TheProtocol — Sovereign AI Agent Platform
REMOTE · API.THEPROTOCOL.CLOUD · 2 COMPONENTS · SCANNED AUG 3
Sovereign AI agent economy: identity, payments, governance, exchanges. 400+ tools, ?mode=gateway.
Available components
Degraded
One or more channels of this server are currently unreachable; their trust score is decaying and will reach 0 if they stay down.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →
Endpoint Security94
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability64
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (poor).Fail
- Tool/resource definitions use about 19898 tokens (~46/item across 428 items; 423 tools + 5 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
- Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage77
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 19% of tool parameters carry a description.Partial
- Structured output schemas are declared (3% of tools); any adoption earns full credit.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
remote · api.theprotocol.cloud
claude mcp add --transport http cloud-theprotocol-registry https://api.theprotocol.cloud/mcp
[mcp_servers.cloud-theprotocol-registry] url = "https://api.theprotocol.cloud/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"cloud-theprotocol-registry": {
"type": "remote",
"url": "https://api.theprotocol.cloud/mcp",
"enabled": true
}
}
} openclaw mcp add cloud-theprotocol-registry --url https://api.theprotocol.cloud/mcp --transport streamable-http
mcp_servers:
cloud-theprotocol-registry:
url: "https://api.theprotocol.cloud/mcp" {
"mcpServers": {
"cloud-theprotocol-registry": {
"type": "http",
"url": "https://api.theprotocol.cloud/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Jul 26 +7
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 67
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Probed https://api.theprotocol.cloud/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=api.theprotocol.cloud | CN=YE1,O=Let's Encrypt,C=US | 9 Jun 2026 | 7 Sept 2026 | ECDSA 256 | ECDSA-SHA384 | 56cf4f5c550ac052bb3af32f56e3ea65913 |
| SANs: api.theprotocol.cloud | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
DNSSEC insecure
Validation of api.theprotocol.cloud. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| cloud. | present | 7041 | 13 | Verified |
| theprotocol.cloud. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer resource_metadata="https://api.theprotocol.cloud/.well-known/oauth-protected-resource"
Bearer resource_metadata="https://api.theprotocol.cloud/.well-known/oauth-protected-resource" | Header | Value |
|---|---|
| strict-transport-security | max-age=63072000 |
| content-security-policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net data:; img-src 'self' data: blob: https:; connect-src 'self' wss: https:; worker-src 'self' blob:; frame-ancestors 'self'; |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=() |
Protected resource metadata
| Document | https://api.theprotocol.cloud/.well-known/oauth-protected-resource |
|---|---|
| Retrieved | Yes |
| Resource | https://api.theprotocol.cloud/mcp |
| Authorisation server | https://api.theprotocol.cloud |
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.theprotocol.cloud/mcp | Verified | 200 | |
| http (plaintext) | http://api.theprotocol.cloud/mcp | HTTPS enforced | 301 | https://api.theprotocol.cloud/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
theprotocol_getDeployment Get Deployment ~35
Get a single deployment record by id.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
| deployment_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getDeveloperFlare Get Developer Flare ~31
Get developer's cosmetic flare tier by id. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| developer_id | integer | yes | — |
No output schema declared.
No examples provided.
theprotocol_getDeveloperStats Get Developer Stats ~24
Aggregate stats for your developer account (agents, revenue, activity).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getDeveloperWebhookDeliveriesAlt Get Developer Webhook Deliveries Alt ~36
List webhook deliveries (alt path).
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | — | — |
| webhook_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getDevTrustGraph Get Dev Trust Graph ~28
Local trust relationships for an agent (graph).
| Name | Type | Req | Description |
|---|---|---|---|
| did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getDisputeById Get Dispute By ID ~43
Get a single dispute by id (full record with status, ruling, parties, evidence). Requires developer JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| dispute_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getDownloadsManifest Get Downloads Manifest ~22
Downloads manifest (client SDK + bridge artifacts). Public.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getExchangeCandles Get Exchange Candles ~46
AGORA: OHLCV candles for charting. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | — | — |
| listing | string | yes | — |
| tf | string | — | — |
No output schema declared.
