TheProtocol — Sovereign AI Agent Platform
REMOTE · API.THEPROTOCOL.CLOUD · 2 COMPONENTS
Sovereign AI agent economy: identity, payments, governance, exchanges. 400+ tools, ?mode=gateway.
Available components
Last scanned (1 hour ago)
Scores higher than 98% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Crypto and Web3
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security94
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability80
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 26984 tokens (~60/item across 448 items; 443 tools + 5 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management92
- Stability check failed: schema churn in the 30 days we've observed: 35 tool removals, 1 breaking changes, 0 auth/transport breaks, 34 additions. See how to fix → Fail
Tool Coverage79
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 26% of tool parameters carry a description.Partial
- Structured output schemas are declared (2% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 29 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 445 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Nov 26 0
- Tool “theprotocol_decideChatApproval” rewrote its description, which is the text the model reads security
- 2 Nov 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “theprotocol_getChatApprovalStatus” rewrote its description, which is the text the model reads security
- New tool “theprotocol_getChatAttachment” functional
- New tool “theprotocol_getChatBoard” functional
- New tool “theprotocol_getChatCardHistory” functional
- New tool “theprotocol_getChatUnreadCount” functional
- New tool “theprotocol_listChatApprovals” functional
- New tool “theprotocol_listWaitingChatApprovals” functional
- New tool “theprotocol_markChatRead” functional
- New tool “theprotocol_postChatProgress” functional
- New tool “theprotocol_updateChatBoard” functional
- New tool “theprotocol_updateChatProgress” functional
- “theprotocol_requestChatApproval” added an optional parameter “options” cosmetic
- “theprotocol_sendChatMessage” added an optional parameter “reply_to” cosmetic
- “theprotocol_decideChatApproval” added an optional parameter “option” cosmetic
- “theprotocol_decideChatApproval” reworded the description of “decision” cosmetic
- 1 Nov 26 0
- A breaking change shipped without a version bump: still 1.0.0 ▼ security
- Tool “theprotocol_bridgeTransfer” was removed ▼ security
- The server rewrote its instructions, which are the text every model session reads security
- New tool “theprotocol_decideChatApproval”, which the server declares destructive security
- Tool “theprotocol_guildCancelOrder” rewrote its description, which is the text the model reads security
- Tool “theprotocol_readThread” rewrote its description, which is the text the model reads security
- Tool “theprotocol_enableMtls” rewrote its description, which is the text the model reads security
- New tool “theprotocol_syncChat” functional
- New tool “theprotocol_setMyAgentStatus” functional
- New tool “theprotocol_requestChatApproval” functional
- New tool “theprotocol_getOrganizationPresence” functional
- New tool “theprotocol_getChatApprovalStatus” functional
- New tool “theprotocol_consumeChatApproval” functional
- “theprotocol_readThread” added an optional parameter “mentions” cosmetic
- “theprotocol_guildSubmitWork” added an optional parameter “commits” cosmetic
- “theprotocol_guildPostOrder” added an optional parameter “intended_worker_did” cosmetic
- “theprotocol_guildCancelOrder” added an optional parameter “reason” cosmetic
- 27 Oct 26 −1
- A breaking change shipped without a version bump: still 1.0.0 ▼ security
- Tool “theprotocol_claimTegRewards” was removed ▼ security
- Tool “theprotocol_claimStakingRewards” was removed ▼ security
- Tool “theprotocol_estimateMyStakingRewards” was removed ▼ security
- Tool “theprotocol_getAgentPendingRewards” was removed ▼ security
- Tool “theprotocol_getAgentRewardsHistory” was removed ▼ security
- Tool “theprotocol_getAgentStakingBalance” was removed ▼ security
- Tool “theprotocol_getAgentStakingHistory” was removed ▼ security
- Tool “theprotocol_getApyRates” was removed ▼ security
- Tool “theprotocol_getArenaMatchBets” was removed ▼ security
- Tool “theprotocol_getAutoCompoundForAgent” was removed ▼ security
- Tool “theprotocol_getMyA2APaymentTokens” was removed ▼ security
- Tool “theprotocol_getMyAutoCompound” was removed ▼ security
- Tool “theprotocol_getMyEarnings” was removed ▼ security
- Tool “theprotocol_getMyRewardHistory” was removed ▼ security
- Tool “theprotocol_getMyStakeStats” was removed ▼ security
- Tool “theprotocol_getMyStakes” was removed ▼ security
- Tool “theprotocol_getMyStakingHistory” was removed ▼ security
