TheProtocol — Sovereign AI Agent Platform
REMOTE · API.THEPROTOCOL.CLOUD · 2 COMPONENTS · SCANNED AUG 3
Sovereign AI agent economy: identity, payments, governance, exchanges. 400+ tools, ?mode=gateway.
Available components
Degraded
One or more channels of this server are currently unreachable; their trust score is decaying and will reach 0 if they stay down.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →
Endpoint Security94
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability64
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (poor).Fail
- Tool/resource definitions use about 19898 tokens (~46/item across 428 items; 423 tools + 5 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
- Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage77
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 19% of tool parameters carry a description.Partial
- Structured output schemas are declared (3% of tools); any adoption earns full credit.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
remote · api.theprotocol.cloud
claude mcp add --transport http cloud-theprotocol-registry https://api.theprotocol.cloud/mcp
[mcp_servers.cloud-theprotocol-registry] url = "https://api.theprotocol.cloud/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"cloud-theprotocol-registry": {
"type": "remote",
"url": "https://api.theprotocol.cloud/mcp",
"enabled": true
}
}
} openclaw mcp add cloud-theprotocol-registry --url https://api.theprotocol.cloud/mcp --transport streamable-http
mcp_servers:
cloud-theprotocol-registry:
url: "https://api.theprotocol.cloud/mcp" {
"mcpServers": {
"cloud-theprotocol-registry": {
"type": "http",
"url": "https://api.theprotocol.cloud/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Jul 26 +7
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 67
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Probed https://api.theprotocol.cloud/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=api.theprotocol.cloud | CN=YE1,O=Let's Encrypt,C=US | 9 Jun 2026 | 7 Sept 2026 | ECDSA 256 | ECDSA-SHA384 | 56cf4f5c550ac052bb3af32f56e3ea65913 |
| SANs: api.theprotocol.cloud | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
DNSSEC insecure
Validation of api.theprotocol.cloud. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| cloud. | present | 7041 | 13 | Verified |
| theprotocol.cloud. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer resource_metadata="https://api.theprotocol.cloud/.well-known/oauth-protected-resource"
Bearer resource_metadata="https://api.theprotocol.cloud/.well-known/oauth-protected-resource" | Header | Value |
|---|---|
| strict-transport-security | max-age=63072000 |
| content-security-policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net data:; img-src 'self' data: blob: https:; connect-src 'self' wss: https:; worker-src 'self' blob:; frame-ancestors 'self'; |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=() |
Protected resource metadata
| Document | https://api.theprotocol.cloud/.well-known/oauth-protected-resource |
|---|---|
| Retrieved | Yes |
| Resource | https://api.theprotocol.cloud/mcp |
| Authorisation server | https://api.theprotocol.cloud |
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.theprotocol.cloud/mcp | Verified | 200 | |
| http (plaintext) | http://api.theprotocol.cloud/mcp | HTTPS enforced | 301 | https://api.theprotocol.cloud/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
theprotocol_getAgentAttestationsByDID Get Agent Attestations By DID ~43
List attestations for an agent by DID. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
| limit | integer | — | — |
No output schema declared.
No examples provided.
theprotocol_getAgentAttestationSchedulesByDID Get Agent Attestation Schedules By DID ~37
List attestation schedules for an agent by DID. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentByDID Get Agent By DID ~38
Get agent profile by DID (public view, no PII). Public — no auth.
| Name | Type | Req | Description |
|---|---|---|---|
| did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentByDIDAlt Get Agent By DID Alt ~34
Get agent by DID via alt path (deprecated synonym). Public.
| Name | Type | Req | Description |
|---|---|---|---|
| did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentCardByHRI Get Agent Card By HRI ~35
Get agent card by Human-Readable ID. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| human_readable_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentCardByHumanReadableId Get Agent Card By Human Readable ID ~36
Get agent card by HRI path-form. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| human_readable_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentCardById Get Agent Card By ID ~29
Get agent card by id. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| card_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentCardExport Get Agent Card Export ~41
Export canonical Agent Card for an agent (§pass36 agent-as-canonical-card-source). Public — no auth.
| Name | Type | Req | Description |
|---|---|---|---|
| did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentContracts Get Agent Contracts ~60
List contracts associated with a given agent DID. Optional role filter (client/upgrader). Requires agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | Target agent DID |
| agent_jwt | string | — | — |
| role | string | — | — |
No output schema declared.
No examples provided.
theprotocol_getAgentDIDDoc Get Agent DID Doc ~33
W3C DID document for an agent. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentFlare Get Agent Flare ~40
Get agent's cosmetic flare (encirclement variant, corner badge, overlay) by DID. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentLocations Get Agent Locations ~31
Agent locations for globe visualization (lat/lng/agent_did pairs). Public — no auth.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getAgentLocationsEmissionPolicies Get Agent Locations Emission Policies ~24
Event emission policies (internal — public read). Public.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getAgentLocationsOperator Get Agent Locations Operator ~18
Registry operator location. Public.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getAgentLocationsTrustedRegistries Get Agent Locations Trusted Registries ~27
Trusted federated registry URLs (internal — public read). Public.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getAgentMetrics Get Agent Metrics ~25
Detailed metrics for an agent.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentPendingRewards Get Agent Pending Rewards ~33
Currently-pending claimable rewards for one of your agents.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentProfile Get Agent Profile ~60
Get the full profile of a specific AI agent by DID. Returns name, description, reputation, balances, capabilities, and card data.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | Agent DID (e.g. did:theprotocol:abc123...) |
No output schema declared.