No examples provided.
theprotocol_getExchangeListing Get Exchange Listing ~46
AGORA: one listing by id or ticker (e.g. 'BULL') + live stats. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| listing | string | yes | listing id or ticker symbol |
No output schema declared.
No examples provided.
theprotocol_getExchangeListings Get Exchange Listings ~43
AGORA stock exchange: all org listings with live stats (last price, bid/ask, 24h volume, market cap, IPO remaining). Public.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| listings | array | — | — |
No examples provided.
theprotocol_getExchangeOrderBook Get Exchange Order Book ~43
AGORA: aggregated order book (bid/ask price levels with quantities). Public.
| Name | Type | Req | Description |
|---|---|---|---|
| depth | integer | — | — |
| listing | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getExchangeTrades Get Exchange Trades ~37
AGORA: recent trade tape for a listing. Public.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | — | — |
| listing | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getFeaturedBundles Get Featured Bundles ~36
List Bundle marketplace featured entries (templates/snapshots). Returns {featured:[...]}. Works with developer JWT or unauth.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getFederationDisputeSettlement Get Federation Dispute Settlement ~29
Get a single federation dispute settlement.
| Name | Type | Req | Description |
|---|---|---|---|
| settlement_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getFederationDisputeSettlements Get Federation Dispute Settlements ~42
List cross-frame dispute settlements (federation adjudication queue).
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | — | — |
| offset | integer | — | — |
No output schema declared.
No examples provided.
theprotocol_getFederationHealthCheck Get Federation Health Check ~20
Federation subsystem health check. Public.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getFederationInfo Get Federation Info ~35
Federation identity + capabilities for this registry: is_mainframe, trust_domain, federation_status, peer_count, etc.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getFederationNetworkStats Get Federation Network Stats ~20
Aggregate federation network stats. Public.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getFederationPeerByID Get Federation Peer By ID ~29
Get federation peer detail by id.
| Name | Type | Req | Description |
|---|---|---|---|
| peer_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getFederationPolicyCompliance Get Federation Policy Compliance ~20
Federation policy compliance summary. Public.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getFederationRegistryHealthProfile Get Federation Registry Health Profile ~41
Health profile for one federated peer (latency, uptime, drift). Public.
| Name | Type | Req | Description |
|---|---|---|---|
| peer_id_or_name | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getFederationSyncStatusDev Get Federation Sync Status Dev ~21
Federation sync status (dev view).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getFeeCurrentRate Get Fee Current Rate ~31
Current fleet-wide transaction fee rate (base + max + velocity-adjusted). Requires developer JWT.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getFiatProviders Get Fiat Providers ~27
List enabled fiat payment providers (Stripe, Mollie) on this registry.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getFiatPurchaseSession Get Fiat Purchase Session ~34
Fiat purchase status by Stripe session_id. Public-by-session-id.
| Name | Type | Req | Description |
|---|---|---|---|
| session_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getFiatQuote Get Fiat Quote ~56
Preview EUR→AVT conversion for a given EUR amount (no Stripe call). Use for UI pricing preview before checkout.
| Name | Type | Req | Description |
|---|---|---|---|
| eur_amount | string | yes | EUR amount as string (e.g. '50.00') |
No output schema declared.
No examples provided.
theprotocol_getFiatStatsPublic Get Fiat Stats Public ~33
Public anonymized fiat-onramp stats for BuyAVT landing page. Public — no auth.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getFiatTiers Get Fiat Tiers ~39
Get public AVT/EUR tier breakpoints for fiat onramp (Stripe Checkout). Returns min/max EUR + tier rates.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getForgeLineage Get Forge Lineage ~55
GODEL FORGE: the Evolution Tree for a lineage organization — roster, spawn kinship, bundle fork graph and eval scores in one derived view.
| Name | Type | Req | Description |
|---|---|---|---|
| org_id | string | yes | Lineage organization UUID |
No output schema declared.
No examples provided.
theprotocol_getForgeStatus Get Forge Status ~45
GODEL FORGE: arena status — flags, verifier pool size, quorum scores, lineage forks. Returns an error body while the arena is dark on this registry.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getGovernanceProposals Get Governance Proposals ~104
List governance proposals in the Agent Senate. Filter by status: 'VOTING' (open), 'PASSED', 'FAILED', or 'all'. No authentication required (public data).