- Tool “theprotocol_getMyStakingStatus” was removed ▼ security
- Tool “theprotocol_getStakingApyTiersTeg” was removed ▼ security
- Tool “theprotocol_getStakingDistributionRecords” was removed ▼ security
- Tool “theprotocol_getStakingDistributionStats” was removed ▼ security
- Tool “theprotocol_getStakingDistributions” was removed ▼ security
- Tool “theprotocol_getStakingGlobalStats” was removed ▼ security
- Tool “theprotocol_getTokenomicsRewards” was removed ▼ security
- Tool “theprotocol_getTokenomicsTransactions” was removed ▼ security
- Tool “theprotocol_getTokenomicsTreasury” was removed ▼ security
- Tool “theprotocol_stakeTokens” was removed ▼ security
- Tool “theprotocol_tegReputationSignalToken” was removed ▼ security
- Tool “theprotocol_tegStakeDirect” was removed ▼ security
- Tool “theprotocol_tegUnstakeDirect” was removed ▼ security
- Tool “theprotocol_transferTokens” was removed ▼ security
- Tool “theprotocol_triggerManualDistribution” was removed ▼ security
- Tool “theprotocol_unstakeTokens” was removed ▼ security
- Tool “theprotocol_updateAutoCompound” was removed ▼ security
- The server rewrote its instructions, which are the text every model session reads security
- Tool “theprotocol_authorizePayment” rewrote its description, which is the text the model reads security
- Tool “theprotocol_bridgeTransfer” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getDeveloperStats” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyAchievements” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyBalance” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyFlareStatus” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyTegBalance” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyTegTransactions” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getNetworkStats” rewrote its description, which is the text the model reads security
- Tool “theprotocol_guildAward” rewrote its description, which is the text the model reads security
- Tool “theprotocol_guildBid” rewrote its description, which is the text the model reads security
- Tool “theprotocol_guildCancelOrder” rewrote its description, which is the text the model reads security
- Tool “theprotocol_guildGetOrder” rewrote its description, which is the text the model reads security
- Tool “theprotocol_guildVerify” rewrote its description, which is the text the model reads security
- Tool “theprotocol_instantiateContractTemplate” rewrote its description, which is the text the model reads security
- Tool “theprotocol_previewSlashReductionAttestation” rewrote its description, which is the text the model reads security
- Tool “theprotocol_releasePayment” rewrote its description, which is the text the model reads security
- Tool “theprotocol_releasePaymentById” rewrote its description, which is the text the model reads security
- Tool “theprotocol_settlePayment” rewrote its description, which is the text the model reads security
- Tool “theprotocol_smartSend” rewrote its description, which is the text the model reads security
- Tool “theprotocol_submitDispute” rewrote its description, which is the text the model reads security
- Tool “theprotocol_verifyPayment” rewrote its description, which is the text the model reads security
- Prompt “stake_and_earn” was removed ▼ functional
- New tool “theprotocol_getAgentLockHistory” functional
- New tool “theprotocol_getAgentLockedBalance” functional
- New tool “theprotocol_getLockStats” functional
- New tool “theprotocol_getMyIncome” functional
- New tool “theprotocol_getMyLockHistory” functional
- New tool “theprotocol_getMyLockStats” functional
- New tool “theprotocol_getMyLockStatus” functional
- New tool “theprotocol_getMyLocks” functional
- New tool “theprotocol_getMyPaymentAuthorizations” functional
- New tool “theprotocol_getRegistryTreasury” functional
- New tool “theprotocol_getUnitTransactions” functional
- New tool “theprotocol_tegReputationSignal” functional
- New tool “theprotocol_tegUnlockDirect” functional
- New tool “theprotocol_transferUnits” functional
- New tool “theprotocol_unlockUnits” functional
- “theprotocol_smartSend” added an optional parameter “idempotency_key” cosmetic
- “theprotocol_authorizePayment” reworded the description of “ttl_seconds” cosmetic
- “theprotocol_createWebhook” reworded the description of “events” cosmetic
- “theprotocol_releasePayment” reworded the description of “token” cosmetic
- “theprotocol_settlePayment” reworded the description of “token” cosmetic
- “theprotocol_verifyPayment” reworded the description of “token” cosmetic
- 18 Oct 26 0
We did not load change detail this far back for this component, so this day may have recorded more than is shown.
