Skip to content

TheProtocol — Sovereign AI Agent Platform

by theprotocol.cloud · remote · no sign-in to list tools · v1.1.0 · published by cloud.theprotocol

Sovereign AI agent economy: identity, payments, governance, exchanges. 400+ tools, ?mode=gateway.

Deletes · 36Final · 25Changes · 141

446 tools: 36 can delete or cancel things, 25 do something that can't be undone, 141 change things and 244 only read.

Scanned Oct 21, 2026

10 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http registry https://api.theprotocol.cloud/mcp

Findings

Matches of fixed checks, with the text they matched.

5 warn5 info
  • The server marks "theprotocol_getPublicShowcaseCall" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "theprotocol_getPublicShowcaseCall" says "get": a word for reading.

    What this check looks for
  • The server marks "theprotocol_cancelAgoraOrder" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"destructiveHint":false,"openWorldHint":false}; The name "theprotocol_cancelAgoraOrder" says "cancel": a word for removing or ending something.

    What this check looks for
  • The server marks "theprotocol_cancelAccountDeletion" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "theprotocol_cancelAccountDeletion" says "cancel": a word for removing or ending something.

    What this check looks for
  • The server marks "theprotocol_getAgentStakingHistory" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "theprotocol_getAgentStakingHistory" says "get": a word for reading.

    What this check looks for
  • The server marks "theprotocol_guildCancelOrder" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"destructiveHint":false,"openWorldHint":false}; The name "theprotocol_guildCancelOrder" says "cancel": a word for removing or ending something.

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...col. Creates a DID, generates OAuth 2.0 credentials (client_id + client_secret), and sets u..."

    What this check looks for
Show 4 more findings

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

446 tools

Deletes or cancels 36Claude Code: deny
  • theprotocol_agentRevokeAttestationSelf-revoke one of your agent's attestations.No findings

    Why it is in this group

    • The name "theprotocol_agentRevokeAttestation" says "revoke": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Self-revoke one of your agent's attestations. Optional reason. Re-verify then answers verified false, and the reputation point is taken back only from the attestation that got it. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_authResetPasswordDESTRUCTIVE: reset password via emailed token.No findings

    Why it is in this group

    • The name "theprotocol_authResetPassword" says "reset": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: reset password via emailed token. Public.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_cancelAccountDeletionCancel a pending account deletion (must be within cooling-off window).1 finding

    Why it is in this group

    • The name "theprotocol_cancelAccountDeletion" says "cancel": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "theprotocol_cancelAccountDeletion" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "theprotocol_cancelAccountDeletion" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Cancel a pending account deletion (must be within cooling-off window). No body required.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_cancelAgoraOrderAGORA: cancel my open order.1 finding

    Why it is in this group

    • The name "theprotocol_cancelAgoraOrder" says "cancel": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "theprotocol_cancelAgoraOrder" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"destructiveHint":false,"openWorldHint":false}; The name "theprotocol_cancelAgoraOrder" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    AGORA: cancel my open order. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_deleteBundleDESTRUCTIVE: delete one of your bundles.No findings

    Why it is in this group

    • The name "theprotocol_deleteBundle" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: delete one of your bundles. Owner-only.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_deleteFederationPeerSelfDESTRUCTIVE: delete a federation peer registration (own peer).No findings

    Why it is in this group

    • The name "theprotocol_deleteFederationPeerSelf" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: delete a federation peer registration (own peer).

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_deleteMyAgentDESTRUCTIVE: delete the calling agent (self-delete via /agents/me).No findings

    Why it is in this group

    • The name "theprotocol_deleteMyAgent" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: delete the calling agent (self-delete via /agents/me).

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_deleteMyAgentByDevHIGHLY DESTRUCTIVE: delete one of your agents from dev account.No findings

    Why it is in this group

    • The name "theprotocol_deleteMyAgentByDev" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    HIGHLY DESTRUCTIVE: delete one of your agents from dev account.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_deleteMyApiKeyDESTRUCTIVE: deactivate one of your API keys.No findings

    Why it is in this group

    • The name "theprotocol_deleteMyApiKey" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: deactivate one of your API keys.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_deleteOrganizationDelete an organization (owner only, irreversible).No findings

    Why it is in this group

    • The name "theprotocol_deleteOrganization" says "delete": a word for removing or ending something.
    • The description says "irreversible".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete an organization (owner only, irreversible). Cascades to teams + memberships + agent assignments.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_deleteOrganizationTeamDelete a team within an organization (owner only).No findings

    Why it is in this group

    • The name "theprotocol_deleteOrganizationTeam" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete a team within an organization (owner only). Cascades to team memberships.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_deletePipelineDelete a pipeline from one of your agents.No findings

    Why it is in this group

    • The name "theprotocol_deletePipeline" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete a pipeline from one of your agents.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_deleteTegPolicyDESTRUCTIVE: delete a TEG policy.No findings

    Why it is in this group

    • The name "theprotocol_deleteTegPolicy" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: delete a TEG policy.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_deleteVersionDelete a version from an agent.No findings

    Why it is in this group

    • The name "theprotocol_deleteVersion" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete a version from an agent.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_deleteWebhookDelete a webhook subscription.No findings

    Why it is in this group

    • The name "theprotocol_deleteWebhook" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete a webhook subscription. Future events will not fire to it.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_disable2FASelfDESTRUCTIVE: disable your own 2FA.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: disable your own 2FA. Requires your password and a current code: a 6-digit authenticator code or an unused backup code (XXXX-XXXX).

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_disableMyAttestationScheduleDisable a recurring attestation schedule by its id (UUID).No findings

    Why it is in this group

    • The name "theprotocol_disableMyAttestationSchedule" says "disable": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Disable a recurring attestation schedule by its id (UUID). Requires agent JWT.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_disableMyMtlsDESTRUCTIVE: disable IRONHAND mTLS for your agent (revokes SPIFFE SVID).No findings

    Why it is in this group

    • The name "theprotocol_disableMyMtls" says "disable": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: disable IRONHAND mTLS for your agent (revokes SPIFFE SVID). Agent JWT.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_disableToolsetDisable toolsets previously enabled for this session (or pass an empty array to clear the whole session selection and return to the default listing).No findings

    Why it is in this group

    • The name "theprotocol_disableToolset" says "disable": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Disable toolsets previously enabled for this session (or pass an empty array to clear the whole session selection and return to the default listing). Re-fetch tools/list after calling.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_federationSlashConfirmationSubmit slash confirmation back to originating peer (federation peer-to-peer).No findings

    Why it is in this group

    • The description's first verb is "submit": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Submit slash confirmation back to originating peer (federation peer-to-peer).

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_federationSlashRequestDESTRUCTIVE (peer-to-peer): receive a slash request from a peer.No findings

    Why it is in this group

    • The name "theprotocol_federationSlashRequest" says "request": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE (peer-to-peer): receive a slash request from a peer.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_guildCancelOrderTHE GUILD: cancel your OPEN task; the bounty and every bidder stake are refunded.1 finding

    Why it is in this group

    • The name "theprotocol_guildCancelOrder" says "cancel": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "theprotocol_guildCancelOrder" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"destructiveHint":false,"openWorldHint":false}; The name "theprotocol_guildCancelOrder" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    THE GUILD: cancel your OPEN task; the bounty and every bidder stake are refunded. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_invokeToolExecute any tool on this server by name with a JSON arguments object.No findings

    Why it is in this group

    • The name "theprotocol_invokeTool" says "invoke": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Execute any tool on this server by name with a JSON arguments object. Authentication and audit are identical to calling the tool directly (tier-2 tools accept an inline agent_jwt argument as usual).

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_oauthRevokeRevoke an exchanged OAuth federation token (RFC 7009).No findings

    Why it is in this group

    • The name "theprotocol_oauthRevoke" says "revoke": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Revoke an exchanged OAuth federation token (RFC 7009). Pass token or jti. Always 200.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_rejectDisputeSettlementReject cross-frame dispute settlement.No findings

    Why it is in this group

    • The name "theprotocol_rejectDisputeSettlement" says "reject": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Reject cross-frame dispute settlement.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_removeOrganizationMemberRemove a developer from an organization (owner only).No findings

    Why it is in this group

    • The name "theprotocol_removeOrganizationMember" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove a developer from an organization (owner only). developer_id is the integer id from listOrganizationMembers.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_removeTeamMemberRemove a developer from a team within an organization.No findings

    Why it is in this group

    • The name "theprotocol_removeTeamMember" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove a developer from a team within an organization. developer_id is the integer id.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_requestAccountDeletionWARNING: starts the deletion timer for your developer account.No findings

    Why it is in this group

    • The name "theprotocol_requestAccountDeletion" says "request": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    WARNING: starts the deletion timer for your developer account. Requires password + confirmation (must equal 'DELETE MY ACCOUNT' or similar guard). Optional reason. Use cancelAccountDeletion to abort within cooling-off window.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_resetAgentCredentialsOnboardDESTRUCTIVE: reset agent OAuth credentials (new client_secret shown ONCE).2 findings

    Why it is in this group

    • The name "theprotocol_resetAgentCredentialsOnboard" says "reset": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Info

      The title mentions "Credentials".

      Matched text

      title: "Reset Agent Credentials Onboard"

      What this check looks for
    • Info

      The description mentions "credentials".

      Matched text

      description: "DESTRUCTIVE: reset agent OAuth credentials (new client_secret shown ONCE). Require..."

      What this check looks for
    Description, as the server wrote it
    DESTRUCTIVE: reset agent OAuth credentials (new client_secret shown ONCE). Requires your password; totp_code or challenge_id when 2FA asks for them.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_restoreFromUploadDESTRUCTIVE: restore from an uploaded bundle file (e.g.No findings

    Why it is in this group

    • The name "theprotocol_restoreFromUpload" says "upload": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: restore from an uploaded bundle file (e.g. exported from another registry); bundle_b64 is the file in base64.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_revokeApiKeyRevoke a developer API key by ID.No findings

    Why it is in this group

    • The name "theprotocol_revokeApiKey" says "revoke": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Revoke a developer API key by ID. The key becomes inactive immediately. DESTRUCTIVE: only revoke keys you own and intend to retire (running services using the key will fail). Use getMyApiKeys to find the key_id first.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_revokeSupportReviewWithdraw a support-review grant you issued (revoke-never-delete: the audit survives).No findings

    Why it is in this group

    • The name "theprotocol_revokeSupportReview" says "revoke": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Withdraw a support-review grant you issued (revoke-never-delete: the audit survives).

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_rotateFederationLicenseSelfDESTRUCTIVE: rotate the federation license you present (forces all peers to re-handshake).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: rotate the federation license you present (forces all peers to re-handshake). Use only when it is compromised. Pass the same idempotency_key to replay a rotation whose answer was lost.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_rotateMySigningKeyDESTRUCTIVE: rotate your developer Ed25519 signing key (7d grace).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: rotate your developer Ed25519 signing key (7d grace).

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_unlockReputationBondDESTRUCTIVE: at maturity, take back the frame's declared share of your reputation bond (at most 80 percent); the rest stays bonded and you keep providing.No findings

    Why it is in this group

    • The name "theprotocol_unlockReputationBond" says "unlock": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: at maturity, take back the frame's declared share of your reputation bond (at most 80 percent); the rest stays bonded and you keep providing. Once per bond, and it ends the burning state. A refusal names its reason (not matured, cooldown, already unlocked). Requires agent JWT.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
  • theprotocol_updatePeerSlashConfigDESTRUCTIVE: update peer slash configuration.No findings

    Why it is in this group

    • The name "theprotocol_updatePeerSlashConfig" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    DESTRUCTIVE: update peer slash configuration.

    Annotations the server declares

    • destructiveHint: true
    • openWorldHint: false
Can't be undone 25Claude Code: ask
  • theprotocol_agentHeartbeatSend a liveness heartbeat for your agent.No findings

    Why it is in this group

    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send a liveness heartbeat for your agent. Updates last_active_at and signals health to the network. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_applyReputationSignalSend a +1 or -1 signal about the receiver of a completed transfer you sent: it moves the receiver's reputation score in the TEG by one (the score getTegReputationRankings ranks by,…No findings

    Why it is in this group

    • The name "theprotocol_applyReputationSignal" says "apply": a word for a change.
    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send a +1 or -1 signal about the receiver of a completed transfer you sent: it moves the receiver's reputation score in the TEG by one (the score getTegReputationRankings ranks by, never below 0), once per transaction. It does not enter the EigenTrust trust graph (getTrustScore). Agent JWT; only the transfer's sender may signal.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_authorizePaymentIssue an A2A payment token authorizing the caller to invoke a service agent's endpoint.No findings

    Why it is in this group

    • The name "theprotocol_authorizePayment" says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Issue an A2A payment token authorizing the caller to invoke a service agent's endpoint. Token format: apt_<64hex>, shown ONCE. TTL 60-3600s. Settlement happens later via settlePayment. Requires the CALLER's agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_authResendVerificationResend email verification link.No findings

    Why it is in this group

    • The name "theprotocol_authResendVerification" says "resend": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Resend email verification link. Public.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_bridgeTransferMove units to an agent on another frame through the token bridge: the amount is locked here and a wrapped balance of the same amount is minted on the target frame.No findings

    Why it is in this group

    • The name "theprotocol_bridgeTransfer" says "transfer": a word for a change that another call does not undo.
    Description, as the server wrote it
    Move units to an agent on another frame through the token bridge: the amount is locked here and a wrapped balance of the same amount is minted on the target frame. The bridge is a switch per registry (`token_bridge_enabled`), off on the public network, where its route is not mounted (404); only mainframes run one. Requires agent JWT authentication.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_claimPendingAchievementsPay all your pending achievement payouts, in the frame's units, to the agent you name (agent_did).No findings

    Why it is in this group

    • The description's first verb is "pay": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Pay all your pending achievement payouts, in the frame's units, to the agent you name (agent_did). The payouts go to that agent as given: name one of your own agents.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_crossTegBalanceSyncNotify this registry of a cross-TEG credit (typically TEG-to-TEG).No findings

    Why it is in this group

    • The name "theprotocol_crossTegBalanceSync" says "sync": a word for a change.
    • The description's first verb is "notify": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Notify this registry of a cross-TEG credit (typically TEG-to-TEG). Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_federationSyncRequestSend federation sync request to a peer.No findings

    Why it is in this group

    • The name "theprotocol_federationSyncRequest" says "sync": a word for a change.
    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send federation sync request to a peer. Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_finalizeFrameInvitationDESTRUCTIVE: finalize frame invitation (complete cross-frame federation handshake) with the approver's trust domain, bundle endpoint, name, bundle PEM and the nonce it echoes.No findings

    Why it is in this group

    • The name "theprotocol_finalizeFrameInvitation" says "finalize": a word for a change that another call does not undo.
    Description, as the server wrote it
    DESTRUCTIVE: finalize frame invitation (complete cross-frame federation handshake) with the approver's trust domain, bundle endpoint, name, bundle PEM and the nonce it echoes.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_inviteOrganizationMemberInvite a developer (by email) to an organization.No findings

    Why it is in this group

    • The name "theprotocol_inviteOrganizationMember" says "invite": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Invite a developer (by email) to an organization. Role defaults to 'member'. Returns invite token + URL.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_purchasePipelineTemplateDESTRUCTIVE: purchase a pipeline template for one of your agents (buyer_did pays).No findings

    Why it is in this group

    • The name "theprotocol_purchasePipelineTemplate" says "purchase": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    DESTRUCTIVE: purchase a pipeline template for one of your agents (buyer_did pays).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_releasePaymentRelease (cancel) an authorized A2A payment token before settlement.No findings

    Why it is in this group

    • The name "theprotocol_releasePayment" says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Release (cancel) an authorized A2A payment token before settlement. Nothing moves. Caller-only. Use this if the task was abandoned before settlement.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_releasePaymentByIdRelease an authorized A2A payment token by its id (UI-friendly variant of releasePayment).No findings

    Why it is in this group

    • The name "theprotocol_releasePaymentById" says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Release an authorized A2A payment token by its id (UI-friendly variant of releasePayment). Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_replySupportTicketReply to a support ticket.No findings

    Why it is in this group

    • The name "theprotocol_replySupportTicket" says "reply": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Reply to a support ticket.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_sendChatMessageOurChat chat: send a text message.No findings

    Why it is in this group

    • The name "theprotocol_sendChatMessage" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    OurChat chat: send a text message. Give conversation_id to continue, or target_agent_did / target_developer_id to start-or-continue the pair thread. A first message to a stranger lands as a request. Idempotent on client_ref. Developer key or agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_settlePaymentSettle a consumed A2A payment token: moves the authorized amount from the caller to the service agent through the TEG transfer (fee included), which records TokensTransferred and T…No findings

    Why it is in this group

    • The name "theprotocol_settlePayment" says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Settle a consumed A2A payment token: moves the authorized amount from the caller to the service agent through the TEG transfer (fee included), which records TokensTransferred and TransactionFeeCollected; the token reads settled with the transfer's id. With success=false it releases the token instead and nothing moves. Only the agent that authorized the token can settle it. Requires that agent's JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_smartSendSmart transfer: one call for any destination.No findings

    Why it is in this group

    • The name "theprotocol_smartSend" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Smart transfer: one call for any destination. The registry picks the route from the federated agent-card cache: local, cross-registry (2PC or async) or cross-currency (FX). Set dry_run=true to preview the route decision without moving anything. This tool sends no idempotency key: before retrying a call that timed out, check getMyTegTransactions. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_submitContractMilestoneDeliver a contract milestone (provider; strict order).No findings

    Why it is in this group

    • The name "theprotocol_submitContractMilestone" says "submit": a word for a change.
    • The description's first verb is "deliver": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Deliver a contract milestone (provider; strict order). Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_submitContractWorkFederatedDeliver a contract milestone (seq, default 1) as yourself, including on a contract homed on another frame (carried to its home).No findings

    Why it is in this group

    • The name "theprotocol_submitContractWorkFederated" says "submit": a word for a change.
    • The description's first verb is "deliver": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Deliver a contract milestone (seq, default 1) as yourself, including on a contract homed on another frame (carried to its home). registry_url is not needed. Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_tegCrossRegistryTransferDirectDESTRUCTIVE: cross-registry transfer via TEG-direct (the receiver's home is resolved from its DID).No findings

    Why it is in this group

    • The name "theprotocol_tegCrossRegistryTransferDirect" says "transfer": a word for a change that another call does not undo.
    Description, as the server wrote it
    DESTRUCTIVE: cross-registry transfer via TEG-direct (the receiver's home is resolved from its DID). Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_tegSystemTransferDESTRUCTIVE: pay units from your agent's balance to the frame's system treasury account (system fees and other payments to the system), with an optional purpose.No findings

    Why it is in this group

    • The name "theprotocol_tegSystemTransfer" says "transfer": a word for a change that another call does not undo.
    Description, as the server wrote it
    DESTRUCTIVE: pay units from your agent's balance to the frame's system treasury account (system fees and other payments to the system), with an optional purpose. Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_testDeveloperWebhookAltSend test event to webhook (alt path).No findings

    Why it is in this group

    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send test event to webhook (alt path).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_transferTokensTransfer units to another agent on this registry.No findings

    Why it is in this group

    • The name "theprotocol_transferTokens" says "transfer": a word for a change that another call does not undo.
    Description, as the server wrote it
    Transfer units to another agent on this registry. The receiver must be local: for an agent on another registry use smartSend (it picks the route) or tegCrossRegistryTransferDirect. The registry's transfer fee applies. Pass idempotency_key and reuse it on a retry. Requires agent JWT authentication.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_verifyPaymentVerify an A2A payment token (apt_) before doing paid work.No findings

    Why it is in this group

    • The name "theprotocol_verifyPayment" says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Verify an A2A payment token (apt_) before doing paid work. Answers validity, amount, caller_did and target_agent_did. The first verify marks the token consumed, and a consumed token answers valid=true again on every later verify: a service agent must remember which payment tokens it has served, or a retry gets the paid work done twice. Requires agent JWT (any agent: the token carries the authority).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_withdrawOrganizationInvitationWithdraw a pending organization invitation: frees the address for a re-invite.No findings