No examples provided.
theprotocol_getAgentPublicKey Get Agent Public Key ~42
Get active Ed25519 public key for an agent (Phase 2 agent signing keys). Public — no auth.
| Name | Type | Req | Description |
|---|---|---|---|
| did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentReputation Get Agent Reputation ~32
EigenTrust reputation for any agent by TEG agent_id.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentRewardsHistory Get Agent Rewards History ~32
Lifetime rewards-distribution history for one of your agents.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentStakingBalance Get Agent Staking Balance ~33
TEG-side staking balance for one of your agents.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentStakingHistory Get Agent Staking History ~36
TEG-side stake/unstake history for one of your agents.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentTemplate Get Agent Template ~33
Get a single agent template by id (full manifest + acceptance criteria).
| Name | Type | Req | Description |
|---|---|---|---|
| template_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAgentToken Get Agent Token ~68
Obtain an agent JWT using OAuth2 client_credentials flow. Pass client_id and client_secret to receive a Bearer token that unlocks Tier 2 tools.
| Name | Type | Req | Description |
|---|---|---|---|
| client_id | string | yes | Agent OAuth2 client_id |
| client_secret | string | yes | Agent OAuth2 client_secret |
| Name | Type | Req | Description |
|---|---|---|---|
| access_token | string | — | — |
| expires_in | integer | — | — |
| token_type | string | — | — |
No examples provided.
theprotocol_getAgentTransactionHistory Get Agent Transaction History ~36
TEG-side transaction history for any agent.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | — |
| limit | integer | — | — |
No output schema declared.
No examples provided.
theprotocol_getApyRates Get APY Rates ~64
Get current dynamic APY rates for staking AVT tokens on TheProtocol. Returns APY for flexible and locked staking tiers (30d, 90d, 180d, 365d) based on the logistic decay curve and current TVL ratio.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| tiers | array | — | — |
No examples provided.
theprotocol_getArenaAgentStats Get Arena Agent Stats ~29
Arena stats for an agent. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getArenaLeaderboard Get Arena Leaderboard ~29
Leaderboard for an arena game type. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| game_type | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getArenaMatch Get Arena Match ~27
Get arena match by id. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| match_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getArenaMatchBets Get Arena Match Bets ~30
List bets on an arena match. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| match_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getArenaMatchMap Get Arena Match Map ~29
Map/layout for an arena match. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| match_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAttestationBundle Get Attestation Bundle ~43
Get the signed attestation bundle (proof_bytes + public_inputs + Ed25519 signature) for offline verification.
| Name | Type | Req | Description |
|---|---|---|---|
| attestation_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAttestationDetail Get Attestation Detail ~49
Get a single ZKP attestation by id (proof status, public_inputs, circuit, agent_did, signature). Requires developer JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| attestation_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAttestationHealth Get Attestation Health ~29
Attestation service health check. Returns {status, service}. Public — no auth.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getAttestationSigningPubkey Get Attestation Signing Pubkey ~45
Public Ed25519 pubkey + key id used to sign ZKP attestation bundles for this registry. Use to offline-verify any agent attestation.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getAuthProfile Get Auth Profile ~28
Full auth profile for current user (id, email, is_admin, granular flags).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getAuthRegistrationConfig Get Auth Registration Config ~32
Public auth registration config (invite-code, captcha, email-verify flow). Public — no auth.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getAutoCompoundForAgent Get Auto Compound For Agent ~48
Get auto-compound settings for any of YOUR agents by DID (dev-tier variant of getMyAutoCompound). Returns {enabled}.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getAutoTallyConfig Get Auto Tally Config ~18
Auto-tally configuration.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getBatchAgentBalances Get Batch Agent Balances ~30
Batch get balances for multiple of your agents.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_dids | array | yes | — |
No output schema declared.
No examples provided.
theprotocol_getBundleManifest Get Bundle Manifest ~25
Get a bundle's manifest.
| Name | Type | Req | Description |
|---|---|---|---|
| bundle_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getCircuitACIR Get Circuit ACIR ~44
Download compiled ACIR binary metadata for a ZKP circuit (size, content-type, preview). Public — no auth.
| Name | Type | Req | Description |
|---|---|---|---|
| circuit_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getCircuitNargoToml Get Circuit Nargo TOML ~39
Download Nargo.toml manifest for a ZKP circuit. Public — no auth.
| Name | Type | Req | Description |
|---|---|---|---|
| circuit_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getCircuits Get Circuits ~37
Catalog of ZKP circuits available on this registry (circuit_id, name, ACIR/source URLs). Public — no auth.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getCircuitSource Get Circuit Source ~43
Download Noir source (main.nr) for a ZKP circuit. Returns source code as text. Public — no auth.
| Name | Type | Req | Description |
|---|---|---|---|
| circuit_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getCommunityAnnouncements Get Community Announcements ~20
Community announcements (public news feed). Public.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getContractById Get Contract By ID ~52
Get a single contract by id (scope, status, payment, repo URLs, acceptance criteria). Requires agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | — | — |
| contract_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getContractV2 Get Contract V 2 ~45
Contract spine detail: contract + milestones + event trail. Agent JWT (party).
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | — | — |
| contract_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getCrossFrameReputation Get Cross Frame Reputation ~37
Cross-frame reputation scores (foreign-frame agents seen by this registry). Returns {foreign_reputation, agent_count, status}.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.