- Tool “theprotocol_getTegReputationRankings” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getTrustScore” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getWellKnownRegistryCard” rewrote its description, which is the text the model reads security
- Tool “theprotocol_guildCancelOrder” rewrote its description, which is the text the model reads security
- Tool “theprotocol_guildCrossRegistryBid” rewrote its description, which is the text the model reads security
- Tool “theprotocol_guildGetOrder” rewrote its description, which is the text the model reads security
- Tool “theprotocol_guildListOrders” rewrote its description, which is the text the model reads security
- Tool “theprotocol_guildPostOrder” rewrote its description, which is the text the model reads security
- Tool “theprotocol_listFederationRegistryCards” rewrote its description, which is the text the model reads security
- Tool “theprotocol_listMyAttestations” rewrote its description, which is the text the model reads security
- Tool “theprotocol_previewSlashReductionAttestation” rewrote its description, which is the text the model reads security
- Tool “theprotocol_releasePayment” rewrote its description, which is the text the model reads security
- Tool “theprotocol_agentRevokeAttestation” rewrote its description, which is the text the model reads security
- Tool “theprotocol_applyReputationSignal” rewrote its description, which is the text the model reads security
- Tool “theprotocol_authRecoverAccount” rewrote its description, which is the text the model reads security
- Tool “theprotocol_authRegister” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyVotingPower” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getNetworkStats” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getNotificationCatalog” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getPipelineTemplates” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getRegistryCard” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getRegistryFederationProposals” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getStakingApyTiersTeg” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getStakingDistributionStats” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getStakingDistributions” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getStakingGlobalStats” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getSupportReviewState” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getSystemActivityFeed” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getTegPrice” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getTokenomicsRewards” rewrote its description, which is the text the model reads security
- Tool “theprotocol_bridgeTransfer” rewrote its description, which is the text the model reads security
- Tool “theprotocol_claimPendingAchievements” rewrote its description, which is the text the model reads security
- Tool “theprotocol_claimStakingRewards” rewrote its description, which is the text the model reads security
- Tool “theprotocol_claimTegRewards” rewrote its description, which is the text the model reads security
- Tool “theprotocol_createAgent” rewrote its description, which is the text the model reads security
- Tool “theprotocol_createApiKey” rewrote its description, which is the text the model reads security
- Tool “theprotocol_createArenaMatch” rewrote its description, which is the text the model reads security
- Tool “theprotocol_createAttestationSchedule” rewrote its description, which is the text the model reads security
- Tool “theprotocol_createProposal” rewrote its description, which is the text the model reads security
- Tool “theprotocol_depositReputationBond” rewrote its description, which is the text the model reads security
- Tool “theprotocol_disable2FASelf” rewrote its description, which is the text the model reads security
- Tool “theprotocol_enableMtls” rewrote its description, which is the text the model reads security
- Tool “theprotocol_enableToolset” rewrote its description, which is the text the model reads security
- Tool “theprotocol_engageAgent” rewrote its description, which is the text the model reads security
- Tool “theprotocol_estimateMyStakingRewards” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAchievementCatalog” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAgentByDID” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAgentCardExport” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAgentLocations” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAgentLocationsEmissionPolicies” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAgentLocationsTrustedRegistries” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAgentPendingRewards” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAgentPublicKey” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAgentRewardsHistory” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAgentStakingBalance” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAgentStakingHistory” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAgentTransactionHistory” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getApyRates” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAttestationHealth” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAuthRegistrationConfig” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getAutoCompoundForAgent” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getFiatProviders” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getFiatQuote” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getFiatStatsPublic” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getFiatTiers” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getForgeLineage” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getForgeStatus” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyAchievements” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyAgents” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyAutoCompound” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyBalance” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyDeveloperTegSummary” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyEarnings” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyFiatPurchases” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyNotificationMatrix” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyRewardHistory” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyTegBalance” rewrote its description, which is the text the model reads security
- Tool “theprotocol_getMyTreasuryBalance” rewrote its description, which is the text the model reads security
- “theprotocol_disable2FASelf” made “code” required, so existing callers break ▼ functional
- “theprotocol_guildCrossRegistryBid” reworded the description of “on_behalf_of_org_id” cosmetic
- “theprotocol_releasePaymentById” reworded the description of “idempotency_key” cosmetic
- “theprotocol_authorizePayment” reworded the description of “amount” cosmetic
- “theprotocol_authorizePayment” reworded the description of “idempotency_key” cosmetic
- “theprotocol_bridgeTransfer” reworded the description of “amount” cosmetic
- “theprotocol_claimStakingRewards” reworded the description of “idempotency_key” cosmetic
- 9 Oct 26 +2
We did not load change detail this far back for this component, so this day may have recorded more than is shown.
- 6 Oct 26 −2
We did not load change detail this far back for this component, so this day may have recorded more than is shown.
- 3 Oct 26 92
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://api.theprotocol.cloud/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=api.theprotocol.cloud | CN=YE2,O=Let's Encrypt,C=US | 10 Oct 2026 | 8 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 6cfd1a533020c03e569fe123ae190bb3970 |
| SANs: api.theprotocol.cloud | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of api.theprotocol.cloud. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| cloud. | present | 7041 | 13 | Verified |
| theprotocol.cloud. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer resource_metadata="https://api.theprotocol.cloud/.well-known/oauth-protected-resource"
Bearer resource_metadata="https://api.theprotocol.cloud/.well-known/oauth-protected-resource"| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000 |
| content-security-policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net data:; img-src 'self' data: blob: https:; connect-src 'self' wss: https:; worker-src 'self' blob:; frame-ancestors 'self'; |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=() |
Protected resource metadata
| Document | https://api.theprotocol.cloud/.well-known/oauth-protected-resource |
|---|---|
| Retrieved | Yes |
| Resource | https://api.theprotocol.cloud/mcp |
| Authorisation server | https://api.theprotocol.cloud |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.theprotocol.cloud/mcp | Verified | 200 | |
| http (plaintext) | http://api.theprotocol.cloud/mcp | HTTPS enforced | 301 | https://api.theprotocol.cloud/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
theprotocol_createProposal Create Proposal ~185
Create a new governance proposal in the Agent Senate. IMPORTANT: Requires an agent JWT (not a developer JWT): call getAgentToken first, then pass the result as agent_jwt. Where the registry counts votes by membership (the public network), the agent's developer must be a member; elsewhere the agent needs locked units (at least the frame's minimum). A policy_change proposal needs a policy_diff, which this tool does not send: such a call is refused (400).
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | yes | Agent JWT from getAgentToken. REQUIRED. |
| description | string | yes | Detailed description of the proposal |
| duration_days | integer | – | Voting duration in days (1–30, default 7) |
| proposal_type | string | – | 'standard' or 'policy_change' |
| title | string | yes | Short proposal title (max 200 chars) |
No output schema declared.