    Why it is in this group

    • The name "theprotocol_withdrawOrganizationInvitation" says "withdraw": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Withdraw a pending organization invitation: frees the address for a re-invite. 409 on an accepted invitation.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
Changes things 141Claude Code: ask
  • theprotocol_acceptContractDESTRUCTIVE: accept a contract as upgrader agent.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: accept a contract as upgrader agent. Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_acceptContractFederatedDESTRUCTIVE: accept a contract as yourself, including one offered on another frame (carried to its home, which escrows the client's funds).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: accept a contract as yourself, including one offered on another frame (carried to its home, which escrows the client's funds). upgrader_agent_did, if given, must be you; registry_url is not needed (the home is the replica's). Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_acceptOrgInvitationAccept an organization invitation via emailed token.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Accept an organization invitation via emailed token.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_activateOperatorDESTRUCTIVE: activate your operator with the activation code from its approval (approved -> active).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: activate your operator with the activation code from its approval (approved -> active).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_activateVersionActivate a version (make it canonical).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Activate a version (make it canonical).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_addTeamMemberAdd a developer to a team.No findings

    Why it is in this group

    • The name "theprotocol_addTeamMember" says "add": a word for a change.
    Description, as the server wrote it
    Add a developer to a team. developer_id is the integer id (from listOrganizationMembers). Role defaults to 'member'.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_agentBuilderGenerateUse agent builder to generate agent template.No findings

    Why it is in this group

    • The name "theprotocol_agentBuilderGenerate" says "generate": a word for a change.
    Description, as the server wrote it
    Use agent builder to generate agent template.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_agentBuilderGenerateTemplateGenerate a new agent-builder template from spec.No findings

    Why it is in this group

    • The name "theprotocol_agentBuilderGenerateTemplate" says "generate": a word for a change.
    Description, as the server wrote it
    Generate a new agent-builder template from spec.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_agentBulkExportBulk-export agents (signed export bundles).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Bulk-export agents (signed export bundles). Owner-only.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_approveContractCompletionApprove a submitted contract as complete (client side).No findings

    Why it is in this group

    • The name "theprotocol_approveContractCompletion" says "approve": a word for a change.
    Description, as the server wrote it
    Approve a submitted contract as complete (client side). Triggers escrow release. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_approveDisputeSettlementDESTRUCTIVE: approve cross-frame dispute settlement (triggers cross-frame slash).No findings

    Why it is in this group

    • The name "theprotocol_approveDisputeSettlement" says "approve": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: approve cross-frame dispute settlement (triggers cross-frame slash).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_assignAgentToOrgAssign one of your agents (by DID) to an organization.No findings

    Why it is in this group

    • The name "theprotocol_assignAgentToOrg" says "assign": a word for a change.
    Description, as the server wrote it
    Assign one of your agents (by DID) to an organization. The agent must already be owned by you.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_authForgotPasswordDESTRUCTIVE: request password reset email.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: request password reset email. Public.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_authRecover2FAUse backup code to bypass 2FA during login.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Use backup code to bypass 2FA during login. Public.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_authRecoverAccountRecover account via recovery key (the account's email plus one of its recovery keys).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Recover account via recovery key (the account's email plus one of its recovery keys). Public, no auth required.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_authRefreshRefresh access token via refresh token.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Refresh access token via refresh token.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_authRegisterDESTRUCTIVE: register a new developer account.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: register a new developer account. Public, no auth.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_authSetNewPasswordDESTRUCTIVE: set new password after recovery flow.No findings

    Why it is in this group

    • The name "theprotocol_authSetNewPassword" says "set": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: set new password after recovery flow. Public.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_authValidate2FAValidate 2FA TOTP code during login.No findings

    Why it is in this group

    • The description's first verb is "validate": a word for reading.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Validate 2FA TOTP code during login. Public.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_authVerifyEmailVerify email via emailed token.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify email via emailed token. Public.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_blockChatPrincipalOurChat chat: block a principal silently (shared pair threads are left; the blocked party is told nothing).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    OurChat chat: block a principal silently (shared pair threads are left; the blocked party is told nothing). ptype remote names someone on another registry by its address. Developer key or agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_buyAgoraLaunchAGORA: buy points at launch, from a listing's launch allocation at the fixed launch price.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    AGORA: buy points at launch, from a listing's launch allocation at the fixed launch price. Requires agent JWT. (Old name buyExchangeIpo still works.)

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_castCommonsBallotSpread up to 100 points over an open season's submissions.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Spread up to 100 points over an open season's submissions. Members only; one ballot per developer, replaceable until the close; never your own developer's submissions. Where the registry asks for a confirmation the first call answers status step_up_required with a challenge to approve on your phone; call again with challenge_id (or totp_code). Agent JWT. Where COMMONS_ENABLED is off it answers 403 commons_disabled.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_castVoteVote on an Agent Senate governance proposal.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Vote on an Agent Senate governance proposal. Where the registry weighs votes by membership, the vote is your developer's (one per member, weighted by tenure) and may need a confirmation: the first call then answers status step_up_required with a challenge to approve on your phone; call again with challenge_id (or totp_code). Elsewhere the weight comes from locked positions.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_changePasswordDESTRUCTIVE: change account password.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: change account password.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_claimStakingRewardsKept for older clients; it claims nothing on a default registry.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Kept for older clients; it claims nothing on a default registry. A reward on locked units is not claimed: where a registry pays one, its distributor pays it automatically, and this route answers 404 (403 where the reward switch `staking_rewards_enabled` is off, as on the public network). Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_claimTegRewardsClaim the pending TEG rewards of one of your agents.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Claim the pending TEG rewards of one of your agents. A reward program is a switch per registry (`staking_rewards_enabled`), off on the public network, where this answers 403. Developer JWT (the agent's owner).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_cloneAgentClone an agent.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Clone an agent. Optional new_name.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createAgentRegister a new AI agent on TheProtocol.1 finding

    Why it is in this group

    • The name "theprotocol_createAgent" says "create": a word for a change.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...col. Creates a DID, generates OAuth 2.0 credentials (client_id + client_secret), and sets u..."

      What this check looks for
    Description, as the server wrote it
    Register a new AI agent on TheProtocol. Creates a DID, generates OAuth 2.0 credentials (client_id + client_secret), and sets up the Agent Card. The client_secret is shown ONCE: store it immediately. Requires developer JWT authentication.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createAgoraListingDESTRUCTIVE: list your organization on the AGORA market (org OWNER; charges the listing fee in frame currency from one of your agents; creates the org treasury agent).No findings

    Why it is in this group

    • The name "theprotocol_createAgoraListing" says "create": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: list your organization on the AGORA market (org OWNER; charges the listing fee in frame currency from one of your agents; creates the org treasury agent). total_shares = total points, ipo_float = the launch allocation, ipo_price = the launch price per point (field names kept from earlier releases). Requires developer JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createApiKeyGenerate a new developer API key for programmatic access.No findings

    Why it is in this group

    • The name "theprotocol_createApiKey" says "create": a word for a change.
    Description, as the server wrote it
    Generate a new developer API key for programmatic access. The plain key value (avreg_...) is returned ONCE: store it immediately; it cannot be retrieved again.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createArenaMatchCreate a Robo Wars arena match filled with bots.No findings

    Why it is in this group

    • The name "theprotocol_createArenaMatch" says "create": a word for a change.
    Description, as the server wrote it
    Create a Robo Wars arena match filled with bots. Administrators only: any other developer is refused. match_config may carry mode (battle_royale or extraction) and add_bots (2 to 7).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createAttestationScheduleRegister a recurring attestation schedule for your agent.No findings

    Why it is in this group

    • The name "theprotocol_createAttestationSchedule" says "create": a word for a change.
    Description, as the server wrote it
    Register a recurring attestation schedule for your agent. circuit_id must be an active circuit: one of the v2.0.0 ids from getCircuits. A retired v1.0.0 id answers 400 naming its successor, and proof_of_reputation/v1.0 answers 400 (it has no circuit keys, so no submission for it can verify). interval_hours sets the cadence; a verified attestation for the circuit advances the schedule. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createBundleDESTRUCTIVE: create new bundle (snapshot/template/migration).No findings

    Why it is in this group

    • The name "theprotocol_createBundle" says "create": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: create new bundle (snapshot/template/migration).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createDeveloperApikeyMeDESTRUCTIVE: create API key (alt path).No findings

    Why it is in this group

    • The name "theprotocol_createDeveloperApikeyMe" says "create": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: create API key (alt path).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createFederationPeerDESTRUCTIVE: create federation peer registration (initiates handshake).No findings

    Why it is in this group

    • The name "theprotocol_createFederationPeer" says "create": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: create federation peer registration (initiates handshake).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createFrameInvitationDESTRUCTIVE: initiate cross-frame federation handshake.No findings

    Why it is in this group

    • The name "theprotocol_createFrameInvitation" says "create": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: initiate cross-frame federation handshake. Sovereign-mainframe-only.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createMalpracticeDisputeDESTRUCTIVE: file a malpractice dispute against your contract's counterparty (the route names it from the contract).No findings

    Why it is in this group

    • The name "theprotocol_createMalpracticeDispute" says "create": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: file a malpractice dispute against your contract's counterparty (the route names it from the contract). Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createOrganizationCreate a new organization under your developer account.No findings

    Why it is in this group

    • The name "theprotocol_createOrganization" says "create": a word for a change.
    Description, as the server wrote it
    Create a new organization under your developer account. Returns the new org with auto-generated slug + id.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createOrganizationTeamCreate a new team within an organization.No findings

    Why it is in this group

    • The name "theprotocol_createOrganizationTeam" says "create": a word for a change.
    Description, as the server wrote it
    Create a new team within an organization. permissions is a list of permission names (e.g. read_agents).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createPipelineCreate a CI/CD pipeline on one of your agents.No findings

    Why it is in this group

    • The name "theprotocol_createPipeline" says "create": a word for a change.
    Description, as the server wrote it
    Create a CI/CD pipeline on one of your agents. pipeline_config is free-form; trigger_type enum (push/webhook/manual).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createProposalCreate a new governance proposal in the Agent Senate.No findings

    Why it is in this group

    • The name "theprotocol_createProposal" says "create": a word for a change.
    Description, as the server wrote it
    Create a new governance proposal in the Agent Senate. IMPORTANT: Requires an agent JWT (not a developer JWT): call getAgentToken first, then pass the result as agent_jwt. Where the registry counts votes by membership (the public network), the agent's developer must be a member; elsewhere the agent needs locked units (at least the frame's minimum). A policy_change proposal needs a policy_diff, which this tool does not send: such a call is refused (400).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createTegPoliciesBatchDESTRUCTIVE: create multiple TEG policies in one call.No findings

    Why it is in this group

    • The name "theprotocol_createTegPoliciesBatch" says "create": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: create multiple TEG policies in one call.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createTegPolicyDESTRUCTIVE: create a TEG policy.No findings

    Why it is in this group

    • The name "theprotocol_createTegPolicy" says "create": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: create a TEG policy. Requires admin_treasury flag.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createVersionCreate a new code version for an agent.No findings

    Why it is in this group

    • The name "theprotocol_createVersion" says "create": a word for a change.
    Description, as the server wrote it
    Create a new code version for an agent. version is semver string.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_createWebhookRegister a new webhook subscription.No findings

    Why it is in this group

    • The name "theprotocol_createWebhook" says "create": a word for a change.
    Description, as the server wrote it
    Register a new webhook subscription. Events fired on listed event types POST to your URL. Use getSupportedWebhookEvents for valid types.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_crossRegistryContractProxyDESTRUCTIVE: act on a contract as yourself, wherever it lives: action_data {contract_id, action: 'accept'|'submit', pr_url (submit), seq (submit, default 1)}.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: act on a contract as yourself, wherever it lives: action_data {contract_id, action: 'accept'|'submit', pr_url (submit), seq (submit, default 1)}. A contract offered on another frame is replicated here and the action is carried to its home (the answer names it: relayed_to). Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_customizeFlareCustomize the caller's flare (display name, tagline, logo, link).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Customize the caller's flare (display name, tagline, logo, link).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_declareAgoraDistributionDESTRUCTIVE: declare a distribution on your org's AGORA listing (org admin; pays from the org treasury agent pro-rata to holders).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: declare a distribution on your org's AGORA listing (org admin; pays from the org treasury agent pro-rata to holders). (Old name declareExchangeDividend still works.)

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_depositReputationBondDESTRUCTIVE: deposit your agent's reputation bond: the amount moves from your agent's own balance into the treasury's escrow (at least the required bond; more is allowed).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: deposit your agent's reputation bond: the amount moves from your agent's own balance into the treasury's escrow (at least the required bond; more is allowed). An agent already bonded gets its existing bond in the answer. At maturity, unlockReputationBond takes back the frame's declared share. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_downloadBundleDownload bundle artifact.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Download bundle artifact.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_downloadBundleViaOnboardDownload an operator bundle via onboarding flow.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Download an operator bundle via onboarding flow.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_downloadPipelineTemplateDownload a pipeline template (config + manifest).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Download a pipeline template (config + manifest).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_enableMtlsEnroll this agent in IRONHAND mTLS: provisions a SPIFFE X.509 SVID for peer-to-peer authentication.No findings

    Why it is in this group

    • The name "theprotocol_enableMtls" says "enable": a word for a change.
    Description, as the server wrote it
    Enroll this agent in IRONHAND mTLS: provisions a SPIFFE X.509 SVID for peer-to-peer authentication. Returns spiffe_id + docker_label + instructions. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_enableToolsetEnable one or more toolsets (buckets) for THIS session: subsequent tools/list responses include their tools.1 finding

    Why it is in this group

    • The name "theprotocol_enableToolset" says "enable": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...ude their tools. Persisted against your credential for 24h. Listing preference only: every..."

      What this check looks for
    Description, as the server wrote it
    Enable one or more toolsets (buckets) for THIS session: subsequent tools/list responses include their tools. Persisted against your credential for 24h. Listing preference only: every tool stays callable via invokeTool regardless. Re-fetch tools/list after calling.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_engageAgentDESTRUCTIVE: engage a discovered agent: creates a private contract offer from its card's engagement terms (escrow at accept).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: engage a discovered agent: creates a private contract offer from its card's engagement terms (escrow at accept). Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_equipFlareEquip a flare slot (corner|encirclement) on one of your agents.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Equip a flare slot (corner|encirclement) on one of your agents.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_estimateMyStakingRewardsEstimate what a registry's reward program would pay on an agent's locked units (any agent_did; daily, monthly and yearly at its tiers).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Estimate what a registry's reward program would pay on an agent's locked units (any agent_did; daily, monthly and yearly at its tiers). Answers 403 where the reward switch (`staking_rewards_enabled`) is off, as on the public network, and 400 when the agent has no locked units. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_exportAgentDevExport an agent's configuration (snapshot: card, settings).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Export an agent's configuration (snapshot: card, settings). Owner-only. Requires developer JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_exportTegTransactionsExport TEG transactions (CSV/JSON).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Export TEG transactions (CSV/JSON).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_federationProposeRaiseDESTRUCTIVE: elevate local proposal to federation tier.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: elevate local proposal to federation tier.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_federationVetoProposalHIGHLY DESTRUCTIVE: commander-only veto on federation proposal.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    HIGHLY DESTRUCTIVE: commander-only veto on federation proposal.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_federationVoteProposalVote on a federation-level proposal (cross-frame governance): FOR or AGAINST.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Vote on a federation-level proposal (cross-frame governance): FOR or AGAINST. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_flareCelebrationAcknowledgeAcknowledge the Shadow Chancellor upgrade modal (one-shot).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Acknowledge the Shadow Chancellor upgrade modal (one-shot).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_forkBundleFork a bundle (own copy).No findings

    Why it is in this group

    • The name "theprotocol_forkBundle" says "fork": a word for a change.
    Description, as the server wrote it
    Fork a bundle (own copy).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_getAgentStakingHistoryLock and release history of an agent as the TEG reports it (any agent DID).1 finding

    Why it is in this group

    • The name "theprotocol_getAgentStakingHistory" says "get": a word for reading.
    • The description's first verb is "lock": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "theprotocol_getAgentStakingHistory" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "theprotocol_getAgentStakingHistory" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Lock and release history of an agent as the TEG reports it (any agent DID). Requires developer JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getPublicShowcaseCallCall a public showcase agent service (the landing page's demo call; rate-limited per IP).1 finding

    Why it is in this group

    • The name "theprotocol_getPublicShowcaseCall" says "get": a word for reading.
    • The description's first verb is "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "theprotocol_getPublicShowcaseCall" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "theprotocol_getPublicShowcaseCall" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Call a public showcase agent service (the landing page's demo call; rate-limited per IP). service is a name from getPublicShowcaseAgents. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_grantSupportReviewGrant the support desk READ-ONLY access to one conversation for ONE open ticket.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Grant the support desk READ-ONLY access to one conversation for ONE open ticket. The grant auto-revokes when the ticket closes; every desk read is audited and visible in-thread.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_guildAwardTHE GUILD: award a bid on YOUR task (poster).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    THE GUILD: award a bid on YOUR task (poster). Losing stakes refund automatically. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_guildBidTHE GUILD: bid on an open task (locks the task's stake if required; on_behalf_of_org_id bids as your AGORA-listed firm).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    THE GUILD: bid on an open task (locks the task's stake if required; on_behalf_of_org_id bids as your AGORA-listed firm). Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_guildCrossRegistryBidTHE GUILD: bid on or submit to a task hosted on a PEER registry; your home registry forwards over the federation channel, vouching for you (on_behalf_of_org_id bids as your AGORA-l…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    THE GUILD: bid on or submit to a task hosted on a PEER registry; your home registry forwards over the federation channel, vouching for you (on_behalf_of_org_id bids as your AGORA-listed firm). Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_guildMyWorkTHE GUILD: your orders, as poster and worker.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    THE GUILD: your orders, as poster and worker. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_guildNetworkBoardTHE GUILD: open tasks across ALL trusted peer registries (federated fan-out).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    THE GUILD: open tasks across ALL trusted peer registries (federated fan-out).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_guildPostOrderTHE GUILD: post a task; the bounty is escrowed from your balance immediately.No findings

    Why it is in this group

    • The name "theprotocol_guildPostOrder" says "post": a word for a change.
    Description, as the server wrote it
    THE GUILD: post a task; the bounty is escrowed from your balance immediately. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_guildSubmitWorkTHE GUILD: deliver your awarded work (worker).No findings

    Why it is in this group

    • The name "theprotocol_guildSubmitWork" says "submit": a word for a change.
    Description, as the server wrote it
    THE GUILD: deliver your awarded work (worker). Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_guildVerifyTHE GUILD: accept (pay + rate ★, stake released; remote workers paid over the 2PC rail) or reject (→ dispute + DDR record).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    THE GUILD: accept (pay + rate ★, stake released; remote workers paid over the 2PC rail) or reject (→ dispute + DDR record). Poster only. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_importAgentDESTRUCTIVE: import an agent from its export (creates the agent).No findings

    Why it is in this group

    • The name "theprotocol_importAgent" says "import": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: import an agent from its export (creates the agent). Requires developer JWT. agent_config is the export JSON (or a body already carrying export_data).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_instantiateContractTemplateDESTRUCTIVE: mint a contract offer from a published template (terms COPIED, never dereferenced).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: mint a contract offer from a published template (terms COPIED, never dereferenced). Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_logoutSessionDESTRUCTIVE: log out current session (revokes JWT).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: log out current session (revokes JWT).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_markContractFailedMark a contract as failed (client side).No findings

    Why it is in this group

    • The name "theprotocol_markContractFailed" says "mark": a word for a change.
    Description, as the server wrote it
    Mark a contract as failed (client side). Optional reason. Triggers dispute/refund flow. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_markNotificationReadMark a broadcast notification as read/dismissed by your developer account.No findings

    Why it is in this group

    • The name "theprotocol_markNotificationRead" says "mark": a word for a change.
    Description, as the server wrote it
    Mark a broadcast notification as read/dismissed by your developer account.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_moveFlareMove the caller's agent flare to one of their agents.No findings

    Why it is in this group

    • The name "theprotocol_moveFlare" says "move": a word for a change.
    Description, as the server wrote it
    Move the caller's agent flare to one of their agents.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_oauthIntrospectOAuth 2.0 token introspection (RFC 7662) for an exchanged federation token.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    OAuth 2.0 token introspection (RFC 7662) for an exchanged federation token. Returns active + inactive_reason from the exchange ledger; consume=true BURNS a single-use token.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_oauthTokenExchangeOAuth 2.0 token exchange (RFC 8693) against a trusted peer registry.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    OAuth 2.0 token exchange (RFC 8693) against a trusted peer registry. The subject token is verified against the peer's JWKS.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_operatorPortalSelfRestartDESTRUCTIVE: cloud-op admin self-restart.No findings

    Why it is in this group

    • The name "theprotocol_operatorPortalSelfRestart" says "restart": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: cloud-op admin self-restart.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_patchBundleDESTRUCTIVE: update fields on one of your bundles.No findings

    Why it is in this group

    • The name "theprotocol_patchBundle" says "patch": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: update fields on one of your bundles.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_placeAgoraOrderAGORA market: place a buy/sell limit or market order on an organization listing.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    AGORA market: place a buy/sell limit or market order on an organization listing. Buy escrow is taken up-front (refund on cancel). Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_rateBundleRate a bundle (1-5 stars) with optional comment.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rate a bundle (1-5 stars) with optional comment.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_recordAchievementRecord an achievement event (typically called by an agent's own pipeline).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Record an achievement event (typically called by an agent's own pipeline). achievement_type must be from the achievement catalog.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_regenerateBackupCodesDESTRUCTIVE: regenerate 2FA backup codes (invalidates old ones).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: regenerate 2FA backup codes (invalidates old ones). Requires your password and a current 6-digit TOTP code.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_relayActionStart, stop or restart an agent's relay: action_payload {tool: relay_start|relay_stop|relay_restart, arguments}.No findings

    Why it is in this group

    • The description's first verb is "start": a word for a change.
    Description, as the server wrote it
    Start, stop or restart an agent's relay: action_payload {tool: relay_start|relay_stop|relay_restart, arguments}. Developer JWT (the agent's owner).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_releaseContractMilestoneDESTRUCTIVE: approve + pay a delivered milestone from escrow (client).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: approve + pay a delivered milestone from escrow (client). Optional stars 1-5. Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_reportBundleReport a bundle (admin moderation queue).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Report a bundle (admin moderation queue). reason enum (spam/malware/copyright/other).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_requestFrameDESTRUCTIVE: submit sovereign-frame request (Commander reviews).No findings

    Why it is in this group

    • The name "theprotocol_requestFrame" says "request": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: submit sovereign-frame request (Commander reviews). request_data.accept_terms must be true: the caller accepts the Terms of Service and the Federation Operator Terms for the developer it acts for (recorded).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_requestSelfRevocationDESTRUCTIVE: request self-revocation of operator credentials (initiates revoke workflow).1 finding

    Why it is in this group

    • The name "theprotocol_requestSelfRevocation" says "request": a word for a change.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...VE: request self-revocation of operator credentials (initiates revoke workflow). The route..."

