GAIP — evidence on AI agents before and after you call them

Finish a Buyer Assurance check: GAIP replays the public service (or checks a response you submit) against the terms from assurance_prepare and returns a delivery receipt. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"mode":"PUBLIC_REPLAY","terms_id":"\u003cterms_id from assurance_prepare\u003e"}

Buyer-side assurance in one step: preflight a public service you chose and record the delivery checks you expect. Returns a `terms_id`; finish with assurance_complete and check any receipt with assurance_verify. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"checks":[{"allowed":[200],"id":"http_status_in"},{"id":"json_parses"}],"counterparty_id":"example-weather-agent","explicit_read_only_consent":true,"service_url":"https://weather.example.com/forecast.json","task_class":"weather_forecast"}

Verify a Buyer Assurance terms or delivery receipt by ID. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"receipt_id":"\u003creceipt_id from assurance_prepare or assurance_complete\u003e"}

Check any AI agent before you install or call it. Pass just its `url` (site, A2A agent card, MCP server card / server.json or OpenAPI link): GAIP fetches the card, validates it against the A2A, MCP or OpenAPI spec, tests that its endpoint answers and returns READY / FIXES_NEEDED / NO_AGENT_CARD / UNREACHABLE. Or pass the card itself as `metadata`. Every finding has a severity, JSON path, plain-English fix and spec link, plus a 0-100 score and a JSON Patch with placeholders; the receipt verifies with verify_gaip_receipt. Set mode=VERIFY_BEFORE_CALL with `target` to get task-specific evidence about a counterparty instead. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"metadata":{"name":"GAIP Broker","protocolVersion":"2025-06-18","tools":[],"url":"https://www.gaipagents.com/mcp"}}

Compare public digital-art / NFT records (marketplace listing, block explorer, artist catalogue) field by field. Pass a `question` and `evidence_items` as the records look (creator/artist, title/name, date/mint_date/created, edition, contract/contract_address, token_id/identifier, chain, medium, or claim+claim_key, each with a source_url). Returns per-field AGREES / CONFLICT / SINGLE_SOURCE with values by source, what evidence would resolve each conflict, a CONSISTENT / CONFLICTS_FOUND / INSUFFICIENT_EVIDENCE verdict and a receipt. URLs are not fetched; does not establish authenticity, ownership or price. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"evidence_items":[{"chain":"ethereum","contract":"0xa11ce00000000000000000000000000000000042","creator":"Artist A","edition":"1 of 10","identifier":"7","name":"Harbour at Dusk","source":"marketplace_listing","source_url":"https://opensea.io/assets/ethereum/0xa11ce00000000000000000000000000000000042/7"},{"chain":"eth","contract_address":"0xA11CE00000000000000000000000000000000042","mint_date":"2021-03-14T09:26:53Z","source":"block_explorer","source_url":"https://etherscan.io/nft/0xa11ce00000000000000000000000000000000042/7","token_id":"7"},{"artist":"Artist A","created":"2021","edition":"1/5","medium":"Digital painting","source":"artist_catalogue","source_url":"https://artist-a.example/catalogue/harbour-at-dusk","title":"Harbour at Dusk"}],"question":"Do these public records agree on the creator and the edition?"}

Check that cited web pages contain the quoted text. Pass `citations` (1-20 {url, quote?, claimed_title?, claimed_date?}). GAIP fetches each public page once (robots.txt respected), and per citation returns QUOTE_FOUND / QUOTE_NOT_FOUND_IN_FETCHED_VERSION / SOURCE_UNREACHABLE / SOURCE_NOT_FOUND_404 / CONTENT_NOT_TEXT / ROBOTS_DISALLOWED, the fetch time, HTTP status, SHA-256 of the fetched bytes, a matched excerpt of at most 300 characters and a receipt. No page copies are kept. Facts about the fetched version only; pages change. Not legal advice and not a judgement on any author. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"citations":[{"claimed_title":"GAIP","quote":"GAIP","url":"https://www.gaipagents.com/"}]}

Detect breaking changes in an agent or API you depend on. Pass `prior` and `current`: two versions of an A2A agent card, MCP server description, OpenAPI document or a {version, endpoint, permissions, ...} snapshot. Returns each change (skill/tool/operation removed, auth added, endpoint moved, HTTPS downgrade, major version, capability or mode removed) as BREAKING / NON_BREAKING / INFO with impact and migration notes, an overall verdict and a receipt. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"counterparty_id":"example-weather-agent","current":{"capabilities":{"streaming":true},"name":"Weather Agent","protocolVersion":"0.3.0","security":[{"bearer":[]}],"securitySchemes":{"bearer":{"scheme":"bearer","type":"http"}},"skills":[{"id":"forecast","name":"Forecast"}],"url":"https://weather.example.com/v2/a2a","version":"2.0.0"},"prior":{"capabilities":{"streaming":true},"name":"Weather Agent","protocolVersion":"0.3.0","skills":[{"id":"forecast","name":"Forecast"},{"id":"alerts","name":"Severe weather alerts"}],"url":"https://weather.example.com/a2a","version":"1.4.0"}}

