rule_id": "OBS-SIG-003", "title": "Description names a tool published by a different observed server" }, { "rationale": "Declared OAuth scopes whose names contain wildcard or whole-account wording (*, all, admin, root, full) request wide access by name. GAIP reports whether such a scope name is declared; it does not know what the scope grants.", "rule_id": "OBS-SIG-004", "title": "Declared authorization scopes with broad-access wording" } ], "third_party_scanners": [ { "name": "Snyk agent-scan (formerly Invariant Labs mcp-scan)", "status": "NOT_RUN", "url": "https://github.com/snyk/agent-scan" }, { "name": "Cisco AI Defense MCP Scanner", "status": "NOT_RUN", "url": "https://github.com/cisco-ai-defense/mcp-scanner" } ] }, "method": "https://www.gaipagents.com/observatory", "notice": "Facts observed by GAIP at the stated time (UTC); they may be out of date. This is not an assessment of safety, quality, security, legality or trustworthiness of any party, and not a recommendation. To request a correction, add a right of reply or opt out, POST to https://www.gaipagents.com/v1/free/observatory/corrections or use https://www.gaipagents.com/contact.", "price_gbp": 0, "schema_version": "gaip.observatory.v1.target", "silent_changes_last_30_days": { "days": 30, "entries_read_at_most": 200, "kinds": [], "line": null, "meaning": "Weeks (ISO) in which GAIP recorded a change to the agent's declared tools or interface (tools added or removed, descriptions re-worded, input or output schema, behaviour labels, sign-in, terms or prices, endpoint host) and no declared version (registry or card version, serverInfo.version) moved that week. A week whose version movement is not recorded is not counted. Dated facts from the public change log; not an assessment of the agent.", "weeks": [], "weeks_with_silent_changes": 0 }, "snapshot": { "capabilities": { "pushNotifications": false, "streaming": false }, "description": "Evidence-based reputation for AI agents. Ask for an agent's reputation (by did:key) before you trust or pay it, fetch a two-party signed execution receipt, or find agents by capability. Read-only; free; no auth.", "name": "INAM Protocol Registry", "parts": [ "agent_card" ], "protocol": "A2A", "protocolVersion": "0.3.0", "provider": { "organization": "INAM Protocol", "url": "https://inamprotocol.org/" }, "public_copy": "Text excerpts of at most 300 characters; input schemas and security schemes as SHA-256 and size only.", "scopes": [], "security": null, "securitySchemes": null, "skills": [ { "description": "Reputation of an agent by its did:key: trust score, evidenceLevel (none / countersigned / independently_verified), finalized receipts, dispute and rejection flags. Check evidenceLevel, not trustScore alone.", "id": "check_reputation", "name": "Check agent reputation", "tags": [ "reputation", "trust", "agents", "due-diligence" ] }, { "description": "A two-party signed execution receipt by its sha256 id, with any independent verification records.", "id": "get_receipt", "name": "Get execution receipt", "tags": [ "receipt", "verification", "audit" ] }, { "description": "Registry-side integrity checks on a receipt: both signatures, content-addressed id, transparency-log inclusion, parties not revoked, no open dispute, and spec/output text against the receipt's hashes when supplied. Returns a pass/fail verdict with per-check reasons, signed by the registry's hosted a", "id": "verify_receipt", "name": "Verify execution receipt", "tags": [ "receipt", "verification", "audit" ] }, { "description": "Registered agents offering a capability, optionally above a minimum trust score.", "id": "search_agents", "name": "Find agents by capability", "tags": [ "discovery", "search", "agents" ] }, { "description": "Checks an x402 endpoint URL, an EVM wallet or a did:key before paying it, from public signals (402 payment requirements, ERC-8004 identity and feedback, INAM wallet link and reputation, Web Bot Auth key directory, HTTPS, domain age). Returns verdict (pass / caution / fail, the worst line), per-line ", "id": "check", "name": "Pre-payment check", "tags": [ "x402", "payments", "due-diligence", "erc-8004" ] } ], "supportedInterfaces": [ { "protocolBinding": "JSONRPC", "url": "https://api.inamprotocol.org/a2a" } ], "url": "https://api.inamprotocol.org/a2a", "version": "0.12.0" }, "status_history": [ { "manifest_partial": false, "manifest_parts": [ "agent_card" ], "manifest_sha256": "631f3cdd116fe9d2eb640dbc941fce0208c513b40422b85d34213c4432d5374f", "observed_at_utc": "2026-10-17T01:54:44Z", "protocol_version": "0.3.0" }, { "manifest_partial": false, "manifest_parts": [ "agent_card" ], "manifest_sha256": "631f3cdd116fe9d2eb640dbc941fce0208c513b40422b85d34213c4432d5374f", "observed_at_utc": "2026-10-16T01:15:23Z", "protocol_version": "0.3.0" }, { "manifest_partial": null, "manifest_parts": [ "agent_card" ], "manifest_sha256": "631f3cdd116fe9d2eb640dbc941fce0208c513b40422b85d34213c4432d5374f", "observed_at_utc": "2026-10-12T11:39:26Z", "protocol_version": "0.3.0" }, { "manifest_partial": null, "manifest_parts": [ "agent_card" ], "manifest_sha256": "89a83f20bb9cee1559448a64625f4eeaabc0c299b3bec2047e37388d8fe765ad", "observed_at_utc": "2026-10-07T23:27:06Z", "protocol_version": "0.3.0" } ], "target": { "corrections_route": "https://www.gaipagents.com/v1/free/observatory/corrections", "first_seen_at_utc": "2026-10-07T22:27:06Z", "kind": "A2A_CARD", "last_observed_at_utc": "2026-10-17T01:54:44Z", "locator": "https://api.inamprotocol.org/.well-known/agent-card.json", "name": "api.inamprotocol.org", "source": "a2aregistry-org", "target_id": "obs_74ef4195ba1448eaf20a5af5" } }