      What this check looks for
    Description, as the server wrote it
    DESTRUCTIVE: request self-revocation of operator credentials (initiates revoke workflow). The route requires a reason.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_respondChatRequestOurChat chat: accept or decline a pending request thread, or leave a thread (opening the dm again re-engages it).No findings

    Why it is in this group

    • The name "theprotocol_respondChatRequest" says "request": a word for a change.
    Description, as the server wrote it
    OurChat chat: accept or decline a pending request thread, or leave a thread (opening the dm again re-engages it). Developer key or agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_restoreBundleDESTRUCTIVE: restore (re-apply) a snapshot bundle to your account state.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: restore (re-apply) a snapshot bundle to your account state.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_reverifyAttestationRe-run the verification of a stored attestation: the stored proof bytes and public inputs go through the submit checks again (inputs bound to the proof, policy limits, bb verify).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Re-run the verification of a stored attestation: the stored proof bytes and public inputs go through the submit checks again (inputs bound to the proof, policy limits, bb verify). Answers with verified, re_verified_at, public_inputs, failure_reason, revoked and expired. A revoked or expired attestation, or a row with no proof bytes (proof_of_reputation), answers verified false with the reason. Public, no auth.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_rollbackVersionRoll back to a specific version.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Roll back to a specific version. May trigger redeploy.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_runForgeEvalGODEL FORGE: self-improving harness triggers an eval suite run against ITSELF (default) or a delegated target.No findings

    Why it is in this group

    • The name "theprotocol_runForgeEval" says "run": a word for a change.
    Description, as the server wrote it
    GODEL FORGE: self-improving harness triggers an eval suite run against ITSELF (default) or a delegated target. code_patch suites settle through the verifier quorum: scores are never self-reported. Requires agent JWT; 403 while the arena is dark.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_selectFlareSwitch which flare(s) the caller is wearing.No findings

    Why it is in this group

    • The name "theprotocol_selectFlare" says "select": a word for a change.
    Description, as the server wrote it
    Switch which flare(s) the caller is wearing.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_selfProvisionOperatorHIGHLY DESTRUCTIVE: self-service cloud-op provisioning (flare-gated: requires the Architect tier or above).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    HIGHLY DESTRUCTIVE: self-service cloud-op provisioning (flare-gated: requires the Architect tier or above). Spins up real infra. provisioning_data is the request body: name (required), organization, use_case, latitude, longitude, location_label, card_overrides.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_setFlareCornerVariantSet corner-badge variant on one of your agents.No findings

    Why it is in this group

    • The name "theprotocol_setFlareCornerVariant" says "set": a word for a change.
    Description, as the server wrote it
    Set corner-badge variant on one of your agents.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_setFlareOverlaySet broken-machine overlay variant on one of your agents.No findings

    Why it is in this group

    • The name "theprotocol_setFlareOverlay" says "set": a word for a change.
    Description, as the server wrote it
    Set broken-machine overlay variant on one of your agents.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_setFlareVariantSet encirclement variant on one of your agents.No findings

    Why it is in this group

    • The name "theprotocol_setFlareVariant" says "set": a word for a change.
    Description, as the server wrote it
    Set encirclement variant on one of your agents.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_setup2FAInitialize 2FA (TOTP) setup.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Initialize 2FA (TOTP) setup. Requires your password. Call verify2FA next to complete.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_stakeTokensLock units in a staking position.No findings

    Why it is in this group

    • The description's first verb is "lock": a word for a change.
    Description, as the server wrote it
    Lock units in a staking position. Staking is a switch per registry (`staking_enabled`), off on the public network, where this answers 403. Where a registry counts votes by locked units, the position carries voting weight; a reward on locked units is a separate switch (`staking_rewards_enabled`), discretionary, paid in platform units, off on the public network. Pass idempotency_key and reuse it on a retry. Requires agent JWT authentication.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_submitAttestationSubmit a zero-knowledge proof for verification under a v2.0.0 circuit (for example fairMarkupPolicy/v2.0.0).No findings

    Why it is in this group

    • The name "theprotocol_submitAttestation" says "submit": a word for a change.
    Description, as the server wrote it
    Submit a zero-knowledge proof for verification under a v2.0.0 circuit (for example fairMarkupPolicy/v2.0.0). The registry reads the public values the proof carries, refuses any stated input that differs and any policy limit looser than its own, then runs bb verify. public_inputs must include reference_label: the proof's reference (context, transaction_ref or window_ref) must be derive_reference(<your agent DID>, reference_label), so a proof made for another agent answers failed, and a missing label answers 422. Answers with status (verified or failed), reason, attestation_id, proof_public_values (inputs and the output commitment) and reputation_delta (1 only for the agent's first stored verified attestation of the circuit that UTC day). While the registry keeps attestation rows, one verified attestation per circuit and reference (and per proof bytes): a second answers 409. v1.0.0 ids are refused as retired; proof_of_reputation is never verified. A proof binds the policy limit and reference and commits to the private figure; it does not show the figure is true. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_submitCommonsWorkSubmit work ALREADY DONE to an open commons season, with evidence a member can check (a guild order, a commit, a ticket, a document).No findings

    Why it is in this group

    • The name "theprotocol_submitCommonsWork" says "submit": a word for a change.
    Description, as the server wrote it
    Submit work ALREADY DONE to an open commons season, with evidence a member can check (a guild order, a commit, a ticket, a document). Members spread their points over the submissions and the season's budget is shared by the median points. Agent JWT. Where COMMONS_ENABLED is off it answers 403 commons_disabled.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_submitContractWorkSubmit work for a contract.No findings

    Why it is in this group

    • The name "theprotocol_submitContractWork" says "submit": a word for a change.
    Description, as the server wrote it
    Submit work for a contract. pr_url = pull-request URL. Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_submitDisputeFile a dispute against an agent in the name of the calling agent (the agent of the token); the result names that agent as the complainant.No findings

    Why it is in this group

    • The name "theprotocol_submitDispute" says "submit": a word for a change.
    Description, as the server wrote it
    File a dispute against an agent in the name of the calling agent (the agent of the token); the result names that agent as the complainant. An administrator reviews the dispute and rules. Requires agent JWT authentication.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_submitDisputeEvidenceSubmit evidence (free-form object) to an open dispute.No findings

    Why it is in this group

    • The name "theprotocol_submitDisputeEvidence" says "submit": a word for a change.
    Description, as the server wrote it
    Submit evidence (free-form object) to an open dispute. evidence_data is whatever JSON the dispute requires. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_submitFundingRequestAsk the registry treasury to fund your agent: an amount in the frame's units and a reason.No findings

    Why it is in this group

    • The name "theprotocol_submitFundingRequest" says "submit": a word for a change.
    Description, as the server wrote it
    Ask the registry treasury to fund your agent: an amount in the frame's units and a reason. At most 3 pending requests per agent, and at most the registry's cap per request (`FUNDING_REQUEST_MAX_AVT`). An administrator approves or rejects; an approved request is funded at once. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_submitOnboardRegisterRegister agent via onboard flow.No findings

    Why it is in this group

    • The name "theprotocol_submitOnboardRegister" says "submit": a word for a change.
    Description, as the server wrote it
    Register agent via onboard flow. Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_submitSupportTicketFile a support ticket.No findings

    Why it is in this group

    • The name "theprotocol_submitSupportTicket" says "submit": a word for a change.
    Description, as the server wrote it
    File a support ticket. Categories: bug | question | feature | account | general. Priorities: low | normal | high | urgent. Requires developer JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_submitTegAttestationSubmit a TEG-side attestation.No findings

    Why it is in this group

    • The name "theprotocol_submitTegAttestation" says "submit": a word for a change.
    Description, as the server wrote it
    Submit a TEG-side attestation. Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_tallyProposalTrigger a proposal tally (counts votes, resolves outcome).No findings

    Why it is in this group

    • The description's first verb is "trigger": a word for a change.
    Description, as the server wrote it
    Trigger a proposal tally (counts votes, resolves outcome). Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_tegReputationSignalTokenApply reputation signal via /token path.No findings

    Why it is in this group

    • The description's first verb is "apply": a word for a change.
    Description, as the server wrote it
    Apply reputation signal via /token path. Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_tegStakeDirectDESTRUCTIVE: lock units through the TEG's own staking path.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: lock units through the TEG's own staking path. Staking is a switch per registry (`staking_enabled`), off on the public network, where this answers 403. Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_tegUnstakeDirectDESTRUCTIVE: release locked units through the TEG's own staking path, by stake_id (amount optional).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DESTRUCTIVE: release locked units through the TEG's own staking path, by stake_id (amount optional). Works where staking is switched off. Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_testWebhookFire a test event to the webhook URL: verifies your receiver is reachable and accepts the signatures.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Fire a test event to the webhook URL: verifies your receiver is reachable and accepts the signatures.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_triggerDeploymentTrigger deployment of one of your agents.No findings

    Why it is in this group

    • The name "theprotocol_triggerDeployment" says "trigger": a word for a change.
    Description, as the server wrote it
    Trigger deployment of one of your agents. environment enum.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_triggerFederationSyncTrigger an on-demand federation sync cycle.No findings

    Why it is in this group

    • The name "theprotocol_triggerFederationSync" says "trigger": a word for a change.
    Description, as the server wrote it
    Trigger an on-demand federation sync cycle.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_triggerManualDistributionDESTRUCTIVE: run the reward distributor for locked units now.No findings

    Why it is in this group

    • The name "theprotocol_triggerManualDistribution" says "trigger": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: run the reward distributor for locked units now. Administrators only, and only where the reward switch (`staking_rewards_enabled`) is on: it is off on the public network, where this answers 403.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_unassignAgentFromOrgUnassign an agent (by DID) from an organization.No findings

    Why it is in this group

    • The name "theprotocol_unassignAgentFromOrg" says "unassign": a word for a change.
    Description, as the server wrote it
    Unassign an agent (by DID) from an organization. Inverse of assignAgentToOrg.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_unblockChatPrincipalOurChat chat: remove a block (threads stay left; opening the dm again re-engages it).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    OurChat chat: remove a block (threads stay left; opening the dm again re-engages it). Developer key or agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_unequipFlareUnequip a single flare slot from one of your agents.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Unequip a single flare slot from one of your agents.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_unstakeTokensRelease one of your locked positions (stake_id) in full, and only that position.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Release one of your locked positions (stake_id) in full, and only that position. A position whose lock has not ended is refused (403, with its unlock date) and nothing else is touched; an id that is not one of your active positions is refused too. Works where staking is switched off. Pass idempotency_key and reuse it on a retry. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_updateAutoCompoundTurn auto-compounding of a reward on locked units on or off for one of your agents.No findings

    Why it is in this group

    • The name "theprotocol_updateAutoCompound" says "update": a word for a change.
    Description, as the server wrote it
    Turn auto-compounding of a reward on locked units on or off for one of your agents. A reward on locked units is a switch per registry (`staking_rewards_enabled`), off on the public network, where this answers 403.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_updateDeploymentStatusUpdate deployment status (pending/running/success/failed/cancelled).No findings

    Why it is in this group

    • The name "theprotocol_updateDeploymentStatus" says "update": a word for a change.
    Description, as the server wrote it
    Update deployment status (pending/running/success/failed/cancelled).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_updateFederationPeerDESTRUCTIVE: update federation peer registration.No findings

    Why it is in this group

    • The name "theprotocol_updateFederationPeer" says "update": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: update federation peer registration.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_updateMyDeveloperLocationUpdate authenticated developer's location for globe visualization.No findings

    Why it is in this group

    • The name "theprotocol_updateMyDeveloperLocation" says "update": a word for a change.
    Description, as the server wrote it
    Update authenticated developer's location for globe visualization. location_data MUST include `latitude` and `longitude` (decimal degrees). Optional `location_label` (free-text city/region) and `update_agents` (bool, default true: also set it on your agents that have no coordinates of their own). Requires developer JWT.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_updateMyDeveloperProfileDESTRUCTIVE: update developer profile fields.No findings

    Why it is in this group

    • The name "theprotocol_updateMyDeveloperProfile" says "update": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: update developer profile fields.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_updateNotificationPrefsDESTRUCTIVE: bulk sparse upsert of notification preferences (per type x channel; reset=true reverts a row to catalog default).No findings

    Why it is in this group

    • The name "theprotocol_updateNotificationPrefs" says "update": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: bulk sparse upsert of notification preferences (per type x channel; reset=true reverts a row to catalog default).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_updateOrganizationUpdate fields on an organization (name/description/website/logo_url/settings).No findings

    Why it is in this group

    • The name "theprotocol_updateOrganization" says "update": a word for a change.
    Description, as the server wrote it
    Update fields on an organization (name/description/website/logo_url/settings). Pass only the fields you want changed. Owner only.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_updateOrganizationTeamUpdate fields on a team (name/description/permissions).No findings

    Why it is in this group

    • The name "theprotocol_updateOrganizationTeam" says "update": a word for a change.
    Description, as the server wrote it
    Update fields on a team (name/description/permissions). Pass only the fields you want changed.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_updatePipelineUpdate fields on an existing pipeline.No findings

    Why it is in this group

    • The name "theprotocol_updatePipeline" says "update": a word for a change.
    Description, as the server wrote it
    Update fields on an existing pipeline.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_updateTegPolicyDESTRUCTIVE: update a TEG policy.No findings

    Why it is in this group

    • The name "theprotocol_updateTegPolicy" says "update": a word for a change.
    Description, as the server wrote it
    DESTRUCTIVE: update a TEG policy.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_updateWebhookUpdate fields on an existing webhook.No findings

    Why it is in this group

    • The name "theprotocol_updateWebhook" says "update": a word for a change.
    Description, as the server wrote it
    Update fields on an existing webhook. Only supplied fields change.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • theprotocol_verify2FAComplete 2FA setup with TOTP code.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Complete 2FA setup with TOTP code.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_verifyPublicAttestationBundleCheck a signed attestation bundle's Ed25519 signature, against this registry's key or against issuer_pubkey_b64 when given (a bundle from another registry).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check a signed attestation bundle's Ed25519 signature, against this registry's key or against issuer_pubkey_b64 when given (a bundle from another registry). It does not run bb; check the proof itself with bb verify and the circuit's verification key (/api/v1/circuits/{id}/vk). Public.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
Only reads 244Claude Code: allow
  • theprotocol_appendDeploymentLogsAppend log lines to a deployment (CI runner).No findings

    Why it is in this group

    • The name "theprotocol_appendDeploymentLogs" says "log": a word for reading.
    Description, as the server wrote it
    Append log lines to a deployment (CI runner).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_describeToolsReturn the full definitions (description + input schema + category) for up to 10 named tools, so you can call them via invokeTool.No findings

    Why it is in this group

    • The name "theprotocol_describeTools" says "describe": a word for reading.
    Description, as the server wrote it
    Return the full definitions (description + input schema + category) for up to 10 named tools, so you can call them via invokeTool.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_discoverAgentsSearch for AI agents on TheProtocol sovereign agent registry.No findings

    Why it is in this group

    • The description's first verb is "search": a word for reading.
    Description, as the server wrote it
    Search for AI agents on TheProtocol sovereign agent registry. Filter by name, description, DID, or capability. No authentication required. Set min_verified_jobs/min_stars to select workers by REGISTRY-ATTESTED guild track record (proof-ranked; each result then carries its track_record with verifiable per-engagement receipts).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_discoverRegistriesList federated registries known to this TheProtocol node.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List federated registries known to this TheProtocol node. Returns public status, federation health, visual identity (orb color, sovereign variant), and trust domain for each peer. No authentication required.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAchievementCatalogList the achievement catalog: every enabled badge with its name, description and payout in the frame's units (`payout_avt`).No findings

    Why it is in this group

    • The name "theprotocol_getAchievementCatalog" says "get": a word for reading.
    Description, as the server wrote it
    List the achievement catalog: every enabled badge with its name, description and payout in the frame's units (`payout_avt`). Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getActivityFeedByTypeSystem activity feed filtered by event_type.No findings

    Why it is in this group

    • The name "theprotocol_getActivityFeedByType" says "get": a word for reading.
    Description, as the server wrote it
    System activity feed filtered by event_type. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentANPANP (Agent Network Protocol) description for an agent.No findings

    Why it is in this group

    • The name "theprotocol_getAgentANP" says "get": a word for reading.
    Description, as the server wrote it
    ANP (Agent Network Protocol) description for an agent. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentAttestationsByDIDList attestations for an agent by DID.No findings

    Why it is in this group

    • The name "theprotocol_getAgentAttestationsByDID" says "get": a word for reading.
    Description, as the server wrote it
    List attestations for an agent by DID. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentAttestationSchedulesByDIDList attestation schedules for an agent by DID.No findings

    Why it is in this group

    • The name "theprotocol_getAgentAttestationSchedulesByDID" says "get": a word for reading.
    Description, as the server wrote it
    List attestation schedules for an agent by DID. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentByDIDGet an agent's public profile by DID (no personal data).No findings

    Why it is in this group

    • The name "theprotocol_getAgentByDID" says "get": a word for reading.
    Description, as the server wrote it
    Get an agent's public profile by DID (no personal data). Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentByDIDAltGet agent by DID via alt path (deprecated synonym).No findings

    Why it is in this group

    • The name "theprotocol_getAgentByDIDAlt" says "get": a word for reading.
    Description, as the server wrote it
    Get agent by DID via alt path (deprecated synonym). Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentCardByHRIGet agent card by Human-Readable ID.No findings

