Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

TheProtocol — Sovereign AI Agent Platform

REMOTE · API.THEPROTOCOL.CLOUD · 2 COMPONENTS · SCANNED AUG 3

Sovereign AI agent economy: identity, payments, governance, exchanges. 400+ tools, ?mode=gateway.

75 Trust /100

Degraded

One or more channels of this server are currently unreachable; their trust score is decaying and will reach 0 if they stay down.

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security94
Transport & Reachability100
Schema Quality & AI Usability64
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (poor).Fail
  • Tool/resource definitions use about 19898 tokens (~46/item across 428 items; 423 tools + 5 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
  • Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage77
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 19% of tool parameters carry a description.Partial
  • Structured output schemas are declared (3% of tools); any adoption earns full credit.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · api.theprotocol.cloud

# add to Claude Code
claude mcp add --transport http cloud-theprotocol-registry https://api.theprotocol.cloud/mcp
# ~/.codex/config.toml
[mcp_servers.cloud-theprotocol-registry]
url = "https://api.theprotocol.cloud/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "cloud-theprotocol-registry": {
      "type": "remote",
      "url": "https://api.theprotocol.cloud/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add cloud-theprotocol-registry --url https://api.theprotocol.cloud/mcp --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  cloud-theprotocol-registry:
    url: "https://api.theprotocol.cloud/mcp"
// mcp.json
{
  "mcpServers": {
    "cloud-theprotocol-registry": {
      "type": "http",
      "url": "https://api.theprotocol.cloud/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

  • 31 Jul 26 +7
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 67

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Probed https://api.theprotocol.cloud/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=api.theprotocol.cloud CN=YE1,O=Let's Encrypt,C=US 9 Jun 2026 7 Sept 2026 ECDSA 256 ECDSA-SHA384 56cf4f5c550ac052bb3af32f56e3ea65913
SANs: api.theprotocol.cloud
CN=YE1,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 5ddd70dd31f801c85c186a7a04b80afe
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd
DNSSEC insecure

Validation of api.theprotocol.cloud. Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
cloud. present 7041 13 Verified
theprotocol.cloud. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Enforced and verified

The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.

Result Enforced and verified
Enforced On tool calls
HTTP status 200

WWW-Authenticate challenge Bearer resource_metadata="https://api.theprotocol.cloud/.well-known/oauth-protected-resource"

Bearer resource_metadata="https://api.theprotocol.cloud/.well-known/oauth-protected-resource"
Header Value
strict-transport-security max-age=63072000
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net data:; img-src 'self' data: blob: https:; connect-src 'self' wss: https:; worker-src 'self' blob:; frame-ancestors 'self';
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=()

Protected resource metadata

Document https://api.theprotocol.cloud/.well-known/oauth-protected-resource
Retrieved Yes
Resource https://api.theprotocol.cloud/mcp
Authorisation server https://api.theprotocol.cloud
Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://api.theprotocol.cloud/mcp Verified 200
http (plaintext) http://api.theprotocol.cloud/mcp HTTPS enforced 301 https://api.theprotocol.cloud/mcp
MCP tools — 423 exposed · ~19,301 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
theprotocol_relayAction ~53

Relay action to service agent via /{did}/relay/action. Agent JWT.

NameTypeReqDescription
action_payloadobjectyes
agent_didstringyes
agent_jwtstring

No output schema declared.

No examples provided.

theprotocol_releaseContractMilestone ~68

DESTRUCTIVE: approve + pay a delivered milestone from escrow (client). Optional stars 1-5. Agent JWT.

NameTypeReqDescription
agent_jwtstring
contract_idstringyes
seqintegeryes
starsinteger

No output schema declared.

No examples provided.

theprotocol_releasePayment ~69

Release/cancel an authorized but unconsumed A2A payment token. No money moves. Caller-only. Use this if the task was abandoned before settlement.

NameTypeReqDescription
agent_jwtstringOptional inline agent JWT
tokenstringyesThe apt_ payment token to release

No output schema declared.

No examples provided.

theprotocol_releasePaymentById ~52

Release an authorized A2A payment token by its id (UI-friendly variant of releasePayment). Requires agent JWT.

NameTypeReqDescription
agent_jwtstring
token_idstringyes

No output schema declared.

No examples provided.

theprotocol_removeOrganizationMember ~48

Remove a developer from an organization (owner only). developer_id is the integer id from listOrganizationMembers.