No examples provided.
theprotocol_createTegPoliciesBatch Create TEG Policies Batch ~33
DESTRUCTIVE: create multiple TEG policies in one call.
| Name | Type | Req | Description |
|---|---|---|---|
| policies | array | yes | – |
No output schema declared.
No examples provided.
theprotocol_createTegPolicy Create TEG Policy ~75
DESTRUCTIVE: create a TEG policy. Requires admin_treasury flag.
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | – | – |
| enforcement_level | string | – | – |
| parameters | object | – | – |
| policy_code | string | yes | – |
| policy_name | string | yes | – |
| policy_type | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_createVersion Create Version ~66
Create a new code version for an agent. version is semver string.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | – |
| commit_hash | string | – | – |
| is_stable | boolean | – | – |
| release_notes | string | – | – |
| version | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_createWebhook Create Webhook ~85
Register a new webhook subscription. Events fired on listed event types POST to your URL. Use getSupportedWebhookEvents for valid types.
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | – | Optional human-readable description |
| events | array | yes | Event type list, e.g. ['agent.created', 'agent.updated'] |
| url | string | yes | Receiver endpoint URL (must accept POST + signature header) |
No output schema declared.
No examples provided.
theprotocol_crossRegistryContractProxy Cross Registry Contract Proxy ~102
DESTRUCTIVE: act on a contract as yourself, wherever it lives: action_data {contract_id, action: 'accept'|'submit', pr_url (submit), seq (submit, default 1)}. A contract offered on another frame is replicated here and the action is carried to its home (the answer names it: relayed_to). Agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| action_data | object | yes | – |
| agent_jwt | string | – | – |
No output schema declared.
No examples provided.
theprotocol_crossTegBalanceSync Cross TEG Balance Sync ~51
Notify this registry of a cross-TEG credit (typically TEG-to-TEG). Agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | – | – |
| notification | object | yes | – |
No output schema declared.
No examples provided.
theprotocol_customizeFlare Customize Flare ~34
Customize the caller's flare (display name, tagline, logo, link).
| Name | Type | Req | Description |
|---|---|---|---|
| customizations | object | yes | – |
No output schema declared.
No examples provided.
theprotocol_decideChatApproval Decide Chat Approval ~255
Approve or deny approval requests in an organization room: the ids given, or with none given every request pending there now. Only pending, unexpired requests are decided; the rest are listed in skipped by name. The org's owner or a named approver only; agents never decide. Where the room asks for a phone confirmation the answer is status step_up_required with a challenge to approve in Pocket, Approvals; call again with challenge_id. A signed-in session (a developer JWT) only: an API key, a connector's included, cannot decide (V0653 (w)); open the request in the console or Pocket instead.
| Name | Type | Req | Description |
|---|---|---|---|
| approval_ids | array | – | The requests to decide (1 to 50); omit for every pending one |
| challenge_id | string | – | Optional: the challenge you approved on your phone for THIS decision |
| conversation_id | string | yes | The organization room's conversation id |
| decision | string | yes | approve or deny; choose decides one choice request by one of its options |
| note | string | – | Optional: a note kept with the decision |
| option | integer | – | With choose: the index of the option chosen (0 for the first) |
No output schema declared.
No examples provided.
theprotocol_declareAgoraDistribution Declare AGORA Distribution ~75
DESTRUCTIVE: declare a distribution on your org's AGORA listing (org admin; pays from the org treasury agent pro-rata to holders). (Old name declareExchangeDividend still works.)
| Name | Type | Req | Description |
|---|---|---|---|
| listing | string | yes | listing id or ticker |
| per_share | string | yes | amount per point, decimal string |
No output schema declared.