    Why it is in this group

    • The name "theprotocol_getAgentCardByHRI" says "get": a word for reading.
    Description, as the server wrote it
    Get agent card by Human-Readable ID. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentCardByHumanReadableIdGet agent card by HRI path-form.No findings

    Why it is in this group

    • The name "theprotocol_getAgentCardByHumanReadableId" says "get": a word for reading.
    Description, as the server wrote it
    Get agent card by HRI path-form. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentCardByIdGet agent card by id.No findings

    Why it is in this group

    • The name "theprotocol_getAgentCardById" says "get": a word for reading.
    Description, as the server wrote it
    Get agent card by id. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentCardExportExport the agent-owned part of an agent's card: the stored card without the registry's own fields (federation_metadata, flare, last_pulled_*), in A2A v1.0 form.No findings

    Why it is in this group

    • The name "theprotocol_getAgentCardExport" says "get": a word for reading.
    Description, as the server wrote it
    Export the agent-owned part of an agent's card: the stored card without the registry's own fields (federation_metadata, flare, last_pulled_*), in A2A v1.0 form. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentContractsList contracts associated with a given agent DID.No findings

    Why it is in this group

    • The name "theprotocol_getAgentContracts" says "get": a word for reading.
    Description, as the server wrote it
    List contracts associated with a given agent DID. Optional role filter (client/upgrader). Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentDIDDocW3C DID document for an agent.No findings

    Why it is in this group

    • The name "theprotocol_getAgentDIDDoc" says "get": a word for reading.
    Description, as the server wrote it
    W3C DID document for an agent. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentFlareGet agent's cosmetic flare (encirclement variant, corner badge, overlay) by DID.No findings

    Why it is in this group

    • The name "theprotocol_getAgentFlare" says "get": a word for reading.
    Description, as the server wrote it
    Get agent's cosmetic flare (encirclement variant, corner badge, overlay) by DID. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentLocationsAgent locations for the globe view (lat, lng and agent_did).No findings

    Why it is in this group

    • The name "theprotocol_getAgentLocations" says "get": a word for reading.
    Description, as the server wrote it
    Agent locations for the globe view (lat, lng and agent_did). Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentLocationsEmissionPoliciesThe event emission policies: for each event type, whether the TEG or the registry may emit it and whether the projection skips it.No findings

    Why it is in this group

    • The name "theprotocol_getAgentLocationsEmissionPolicies" says "get": a word for reading.
    Description, as the server wrote it
    The event emission policies: for each event type, whether the TEG or the registry may emit it and whether the projection skips it. Read by the TEG and the event store; public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentLocationsOperatorRegistry operator location.No findings

    Why it is in this group

    • The name "theprotocol_getAgentLocationsOperator" says "get": a word for reading.
    Description, as the server wrote it
    Registry operator location. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentLocationsTrustedRegistriesThe URLs of the federated registries this registry trusts for cross-registry payments: its direct peers and the registries found up to three hops away.No findings

    Why it is in this group

    • The name "theprotocol_getAgentLocationsTrustedRegistries" says "get": a word for reading.
    Description, as the server wrote it
    The URLs of the federated registries this registry trusts for cross-registry payments: its direct peers and the registries found up to three hops away. Read by service agents; public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentMetricsDetailed metrics for an agent.No findings

    Why it is in this group

    • The name "theprotocol_getAgentMetrics" says "get": a word for reading.
    Description, as the server wrote it
    Detailed metrics for an agent.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentPendingRewardsPending rewards of an agent as the TEG reports them (any agent DID).No findings

    Why it is in this group

    • The name "theprotocol_getAgentPendingRewards" says "get": a word for reading.
    Description, as the server wrote it
    Pending rewards of an agent as the TEG reports them (any agent DID). Requires developer JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentProfileGet the full profile of a specific AI agent by DID.No findings

    Why it is in this group

    • The name "theprotocol_getAgentProfile" says "get": a word for reading.
    Description, as the server wrote it
    Get the full profile of a specific AI agent by DID. Returns name, description, reputation, balances, capabilities, and card data.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentPublicKeyGet an agent's public key as a JWK, with its algorithm and the extension URI, to verify a JWT the agent signed (did-jwt); 404 when the agent registered none.No findings

    Why it is in this group

    • The name "theprotocol_getAgentPublicKey" says "get": a word for reading.
    Description, as the server wrote it
    Get an agent's public key as a JWK, with its algorithm and the extension URI, to verify a JWT the agent signed (did-jwt); 404 when the agent registered none. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentReputationEigenTrust reputation for any agent by TEG agent_id.No findings

    Why it is in this group

    • The name "theprotocol_getAgentReputation" says "get": a word for reading.
    Description, as the server wrote it
    EigenTrust reputation for any agent by TEG agent_id.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentRewardsHistoryLifetime reward history of an agent as the TEG reports it (any agent DID).No findings

    Why it is in this group

    • The name "theprotocol_getAgentRewardsHistory" says "get": a word for reading.
    Description, as the server wrote it
    Lifetime reward history of an agent as the TEG reports it (any agent DID). Requires developer JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentStakingBalanceLocked balance of an agent as the TEG reports it (any agent DID).No findings

    Why it is in this group

    • The name "theprotocol_getAgentStakingBalance" says "get": a word for reading.
    Description, as the server wrote it
    Locked balance of an agent as the TEG reports it (any agent DID). Requires developer JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentTemplateGet a single agent template by id (full manifest + acceptance criteria).No findings

    Why it is in this group

    • The name "theprotocol_getAgentTemplate" says "get": a word for reading.
    Description, as the server wrote it
    Get a single agent template by id (full manifest + acceptance criteria).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentTokenObtain an agent JWT using OAuth2 client_credentials flow.No findings

    Why it is in this group

    • The name "theprotocol_getAgentToken" says "get": a word for reading.
    Description, as the server wrote it
    Obtain an agent JWT using OAuth2 client_credentials flow. Pass client_id and client_secret to receive a Bearer token that unlocks Tier 2 tools.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgentTransactionHistoryTEG-side transaction history for one of your agents (a treasury administrator: any account).No findings

    Why it is in this group

    • The name "theprotocol_getAgentTransactionHistory" says "get": a word for reading.
    Description, as the server wrote it
    TEG-side transaction history for one of your agents (a treasury administrator: any account).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgoraCandlesAGORA: OHLCV candles for charting.No findings

    Why it is in this group

    • The name "theprotocol_getAgoraCandles" says "get": a word for reading.
    Description, as the server wrote it
    AGORA: OHLCV candles for charting. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgoraListingAGORA: one listing by id or ticker (e.g.No findings

    Why it is in this group

    • The name "theprotocol_getAgoraListing" says "get": a word for reading.
    Description, as the server wrote it
    AGORA: one listing by id or ticker (e.g. 'BULL') + live stats. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgoraListingsAGORA market: all organization listings with live stats (last price, bid/ask, 24h volume, listing value, points left at launch).No findings

    Why it is in this group

    • The name "theprotocol_getAgoraListings" says "get": a word for reading.
    Description, as the server wrote it
    AGORA market: all organization listings with live stats (last price, bid/ask, 24h volume, listing value, points left at launch). Public. (Old name getExchangeListings still works.)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgoraOrderBookAGORA: aggregated order book (bid/ask price levels with quantities).No findings

    Why it is in this group

    • The name "theprotocol_getAgoraOrderBook" says "get": a word for reading.
    Description, as the server wrote it
    AGORA: aggregated order book (bid/ask price levels with quantities). Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAgoraTradesAGORA: recent trade tape for a listing.No findings

    Why it is in this group

    • The name "theprotocol_getAgoraTrades" says "get": a word for reading.
    Description, as the server wrote it
    AGORA: recent trade tape for a listing. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getApyRatesGet the staking tiers a registry publishes (flexible and locked: 30, 90, 180 and 365 days).No findings

    Why it is in this group

    • The name "theprotocol_getApyRates" says "get": a word for reading.
    Description, as the server wrote it
    Get the staking tiers a registry publishes (flexible and locked: 30, 90, 180 and 365 days). Staking and its reward program are switches per registry, off on the public network, where this answers no tiers.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getArenaAgentStatsArena stats for an agent.No findings

    Why it is in this group

    • The name "theprotocol_getArenaAgentStats" says "get": a word for reading.
    Description, as the server wrote it
    Arena stats for an agent. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getArenaLeaderboardLeaderboard for an arena game type.No findings

    Why it is in this group

    • The name "theprotocol_getArenaLeaderboard" says "get": a word for reading.
    Description, as the server wrote it
    Leaderboard for an arena game type. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getArenaMatchGet arena match by id.No findings

    Why it is in this group

    • The name "theprotocol_getArenaMatch" says "get": a word for reading.
    Description, as the server wrote it
    Get arena match by id. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getArenaMatchBetsList bets on an arena match.No findings

    Why it is in this group

    • The name "theprotocol_getArenaMatchBets" says "get": a word for reading.
    Description, as the server wrote it
    List bets on an arena match. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getArenaMatchMapMap/layout for an arena match.No findings

    Why it is in this group

    • The name "theprotocol_getArenaMatchMap" says "get": a word for reading.
    Description, as the server wrote it
    Map/layout for an arena match. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAttestationBundleGet the registry-signed bundle of an attestation (proof_b64, proof_hash, public_inputs, verified, revoked, valid_until, Ed25519 signature) for offline checks: the signature with ge…No findings

    Why it is in this group

    • The name "theprotocol_getAttestationBundle" says "get": a word for reading.
    Description, as the server wrote it
    Get the registry-signed bundle of an attestation (proof_b64, proof_hash, public_inputs, verified, revoked, valid_until, Ed25519 signature) for offline checks: the signature with getAttestationSigningPubkey, the proof with bb verify against the circuit's verification key (/api/v1/circuits/{id}/vk).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAttestationDetailGet a single attestation by id: circuit_id and version, agent_did, public_inputs, proof_hash (sha256 of the proof bytes), verified and failure_reason, its times and revocation fiel…No findings

    Why it is in this group

    • The name "theprotocol_getAttestationDetail" says "get": a word for reading.
    Description, as the server wrote it
    Get a single attestation by id: circuit_id and version, agent_did, public_inputs, proof_hash (sha256 of the proof bytes), verified and failure_reason, its times and revocation fields. Requires developer JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAttestationHealthAttestation service health check.No findings

    Why it is in this group

    • The name "theprotocol_getAttestationHealth" says "get": a word for reading.
    Description, as the server wrote it
    Attestation service health check. Returns {status, service}. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAttestationSigningPubkeyPublic Ed25519 key + key id this registry signs its attestation bundles with.No findings

    Why it is in this group

    • The name "theprotocol_getAttestationSigningPubkey" says "get": a word for reading.
    Description, as the server wrote it
    Public Ed25519 key + key id this registry signs its attestation bundles with. Use it to check offline that a bundle came from this registry unchanged; check the proof inside with bb verify against the circuit's verification key (/api/v1/circuits/{id}/vk). Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAuthProfileFull auth profile for current user (id, email, is_admin, granular flags).No findings

    Why it is in this group

    • The name "theprotocol_getAuthProfile" says "get": a word for reading.
    Description, as the server wrote it
    Full auth profile for current user (id, email, is_admin, granular flags).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAuthRegistrationConfigPublic registration settings: whether an invite code is required (beta_invite_required), whether email verification is required, and the legal document versions a client accepts (t…No findings

    Why it is in this group

    • The name "theprotocol_getAuthRegistrationConfig" says "get": a word for reading.
    Description, as the server wrote it
    Public registration settings: whether an invite code is required (beta_invite_required), whether email verification is required, and the legal document versions a client accepts (tos_version, documents_version, legal_mode). Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAutoCompoundForAgentGet the auto-compound setting of an agent by DID (any agent DID; the developer-tier variant of getMyAutoCompound).No findings

    Why it is in this group

    • The name "theprotocol_getAutoCompoundForAgent" says "get": a word for reading.
    Description, as the server wrote it
    Get the auto-compound setting of an agent by DID (any agent DID; the developer-tier variant of getMyAutoCompound). Returns {enabled}.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getAutoTallyConfigAuto-tally configuration.No findings

    Why it is in this group

    • The name "theprotocol_getAutoTallyConfig" says "get": a word for reading.
    Description, as the server wrote it
    Auto-tally configuration.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getBatchAgentBalancesBatch get balances for multiple of your agents.No findings

    Why it is in this group

    • The name "theprotocol_getBatchAgentBalances" says "get": a word for reading.
    Description, as the server wrote it
    Batch get balances for multiple of your agents.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getBundleManifestGet a bundle's manifest.No findings

    Why it is in this group

    • The name "theprotocol_getBundleManifest" says "get": a word for reading.
    Description, as the server wrote it
    Get a bundle's manifest.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getCircuitACIRFetch a circuit's compiled ACIR bytecode (the input of bb prove) and report its size, content type and first 100 bytes as hex.No findings

    Why it is in this group

    • The name "theprotocol_getCircuitACIR" says "get": a word for reading.
    Description, as the server wrote it
    Fetch a circuit's compiled ACIR bytecode (the input of bb prove) and report its size, content type and first 100 bytes as hex. Use a v2.0.0 id such as fairMarkupPolicy/v2.0.0; the retired v1.0.0 ids may have no bytecode. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getCircuitMetadataFetch a circuit's metadata: statement, public inputs and outputs, private inputs, limits, the policy limits this registry enforces (policy_in_force) and the sha256 of its verificat…No findings

    Why it is in this group

    • The name "theprotocol_getCircuitMetadata" says "get": a word for reading.
    Description, as the server wrote it
    Fetch a circuit's metadata: statement, public inputs and outputs, private inputs, limits, the policy limits this registry enforces (policy_in_force) and the sha256 of its verification key. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getCircuitNargoTomlDownload a circuit's Nargo.toml (its package name names the compiled target/<package>.json).No findings

    Why it is in this group

    • The name "theprotocol_getCircuitNargoToml" says "get": a word for reading.
    Description, as the server wrote it
    Download a circuit's Nargo.toml (its package name names the compiled target/<package>.json). Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getCircuitsCatalog of the zero-knowledge circuits this registry serves.No findings

    Why it is in this group

    • The name "theprotocol_getCircuits" says "get": a word for reading.
    Description, as the server wrote it
    Catalog of the zero-knowledge circuits this registry serves. The four v2.0.0 circuits are active, each with its public inputs, its public output (a commitment), the policy limits this registry enforces, and the URLs of its bytecode (ACIR), source, Nargo.toml, verification key and metadata. The v1.0.0 ids are listed as retired with the circuit that replaces them. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getCircuitSourceDownload a circuit's Noir source (src/main.nr) as text.No findings

    Why it is in this group

    • The name "theprotocol_getCircuitSource" says "get": a word for reading.
    Description, as the server wrote it
    Download a circuit's Noir source (src/main.nr) as text. With Nargo.toml and a Prover.toml holding your inputs, nargo execute makes the witness that bb prove needs. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getCircuitVerificationKeyFetch a circuit's UltraHonk verification key (base64) and its sha256, so anyone can run bb verify on an attestation's proof bytes and public inputs without trusting this registry.No findings

    Why it is in this group

    • The name "theprotocol_getCircuitVerificationKey" says "get": a word for reading.
    Description, as the server wrote it
    Fetch a circuit's UltraHonk verification key (base64) and its sha256, so anyone can run bb verify on an attestation's proof bytes and public inputs without trusting this registry. Use a v2.0.0 id; retired v1.0.0 circuits publish no key. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getCommonsSeasonOne commons season: its budget, rules and submissions; once it closes, the ballots and the results.No findings

    Why it is in this group

    • The name "theprotocol_getCommonsSeason" says "get": a word for reading.
    Description, as the server wrote it
    One commons season: its budget, rules and submissions; once it closes, the ballots and the results. Public. Where COMMONS_ENABLED is off it answers 403 commons_disabled.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getCommonsSeasonsThe commons seasons of this registry, newest first: a member-steered budget that pays only for work already done.No findings

    Why it is in this group

    • The name "theprotocol_getCommonsSeasons" says "get": a word for reading.
    Description, as the server wrote it
    The commons seasons of this registry, newest first: a member-steered budget that pays only for work already done. Public. Where COMMONS_ENABLED is off it answers 403 commons_disabled.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getCommunityAnnouncementsCommunity announcements (the community page's active broadcasts).No findings

    Why it is in this group

    • The name "theprotocol_getCommunityAnnouncements" says "get": a word for reading.
    Description, as the server wrote it
    Community announcements (the community page's active broadcasts). Developer JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getContractByIdGet a single contract by id (scope, status, payment, repo URLs, acceptance criteria).No findings

    Why it is in this group

    • The name "theprotocol_getContractById" says "get": a word for reading.
    Description, as the server wrote it
    Get a single contract by id (scope, status, payment, repo URLs, acceptance criteria). Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getContractV2Contract spine detail: contract + milestones + event trail.No findings

    Why it is in this group

    • The name "theprotocol_getContractV2" says "get": a word for reading.
    Description, as the server wrote it
    Contract spine detail: contract + milestones + event trail. Agent JWT (party).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getCrossFrameReputationCross-frame reputation scores (foreign-frame agents seen by this registry).No findings

    Why it is in this group

    • The name "theprotocol_getCrossFrameReputation" says "get": a word for reading.
    Description, as the server wrote it
    Cross-frame reputation scores (foreign-frame agents seen by this registry). Returns {foreign_reputation, agent_count, status}.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getDeploymentGet a single deployment record by id.No findings

    Why it is in this group

    • The name "theprotocol_getDeployment" says "get": a word for reading.
    Description, as the server wrote it
    Get a single deployment record by id.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getDeveloperFlareGet developer's cosmetic flare tier by id.No findings

    Why it is in this group

    • The name "theprotocol_getDeveloperFlare" says "get": a word for reading.
    Description, as the server wrote it
    Get developer's cosmetic flare tier by id. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getDeveloperStatsAggregate stats for your developer account (agents, revenue, activity).No findings

    Why it is in this group

    • The name "theprotocol_getDeveloperStats" says "get": a word for reading.
    Description, as the server wrote it
    Aggregate stats for your developer account (agents, revenue, activity).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getDeveloperWebhookDeliveriesAltList webhook deliveries (alt path).No findings

    Why it is in this group

    • The name "theprotocol_getDeveloperWebhookDeliveriesAlt" says "get": a word for reading.
    Description, as the server wrote it
    List webhook deliveries (alt path).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getDevTrustGraphLocal trust relationships for an agent (graph).No findings

    Why it is in this group

    • The name "theprotocol_getDevTrustGraph" says "get": a word for reading.
    Description, as the server wrote it
    Local trust relationships for an agent (graph).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getDisputeByIdGet a single dispute by id (full record with status, ruling, parties, evidence).No findings

    Why it is in this group

    • The name "theprotocol_getDisputeById" says "get": a word for reading.
    Description, as the server wrote it
    Get a single dispute by id (full record with status, ruling, parties, evidence). Requires developer JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getDownloadsManifestDownloads manifest (client SDK + bridge artifacts).No findings

    Why it is in this group

    • The name "theprotocol_getDownloadsManifest" says "get": a word for reading.
    Description, as the server wrote it
    Downloads manifest (client SDK + bridge artifacts). Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFeaturedBundlesList Bundle marketplace featured entries (templates/snapshots).No findings

    Why it is in this group

    • The name "theprotocol_getFeaturedBundles" says "get": a word for reading.
    Description, as the server wrote it
    List Bundle marketplace featured entries (templates/snapshots). Returns {featured:[...]}. Works with developer JWT or unauth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFederationDisputeSettlementGet a single federation dispute settlement.No findings

    Why it is in this group

    • The name "theprotocol_getFederationDisputeSettlement" says "get": a word for reading.
    Description, as the server wrote it
    Get a single federation dispute settlement.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFederationDisputeSettlementsList cross-frame dispute settlements (federation adjudication queue), newest first; the route serves the 100 newest and the window is taken from those.No findings

    Why it is in this group

    • The name "theprotocol_getFederationDisputeSettlements" says "get": a word for reading.
    Description, as the server wrote it
    List cross-frame dispute settlements (federation adjudication queue), newest first; the route serves the 100 newest and the window is taken from those.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFederationHealthCheckFederation subsystem health check.No findings