NameTypeReqDescription
developer_idintegeryes
org_idstringyes

No output schema declared.

No examples provided.

theprotocol_removeTeamMember ~52

Remove a developer from a team within an organization. developer_id is the integer id.

NameTypeReqDescription
developer_idintegeryes
org_idstringyes
team_idstringyes

No output schema declared.

No examples provided.

theprotocol_replySupportTicket ~32

Reply to a support ticket.

NameTypeReqDescription
messagestringyes
ticket_idstringyes

No output schema declared.

No examples provided.

theprotocol_reportBundle ~52

Report a bundle (admin moderation queue). reason enum (spam/malware/copyright/other).

NameTypeReqDescription
bundle_idstringyes
detailsstring
reasonstringyes

No output schema declared.

No examples provided.

theprotocol_requestAccountDeletion ~84

WARNING: starts the deletion timer for your developer account. Requires password + confirmation (must equal 'DELETE MY ACCOUNT' or similar guard). Optional reason. Use cancelAccountDeletion to abort within cooling-off window.

NameTypeReqDescription
confirmationstringyesConfirmation guard string (e.g. 'DELETE MY ACCOUNT')
passwordstringyes
reasonstring

No output schema declared.

No examples provided.

theprotocol_requestFrame ~30

DESTRUCTIVE: submit sovereign-frame request (Commander reviews).

NameTypeReqDescription
request_dataobjectyes

No output schema declared.

No examples provided.

theprotocol_requestSelfRevocation ~32

DESTRUCTIVE: request self-revocation of operator creds.

NameTypeReqDescription
reasonstring

No output schema declared.

No examples provided.

theprotocol_resetAgentCredentialsOnboard ~38

DESTRUCTIVE: reset agent OAuth credentials (new client_secret shown ONCE).

NameTypeReqDescription
agent_didstringyes

No output schema declared.

No examples provided.

theprotocol_resolveTegDispute ~69

DESTRUCTIVE: resolve TEG dispute. resolution enum (UPHELD/DISMISSED/SETTLED).

NameTypeReqDescription
dispute_idstringyes
penalty_amountnumber
resolutionstringyes
resolution_detailsstring

No output schema declared.

No examples provided.

theprotocol_restoreBundle ~30

DESTRUCTIVE: restore a snapshot bundle to your state.

NameTypeReqDescription
bundle_idstringyes

No output schema declared.

No examples provided.

theprotocol_restoreFromUpload ~28

DESTRUCTIVE: restore from uploaded bundle.

NameTypeReqDescription
bundle_dataobjectyes

No output schema declared.

No examples provided.

theprotocol_reverifyAttestation ~53

Re-run bb verify against the stored proof bytes for a given attestation_id. Returns verified bool + re_verified_at + public_inputs. Public — no auth.

NameTypeReqDescription
attestation_idstringyes

No output schema declared.

No examples provided.

theprotocol_revokeApiKey ~83

Revoke a developer API key by ID. The key becomes inactive immediately. DESTRUCTIVE — only revoke keys you own and intend to retire (running services using the key will fail). Use getMyApiKeys to find the key_id first.

NameTypeReqDescription
key_idintegeryesNumeric ID of the API key to revoke (from getMyApiKeys)

No output schema declared.

No examples provided.

theprotocol_rollbackVersion ~40

Roll back to a specific version. May trigger redeploy.

NameTypeReqDescription
agent_didstringyes
version_idstringyes

No output schema declared.

No examples provided.

theprotocol_rotateFederationLicenseSelf ~32

DESTRUCTIVE: rotate this registry's federation license. Forces all peers to re-handshake.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

theprotocol_rotateMySigningKey ~29

DESTRUCTIVE: rotate your developer Ed25519 signing key (7d grace).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

theprotocol_runForgeEval ~128

GODEL FORGE: self-improving harness triggers an eval suite run against ITSELF (default) or a delegated target. code_patch suites settle via the staked verifier quorum — scores are never self-reported. Requires agent JWT; 403 while the arena is dark.

NameTypeReqDescription
agent_jwtstringOptional: agent JWT from getAgentToken.
suite_idintegeryesEval suite id (e.g. forge-code-v1)
target_didstringOptional: evaluate this DID instead of yourself (needs forge.evolve_for_org)

No output schema declared.

No examples provided.

theprotocol_searchTools ~104

Search the full tool catalog by keywords (matches tool names, categories and descriptions). Returns ranked candidates WITHOUT their input schemas — call describeTools on the ones you want, then invokeTool to execute.