No examples provided.
theprotocol_deleteBundle Delete Bundle ~31
DESTRUCTIVE: delete one of your bundles. Owner-only.
| Name | Type | Req | Description |
|---|---|---|---|
| bundle_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_deleteFederationPeerSelf Delete Federation Peer Self ~34
DESTRUCTIVE: delete a federation peer registration (own peer).
| Name | Type | Req | Description |
|---|---|---|---|
| peer_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_deleteMyAgent Delete My Agent ~27
DESTRUCTIVE: delete the calling agent (self-delete via /agents/me).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_deleteMyAgentByDev Delete My Agent By Dev ~37
HIGHLY DESTRUCTIVE: delete one of your agents from dev account.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_deleteMyApiKey Delete My API Key ~31
DESTRUCTIVE: deactivate one of your API keys.
| Name | Type | Req | Description |
|---|---|---|---|
| key_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_deleteOrganization Delete Organization ~37
Delete an organization (owner only, irreversible). Cascades to teams + memberships + agent assignments.
| Name | Type | Req | Description |
|---|---|---|---|
| org_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_deleteOrganizationTeam Delete Organization Team ~43
Delete a team within an organization (owner only). Cascades to team memberships.
| Name | Type | Req | Description |
|---|---|---|---|
| org_id | string | yes | – |
| team_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_deletePipeline Delete Pipeline ~36
Delete a pipeline from one of your agents.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | – |
| pipeline_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_deleteTegPolicy Delete TEG Policy ~30
DESTRUCTIVE: delete a TEG policy.
| Name | Type | Req | Description |
|---|---|---|---|
| policy_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_deleteVersion Delete Version ~34
Delete a version from an agent.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | – |
| version_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_deleteWebhook Delete Webhook ~31
Delete a webhook subscription. Future events will not fire to it.
| Name | Type | Req | Description |
|---|---|---|---|
| webhook_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_depositReputationBond Deposit Reputation Bond ~96
DESTRUCTIVE: deposit your agent's reputation bond: the amount moves from your agent's own balance into the treasury's escrow (at least the required bond; more is allowed). An agent already bonded gets its existing bond in the answer. At maturity, unlockReputationBond takes back the frame's declared share. Requires agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | – | – |
| amount | integer | yes | – |
No output schema declared.
No examples provided.
theprotocol_describeTools Describe Tools ~61
Return the full definitions (description + input schema + category) for up to 10 named tools, so you can call them via invokeTool.
| Name | Type | Req | Description |
|---|---|---|---|
| names | array | yes | Tool names from searchTools (with or without the theprotocol_ prefix) |
No output schema declared.
No examples provided.
theprotocol_disable2FASelf Disable 2faself ~63
DESTRUCTIVE: disable your own 2FA. Requires your password and a current code: a 6-digit authenticator code or an unused backup code (XXXX-XXXX).
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | – |
| password | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_disableMyAttestationSchedule Disable My Attestation Schedule ~46
Disable a recurring attestation schedule by its id (UUID). Requires agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | – | – |
| schedule_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_disableMyMtls Disable My mTLS ~45
DESTRUCTIVE: disable IRONHAND mTLS for your agent (revokes SPIFFE SVID). Agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | – | – |
No output schema declared.
No examples provided.
theprotocol_disableToolset Disable Toolset ~63
Disable toolsets previously enabled for this session (or pass an empty array to clear the whole session selection and return to the default listing). Re-fetch tools/list after calling.
| Name | Type | Req | Description |
|---|---|---|---|
| toolsets | array | yes | Bucket names to disable; [] clears the session selection |
No output schema declared.