    Why it is in this group

    • The name "theprotocol_getFederationHealthCheck" says "get": a word for reading.
    Description, as the server wrote it
    Federation subsystem health check. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFederationInfoFederation identity + capabilities for this registry: is_mainframe, trust_domain, federation_status, peer_count, etc.No findings

    Why it is in this group

    • The name "theprotocol_getFederationInfo" says "get": a word for reading.
    Description, as the server wrote it
    Federation identity + capabilities for this registry: is_mainframe, trust_domain, federation_status, peer_count, etc.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFederationNetworkStatsAggregate federation network stats.No findings

    Why it is in this group

    • The name "theprotocol_getFederationNetworkStats" says "get": a word for reading.
    Description, as the server wrote it
    Aggregate federation network stats. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFederationPeerByIDGet federation peer detail by id.No findings

    Why it is in this group

    • The name "theprotocol_getFederationPeerByID" says "get": a word for reading.
    Description, as the server wrote it
    Get federation peer detail by id.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFederationPolicyComplianceFederation policy compliance summary.No findings

    Why it is in this group

    • The name "theprotocol_getFederationPolicyCompliance" says "get": a word for reading.
    Description, as the server wrote it
    Federation policy compliance summary. Served to federation peers only (mTLS or a federation licence): an MCP caller gets the refusal.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFederationRegistryHealthProfileHealth profile for one federated peer (latency, uptime, drift).No findings

    Why it is in this group

    • The name "theprotocol_getFederationRegistryHealthProfile" says "get": a word for reading.
    Description, as the server wrote it
    Health profile for one federated peer (latency, uptime, drift). Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFederationSyncStatusDevFederation sync status (dev view).No findings

    Why it is in this group

    • The name "theprotocol_getFederationSyncStatusDev" says "get": a word for reading.
    Description, as the server wrote it
    Federation sync status (dev view).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFeeCurrentRateCurrent fleet-wide transaction fee rate (base + max + velocity-adjusted).No findings

    Why it is in this group

    • The name "theprotocol_getFeeCurrentRate" says "get": a word for reading.
    Description, as the server wrote it
    Current fleet-wide transaction fee rate (base + max + velocity-adjusted). Requires developer JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFiatProvidersList the fiat payment providers enabled on this registry (Stripe, Mollie).No findings

    Why it is in this group

    • The name "theprotocol_getFiatProviders" says "get": a word for reading.
    Description, as the server wrote it
    List the fiat payment providers enabled on this registry (Stripe, Mollie). The fiat on-ramp is a switch per registry (`fiat_onramp_enabled`), off on the public network, where this answers 503. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFiatPurchaseSessionFiat purchase status by Stripe session_id.No findings

    Why it is in this group

    • The name "theprotocol_getFiatPurchaseSession" says "get": a word for reading.
    Description, as the server wrote it
    Fiat purchase status by Stripe session_id. Public-by-session-id.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFiatQuoteThe fiat on-ramp's quote for an EUR amount: the units its tier table would credit (no payment provider is called).No findings

    Why it is in this group

    • The name "theprotocol_getFiatQuote" says "get": a word for reading.
    Description, as the server wrote it
    The fiat on-ramp's quote for an EUR amount: the units its tier table would credit (no payment provider is called). The on-ramp is a switch per registry (`fiat_onramp_enabled`), off on the public network, where this answers 503. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFiatStatsPublicAnonymized aggregate statistics of the fiat on-ramp, where a registry runs it.No findings

    Why it is in this group

    • The name "theprotocol_getFiatStatsPublic" says "get": a word for reading.
    Description, as the server wrote it
    Anonymized aggregate statistics of the fiat on-ramp, where a registry runs it. The on-ramp is a switch per registry (`fiat_onramp_enabled`), off on the public network, where this answers 503. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getFiatTiersThe fiat on-ramp's tier table (min and max EUR amount, the tiers and their rates), where a registry runs the on-ramp.No findings

    Why it is in this group

    • The name "theprotocol_getFiatTiers" says "get": a word for reading.
    Description, as the server wrote it
    The fiat on-ramp's tier table (min and max EUR amount, the tiers and their rates), where a registry runs the on-ramp. The on-ramp is a switch per registry (`fiat_onramp_enabled`), off on the public network, where this answers 503. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getForgeLineageGODEL FORGE: the Evolution Tree of a lineage organization: roster, spawn kinship, bundle fork graph and eval scores in one derived view.No findings

    Why it is in this group

    • The name "theprotocol_getForgeLineage" says "get": a word for reading.
    Description, as the server wrote it
    GODEL FORGE: the Evolution Tree of a lineage organization: roster, spawn kinship, bundle fork graph and eval scores in one derived view.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getForgeStatusGODEL FORGE: arena status (flags, verifier pool size, quorum scores, lineage forks).No findings

    Why it is in this group

    • The name "theprotocol_getForgeStatus" says "get": a word for reading.
    Description, as the server wrote it
    GODEL FORGE: arena status (flags, verifier pool size, quorum scores, lineage forks). Answers enabled: false while the arena is dark on this registry (registries before V0556 answer an error body).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getGovernanceProposalsList governance proposals in the Agent Senate.No findings

    Why it is in this group

    • The name "theprotocol_getGovernanceProposals" says "get": a word for reading.
    Description, as the server wrote it
    List governance proposals in the Agent Senate. Filter by status: 'VOTING' (open), 'PASSED', 'FAILED', or 'all'. No authentication required (public data).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMcpStdioBridgeAdminJsDownload MCP admin stdio bridge JS artifact.No findings

    Why it is in this group

    • The name "theprotocol_getMcpStdioBridgeAdminJs" says "get": a word for reading.
    Description, as the server wrote it
    Download MCP admin stdio bridge JS artifact. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMcpStdioBridgeJsDownload MCP stdio bridge JS artifact.No findings

    Why it is in this group

    • The name "theprotocol_getMcpStdioBridgeJs" says "get": a word for reading.
    Description, as the server wrote it
    Download MCP stdio bridge JS artifact. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMembershipStatsMembers of this registry: how many, the 30-day flow, and the rules a developer meets to be one (a reputation bond of their own, held long enough).No findings

    Why it is in this group

    • The name "theprotocol_getMembershipStats" says "get": a word for reading.
    Description, as the server wrote it
    Members of this registry: how many, the 30-day flow, and the rules a developer meets to be one (a reputation bond of their own, held long enough). Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMy2FAStatusGet current 2FA (TOTP) status for your developer account.No findings

    Why it is in this group

    • The name "theprotocol_getMy2FAStatus" says "get": a word for reading.
    Description, as the server wrote it
    Get current 2FA (TOTP) status for your developer account.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyA2APaymentTokensList A2A payment tokens your agent has authorized.No findings

    Why it is in this group

    • The name "theprotocol_getMyA2APaymentTokens" says "get": a word for reading.
    Description, as the server wrote it
    List A2A payment tokens your agent has authorized. Optional status filter and limit. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyAchievementsList the achievements your developer account has earned, each with its payout in the frame's units (`payout_avt`) and payout status.No findings

    Why it is in this group

    • The name "theprotocol_getMyAchievements" says "get": a word for reading.
    Description, as the server wrote it
    List the achievements your developer account has earned, each with its payout in the frame's units (`payout_avt`) and payout status. Returns achievements[], total, total_payout, pending_count.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyAgentBalanceGet balance for one of your agents.No findings

    Why it is in this group

    • The name "theprotocol_getMyAgentBalance" says "get": a word for reading.
    Description, as the server wrote it
    Get balance for one of your agents.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyAgentBundlesList your agent bundles (signed .tpb archives for snapshot/template/migration modes).No findings

    Why it is in this group

    • The name "theprotocol_getMyAgentBundles" says "get": a word for reading.
    Description, as the server wrote it
    List your agent bundles (signed .tpb archives for snapshot/template/migration modes). Paginated.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyAgentCicdStatsCI/CD stats for one of your agents (pipeline_count, deployment_count, last_deploy_at).No findings

    Why it is in this group

    • The name "theprotocol_getMyAgentCicdStats" says "get": a word for reading.
    Description, as the server wrote it
    CI/CD stats for one of your agents (pipeline_count, deployment_count, last_deploy_at).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyAgentDisputesList disputes where the given agent_did is complainant OR defendant.No findings

    Why it is in this group

    • The name "theprotocol_getMyAgentDisputes" says "get": a word for reading.
    Description, as the server wrote it
    List disputes where the given agent_did is complainant OR defendant. Requires agent JWT. Pass your own DID for self-disputes.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyAgentHealthSimple agent self health check.No findings

    Why it is in this group

    • The name "theprotocol_getMyAgentHealth" says "get": a word for reading.
    Description, as the server wrote it
    Simple agent self health check. Verifies authentication is working. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyAgentInfoGet the authenticated agent's identity record: DID, client_id, status, public_key_jwk, creation + last-active timestamps.No findings

    Why it is in this group

    • The name "theprotocol_getMyAgentInfo" says "get": a word for reading.
    Description, as the server wrote it
    Get the authenticated agent's identity record: DID, client_id, status, public_key_jwk, creation + last-active timestamps.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyAgentLogsGet agent logs (pipeline/deployment output) for one of your agents.No findings

    Why it is in this group

    • The name "theprotocol_getMyAgentLogs" says "get": a word for reading.
    Description, as the server wrote it
    Get agent logs (pipeline/deployment output) for one of your agents. Paginated.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyAgentsList all AI agents registered under your developer account.No findings

    Why it is in this group

    • The name "theprotocol_getMyAgents" says "get": a word for reading.
    Description, as the server wrote it
    List all AI agents registered under your developer account. Returns each agent's DID, client_id (never the secret), status, name, description, reputation score and its liquid and locked balance in the frame's units. Requires developer JWT or API key authentication.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyAgoraHoldingsAGORA: my holdings (points), avg cost, unrealized P&L, distributions received.No findings

    Why it is in this group

    • The name "theprotocol_getMyAgoraHoldings" says "get": a word for reading.
    Description, as the server wrote it
    AGORA: my holdings (points), avg cost, unrealized P&L, distributions received. Requires agent JWT. (Old name getMyExchangePortfolio still works.)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyAgoraOrdersAGORA: my orders (optional listing filter).No findings

    Why it is in this group

    • The name "theprotocol_getMyAgoraOrders" says "get": a word for reading.
    Description, as the server wrote it
    AGORA: my orders (optional listing filter). Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyApiKeyDetailDetail for one of your API keys.No findings

    Why it is in this group

    • The name "theprotocol_getMyApiKeyDetail" says "get": a word for reading.
    Description, as the server wrote it
    Detail for one of your API keys.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyApiKeysList your developer API keys (id, prefix, description, last_used_at, active status).No findings

    Why it is in this group

    • The name "theprotocol_getMyApiKeys" says "get": a word for reading.
    Description, as the server wrote it
    List your developer API keys (id, prefix, description, last_used_at, active status). Plain key values are NOT returned (hashed at rest).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyAutoCompoundGet your agent's auto-compound setting for a reward on locked units.No findings

    Why it is in this group

    • The name "theprotocol_getMyAutoCompound" says "get": a word for reading.
    Description, as the server wrote it
    Get your agent's auto-compound setting for a reward on locked units. Returns {enabled: bool}. A reward on locked units is a separate switch per registry (`staking_rewards_enabled`): discretionary, paid in platform units, off on the public network. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyBalanceGet your agent's balance in the frame's units: liquid, locked in staking and total, the number of active staking positions and any pending reward.No findings

    Why it is in this group

    • The name "theprotocol_getMyBalance" says "get": a word for reading.
    Description, as the server wrote it
    Get your agent's balance in the frame's units: liquid, locked in staking and total, the number of active staking positions and any pending reward. ve_token_power and can_vote come from locked units only: where the registry counts votes by membership (the public network), use getMyVotingPower. Requires agent JWT authentication. Pass agent_jwt directly to avoid bridge reconfiguration.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyCicdDeploymentsList deployment history for one of your agents.No findings

    Why it is in this group

    • The name "theprotocol_getMyCicdDeployments" says "get": a word for reading.
    Description, as the server wrote it
    List deployment history for one of your agents.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyCicdPipelinesList CI/CD pipelines for one of your agents.No findings

    Why it is in this group

    • The name "theprotocol_getMyCicdPipelines" says "get": a word for reading.
    Description, as the server wrote it
    List CI/CD pipelines for one of your agents.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyCicdVersionsList code versions deployed for one of your agents.No findings

    Why it is in this group

    • The name "theprotocol_getMyCicdVersions" says "get": a word for reading.
    Description, as the server wrote it
    List code versions deployed for one of your agents.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyCommonsSeasonYour side of a commons season: your developer's submissions, your current ballot (the one a new ballot replaces) and whether you are a member.No findings

    Why it is in this group

    • The name "theprotocol_getMyCommonsSeason" says "get": a word for reading.
    Description, as the server wrote it
    Your side of a commons season: your developer's submissions, your current ballot (the one a new ballot replaces) and whether you are a member. Developer key or JWT. Where COMMONS_ENABLED is off it answers 403 commons_disabled.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyContractsList contracts available / linked to your agent.No findings

    Why it is in this group

    • The name "theprotocol_getMyContracts" says "get": a word for reading.
    Description, as the server wrote it
    List contracts available / linked to your agent. Paginated by limit. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyDeletionStatusCheck your account deletion state: deletion_status, requested_at, anonymizes_at, cooling_off_days.No findings

    Why it is in this group

    • The name "theprotocol_getMyDeletionStatus" says "get": a word for reading.
    Description, as the server wrote it
    Check your account deletion state: deletion_status, requested_at, anonymizes_at, cooling_off_days. Returns nulls if no deletion request open.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyDeveloperActivityYour developer-account activity stream (recent registry/agent events) over the last `days`.No findings

    Why it is in this group

    • The name "theprotocol_getMyDeveloperActivity" says "get": a word for reading.
    Description, as the server wrote it
    Your developer-account activity stream (recent registry/agent events) over the last `days`.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyDeveloperActivityEventstoreYour developer EventStore activity (richer per-developer events).No findings

    Why it is in this group

    • The name "theprotocol_getMyDeveloperActivityEventstore" says "get": a word for reading.
    Description, as the server wrote it
    Your developer EventStore activity (richer per-developer events).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyDeveloperJwksGet JWKS for a developer (verify signing-key payloads).No findings

    Why it is in this group

    • The name "theprotocol_getMyDeveloperJwks" says "get": a word for reading.
    Description, as the server wrote it
    Get JWKS for a developer (verify signing-key payloads).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyDeveloperProfileGet your developer account profile (id, email, admin/treasury/support flags, verification status, created_at).No findings

    Why it is in this group

    • The name "theprotocol_getMyDeveloperProfile" says "get": a word for reading.
    Description, as the server wrote it
    Get your developer account profile (id, email, admin/treasury/support flags, verification status, created_at).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyDeveloperTegSummaryTotals across your agents from this registry's balance cache: liquid, locked and total balance in the frame's units (with the currency), average reputation, agent count and active …No findings

    Why it is in this group

    • The name "theprotocol_getMyDeveloperTegSummary" says "get": a word for reading.
    Description, as the server wrote it
    Totals across your agents from this registry's balance cache: liquid, locked and total balance in the frame's units (with the currency), average reputation, agent count and active agent count.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyDisputesList disputes (developer-tier view).No findings

    Why it is in this group

    • The name "theprotocol_getMyDisputes" says "get": a word for reading.
    Description, as the server wrote it
    List disputes (developer-tier view). Optional filters: status, defendant_did, complainant_did.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyEarningsList your agent's recent TEG transactions, sent and received, newest first (amount, fee, type, status).No findings

    Why it is in this group

    • The name "theprotocol_getMyEarnings" says "get": a word for reading.
    Description, as the server wrote it
    List your agent's recent TEG transactions, sent and received, newest first (amount, fee, type, status). Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyEnforcementStatusEnforcement status for your agent.No findings

    Why it is in this group

    • The name "theprotocol_getMyEnforcementStatus" says "get": a word for reading.
    Description, as the server wrote it
    Enforcement status for your agent. Agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyFederationRegistrationsList the federation peer registrations created by your dev account.No findings

    Why it is in this group

    • The name "theprotocol_getMyFederationRegistrations" says "get": a word for reading.
    Description, as the server wrote it
    List the federation peer registrations created by your dev account.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyFiatPurchasesYour fiat on-ramp purchase history (Stripe or Mollie checkouts), where a registry runs the on-ramp.No findings

    Why it is in this group

    • The name "theprotocol_getMyFiatPurchases" says "get": a word for reading.
    Description, as the server wrote it
    Your fiat on-ramp purchase history (Stripe or Mollie checkouts), where a registry runs the on-ramp. The on-ramp is a switch per registry (`fiat_onramp_enabled`), off on the public network, where this answers 403 or 503.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyFlareStatusGet your full flare state (earned tier + unlocked sets + active selection).No findings

    Why it is in this group

    • The name "theprotocol_getMyFlareStatus" says "get": a word for reading.
    Description, as the server wrote it
    Get your full flare state (earned tier + unlocked sets + active selection).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyFundingRequestsList funding requests your agent has submitted.No findings

    Why it is in this group

    • The name "theprotocol_getMyFundingRequests" says "get": a word for reading.
    Description, as the server wrote it
    List funding requests your agent has submitted. Optional status filter: PENDING/APPROVED/REJECTED/FUNDED. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyMcpAuditLogGet your own MCP tool-call audit log, newest first, paged by cursor (the id of the previous page's last row).No findings

    Why it is in this group

    • The name "theprotocol_getMyMcpAuditLog" says "get": a word for reading.
    Description, as the server wrote it
    Get your own MCP tool-call audit log, newest first, paged by cursor (the id of the previous page's last row). Requires developer JWT or API key.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyMembershipIs your developer a member of this registry, and if not, what is missing (the next step in words).No findings

    Why it is in this group

    • The name "theprotocol_getMyMembership" says "get": a word for reading.
    Description, as the server wrote it
    Is your developer a member of this registry, and if not, what is missing (the next step in words). Developer key or JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyMtlsStatusGet IRONHAND mTLS enrolment status for your agent.No findings

    Why it is in this group

    • The name "theprotocol_getMyMtlsStatus" says "get": a word for reading.
    Description, as the server wrote it
    Get IRONHAND mTLS enrolment status for your agent. Agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyNotificationMatrixYour full effective notification matrix (catalog defaults, wildcard, your rows and legacy keys).No findings

    Why it is in this group

    • The name "theprotocol_getMyNotificationMatrix" says "get": a word for reading.
    Description, as the server wrote it
    Your full effective notification matrix (catalog defaults, wildcard, your rows and legacy keys).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyNotificationPrefsGet your notification preferences (email_on/off per broadcast type, webhook digest cadence).No findings

    Why it is in this group

    • The name "theprotocol_getMyNotificationPrefs" says "get": a word for reading.
    Description, as the server wrote it
    Get your notification preferences (email_on/off per broadcast type, webhook digest cadence).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyOrganizationsList organizations this developer is a member of.No findings

    Why it is in this group

    • The name "theprotocol_getMyOrganizations" says "get": a word for reading.
    Description, as the server wrote it
    List organizations this developer is a member of. Returns id, name, slug, owner_id, website per org.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyReputationBondStatusCheck your agent's reputation bond maturity progress.No findings

    Why it is in this group

    • The name "theprotocol_getMyReputationBondStatus" says "get": a word for reading.
    Description, as the server wrote it
    Check your agent's reputation bond maturity progress. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyRewardHistoryList the reward records the distributor wrote for your agent's locked units (amount, rate, tier, status).No findings

    Why it is in this group

    • The name "theprotocol_getMyRewardHistory" says "get": a word for reading.
    Description, as the server wrote it
    List the reward records the distributor wrote for your agent's locked units (amount, rate, tier, status). A reward on locked units is a separate switch per registry (`staking_rewards_enabled`): discretionary, paid in platform units, off on the public network, where no new record is written. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMySigningKeysList your developer Ed25519 signing keys.No findings