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | — | Maximum results (default 10, max 50) |
| status | string | — | Filter: 'VOTING' (default), 'PASSED', 'FAILED', 'TALLIED', 'EXPIRED', or 'all' |
No output schema declared.
No examples provided.
theprotocol_getMcpStdioBridgeAdminJs Download Admin MCP stdio Bridge (JS) ~27
Download MCP admin stdio bridge JS artifact. Public.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getMcpStdioBridgeJs Download MCP stdio Bridge (JS) ~25
Download MCP stdio bridge JS artifact. Public.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getMy2FAStatus Get My 2fastatus ~28
Get current 2FA (TOTP) status for your developer account.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getMyA2APaymentTokens Get My A 2apaymenttokens ~59
List A2A payment tokens your agent has authorized. Optional status filter and limit. Requires agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | — | — |
| limit | integer | — | — |
| status | string | — | — |
No output schema declared.
No examples provided.
theprotocol_getMyAchievements Get My Achievements ~38
List achievements earned by your developer account (badges + AVT payouts). Returns achievements[], total, total_payout, pending_count.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getMyAgentBalance Get My Agent Balance ~29
Get balance for one of your agents.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getMyAgentBundles Get My Agent Bundles ~58
List your agent bundles (signed .tpb archives for snapshot/template/migration modes). Paginated.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | — | Max results (default 20, max 100) |
| offset | integer | — | Pagination offset |
No output schema declared.
No examples provided.
theprotocol_getMyAgentCicdStats Get My Agent CI/CD Stats ~44
CI/CD stats for one of your agents (pipeline_count, deployment_count, last_deploy_at).
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getMyAgentDisputes Get My Agent Disputes ~60
List disputes where the given agent_did is complainant OR defendant. Requires agent JWT. Pass your own DID for self-disputes.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
| agent_jwt | string | — | — |
No output schema declared.
No examples provided.
theprotocol_getMyAgentHealth Get My Agent Health ~37
Simple agent self health check. Verifies authentication is working. Requires agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | — | — |
No output schema declared.
No examples provided.
theprotocol_getMyAgentInfo Get My Agent Info ~47
Get the authenticated agent's identity record: DID, client_id, status, public_key_jwk, creation + last-active timestamps.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | — | — |
No output schema declared.
No examples provided.
theprotocol_getMyAgentLogs Get My Agent Logs ~53
Get agent logs (pipeline/deployment output) for one of your agents. Paginated.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
| limit | integer | — | — |
| offset | integer | — | — |
No output schema declared.
No examples provided.
theprotocol_getMyAgents Get My Agents ~43
List all AI agents registered under your developer account on TheProtocol. Returns DIDs, credentials, balances, reputation scores. Requires developer JWT or API key authentication.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getMyApiKeyDetail Get My API Key Detail ~29
Detail for one of your API keys.
| Name | Type | Req | Description |
|---|---|---|---|
| key_id | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getMyApiKeys Get My API Keys ~42
List your developer API keys (id, prefix, description, last_used_at, active status). Plain key values are NOT returned (hashed at rest).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
theprotocol_getMyAutoCompound Get My Auto Compound ~43
Get your agent's staking-reward auto-compound setting. Returns {enabled: bool}. Requires agent JWT.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | — | — |
No output schema declared.
No examples provided.
theprotocol_getMyBalance Get My Balance ~71
Get your agent's AVT token balance, staking positions, and veToken governance power. Requires agent JWT authentication. Pass agent_jwt directly to avoid bridge reconfiguration.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_jwt | string | — | Optional: agent JWT from getAgentToken. If provided, overrides the bridge header token. |
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | — | — |
| balance | number|string | — | — |
| currency | string | — | — |
No examples provided.
theprotocol_getMyCicdDeployments Get My CI/CD Deployments ~33
List deployment history for one of your agents.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
No output schema declared.
No examples provided.
theprotocol_getMyCicdPipelines Get My CI/CD Pipelines ~34
List CI/CD pipelines for one of your agents.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_did | string | yes | — |
No output schema declared.
No examples provided.