One layer. Every agent protocol.

Fetch and normalize a delegate agent's .well-known/agent-card.json before trusting it.

Discover an MCP server's tools and transport from its well-known server card.

Resolve a service's /.well-known/api-catalog linkset and flag off-domain API descriptions.

Audit packaged skills for unsafe instructions before an agent loads them.

Browser-exposed page tools via navigator.modelContext (experimental).

Resolve an agent's OASF record from the AGNTCY (Internet of Agents) directory before trusting it.

Inspect a site's NLWeb natural-language endpoint and the schema it exposes to agents.

Resolve a PKI-anchored agent name-service record before connecting.

Resolve an agent handle to its signed AgentFacts document and verify capabilities, endpoints, and credentialed assertions before trusting it.

Ed25519 HTTP Message Signatures verify the AI agents that visit your site.

Verify a card's JWS and flag keys not anchored to the issuer's own domain.

Resolve an authorization server's metadata; score PKCE, implicit-flow, and domain-bound endpoints (verifies signed_metadata when present).

Verify an agent's decentralized identifier and control proof — the ANP identity layer.

Verify a standalone W3C VC 2.0 — Data Integrity or JOSE proof — the credential primitive under AP2 mandates and did:wba.

Verify the RFC 9421 agent-recognition signature and parse the signed consumer/intent proofs a TAP agent presents at checkout.

Preflight the transport interfaces an A2A delegate declares — flag off-domain or non-HTTPS task-message routing before you send.

Check an MCP server's declared transport and endpoint — flag off-domain or insecure message routing before you connect.

Inspect IBM/BeeAI ACP REST-native agent messages and manifests.

Govern AGNTCY Secure Low-latency Interactive Messaging between agents.

Govern decentralized agent-to-agent networking over ANP.

Resolve protected-resource metadata to score a target's auth posture and named authorization servers.

Audit an agent-onboarding/credential-claim manifest and its identity providers.

Verify W3C Verifiable Credentials binding agent intent to user authorization.

Detect Identity-Assertion Authorization Grant (ID-JAG) support in OAuth metadata and assess the cross-app token-exchange posture (MCP authz SEP-990).

Detect scraping, enumeration, and probe patterns on inbound agent traffic.

Cache and enforce machine-readable crawl + AI-usage permissions.

Honor standardized train/infer/index content-usage preferences.

Honor publisher RSL licenses governing AI use of content.

Preflight an HTTP 402 payment demand — verify the charged resource, pay-to address, asset, and network before an agent pays.

Validate a delegated payment allowance — capped amount, merchant binding, expiry, and network-token (not raw PAN) funding.

Validate UCP agent-checkout discovery and lifecycle (Google · Shopify).

Govern in-band machine-to-machine HTTP payments (Stripe · Tempo).

Govern AP2 agent-initiated payments across card, ACH, and crypto rails.