AxioRankZero-Trust for AI Agents
Open the console

Discovery plane

API Catalog (RFC 9727)

Resolve a service's /.well-known/api-catalog linkset and flag off-domain API descriptions.

View coverage matrixRead the spec

Live in the gateway today.

What it answers

What can this agent or service do?

API Catalog (RFC 9727) sits in the discovery plane of the agent-interop stack. What can this agent or service do? AxioRank tracks it as one row in a coverage matrix that spans six planes, from discovery and identity to authorization, content permission, and commerce.

Plane

Discovery

Status

live

Direction

outbound

How AxioRank handles it

Governed, not just listed.

Live in the gateway today. Outbound: when the agents you run reach out to other agents and services.

Read the API Catalog (RFC 9727) specification

More discovery protocols

Related protocols

A2A Agent Card

Fetch and normalize a delegate agent's .well-known/agent-card.json before trusting it.

Open

MCP Server Card

Discover an MCP server's tools and transport from its well-known server card.

Open

Agent Skills (SKILL.md)

Audit packaged skills for unsafe instructions before an agent loads them.

Open

WebMCP

Browser-exposed page tools via navigator.modelContext (experimental).

Open

AGNTCY Agent Directory

Resolve an agent's OASF record from the AGNTCY (Internet of Agents) directory before trusting it.

Open

All protocols

The full coverage matrix across six planes.

Open

Govern the whole agent stack

AxioRank verifies identities and capabilities across the agent ecosystem, from discovery to commerce. See the full coverage matrix, machine-readable.

View coverageRead the docs