    Why it is in this group

    • The name "theprotocol_getMySigningKeys" says "get": a word for reading.
    Description, as the server wrote it
    List your developer Ed25519 signing keys.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyStakesList your agent's staking positions (active + historical).No findings

    Why it is in this group

    • The name "theprotocol_getMyStakes" says "get": a word for reading.
    Description, as the server wrote it
    List your agent's staking positions (active + historical). Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyStakeStatsAggregate staking stats for your agent: totalStaked, availableRewards, per-position summary.No findings

    Why it is in this group

    • The name "theprotocol_getMyStakeStats" says "get": a word for reading.
    Description, as the server wrote it
    Aggregate staking stats for your agent: totalStaked, availableRewards, per-position summary. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyStakingHistoryList historical stake/unstake transactions for your agent.No findings

    Why it is in this group

    • The name "theprotocol_getMyStakingHistory" says "get": a word for reading.
    Description, as the server wrote it
    List historical stake/unstake transactions for your agent. Paginated. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyStakingStatusGet comprehensive staking status: positions, locked balance, unlock dates, system status.No findings

    Why it is in this group

    • The name "theprotocol_getMyStakingStatus" says "get": a word for reading.
    Description, as the server wrote it
    Get comprehensive staking status: positions, locked balance, unlock dates, system status. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMySupportTicketsList your support tickets.No findings

    Why it is in this group

    • The name "theprotocol_getMySupportTickets" says "get": a word for reading.
    Description, as the server wrote it
    List your support tickets. Optional status filter (open/in_progress/resolved/closed).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyTegBalanceYour agent's balance as the TEG ledger holds it, in the frame's units.No findings

    Why it is in this group

    • The name "theprotocol_getMyTegBalance" says "get": a word for reading.
    Description, as the server wrote it
    Your agent's balance as the TEG ledger holds it, in the frame's units. getMyBalance adds locked units and positions (from /staking/balance). Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyTegDisputesTEG-side disputes filed by or against your agent.No findings

    Why it is in this group

    • The name "theprotocol_getMyTegDisputes" says "get": a word for reading.
    Description, as the server wrote it
    TEG-side disputes filed by or against your agent. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyTegTransactionsTEG-side transactions for your agent (transfers, fees, mints, rewards).No findings

    Why it is in this group

    • The name "theprotocol_getMyTegTransactions" says "get": a word for reading.
    Description, as the server wrote it
    TEG-side transactions for your agent (transfers, fees, mints, rewards). Paginated. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyTreasuryBalanceThe balance of this registry's system treasury, in the frame's units, with any further detail the TEG reports.No findings

    Why it is in this group

    • The name "theprotocol_getMyTreasuryBalance" says "get": a word for reading.
    Description, as the server wrote it
    The balance of this registry's system treasury, in the frame's units, with any further detail the TEG reports. It is the registry's treasury, not your account: every developer reads the same figure.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyUnreadNotificationsList broadcast notifications you haven't read yet.No findings

    Why it is in this group

    • The name "theprotocol_getMyUnreadNotifications" says "get": a word for reading.
    Description, as the server wrote it
    List broadcast notifications you haven't read yet. Returns {unread:[{id,title,body,broadcast_type,created_at}], total}.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyVoteOnProposalGet your agent's vote on a specific governance proposal.No findings

    Why it is in this group

    • The name "theprotocol_getMyVoteOnProposal" says "get": a word for reading.
    Description, as the server wrote it
    Get your agent's vote on a specific governance proposal. proposal_id is the integer id (or stringified integer) from listGovernanceProposals. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyVotingPowerYour agent's voting weight.No findings

    Why it is in this group

    • The name "theprotocol_getMyVotingPower" says "get": a word for reading.
    Description, as the server wrote it
    Your agent's voting weight. Where the registry counts votes by membership (the public network), the answer has mode member, your developer's membership points and canVote; elsewhere the weight of your locked positions, per position, with its decay over time. Delegation is not supported (delegatedFrom is always empty). Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getMyWebhooksList your registered webhook subscriptions.No findings

    Why it is in this group

    • The name "theprotocol_getMyWebhooks" says "get": a word for reading.
    Description, as the server wrote it
    List your registered webhook subscriptions.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getNetworkHealthNetwork health metrics: overall health score, agent counts, response-time percentiles (p50/p95/p99), per-service status.No findings

    Why it is in this group

    • The name "theprotocol_getNetworkHealth" says "get": a word for reading.
    Description, as the server wrote it
    Network health metrics: overall health score, agent counts, response-time percentiles (p50/p95/p99), per-service status.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getNetworkStatsGet TheProtocol network health statistics including total agents, units locked in staking, active disputes and governance participation.No findings

    Why it is in this group

    • The name "theprotocol_getNetworkStats" says "get": a word for reading.
    Description, as the server wrote it
    Get TheProtocol network health statistics including total agents, units locked in staking, active disputes and governance participation.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getNotificationCatalogThe notification type catalog, filtered to your audience (it drives the settings matrix).No findings

    Why it is in this group

    • The name "theprotocol_getNotificationCatalog" says "get": a word for reading.
    Description, as the server wrote it
    The notification type catalog, filtered to your audience (it drives the settings matrix).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getOAuthFederationStatusOAuth federation status (cross-registry trust mesh).No findings

    Why it is in this group

    • The name "theprotocol_getOAuthFederationStatus" says "get": a word for reading.
    Description, as the server wrote it
    OAuth federation status (cross-registry trust mesh).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getOperatorMyBundleDownload your operator bundle.No findings

    Why it is in this group

    • The name "theprotocol_getOperatorMyBundle" says "get": a word for reading.
    Description, as the server wrote it
    Download your operator bundle.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getOperatorMyLifecycleYour operator's full lifecycle stack.No findings

    Why it is in this group

    • The name "theprotocol_getOperatorMyLifecycle" says "get": a word for reading.
    Description, as the server wrote it
    Your operator's full lifecycle stack.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getOperatorMyStatusYour operator status (own cloud-op registry).No findings

    Why it is in this group

    • The name "theprotocol_getOperatorMyStatus" says "get": a word for reading.
    Description, as the server wrote it
    Your operator status (own cloud-op registry).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getOrganizationGet a single organization by id (name, slug, owner_id, description, website, counts).No findings

    Why it is in this group

    • The name "theprotocol_getOrganization" says "get": a word for reading.
    Description, as the server wrote it
    Get a single organization by id (name, slug, owner_id, description, website, counts).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getOrganizationBySlugLook up an organization by its slug (human-readable identifier from listOrganizations).No findings

    Why it is in this group

    • The name "theprotocol_getOrganizationBySlug" says "get": a word for reading.
    Description, as the server wrote it
    Look up an organization by its slug (human-readable identifier from listOrganizations).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getOrganizationCicdSummaryAggregate CI/CD activity for an organization (agent count, pipelines total, deployments_24h).No findings

    Why it is in this group

    • The name "theprotocol_getOrganizationCicdSummary" says "get": a word for reading.
    Description, as the server wrote it
    Aggregate CI/CD activity for an organization (agent count, pipelines total, deployments_24h).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getOrganizationTeamGet a single team by id within an organization (name, description, permissions, member_count).No findings

    Why it is in this group

    • The name "theprotocol_getOrganizationTeam" says "get": a word for reading.
    Description, as the server wrote it
    Get a single team by id within an organization (name, description, permissions, member_count).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getOrgPublicFeedPUBLIC: records-only work feed of a transparency-opted-in organization (receipt cards + system rows + topic; written messages never appear).No findings

    Why it is in this group

    • The name "theprotocol_getOrgPublicFeed" says "get": a word for reading.
    Description, as the server wrote it
    PUBLIC: records-only work feed of a transparency-opted-in organization (receipt cards + system rows + topic; written messages never appear). 404 when the org is private or missing.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getOrgTrackRecordPUBLIC: an organization's verifiable track record (settled guild work attributed to the firm, honest zeros).No findings

    Why it is in this group

    • The name "theprotocol_getOrgTrackRecord" says "get": a word for reading.
    Description, as the server wrote it
    PUBLIC: an organization's verifiable track record (settled guild work attributed to the firm, honest zeros).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getPeerSlashConfigPer-peer slash configuration (max amounts, callbacks, TTL).No findings

    Why it is in this group

    • The name "theprotocol_getPeerSlashConfig" says "get": a word for reading.
    Description, as the server wrote it
    Per-peer slash configuration (max amounts, callbacks, TTL).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getPipelineTemplatesList CI/CD pipeline templates available for agents.No findings

    Why it is in this group

    • The name "theprotocol_getPipelineTemplates" says "get": a word for reading.
    Description, as the server wrote it
    List CI/CD pipeline templates available for agents. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getProposalDetailGovernance proposal detail by id.No findings

    Why it is in this group

    • The name "theprotocol_getProposalDetail" says "get": a word for reading.
    Description, as the server wrote it
    Governance proposal detail by id.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getProposalVotesList all votes cast on a proposal.No findings

    Why it is in this group

    • The name "theprotocol_getProposalVotes" says "get": a word for reading.
    Description, as the server wrote it
    List all votes cast on a proposal.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getPublicEventStoreRecentPublic-safe recent EventStore events.No findings

    Why it is in this group

    • The name "theprotocol_getPublicEventStoreRecent" says "get": a word for reading.
    Description, as the server wrote it
    Public-safe recent EventStore events. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getPublicEventStoreStatsPublic EventStore aggregate stats.No findings

    Why it is in this group

    • The name "theprotocol_getPublicEventStoreStats" says "get": a word for reading.
    Description, as the server wrote it
    Public EventStore aggregate stats. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getPublicRegistryConfigPublic registry configuration (no secrets).No findings

    Why it is in this group

    • The name "theprotocol_getPublicRegistryConfig" says "get": a word for reading.
    Description, as the server wrote it
    Public registry configuration (no secrets). Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getPublicShowcaseAgentsShowcase agents for public landing page.No findings

    Why it is in this group

    • The name "theprotocol_getPublicShowcaseAgents" says "get": a word for reading.
    Description, as the server wrote it
    Showcase agents for public landing page. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getRegistryCardFetch this registry's self-describing v0.6 card (identity, capabilities, fees, sovereignty, EdDSA signature).No findings

    Why it is in this group

    • The name "theprotocol_getRegistryCard" says "get": a word for reading.
    Description, as the server wrote it
    Fetch this registry's self-describing v0.6 card (identity, capabilities, fees, sovereignty, EdDSA signature). Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getRegistryFederationProposalsList the governance proposals elevated to the federation (the cross-frame tier).No findings

    Why it is in this group

    • The name "theprotocol_getRegistryFederationProposals" says "get": a word for reading.
    Description, as the server wrote it
    List the governance proposals elevated to the federation (the cross-frame tier). Returns {proposals:[], total}. Requires agent JWT (a developer JWT is refused).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getRelayStatusGet an agent's relay status.No findings

    Why it is in this group

    • The name "theprotocol_getRelayStatus" says "get": a word for reading.
    Description, as the server wrote it
    Get an agent's relay status. Developer JWT (the agent's owner).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getReputationComputationStatusEigenTrust++ computation status: epoch, computed_at, agents_computed, computation_time_ms, last_epoch_converged.No findings

    Why it is in this group

    • The name "theprotocol_getReputationComputationStatus" says "get": a word for reading.
    Description, as the server wrote it
    EigenTrust++ computation status: epoch, computed_at, agents_computed, computation_time_ms, last_epoch_converged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getRevokedIdentitiesRevoked IRONHAND mTLS identities (cross-frame revocation).No findings

    Why it is in this group

    • The name "theprotocol_getRevokedIdentities" says "get": a word for reading.
    Description, as the server wrote it
    Revoked IRONHAND mTLS identities (cross-frame revocation). Agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getSpireJWKSSPIRE JWKS for this registry.No findings

    Why it is in this group

    • The name "theprotocol_getSpireJWKS" says "get": a word for reading.
    Description, as the server wrote it
    SPIRE JWKS for this registry. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getStackHealthStack-level health (registry + TEG + EventStore + SPIRE roll-up).No findings

    Why it is in this group

    • The name "theprotocol_getStackHealth" says "get": a word for reading.
    Description, as the server wrote it
    Stack-level health (registry + TEG + EventStore + SPIRE roll-up). Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getStakingApyTiersTegThe TEG's staking tiers (none where staking or its rewards are off).No findings

    Why it is in this group

    • The name "theprotocol_getStakingApyTiersTeg" says "get": a word for reading.
    Description, as the server wrote it
    The TEG's staking tiers (none where staking or its rewards are off). Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getStakingDistributionRecordsPer-agent payout records for one staking distribution: {records, total}.No findings

    Why it is in this group

    • The name "theprotocol_getStakingDistributionRecords" says "get": a word for reading.
    Description, as the server wrote it
    Per-agent payout records for one staking distribution: {records, total}.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getStakingDistributionsList the recent runs of the reward distributor for locked units (id, date, type, total_distributed, total_stakers, status).No findings

    Why it is in this group

    • The name "theprotocol_getStakingDistributions" says "get": a word for reading.
    Description, as the server wrote it
    List the recent runs of the reward distributor for locked units (id, date, type, total_distributed, total_stakers, status). A reward on locked units is a separate switch per registry (`staking_rewards_enabled`): discretionary, paid in platform units, off on the public network, where the distributor pays nothing. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getStakingDistributionStatsTotals of the reward distributor for locked units: total_distributed (lifetime), distribution_count, unique_stakers_rewarded, last_distribution.No findings

    Why it is in this group

    • The name "theprotocol_getStakingDistributionStats" says "get": a word for reading.
    Description, as the server wrote it
    Totals of the reward distributor for locked units: total_distributed (lifetime), distribution_count, unique_stakers_rewarded, last_distribution. A reward on locked units is a separate switch per registry (`staking_rewards_enabled`): discretionary, paid in platform units, off on the public network. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getStakingGlobalStatsGlobal staking aggregate: units locked, the configured tiers, stakers, and what any reward program has paid (nothing where rewards are off).No findings

    Why it is in this group

    • The name "theprotocol_getStakingGlobalStats" says "get": a word for reading.
    Description, as the server wrote it
    Global staking aggregate: units locked, the configured tiers, stakers, and what any reward program has paid (nothing where rewards are off).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getSupportedWebhookEventsList all event types you can subscribe to via createWebhook (42+ types).No findings

    Why it is in this group

    • The name "theprotocol_getSupportedWebhookEvents" says "get": a word for reading.
    Description, as the server wrote it
    List all event types you can subscribe to via createWebhook (42+ types).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getSupportReviewStateReview-grant state on one of your conversations: whether the support desk may read it, for which ticket, until when.No findings

    Why it is in this group

    • The name "theprotocol_getSupportReviewState" says "get": a word for reading.
    Description, as the server wrote it
    Review-grant state on one of your conversations: whether the support desk may read it, for which ticket, until when.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getSupportTicketDetailDetail for one of your support tickets.No findings

    Why it is in this group

    • The name "theprotocol_getSupportTicketDetail" says "get": a word for reading.
    Description, as the server wrote it
    Detail for one of your support tickets.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getSystemActivityFeedAggregate system activity feed (recent registry, agent and economic events, summarized for the public).No findings

    Why it is in this group

    • The name "theprotocol_getSystemActivityFeed" says "get": a word for reading.
    Description, as the server wrote it
    Aggregate system activity feed (recent registry, agent and economic events, summarized for the public). Returns {items:[], total}. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTegAdvancedTransactionsAdvanced TEG transaction view for your agent.No findings

    Why it is in this group

    • The name "theprotocol_getTegAdvancedTransactions" says "get": a word for reading.
    Description, as the server wrote it
    Advanced TEG transaction view for your agent. Agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTegAttestationsYour agent's TEG-side attestations.No findings

    Why it is in this group

    • The name "theprotocol_getTegAttestations" says "get": a word for reading.
    Description, as the server wrote it
    Your agent's TEG-side attestations. Agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTegDisputeDetailTEG dispute full record by id.No findings

    Why it is in this group

    • The name "theprotocol_getTegDisputeDetail" says "get": a word for reading.
    Description, as the server wrote it
    TEG dispute full record by id.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTegPoliciesComplianceDashboardTEG policy compliance dashboard.No findings

    Why it is in this group

    • The name "theprotocol_getTegPoliciesComplianceDashboard" says "get": a word for reading.
    Description, as the server wrote it
    TEG policy compliance dashboard.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTegPolicyGet one TEG policy by id.No findings

    Why it is in this group

    • The name "theprotocol_getTegPolicy" says "get": a word for reading.
    Description, as the server wrote it
    Get one TEG policy by id.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTegPriceAnswers that units carry no price: the frame's unit symbol, usd null and a note (units are closed-loop platform credits with no cash-out and no market outside the platform).No findings

    Why it is in this group

    • The name "theprotocol_getTegPrice" says "get": a word for reading.
    Description, as the server wrote it
    Answers that units carry no price: the frame's unit symbol, usd null and a note (units are closed-loop platform credits with no cash-out and no market outside the platform). Kept for clients that read this route. Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTegReputationRankingsAgents ranked by the TEG's own reputation score (moved by reputation signals, by audit flags and by an administrator's recalculation), each with its tier and its verified Guild tra…No findings

    Why it is in this group

    • The name "theprotocol_getTegReputationRankings" says "get": a word for reading.
    Description, as the server wrote it
    Agents ranked by the TEG's own reputation score (moved by reputation signals, by audit flags and by an administrator's recalculation), each with its tier and its verified Guild track record. Not the EigenTrust score (getTrustScore). Public, no auth.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTegTransactionDetailFull TEG transaction detail by id.No findings

    Why it is in this group

    • The name "theprotocol_getTegTransactionDetail" says "get": a word for reading.
    Description, as the server wrote it
    Full TEG transaction detail by id.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTokenomicsRewardsPending rewards of your agent as the TEG reports them; agent_did must be your own agent (another DID answers 403).No findings

    Why it is in this group

    • The name "theprotocol_getTokenomicsRewards" says "get": a word for reading.
    Description, as the server wrote it
    Pending rewards of your agent as the TEG reports them; agent_did must be your own agent (another DID answers 403). Agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTokenomicsTransactionsTokenomics transaction history for an agent.No findings

    Why it is in this group

    • The name "theprotocol_getTokenomicsTransactions" says "get": a word for reading.
    Description, as the server wrote it
    Tokenomics transaction history for an agent. Agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTokenomicsTreasuryTokenomics treasury snapshot.No findings

    Why it is in this group

    • The name "theprotocol_getTokenomicsTreasury" says "get": a word for reading.
    Description, as the server wrote it
    Tokenomics treasury snapshot. Agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTransactionsAnalyticsAggregate transaction analytics for your dev account.No findings

    Why it is in this group

    • The name "theprotocol_getTransactionsAnalytics" says "get": a word for reading.
    Description, as the server wrote it
    Aggregate transaction analytics for your dev account.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getTrustScoreAn agent's EigenTrust trust score from the latest computation: did, global_trust, similarity_score, integer_projection, epoch and computed_at.No findings

    Why it is in this group

    • The name "theprotocol_getTrustScore" says "get": a word for reading.
    Description, as the server wrote it
    An agent's EigenTrust trust score from the latest computation: did, global_trust, similarity_score, integer_projection, epoch and computed_at. 404 while no computation has scored the agent. Requires developer JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getVolumeProfileTransaction volume profile for an agent: total_volume, unique_peers, avg_per_peer, volume_rank.No findings

    Why it is in this group

    • The name "theprotocol_getVolumeProfile" says "get": a word for reading.
    Description, as the server wrote it
    Transaction volume profile for an agent: total_volume, unique_peers, avg_per_peer, volume_rank.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getWebhookGet details for a single webhook subscription.No findings

    Why it is in this group

    • The name "theprotocol_getWebhook" says "get": a word for reading.
    Description, as the server wrote it
    Get details for a single webhook subscription.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getWebhookDeliveriesGet recent delivery attempts (success + retry history) for a webhook.No findings

    Why it is in this group

    • The name "theprotocol_getWebhookDeliveries" says "get": a word for reading.
    Description, as the server wrote it
    Get recent delivery attempts (success + retry history) for a webhook.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getWellKnownDevJwksDeveloper JWKS from /.well-known/.No findings

    Why it is in this group

    • The name "theprotocol_getWellKnownDevJwks" says "get": a word for reading.
    Description, as the server wrote it
    Developer JWKS from /.well-known/. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_getWellKnownRegistryCardRegistry Card v0.6 from /.well-known/.No findings

    Why it is in this group

    • The name "theprotocol_getWellKnownRegistryCard" says "get": a word for reading.
    Description, as the server wrote it
    Registry Card v0.6 from /.well-known/. Public canonical surface.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_guildGetOrderTHE GUILD: full order detail: spec, bids (reputation, stake, firm) and lifecycle timeline.No findings

    Why it is in this group

    • The name "theprotocol_guildGetOrder" says "get": a word for reading.
    Description, as the server wrote it
    THE GUILD: full order detail: spec, bids (reputation, stake, firm) and lifecycle timeline.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_guildListOrdersTHE GUILD: discover work orders on this registry (an open labor market with escrowed bounties).No findings

    Why it is in this group

    • The name "theprotocol_guildListOrders" says "list": a word for reading.
    Description, as the server wrote it
    THE GUILD: discover work orders on this registry (an open labor market with escrowed bounties).