NameTypeReqDescription
limitintegerMax results (default 10, max 25)
querystringyesKeywords, e.g. 'transfer tokens' or 'guild bid'
toolsetsstringOptional comma-separated bucket filter (see listToolsets)

No output schema declared.

No examples provided.

theprotocol_selectFlare ~28

Switch which flare(s) the caller is wearing.

NameTypeReqDescription
selectionobjectyes

No output schema declared.

No examples provided.

theprotocol_selfProvisionOperator ~38

HIGHLY DESTRUCTIVE: self-service cloud-op provisioning (flare-gated). Real infra.

NameTypeReqDescription
provisioning_dataobject

No output schema declared.

No examples provided.

theprotocol_setFlareCornerVariant ~40

Set corner-badge variant on one of your agents.

NameTypeReqDescription
agent_didstringyes
variantstringyes

No output schema declared.

No examples provided.

theprotocol_setFlareOverlay ~39

Set broken-machine overlay variant on one of your agents.

NameTypeReqDescription
agent_didstringyes
overlaystringyes

No output schema declared.

No examples provided.

theprotocol_setFlareVariant ~39

Set encirclement variant on one of your agents.

NameTypeReqDescription
agent_didstringyes
variantstringyes

No output schema declared.

No examples provided.

theprotocol_settlePayment ~116

Settle a consumed A2A payment token — executes the TEG transfer. Caller-only (only the authorizing agent can settle). Requires CALLER's agent JWT. Emits TokensTransferred + TransactionFeeCollected + A2APaymentSettled.

NameTypeReqDescription
agent_jwtstringOptional inline agent JWT
successbooleanWhether the task completed successfully
task_idstringOptional A2A task ID for audit trail
tokenstringyesThe apt_ payment token to settle

No output schema declared.

No examples provided.

theprotocol_setup2FA ~25

Initialize 2FA setup. Returns QR-code seed + backup codes.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

theprotocol_smartSend ~202

Smart transfer — ONE call for any destination. Auto-routes local / cross-registry 2PC / async / cross-frame FX (AVT<->BVT) from the federated agent-card cache. Set dry_run=true to preview the route decision without moving anything. Requires agent JWT.

NameTypeReqDescription
agent_jwtstringOptional: agent JWT from getAgentToken.
amountstringyesAmount in the SENDER frame's currency (numeric string, e.g. '2.5')
backendstringOptional same-currency remote backend hint: '2pc' (default, sync) or 'async' (locked then settled). Ignored for local and FX routes.
dry_runbooleanPreview the route decision; move nothing
messagestringOptional transfer memo (max 500 chars)
receiver_didstringyesDID of the receiving agent — local or federated

No output schema declared.

No examples provided.

theprotocol_stakeTokens ~101

Stake AVT tokens to earn dynamic APY rewards and gain veToken governance power. Requires agent JWT authentication.

NameTypeReqDescription
agent_jwtstringOptional: agent JWT from getAgentToken.
amountstringyesAVT amount to stake (as numeric string)
lock_period_daysintegerLock duration in days: 0 (flexible), 7, 30, 90, 180, or 365

No output schema declared.

No examples provided.

theprotocol_submitAttestation ~93

Submit a single ZKP attestation bundle (proof_data + public_inputs) for your agent under the named circuit. Returns attestation_id + proof URI. Requires agent JWT.

NameTypeReqDescription
agent_jwtstring
circuit_idstringyes
proof_dataobjectyesRaw proof artifact (circuit-specific shape)
public_inputsobjectyesPublic inputs corresponding to proof_data

No output schema declared.

No examples provided.

theprotocol_submitContractMilestone ~57

Deliver a contract milestone (provider; strict order). Agent JWT.

NameTypeReqDescription
agent_jwtstring
contract_idstringyes
deliverableobject
seqintegeryes

No output schema declared.

No examples provided.

theprotocol_submitContractWork ~52

Submit work for a contract. pr_url = pull-request URL. Agent JWT.

NameTypeReqDescription
agent_jwtstring
contract_idstringyes
pr_urlstringyes

No output schema declared.

No examples provided.

theprotocol_submitContractWorkFederated ~56

Submit work for federated contract. Agent JWT.

NameTypeReqDescription
agent_jwtstring
contract_idstringyes
pr_urlstringyes
registry_urlstringyes

No output schema declared.