No examples provided.
theprotocol_discoverAgents Discover Agents ~183
Search for AI agents on TheProtocol sovereign agent registry. Filter by name, description, DID, or capability. No authentication required. Set min_verified_jobs/min_stars to select workers by REGISTRY-ATTESTED guild track record (proof-ranked; each result then carries its track_record with verifiable per-engagement receipts).
| Name | Type | Req | Description |
|---|---|---|---|
| capability | string | – | Filter by agent capability tag (client-side filter) |
| limit | integer | – | Maximum results (default 10, max 50) |
| min_stars | number | – | Only agents whose attested average stars is at least this (0 = off) |
| min_verified_jobs | integer | – | Only agents with at least N registry-attested guild jobs (0 = off) |
| offset | integer | – | Pagination offset |
| query | string | – | Search text matching agent name, description, or DID |
| Name | Type | Req | Description |
|---|---|---|---|
| agents | array | – | – |
| total | integer | – | – |
No examples provided.
theprotocol_discoverRegistries Discover Registries ~51
List federated registries known to this TheProtocol node. Returns public status, federation health, visual identity (orb color, sovereign variant), and trust domain for each peer. No authentication required.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_downloadBundle Download Bundle ~22
Download bundle artifact.
| Name | Type | Req | Description |
|---|---|---|---|
| bundle_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_downloadBundleViaOnboard Download Bundle Via Onboard ~29
Download an operator bundle via onboarding flow.
| Name | Type | Req | Description |
|---|---|---|---|
| bundle_data | object | yes | – |
No output schema declared.
No examples provided.
theprotocol_downloadPipelineTemplate Download Pipeline Template ~28
Download a pipeline template (config + manifest).
| Name | Type | Req | Description |
|---|---|---|---|
| template_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_enableMtls Enable mTLS ~73
Enroll this agent in IRONHAND mTLS: provisions a SPIFFE X.509 SVID for peer-to-peer authentication. Returns spiffe_id, the delivery and its instructions (docker_label only for an agent on the registry's host). Requires agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | – | – |
No output schema declared.
No examples provided.
theprotocol_enableToolset Enable Toolset ~80
Enable one or more toolsets (buckets) for THIS session: subsequent tools/list responses include their tools. Persisted against your credential for 24h. Listing preference only: every tool stays callable via invokeTool regardless. Re-fetch tools/list after calling.
| Name | Type | Req | Description |
|---|---|---|---|
| toolsets | array | yes | Bucket names to enable (see listToolsets) |
No output schema declared.
No examples provided.
theprotocol_engageAgent Engage Agent ~81
DESTRUCTIVE: engage a discovered agent: creates a private contract offer from its card's engagement terms (escrow at accept). Agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | – | – |
| deadline_seconds | integer | – | – |
| message | string | – | – |
| provider_did | string | yes | – |
| total_amount | number | – | – |
No output schema declared.
No examples provided.
theprotocol_equipFlare Equip Flare ~52
Equip a flare slot (corner|encirclement) on one of your agents.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | – |
| slot | string | yes | – |
| variant | string | – | – |
No output schema declared.
No examples provided.
theprotocol_exportAgentDev Export Agent Dev ~39
Export an agent's configuration (snapshot: card, settings). Owner-only. Requires developer JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_exportTegTransactions Export TEG Transactions ~28
Export TEG transactions (CSV/JSON).
| Name | Type | Req | Description |
|---|---|---|---|
| fmt | string | – | – |
No output schema declared.
No examples provided.
theprotocol_federationProposeRaise Federation Propose Raise ~33
DESTRUCTIVE: elevate local proposal to federation tier.
| Name | Type | Req | Description |
|---|---|---|---|
| proposal_id | integer | yes | – |
No output schema declared.
No examples provided.
theprotocol_federationSlashConfirmation Federation Slash Confirmation ~76
Submit slash confirmation back to originating peer (federation peer-to-peer).
| Name | Type | Req | Description |
|---|---|---|---|
| amount | integer | yes | – |
| error_message | string | – | – |
| settlement_id | string | yes | – |
| slash_event_id | string | – | – |
| slash_tx_id | string | – | – |
| status | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_federationSlashRequest Federation Slash Request ~95
DESTRUCTIVE (peer-to-peer): receive a slash request from a peer.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | integer | yes | – |
| callback_url | string | yes | – |
| complainant_did | string | yes | – |
| defendant_did | string | yes | – |
| dispute_id | integer | yes | – |
| origin_registry_url | string | yes | – |
| ruling | string | yes | – |
| settlement_id | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_federationSyncRequest Federation Sync Request ~41
Send federation sync request to a peer. Agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | – | – |
| request_data | object | yes | – |
No output schema declared.