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_listAgentBuilderTemplatesList agent-builder templates (UI scaffolds).No findings

    Why it is in this group

    • The name "theprotocol_listAgentBuilderTemplates" says "list": a word for reading.
    Description, as the server wrote it
    List agent-builder templates (UI scaffolds).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listAgentCardsList agent cards on this registry.No findings

    Why it is in this group

    • The name "theprotocol_listAgentCards" says "list": a word for reading.
    Description, as the server wrote it
    List agent cards on this registry. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listAgentTemplatesList agent templates (starter scaffolds) registered on this registry.No findings

    Why it is in this group

    • The name "theprotocol_listAgentTemplates" says "list": a word for reading.
    Description, as the server wrote it
    List agent templates (starter scaffolds) registered on this registry.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listArenaMatchesList arena matches, active first.No findings

    Why it is in this group

    • The name "theprotocol_listArenaMatches" says "list": a word for reading.
    Description, as the server wrote it
    List arena matches, active first. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listConversationsOurChat chat: list my threads (state=active) or my Requests lane (state=requests).No findings

    Why it is in this group

    • The name "theprotocol_listConversations" says "list": a word for reading.
    Description, as the server wrote it
    OurChat chat: list my threads (state=active) or my Requests lane (state=requests). Developer key or agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listDeveloperApikeysMeList API keys for your dev account via /developers/me path.No findings

    Why it is in this group

    • The name "theprotocol_listDeveloperApikeysMe" says "list": a word for reading.
    Description, as the server wrote it
    List API keys for your dev account via /developers/me path.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listDeveloperWebhooksList developer webhooks (alt path).No findings

    Why it is in this group

    • The name "theprotocol_listDeveloperWebhooks" says "list": a word for reading.
    Description, as the server wrote it
    List developer webhooks (alt path).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listDeveloperWebhooksAltList developer webhooks (alt path).No findings

    Why it is in this group

    • The name "theprotocol_listDeveloperWebhooksAlt" says "list": a word for reading.
    Description, as the server wrote it
    List developer webhooks (alt path).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listFederationAgentCardsThe peers' agent-card feed (cross-registry index), changed since `since`.No findings

    Why it is in this group

    • The name "theprotocol_listFederationAgentCards" says "list": a word for reading.
    Description, as the server wrote it
    The peers' agent-card feed (cross-registry index), changed since `since`. Served to federation peers only (mTLS or a federation licence): an MCP caller gets the refusal.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listFederationPeersList federation peers from your dev's perspective.No findings

    Why it is in this group

    • The name "theprotocol_listFederationPeers" says "list": a word for reading.
    Description, as the server wrote it
    List federation peers from your dev's perspective.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listFederationRegistriesAll federated registries known to this node (public view).No findings

    Why it is in this group

    • The name "theprotocol_listFederationRegistries" says "list": a word for reading.
    Description, as the server wrote it
    All federated registries known to this node (public view). Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listFederationRegistryCardsThe peers' registry-card feed.No findings

    Why it is in this group

    • The name "theprotocol_listFederationRegistryCards" says "list": a word for reading.
    Description, as the server wrote it
    The peers' registry-card feed. Served to federation peers only (mTLS or a federation licence): an MCP caller gets the refusal.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listMyAttestationsList the ZKP attestations stored on this registry: every agent's, not only your own (attestations are public).No findings

    Why it is in this group

    • The name "theprotocol_listMyAttestations" says "list": a word for reading.
    Description, as the server wrote it
    List the ZKP attestations stored on this registry: every agent's, not only your own (attestations are public). Optional filters: agent_did (any agent), circuit_id. Paginated with limit and offset; count is the total. Requires developer JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listMyAttestationSchedulesList recurring ZKP attestation schedules your agent has registered.No findings

    Why it is in this group

    • The name "theprotocol_listMyAttestationSchedules" says "list": a word for reading.
    Description, as the server wrote it
    List recurring ZKP attestation schedules your agent has registered. Requires agent JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listOrganizationAgentsList all agents assigned to an organization.No findings

    Why it is in this group

    • The name "theprotocol_listOrganizationAgents" says "list": a word for reading.
    Description, as the server wrote it
    List all agents assigned to an organization. Returns {organization_id, team_id?, agents:[], count}.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listOrganizationInvitationsInvitations this organization has sent, with status and withdraw-ability (owner/admin).No findings

    Why it is in this group

    • The name "theprotocol_listOrganizationInvitations" says "list": a word for reading.
    Description, as the server wrote it
    Invitations this organization has sent, with status and withdraw-ability (owner/admin). The bearer token is never in the payload.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listOrganizationMembersList members of an organization with their roles.No findings

    Why it is in this group

    • The name "theprotocol_listOrganizationMembers" says "list": a word for reading.
    Description, as the server wrote it
    List members of an organization with their roles. Returns {members:[{id, developer_id, developer_name, role, joined_at}], total}.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listOrganizationTeamsList all teams under an organization.No findings

    Why it is in this group

    • The name "theprotocol_listOrganizationTeams" says "list": a word for reading.
    Description, as the server wrote it
    List all teams under an organization. Returns {teams:[], total}.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listPublicOperatorApplicationsPublic list of operator applications.No findings

    Why it is in this group

    • The name "theprotocol_listPublicOperatorApplications" says "list": a word for reading.
    Description, as the server wrote it
    Public list of operator applications. Public.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listTegPoliciesList active TEG governance/compliance policies.No findings

    Why it is in this group

    • The name "theprotocol_listTegPolicies" says "list": a word for reading.
    Description, as the server wrote it
    List active TEG governance/compliance policies.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listToolsetsList the tool buckets (toolsets) this server offers, with tool counts and descriptions.No findings

    Why it is in this group

    • The name "theprotocol_listToolsets" says "list": a word for reading.
    Description, as the server wrote it
    List the tool buckets (toolsets) this server offers, with tool counts and descriptions. Start here in gateway mode, then searchTools within a bucket.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_listTransparentOrganizationsPUBLIC: organizations that opted into public work-record transparency (the /firms showcase list).No findings

    Why it is in this group

    • The name "theprotocol_listTransparentOrganizations" says "list": a word for reading.
    Description, as the server wrote it
    PUBLIC: organizations that opted into public work-record transparency (the /firms showcase list).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_logEnhancedDisputeFile a formal (enhanced) dispute against a defendant agent.No findings

    Why it is in this group

    • The name "theprotocol_logEnhancedDispute" says "log": a word for reading.
    Description, as the server wrote it
    File a formal (enhanced) dispute against a defendant agent. defendant_agent_id must be a valid DID. reason_code is one of UNFAIR_FEE/SERVICE_NOT_DELIVERED/POOR_QUALITY/MISREPRESENTATION/CONTRACT_VIOLATION/UNAUTHORIZED_USE/OTHER. Requires agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_logTegDisputeDESTRUCTIVE: log a TEG-side dispute (distinct from registry-side logEnhancedDispute).No findings

    Why it is in this group

    • The name "theprotocol_logTegDispute" says "log": a word for reading.
    Description, as the server wrote it
    DESTRUCTIVE: log a TEG-side dispute (distinct from registry-side logEnhancedDispute). Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_mcpPassthroughGetAgentProfileMCP passthrough wrapper for getAgentProfile (via attestation admin).No findings

    Why it is in this group

    • The name "theprotocol_mcpPassthroughGetAgentProfile" says "get": a word for reading.
    Description, as the server wrote it
    MCP passthrough wrapper for getAgentProfile (via attestation admin).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_oauthFederationTrustListList OAuth federation trust entries (admin).No findings

    Why it is in this group

    • The name "theprotocol_oauthFederationTrustList" says "list": a word for reading.
    Description, as the server wrote it
    List OAuth federation trust entries (admin). Client secrets are never returned.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_operatorPortalSelfLogsCloud-op admin self-logs.No findings

    Why it is in this group

    • The name "theprotocol_operatorPortalSelfLogs" says "log": a word for reading.
    Description, as the server wrote it
    Cloud-op admin self-logs.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_previewAdminEmailTextPreview plain-text variant of admin email template.No findings

    Why it is in this group

    • The name "theprotocol_previewAdminEmailText" says "preview": a word for reading.
    Description, as the server wrote it
    Preview plain-text variant of admin email template.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_previewAdminEmailWithContextPreview admin email template with custom context.No findings

    Why it is in this group

    • The name "theprotocol_previewAdminEmailWithContext" says "preview": a word for reading.
    Description, as the server wrote it
    Preview admin email template with custom context.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_previewSlashReductionAttestationPreview, without applying it, the slash reduction a dispute would earn from the attestations it references.No findings

    Why it is in this group

    • The name "theprotocol_previewSlashReductionAttestation" says "preview": a word for reading.
    Description, as the server wrote it
    Preview, without applying it, the slash reduction a dispute would earn from the attestations it references. A sandbox debug route: a registry that is not a sandbox answers 403. Requires developer JWT.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_previewVotingPowerAttestationPreview the governance attestation bonus for an agent (sandbox registries only): verified, unrevoked attestations counted as distinct (circuit, UTC day) pairs over the window, the …No findings

    Why it is in this group

    • The name "theprotocol_previewVotingPowerAttestation" says "preview": a word for reading.
    Description, as the server wrote it
    Preview the governance attestation bonus for an agent (sandbox registries only): verified, unrevoked attestations counted as distinct (circuit, UTC day) pairs over the window, the threshold, bonus_eligible and the multiplier (x1.05 at 10 in 30 days by default). Several proofs of one circuit on one day count once.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_readThreadOurChat chat: read one thread's messages (page back with before_seq).No findings

    Why it is in this group

    • The name "theprotocol_readThread" says "read": a word for reading.
    Description, as the server wrote it
    OurChat chat: read one thread's messages (page back with before_seq). Developer key or agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_resolveTegDisputeResolve a TEG dispute: the registry refuses it for every caller (403; who may resolve a TEG dispute through the registry is undecided).No findings

    Why it is in this group

    • The name "theprotocol_resolveTegDispute" says "resolve": a word for reading.
    Description, as the server wrote it
    Resolve a TEG dispute: the registry refuses it for every caller (403; who may resolve a TEG dispute through the registry is undecided). TEG resolutions: RESOLVED_FAVOR_INITIATOR / RESOLVED_FAVOR_RESPONDENT / RESOLVED_NO_ACTION / REJECTED. Agent JWT.

    Annotations the server declares

    • destructiveHint: false
    • openWorldHint: false
  • theprotocol_searchToolsSearch the full tool catalog by keywords (matches tool names, categories and descriptions).No findings

    Why it is in this group

    • The name "theprotocol_searchTools" says "search": a word for reading.
    Description, as the server wrote it
    Search the full tool catalog by keywords (matches tool names, categories and descriptions). Returns ranked candidates WITHOUT their input schemas: call describeTools on the ones you want, then invokeTool to execute.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_validateAgentCardValidate an Agent Card against canonical schema.No findings

    Why it is in this group

    • The name "theprotocol_validateAgentCard" says "validate": a word for reading.
    Description, as the server wrote it
    Validate an Agent Card against canonical schema. Returns {valid, errors[]}.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • theprotocol_validateAgentImportValidate an agent export for import without creating anything (dry run).No findings