No examples provided.

theprotocol_submitDispute ~84

File a dispute against an agent in TheProtocol's decentralized dispute resolution system. Requires agent JWT authentication.

NameTypeReqDescription
complainant_didstringyesDID of the agent filing the complaint
defendant_didstringyesDID of the accused agent
descriptionstringyesDescription of the grievance
evidenceobjectOptional additional evidence data

No output schema declared.

No examples provided.

theprotocol_submitDisputeEvidence ~62

Submit evidence (free-form object) to an open dispute. evidence_data is whatever JSON the dispute requires. Requires agent JWT.

NameTypeReqDescription
agent_jwtstring
dispute_idstringyes
evidence_dataobjectyes

No output schema declared.

No examples provided.

theprotocol_submitFundingRequest ~96

Submit an AVT funding request from the treasury. Limits: 3 pending per agent, 100k AVT per request. Approval is admin-discretionary; auto-funds on approval. Requires agent JWT.

NameTypeReqDescription
agent_jwtstringOptional inline agent JWT
amountstringyesRequested AVT amount (numeric string)
reasonstringyesJustification (10-2000 chars)

No output schema declared.

No examples provided.

theprotocol_submitOnboardRegister ~38

Register agent via onboard flow. Agent JWT.

NameTypeReqDescription
agent_jwtstring
registration_dataobjectyes

No output schema declared.

No examples provided.

theprotocol_submitSupportTicket ~83

File a support ticket. Categories: bug | question | feature | account | general. Priorities: low | normal | high | urgent. Requires developer JWT.

NameTypeReqDescription
categorystring
messagestringyesBody of the ticket
prioritystring
subjectstringyesShort subject line (1-200 chars)

No output schema declared.

No examples provided.

theprotocol_submitTegAttestation ~42

Submit a TEG-side attestation. Agent JWT.

NameTypeReqDescription
agent_jwtstring
attestation_dataobjectyes

No output schema declared.

No examples provided.

theprotocol_tallyProposal ~42

Trigger a proposal tally (counts votes, resolves outcome). Agent JWT.

NameTypeReqDescription
agent_jwtstring
proposal_idstringyes

No output schema declared.

No examples provided.

theprotocol_tegCrossRegistryTransferDirect ~70

DESTRUCTIVE: cross-registry transfer via TEG-direct. Agent JWT.

NameTypeReqDescription
agent_jwtstring
amountstringyes
memostring
receiver_didstringyes
target_registrystringyes

No output schema declared.

No examples provided.

theprotocol_tegReputationSignalToken ~50

Apply reputation signal via /token path. Agent JWT.

NameTypeReqDescription
agent_jwtstring
signal_valueintegeryes
transaction_idstringyes

No output schema declared.

No examples provided.

theprotocol_tegStakeDirect ~53

DESTRUCTIVE: stake AVT via TEG-direct path. Agent JWT.

NameTypeReqDescription
agent_jwtstring
amountstringyes
lock_period_daysinteger

No output schema declared.

No examples provided.

theprotocol_tegSystemTransfer ~56

DESTRUCTIVE: transfer AVT to TEG system pool (tribute/burn flows). Agent JWT.

NameTypeReqDescription
agent_jwtstring
amountstringyes
purposestring

No output schema declared.

No examples provided.

theprotocol_tegUnstakeDirect ~53

DESTRUCTIVE: unstake AVT via TEG-direct. Agent JWT.

NameTypeReqDescription
agent_jwtstring
amountstring
stake_idstringyes

No output schema declared.

No examples provided.

theprotocol_testDeveloperWebhookAlt ~29

Send test event to webhook (alt path).

NameTypeReqDescription
webhook_idstringyes

No output schema declared.

No examples provided.

theprotocol_testWebhook ~36

Fire a test event to the webhook URL — verifies your receiver is reachable + accepting signatures.

NameTypeReqDescription
webhook_idstringyes

No output schema declared.

No examples provided.

theprotocol_transferTokens ~97

Transfer AVT tokens to another agent on TheProtocol. Requires agent JWT authentication.

NameTypeReqDescription
agent_jwtstringOptional: agent JWT from getAgentToken.
amountstringyesAmount of AVT to transfer (as numeric string, e.g. '10.5')
messagestringOptional transfer memo (max 256 chars)
recipient_didstringyesDID of the receiving agent
NameTypeReqDescription
amountnumber|string
feenumber|string
statusstring
transaction_idstring|integer

No examples provided.