{"capabilities":{"extensions":[{"description":"MCP server with the vouch, verify_quote and run_scenarios tools.","params":{"endpoint":"https://agentvouch.us/mcp","protocolVersion":"2025-03-26","transport":"streamable-http"},"uri":"https://modelcontextprotocol.io"}],"pushNotifications":false,"streaming":false},"defaultInputModes":["text/plain","application/json"],"defaultOutputModes":["text/plain","application/json"],"description":"Buyer-side payment agent that verifies who it is paying through GoDaddy ANS (sealed identity certificate, liveness, proof-of-possession, signed single-use quote) and refuses impostors. Ask it to vouch for any agent by hostname.","name":"AgentVouch","protocolVersion":"1.0","provider":{"organization":"AgentVouch","url":"https://agentvouch.us"},"securityRequirements":[{"noAuth":[]}],"securitySchemes":{"noAuth":{"description":"Public and read-only: vouching and the demo scenarios need no credential. Rate limited per client.","type":"noAuth"}},"signatures":[{"header":{"kid":"68sCtw27__3V9XkZVKPMR74pZ0gbJaTZvKLjGwS4HzE"},"protected":"eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vYWdlbnR2b3VjaC51cy8ud2VsbC1rbm93bi9qd2tzLmpzb24iLCJraWQiOiI2OHNDdHcyN19fM1Y5WGtaVktQTVI3NHBaMGdiSmFUWnZLTGpHd1M0SHpFIiwidHlwIjoiYWdlbnQtY2FyZCtqd3MifQ","signature":"kNH-Blklt7NcDNjCjhDhG2qEAyV-j6MzqBRWXjCOQiCEfgsljTrc8-30c0rkSDR5_1w4jCIW7RqEbk2EKF6xXw"}],"skills":[{"description":"Given a hostname, fetches the agent's ANS trust card and verifies its identity certificate against the GoDaddy ANS transparency log (sealed fingerprint, hostname, ANS name, liveness), plus its advisory Trust Index score.","examples":["vouch for supplier.webmesh.ai","is rogue-supplier.webmesh.ai who it claims to be?"],"id":"vouch","name":"Vouch for an agent","tags":["ANS","verification","trust"]},{"description":"Given a quote another agent presents, runs every check AgentVouch runs before paying - ANS identity and liveness of the signer, the signature over the terms, expiry, audience, mandate, and whether payTo matches the account the signer attests in its signed card - and reports what it found. Pays nothing.","examples":["verify this quote from supplier.agentvouch.us"],"id":"verify_quote","name":"Verify a quote before paying","tags":["ANS","quote","verification"]},{"description":"Pays one genuinely verified supplier and blocks eight attacks (impostor certificate, copied certificate, replayed challenge, tampered quote, replayed quote, wrong-audience quote, over-limit payment, genuine-but-unauthorized payee), with evidence and a hash-chained audit ledger.","examples":["run scenarios"],"id":"run_scenarios","name":"Verify-then-pay scenarios","tags":["ANS","payments","fraud"]}],"supportedInterfaces":[{"protocolBinding":"jsonrpc","protocolVersion":"1.0","url":"https://agentvouch.us"},{"protocolBinding":"MCP","protocolVersion":"2025-03-26","transport":"streamable-http","url":"https://agentvouch.us/mcp"}],"url":"https://agentvouch.us","version":"1.0.0","x-discovery":{"agents_index":"https://agentvouch.us/.well-known/agents-index.json","ans_name":"ans://v1.0.0.agentvouch.us","ans_registered":"prod","dns_aid_svcb":"agentvouch.us IN SVCB 1 . alpn=a2a,h2","dns_aid_txt":"_dnsid.agentvouch.us","tl_badge":"https://transparency.ans.godaddy.com/v1/agents/deef0687-b27d-4fbb-bbe7-6fe88a34fecd","trust_index":{"auth":"sso-key","note":"Advisory only. AgentVouch never authorizes a payment by score.","score_field":"scores.trustScore","score_url":"https://api.godaddy.com/v1/ans/registered-agents?query=agentvouch.us"}},"x-identity":{"ans":{"transparencyLog":"https://transparency.ans.godaddy.com/v1/agents/deef0687-b27d-4fbb-bbe7-6fe88a34fecd","trustCard":"https://agentvouch.us/.well-known/ans/trust-card.json","uri":"ans://v1.0.0.agentvouch.us"}},"x-security-note":"Reading is public and unauthenticated (noAuth): vouching, the scenarios and this card need no credential, and none of them move money. What is enforced is on the paying side: AgentVouch pays only a payee in its mandate, whose ANS-sealed identity certificate answered a fresh possession challenge, against a single-use quote signed by that same key, to an account attested in this signed card. The card is signed with the ANS identity key itself, so its signature ties it to the transparency log rather than to a key published beside it."}