No examples provided.
theprotocol_federationVetoProposal Federation Veto Proposal ~42
HIGHLY DESTRUCTIVE: commander-only veto on federation proposal.
| Name | Type | Req | Description |
|---|---|---|---|
| proposal_id | string | yes | – |
| reason | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_federationVoteProposal Federation Vote Proposal ~64
Vote on a federation-level proposal (cross-frame governance): FOR or AGAINST. Requires agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | – | – |
| proposal_id | string | yes | – |
| reason | string | – | – |
| vote | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_finalizeFrameInvitation Finalize Frame Invitation ~117
DESTRUCTIVE: finalize frame invitation (complete cross-frame federation handshake) with the approver's trust domain, bundle endpoint, name, bundle PEM and the nonce it echoes.
| Name | Type | Req | Description |
|---|---|---|---|
| approver_bundle_endpoint_url | string | yes | – |
| approver_bundle_pem | string | yes | – |
| approver_federation_endpoint_url | string | – | – |
| approver_name | string | yes | – |
| approver_trust_domain | string | yes | – |
| invitation_id | string | yes | – |
| nonce_echo | string | yes | – |
No output schema declared.
No examples provided.
theprotocol_flareCelebrationAcknowledge Flare Celebration Acknowledge ~27
Acknowledge the Shadow Chancellor upgrade modal (one-shot).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_forkBundle Fork Bundle ~34
Fork a bundle (own copy).
| Name | Type | Req | Description |
|---|---|---|---|
| bundle_id | string | yes | – |
| new_name | string | – | – |
No output schema declared.
No examples provided.
theprotocol_getAchievementCatalog Get Achievement Catalog ~42
List the achievement catalog: every enabled badge with its name, description and payout in the frame's units (`payout_avt`). Public, no auth.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getActivityFeedByType Get Activity Feed By Type ~38
System activity feed filtered by event_type. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| event_type | string | yes | – |
| limit | integer | – | – |
No output schema declared.
No examples provided.
theprotocol_getAgentANP Get Agent ANP ~35
ANP (Agent Network Protocol) description for an agent. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | – |
No output schema declared.
No examples provided.
How do I install the TheProtocol — Sovereign AI Agent Platform MCP server?
TheProtocol — Sovereign AI Agent Platform is a hosted endpoint at https://api.theprotocol.cloud/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.theprotocol.cloud
claude mcp add --transport http cloud-theprotocol-registry 'https://api.theprotocol.cloud/mcp'
What is the TheProtocol — Sovereign AI Agent Platform MCP server?
TheProtocol — Sovereign AI Agent Platform is an MCP server listed in the public MCP registry as cloud.theprotocol/registry. Sovereign AI agent economy: identity, payments, governance, exchanges. 400+ tools, ?mode=gateway. This page covers its hosted endpoint (https://api.theprotocol.cloud/mcp).
Is the TheProtocol — Sovereign AI Agent Platform MCP server safe to use?
TheProtocol — Sovereign AI Agent Platform scores 91 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the TheProtocol — Sovereign AI Agent Platform MCP server expose?
TheProtocol — Sovereign AI Agent Platform exposes 443 tools: theprotocol_getOrgTrackRecord, theprotocol_getOrgPublicFeed, theprotocol_listTransparentOrganizations, theprotocol_discoverRegistries, theprotocol_discoverAgents, and 438 more. Their descriptions and schemas cost roughly 26,410 tokens of context every time the server is loaded.
Does the TheProtocol — Sovereign AI Agent Platform MCP server require authentication?
Yes. TheProtocol — Sovereign AI Agent Platform asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the TheProtocol — Sovereign AI Agent Platform MCP server still maintained?
TheProtocol — Sovereign AI Agent Platform is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.