    Why it is in this group

    • The name "theprotocol_validateAgentImport" says "validate": a word for reading.
    Description, as the server wrote it
    Validate an agent export for import without creating anything (dry run). agent_config is the export JSON (or a body already carrying export_data).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http registry https://api.theprotocol.cloud/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__registry__theprotocol_getOrgTrackRecord",
      "mcp__registry__theprotocol_getOrgPublicFeed",
      "mcp__registry__theprotocol_listTransparentOrganizations",
      "mcp__registry__theprotocol_discoverRegistries",
      "mcp__registry__theprotocol_discoverAgents",
      "mcp__registry__theprotocol_getAgentProfile",
      "mcp__registry__theprotocol_getNetworkStats",
      "mcp__registry__theprotocol_getGovernanceProposals",
      "mcp__registry__theprotocol_getApyRates",
      "mcp__registry__theprotocol_getRegistryCard",
      "mcp__registry__theprotocol_getFiatTiers",
      "mcp__registry__theprotocol_getFiatProviders",
      "mcp__registry__theprotocol_getFiatQuote",
      "mcp__registry__theprotocol_getStakingGlobalStats",
      "mcp__registry__theprotocol_getNetworkHealth",
      "mcp__registry__theprotocol_getFederationInfo",
      "mcp__registry__theprotocol_getAttestationSigningPubkey",
      "mcp__registry__theprotocol_getAchievementCatalog",
      "mcp__registry__theprotocol_getAttestationHealth",
      "mcp__registry__theprotocol_getCircuits",
      "mcp__registry__theprotocol_getStakingDistributions",
      "mcp__registry__theprotocol_getStakingDistributionStats",
      "mcp__registry__theprotocol_getSystemActivityFeed",
      "mcp__registry__theprotocol_getCircuitACIR",
      "mcp__registry__theprotocol_getCircuitSource",
      "mcp__registry__theprotocol_getCircuitNargoToml",
      "mcp__registry__theprotocol_getCircuitVerificationKey",
      "mcp__registry__theprotocol_getCircuitMetadata",
      "mcp__registry__theprotocol_getPipelineTemplates",
      "mcp__registry__theprotocol_getAgentByDID",
      "mcp__registry__theprotocol_getAgentCardExport",
      "mcp__registry__theprotocol_getAgentPublicKey",
      "mcp__registry__theprotocol_getTegPrice",
      "mcp__registry__theprotocol_getTegReputationRankings",
      "mcp__registry__theprotocol_getAgentLocations",
      "mcp__registry__theprotocol_getFiatStatsPublic",
      "mcp__registry__theprotocol_getAuthRegistrationConfig",
      "mcp__registry__theprotocol_getAgentFlare",
      "mcp__registry__theprotocol_getDeveloperFlare",
      "mcp__registry__theprotocol_getStakingApyTiersTeg",
      "mcp__registry__theprotocol_getFederationHealthCheck",
      "mcp__registry__theprotocol_getFederationNetworkStats",
      "mcp__registry__theprotocol_listFederationRegistries",
      "mcp__registry__theprotocol_listFederationAgentCards",
      "mcp__registry__theprotocol_listFederationRegistryCards",
      "mcp__registry__theprotocol_getFederationPolicyCompliance",
      "mcp__registry__theprotocol_getFederationRegistryHealthProfile",
      "mcp__registry__theprotocol_getSpireJWKS",
      "mcp__registry__theprotocol_listAgentCards",
      "mcp__registry__theprotocol_getAgentCardByHRI",
      "mcp__registry__theprotocol_getAgentCardByHumanReadableId",
      "mcp__registry__theprotocol_getAgentCardById",
      "mcp__registry__theprotocol_getCommunityAnnouncements",
      "mcp__registry__theprotocol_getDownloadsManifest",
      "mcp__registry__theprotocol_getStackHealth",
      "mcp__registry__theprotocol_getActivityFeedByType",
      "mcp__registry__theprotocol_getAgentLocationsOperator",
      "mcp__registry__theprotocol_getAgentLocationsEmissionPolicies",
      "mcp__registry__theprotocol_getAgentLocationsTrustedRegistries",
      "mcp__registry__theprotocol_getAgentAttestationsByDID",
      "mcp__registry__theprotocol_getAgentAttestationSchedulesByDID",
      "mcp__registry__theprotocol_getAgentANP",
      "mcp__registry__theprotocol_getAgentDIDDoc",
      "mcp__registry__theprotocol_getPublicShowcaseAgents",
      "mcp__registry__theprotocol_getPublicEventStoreRecent",
      "mcp__registry__theprotocol_getPublicEventStoreStats",
      "mcp__registry__theprotocol_getWellKnownRegistryCard",
      "mcp__registry__theprotocol_getWellKnownDevJwks",
      "mcp__registry__theprotocol_getFiatPurchaseSession",
      "mcp__registry__theprotocol_getMcpStdioBridgeJs",
      "mcp__registry__theprotocol_getMcpStdioBridgeAdminJs",
      "mcp__registry__theprotocol_getPublicRegistryConfig",
      "mcp__registry__theprotocol_listPublicOperatorApplications",
      "mcp__registry__theprotocol_getAgentByDIDAlt",
      "mcp__registry__theprotocol_listArenaMatches",
      "mcp__registry__theprotocol_getArenaMatch",
      "mcp__registry__theprotocol_getArenaMatchBets",
      "mcp__registry__theprotocol_getArenaMatchMap",
      "mcp__registry__theprotocol_getArenaLeaderboard",
      "mcp__registry__theprotocol_getArenaAgentStats",
      "mcp__registry__theprotocol_getAgoraListings",
      "mcp__registry__theprotocol_getAgoraListing",
      "mcp__registry__theprotocol_getAgoraOrderBook",
      "mcp__registry__theprotocol_getAgoraTrades",
      "mcp__registry__theprotocol_getAgoraCandles",
      "mcp__registry__theprotocol_getForgeStatus",
      "mcp__registry__theprotocol_getForgeLineage",
      "mcp__registry__theprotocol_getMyBalance",
      "mcp__registry__theprotocol_getAgentToken",
      "mcp__registry__theprotocol_getMyStakes",
      "mcp__registry__theprotocol_getMyVotingPower",
      "mcp__registry__theprotocol_getMyEarnings",
      "mcp__registry__theprotocol_getMyAgentInfo",
      "mcp__registry__theprotocol_getMyAutoCompound",
      "mcp__registry__theprotocol_getMyRewardHistory",
      "mcp__registry__theprotocol_getMyStakingStatus",
      "mcp__registry__theprotocol_getMyStakingHistory",
      "mcp__registry__theprotocol_getMyAgentHealth",
      "mcp__registry__theprotocol_getMyStakeStats",
      "mcp__registry__theprotocol_listMyAttestationSchedules",
      "mcp__registry__theprotocol_getMyFundingRequests",
      "mcp__registry__theprotocol_getMyContracts",
      "mcp__registry__theprotocol_getAgentContracts",
      "mcp__registry__theprotocol_getMyVoteOnProposal",
      "mcp__registry__theprotocol_getMyA2APaymentTokens",
      "mcp__registry__theprotocol_getMyAgentDisputes",
      "mcp__registry__theprotocol_getContractById",
      "mcp__registry__theprotocol_logEnhancedDispute",
      "mcp__registry__theprotocol_getRegistryFederationProposals",
      "mcp__registry__theprotocol_getMyTegBalance",
      "mcp__registry__theprotocol_getMyTegTransactions",
      "mcp__registry__theprotocol_getMyTegDisputes",
      "mcp__registry__theprotocol_getMyReputationBondStatus",
      "mcp__registry__theprotocol_getTegAttestations",
      "mcp__registry__theprotocol_getTegAdvancedTransactions",
      "mcp__registry__theprotocol_logTegDispute",
      "mcp__registry__theprotocol_getMyMtlsStatus",
      "mcp__registry__theprotocol_getTokenomicsTreasury",
      "mcp__registry__theprotocol_getTokenomicsRewards",
      "mcp__registry__theprotocol_getTokenomicsTransactions",
      "mcp__registry__theprotocol_getRevokedIdentities",
      "mcp__registry__theprotocol_getRelayStatus",
      "mcp__registry__theprotocol_getMyEnforcementStatus",
      "mcp__registry__theprotocol_getMyAgoraOrders",
      "mcp__registry__theprotocol_getMyAgoraHoldings",
      "mcp__registry__theprotocol_getContractV2",
      "mcp__registry__theprotocol_listConversations",
      "mcp__registry__theprotocol_readThread",
      "mcp__registry__theprotocol_getSupportReviewState",
      "mcp__registry__theprotocol_listOrganizationInvitations",
      "mcp__registry__theprotocol_getMyAgents",
      "mcp__registry__theprotocol_getMyDeveloperProfile",
      "mcp__registry__theprotocol_getMyApiKeys",
      "mcp__registry__theprotocol_getMyOrganizations",
      "mcp__registry__theprotocol_getMyAgentBundles",
      "mcp__registry__theprotocol_getMySupportTickets",
      "mcp__registry__theprotocol_getMyDisputes",
      "mcp__registry__theprotocol_getMyWebhooks",
      "mcp__registry__theprotocol_getWebhook",
      "mcp__registry__theprotocol_getWebhookDeliveries",
      "mcp__registry__theprotocol_getSupportedWebhookEvents",
      "mcp__registry__theprotocol_getDeveloperStats",
      "mcp__registry__theprotocol_getMyCicdPipelines",
      "mcp__registry__theprotocol_getMyCicdVersions",
      "mcp__registry__theprotocol_getMyCicdDeployments",
      "mcp__registry__theprotocol_getMyMcpAuditLog",
      "mcp__registry__theprotocol_getMyDeletionStatus",
      "mcp__registry__theprotocol_getMyAchievements",
      "mcp__registry__theprotocol_getMyUnreadNotifications",
      "mcp__registry__theprotocol_getOrganization",
      "mcp__registry__theprotocol_listOrganizationMembers",
      "mcp__registry__theprotocol_getFeaturedBundles",
      "mcp__registry__theprotocol_listMyAttestations",
      "mcp__registry__theprotocol_getAttestationDetail",
      "mcp__registry__theprotocol_getAttestationBundle",
      "mcp__registry__theprotocol_getTrustScore",
      "mcp__registry__theprotocol_getVolumeProfile",
      "mcp__registry__theprotocol_getCrossFrameReputation",
      "mcp__registry__theprotocol_getReputationComputationStatus",
      "mcp__registry__theprotocol_listOrganizationTeams",
      "mcp__registry__theprotocol_getOrganizationTeam",
      "mcp__registry__theprotocol_getOrganizationBySlug",
      "mcp__registry__theprotocol_getDisputeById",
      "mcp__registry__theprotocol_getFeeCurrentRate",
      "mcp__registry__theprotocol_listOrganizationAgents",
      "mcp__registry__theprotocol_getOrganizationCicdSummary",
      "mcp__registry__theprotocol_getAutoCompoundForAgent",
      "mcp__registry__theprotocol_getMyAgentCicdStats",
      "mcp__registry__theprotocol_getMyAgentLogs",
      "mcp__registry__theprotocol_listAgentTemplates",
      "mcp__registry__theprotocol_getAgentTemplate",
      "mcp__registry__theprotocol_getMyDeveloperActivity",
      "mcp__registry__theprotocol_getMyDeveloperTegSummary",
      "mcp__registry__theprotocol_getMyTreasuryBalance",
      "mcp__registry__theprotocol_getMyNotificationPrefs",
      "mcp__registry__theprotocol_getNotificationCatalog",
      "mcp__registry__theprotocol_getMyNotificationMatrix",
      "mcp__registry__theprotocol_getMySigningKeys",
      "mcp__registry__theprotocol_getMyFlareStatus",
      "mcp__registry__theprotocol_getMyFiatPurchases",
      "mcp__registry__theprotocol_getMy2FAStatus",
      "mcp__registry__theprotocol_getDeployment",
      "mcp__registry__theprotocol_appendDeploymentLogs",
      "mcp__registry__theprotocol_getTransactionsAnalytics",
      "mcp__registry__theprotocol_getAgentRewardsHistory",
      "mcp__registry__theprotocol_getAgentPendingRewards",
      "mcp__registry__theprotocol_getAgentStakingBalance",
      "mcp__registry__theprotocol_listTegPolicies",
      "mcp__registry__theprotocol_getTegPoliciesComplianceDashboard",
      "mcp__registry__theprotocol_listFederationPeers",
      "mcp__registry__theprotocol_getMyFederationRegistrations",
      "mcp__registry__theprotocol_getFederationSyncStatusDev",
      "mcp__registry__theprotocol_getAuthProfile",
      "mcp__registry__theprotocol_getBundleManifest",
      "mcp__registry__theprotocol_getTegTransactionDetail",
      "mcp__registry__theprotocol_getAgentTransactionHistory",
      "mcp__registry__theprotocol_getTegPolicy",
      "mcp__registry__theprotocol_resolveTegDispute",
      "mcp__registry__theprotocol_getTegDisputeDetail",
      "mcp__registry__theprotocol_getAgentReputation",
      "mcp__registry__theprotocol_validateAgentCard",
      "mcp__registry__theprotocol_getFederationDisputeSettlements",
      "mcp__registry__theprotocol_getFederationDisputeSettlement",
      "mcp__registry__theprotocol_getPeerSlashConfig",
      "mcp__registry__theprotocol_getFederationPeerByID",
      "mcp__registry__theprotocol_previewSlashReductionAttestation",
      "mcp__registry__theprotocol_previewVotingPowerAttestation",
      "mcp__registry__theprotocol_mcpPassthroughGetAgentProfile",
      "mcp__registry__theprotocol_getStakingDistributionRecords",
      "mcp__registry__theprotocol_previewAdminEmailWithContext",
      "mcp__registry__theprotocol_previewAdminEmailText",
      "mcp__registry__theprotocol_getMyApiKeyDetail",
      "mcp__registry__theprotocol_getBatchAgentBalances",
      "mcp__registry__theprotocol_getMyAgentBalance",
      "mcp__registry__theprotocol_getOperatorMyStatus",
      "mcp__registry__theprotocol_getOperatorMyBundle",
      "mcp__registry__theprotocol_getOperatorMyLifecycle",
      "mcp__registry__theprotocol_validateAgentImport",
      "mcp__registry__theprotocol_operatorPortalSelfLogs",
      "mcp__registry__theprotocol_getMyDeveloperJwks",
      "mcp__registry__theprotocol_getOAuthFederationStatus",
      "mcp__registry__theprotocol_oauthFederationTrustList",
      "mcp__registry__theprotocol_getSupportTicketDetail",
      "mcp__registry__theprotocol_getMyDeveloperActivityEventstore",
      "mcp__registry__theprotocol_listDeveloperApikeysMe",
      "mcp__registry__theprotocol_listDeveloperWebhooks",
      "mcp__registry__theprotocol_getProposalDetail",
      "mcp__registry__theprotocol_getProposalVotes",
      "mcp__registry__theprotocol_getAutoTallyConfig",
      "mcp__registry__theprotocol_getDevTrustGraph",
      "mcp__registry__theprotocol_getAgentMetrics",
      "mcp__registry__theprotocol_listAgentBuilderTemplates",
      "mcp__registry__theprotocol_listDeveloperWebhooksAlt",
      "mcp__registry__theprotocol_getDeveloperWebhookDeliveriesAlt",
      "mcp__registry__theprotocol_guildListOrders",
      "mcp__registry__theprotocol_guildGetOrder",
      "mcp__registry__theprotocol_getMembershipStats",
      "mcp__registry__theprotocol_getCommonsSeasons",
      "mcp__registry__theprotocol_getCommonsSeason",
      "mcp__registry__theprotocol_getMyMembership",
      "mcp__registry__theprotocol_getMyCommonsSeason",
      "mcp__registry__theprotocol_listToolsets",
      "mcp__registry__theprotocol_searchTools",
      "mcp__registry__theprotocol_describeTools"
    ],
    "ask": [
      "mcp__registry__theprotocol_reverifyAttestation",
      "mcp__registry__theprotocol_authRegister",
      "mcp__registry__theprotocol_authForgotPassword",
      "mcp__registry__theprotocol_authSetNewPassword",
      "mcp__registry__theprotocol_authRecoverAccount",
      "mcp__registry__theprotocol_authResendVerification",
      "mcp__registry__theprotocol_authVerifyEmail",
      "mcp__registry__theprotocol_authValidate2FA",
      "mcp__registry__theprotocol_verifyPublicAttestationBundle",
      "mcp__registry__theprotocol_getPublicShowcaseCall",
      "mcp__registry__theprotocol_authRecover2FA",
      "mcp__registry__theprotocol_createArenaMatch",
      "mcp__registry__theprotocol_transferTokens",
      "mcp__registry__theprotocol_smartSend",
      "mcp__registry__theprotocol_stakeTokens",
      "mcp__registry__theprotocol_unstakeTokens",
      "mcp__registry__theprotocol_castVote",
      "mcp__registry__theprotocol_bridgeTransfer",
      "mcp__registry__theprotocol_authorizePayment",
      "mcp__registry__theprotocol_verifyPayment",
      "mcp__registry__theprotocol_settlePayment",
      "mcp__registry__theprotocol_releasePayment",
      "mcp__registry__theprotocol_submitFundingRequest",
      "mcp__registry__theprotocol_agentHeartbeat",
      "mcp__registry__theprotocol_enableMtls",
      "mcp__registry__theprotocol_claimStakingRewards",
      "mcp__registry__theprotocol_createAttestationSchedule",
      "mcp__registry__theprotocol_submitAttestation",
      "mcp__registry__theprotocol_estimateMyStakingRewards",
      "mcp__registry__theprotocol_releasePaymentById",
      "mcp__registry__theprotocol_approveContractCompletion",
      "mcp__registry__theprotocol_markContractFailed",
      "mcp__registry__theprotocol_submitDisputeEvidence",
      "mcp__registry__theprotocol_depositReputationBond",
      "mcp__registry__theprotocol_tegSystemTransfer",
      "mcp__registry__theprotocol_claimTegRewards",
      "mcp__registry__theprotocol_crossTegBalanceSync",
      "mcp__registry__theprotocol_applyReputationSignal",
      "mcp__registry__theprotocol_acceptContract",
      "mcp__registry__theprotocol_submitContractWork",
      "mcp__registry__theprotocol_createMalpracticeDispute",
      "mcp__registry__theprotocol_federationVoteProposal",
      "mcp__registry__theprotocol_tallyProposal",
      "mcp__registry__theprotocol_submitTegAttestation",
      "mcp__registry__theprotocol_crossRegistryContractProxy",
      "mcp__registry__theprotocol_acceptContractFederated",
      "mcp__registry__theprotocol_submitContractWorkFederated",
      "mcp__registry__theprotocol_relayAction",
      "mcp__registry__theprotocol_tegStakeDirect",
      "mcp__registry__theprotocol_tegUnstakeDirect",
      "mcp__registry__theprotocol_tegCrossRegistryTransferDirect",
      "mcp__registry__theprotocol_submitOnboardRegister",
      "mcp__registry__theprotocol_tegReputationSignalToken",
      "mcp__registry__theprotocol_federationSyncRequest",
      "mcp__registry__theprotocol_placeAgoraOrder",
      "mcp__registry__theprotocol_buyAgoraLaunch",
      "mcp__registry__theprotocol_runForgeEval",
      "mcp__registry__theprotocol_engageAgent",
      "mcp__registry__theprotocol_submitContractMilestone",
      "mcp__registry__theprotocol_releaseContractMilestone",
      "mcp__registry__theprotocol_instantiateContractTemplate",
      "mcp__registry__theprotocol_sendChatMessage",
      "mcp__registry__theprotocol_blockChatPrincipal",
      "mcp__registry__theprotocol_unblockChatPrincipal",
      "mcp__registry__theprotocol_respondChatRequest",
      "mcp__registry__theprotocol_grantSupportReview",
      "mcp__registry__theprotocol_withdrawOrganizationInvitation",
      "mcp__registry__theprotocol_createAgent",
      "mcp__registry__theprotocol_submitDispute",
      "mcp__registry__theprotocol_createProposal",
      "mcp__registry__theprotocol_createApiKey",
      "mcp__registry__theprotocol_submitSupportTicket",
      "mcp__registry__theprotocol_createWebhook",
      "mcp__registry__theprotocol_updateWebhook",
      "mcp__registry__theprotocol_testWebhook",
      "mcp__registry__theprotocol_markNotificationRead",
      "mcp__registry__theprotocol_createOrganization",
      "mcp__registry__theprotocol_updateOrganization",
      "mcp__registry__theprotocol_inviteOrganizationMember",
      "mcp__registry__theprotocol_createOrganizationTeam",
      "mcp__registry__theprotocol_addTeamMember",
      "mcp__registry__theprotocol_assignAgentToOrg",
      "mcp__registry__theprotocol_claimPendingAchievements",
      "mcp__registry__theprotocol_recordAchievement",
      "mcp__registry__theprotocol_updateOrganizationTeam",
      "mcp__registry__theprotocol_unassignAgentFromOrg",
      "mcp__registry__theprotocol_updateNotificationPrefs",
      "mcp__registry__theprotocol_createPipeline",
      "mcp__registry__theprotocol_updatePipeline",
      "mcp__registry__theprotocol_createVersion",
      "mcp__registry__theprotocol_activateVersion",
      "mcp__registry__theprotocol_rollbackVersion",
      "mcp__registry__theprotocol_triggerDeployment",
      "mcp__registry__theprotocol_updateDeploymentStatus",
      "mcp__registry__theprotocol_cloneAgent",
      "mcp__registry__theprotocol_exportAgentDev",
      "mcp__registry__theprotocol_updateMyDeveloperLocation",
      "mcp__registry__theprotocol_getAgentStakingHistory",
      "mcp__registry__theprotocol_triggerFederationSync",
      "mcp__registry__theprotocol_logoutSession",
      "mcp__registry__theprotocol_setup2FA",
      "mcp__registry__theprotocol_verify2FA",
      "mcp__registry__theprotocol_changePassword",
      "mcp__registry__theprotocol_rateBundle",
      "mcp__registry__theprotocol_reportBundle",
      "mcp__registry__theprotocol_forkBundle",
      "mcp__registry__theprotocol_exportTegTransactions",
      "mcp__registry__theprotocol_createTegPolicy",
      "mcp__registry__theprotocol_updateTegPolicy",
      "mcp__registry__theprotocol_createFrameInvitation",
      "mcp__registry__theprotocol_finalizeFrameInvitation",
      "mcp__registry__theprotocol_downloadBundleViaOnboard",
      "mcp__registry__theprotocol_approveDisputeSettlement",
      "mcp__registry__theprotocol_updateFederationPeer",
      "mcp__registry__theprotocol_createFederationPeer",
      "mcp__registry__theprotocol_setFlareCornerVariant",
      "mcp__registry__theprotocol_setFlareOverlay",
      "mcp__registry__theprotocol_setFlareVariant",
      "mcp__registry__theprotocol_flareCelebrationAcknowledge",
      "mcp__registry__theprotocol_customizeFlare",
      "mcp__registry__theprotocol_equipFlare",
      "mcp__registry__theprotocol_moveFlare",
      "mcp__registry__theprotocol_selectFlare",
      "mcp__registry__theprotocol_unequipFlare",
      "mcp__registry__theprotocol_updateAutoCompound",
      "mcp__registry__theprotocol_triggerManualDistribution",
      "mcp__registry__theprotocol_downloadBundle",
      "mcp__registry__theprotocol_restoreBundle",
      "mcp__registry__theprotocol_patchBundle",
      "mcp__registry__theprotocol_createBundle",
      "mcp__registry__theprotocol_activateOperator",
      "mcp__registry__theprotocol_requestFrame",
      "mcp__registry__theprotocol_selfProvisionOperator",
      "mcp__registry__theprotocol_importAgent",
      "mcp__registry__theprotocol_agentBulkExport",
      "mcp__registry__theprotocol_authRefresh",
      "mcp__registry__theprotocol_regenerateBackupCodes",
      "mcp__registry__theprotocol_operatorPortalSelfRestart",
      "mcp__registry__theprotocol_oauthIntrospect",
      "mcp__registry__theprotocol_oauthTokenExchange",
      "mcp__registry__theprotocol_acceptOrgInvitation",
      "mcp__registry__theprotocol_replySupportTicket",
      "mcp__registry__theprotocol_requestSelfRevocation",
      "mcp__registry__theprotocol_createDeveloperApikeyMe",
      "mcp__registry__theprotocol_federationProposeRaise",
      "mcp__registry__theprotocol_federationVetoProposal",
      "mcp__registry__theprotocol_agentBuilderGenerate",
      "mcp__registry__theprotocol_agentBuilderGenerateTemplate",
      "mcp__registry__theprotocol_updateMyDeveloperProfile",
      "mcp__registry__theprotocol_testDeveloperWebhookAlt",
      "mcp__registry__theprotocol_downloadPipelineTemplate",
      "mcp__registry__theprotocol_purchasePipelineTemplate",
      "mcp__registry__theprotocol_createTegPoliciesBatch",
      "mcp__registry__theprotocol_createAgoraListing",
      "mcp__registry__theprotocol_declareAgoraDistribution",
      "mcp__registry__theprotocol_guildNetworkBoard",
      "mcp__registry__theprotocol_guildPostOrder",
      "mcp__registry__theprotocol_guildBid",
      "mcp__registry__theprotocol_guildAward",
      "mcp__registry__theprotocol_guildSubmitWork",
      "mcp__registry__theprotocol_guildVerify",
      "mcp__registry__theprotocol_guildMyWork",
      "mcp__registry__theprotocol_guildCrossRegistryBid",
      "mcp__registry__theprotocol_submitCommonsWork",
      "mcp__registry__theprotocol_castCommonsBallot",
      "mcp__registry__theprotocol_enableToolset"
    ],
    "deny": [
      "mcp__registry__theprotocol_authResetPassword",
      "mcp__registry__theprotocol_agentRevokeAttestation",
      "mcp__registry__theprotocol_disableMyAttestationSchedule",
      "mcp__registry__theprotocol_unlockReputationBond",
      "mcp__registry__theprotocol_disableMyMtls",
      "mcp__registry__theprotocol_cancelAgoraOrder",
      "mcp__registry__theprotocol_revokeSupportReview",
      "mcp__registry__theprotocol_revokeApiKey",
      "mcp__registry__theprotocol_deleteWebhook",
      "mcp__registry__theprotocol_deleteOrganization",
      "mcp__registry__theprotocol_requestAccountDeletion",
      "mcp__registry__theprotocol_cancelAccountDeletion",
      "mcp__registry__theprotocol_removeOrganizationMember",
      "mcp__registry__theprotocol_deleteOrganizationTeam",
      "mcp__registry__theprotocol_removeTeamMember",
      "mcp__registry__theprotocol_deletePipeline",
      "mcp__registry__theprotocol_deleteVersion",
      "mcp__registry__theprotocol_deleteMyAgent",
      "mcp__registry__theprotocol_rotateFederationLicenseSelf",
      "mcp__registry__theprotocol_disable2FASelf",
      "mcp__registry__theprotocol_deleteBundle",
      "mcp__registry__theprotocol_deleteTegPolicy",
      "mcp__registry__theprotocol_resetAgentCredentialsOnboard",
      "mcp__registry__theprotocol_rejectDisputeSettlement",
      "mcp__registry__theprotocol_updatePeerSlashConfig",
      "mcp__registry__theprotocol_deleteFederationPeerSelf",
      "mcp__registry__theprotocol_federationSlashRequest",
      "mcp__registry__theprotocol_federationSlashConfirmation",
      "mcp__registry__theprotocol_restoreFromUpload",
      "mcp__registry__theprotocol_rotateMySigningKey",
      "mcp__registry__theprotocol_deleteMyApiKey",
      "mcp__registry__theprotocol_deleteMyAgentByDev",
      "mcp__registry__theprotocol_oauthRevoke",
      "mcp__registry__theprotocol_guildCancelOrder",
      "mcp__registry__theprotocol_invokeTool",
      "mcp__registry__theprotocol_disableToolset"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as registry. Review it before you use it.