An agent-to-agent call failed? Pass the `failure` ({code, detail}): an HTTP status (400-504), a JSON-RPC, A2A or MCP error code, or the raw error text (TLS, DNS, connection refused, timeout, schema mismatch). Returns a specific diagnosis, severity, whether and how to retry (attempts, backoff, Retry-After), ordered fix steps, the likely owner, evidence to capture and a receipt. Proposal only; GAIP does not touch the other system. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"counterparty_id":"example-weather-agent","failure":{"code":429,"detail":"HTTP 429 Too Many Requests; Retry-After: 20"}}

An insurer, auditor or buyer asking what evidence exists about an agent or supplier? Pass its `subject` (public id or https URL), an optional `scope` (receipt_ids, since/until, categories, max_items) and optional `requester` (continuity_handle to include your own receipts). Get conformance, watch, witness, repair and incident records, each with a verify URL and Merkle proof, a manifest of counts and gaps, and a reference table of where it may help locate evidence for AIUC-1 / ISO/IEC 42001 reviews. An evidence compilation, not a certification or advice. If BLOCKED, read `hint`. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"requester":{"purpose":"INSURER"},"scope":{"max_items":50,"since":"2026-09-01"},"subject":{"counterparty_id":"example-weather-agent"}}

Something went wrong with an agent and you need the facts in order? Pass the `receipt_ids` you hold and attributed `observations` ({source, statement, observed_at_utc}). GAIP verifies each receipt, orders a timeline, attributes every entry to its source and adds an EU AI Act Article 73 reference aid. No fault, cause or liability finding; not a regulatory filing. If BLOCKED, read `hint`. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"ai_system_ref":"example-weather-agent","observations":[{"observed_at_utc":"2026-09-27T10:00:00Z","source":"our uptime monitor","source_type":"AUTOMATED_MONITOR","statement":"HTTP 503 from the forecast endpoint for 12 minutes"}],"receipt_ids":["\u003creceipt_id returned by any GAIP tool\u003e"],"title":"Forecast endpoint returned errors"}

Read the Agent Observatory's hash-chained Manifest Transparency Log: which published manifests changed, before/after hashes, neutral change facts and receipts. Optional `target_id`, `since` (RFC 3339), `limit` (max 100). Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"limit":20,"since":"2026-09-01T00:00:00Z"}

Independent outcome evidence for outcome-priced contracts: record what a task actually delivered and what the caller says it cost. Pass `counterparty_id`, `task_class`, `episode_id`, the `task` (acceptance_criteria), `delivery` (status) and `costs`; get a delivery, downstream-use and full-cost dossier with a receipt. Missing costs and unverified claims stay explicit; no ROI claim. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"baseline_cost_gbp":"12.00","costs":{"agent_gbp":"0.40","compute_gbp":"0.12","human_review_gbp":"3.50","repair_gbp":"0"},"counterparty_id":"example-weather-agent","delivery":{"receipt_id":"example-receipt-1","status":"ACCEPTED"},"downstream_use":{"evidence_ref":"example-ticket-4411","status":"USED"},"episode_id":"example-episode-1","observed_at_utc":"2026-09-27T21:00:00Z","task":{"acceptance_criteria":"Forecast JSON for London returned within 5 seconds"},"task_class":"weather_forecast","unit_label":"forecast","units":7}

What has an MCP server or A2A agent published over time? Pass a `url` or `name` to find its Observatory target_id, or a `target_id` for its dated facts: status history, manifest hash and bounded snapshot, conformance codes, metadata-signal rules (pattern present / not present) and the receipted change log. Facts observed at a time; not an assessment of safety or quality. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"url":"https://weather.example.com/mcp"}

Start here. No input needed. Returns what GAIP can do for an agent, a live sample result, and a ready-to-run argument set for every GAIP tool. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

Need a GAIP receipt in another ecosystem's shape? Pass `receipt_id` and `format`: `x402` (Settlement Attestation Receipt proposal style), `erc8004` (validation-response shape for off-chain publication) or `vc` (W3C-VC-like JSON-LD). Unsigned: integrity via hash chain and Merkle proof only; no on-chain write. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"format":"x402","receipt_id":"\u003creceipt_id returned by any GAIP tool\u003e"}

A supplier agent or API started failing? Pass the `failure` ({code, detail}), the supplier's public `supplier_url` and optionally `failure_started_at`. Returns the Integration Repair diagnosis plus the supplier card and readiness changes GAIP observed around that time, each with a receipt and labelled correlated in time (not causation), next steps and an offer to watch the supplier. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"failure":{"code":404,"detail":"Not Found"},"failure_started_at":"2026-09-27T12:00:00Z","supplier_url":"https://weather.example.com/.well-known/agent-card.json"}

Before relying on another agent or API, check its claims against what was actually observed. Pass `claims` (each with an `id`), optional `observations` ({claim_id, result: PASS|FAIL, detail}) and its `metadata`. Returns per-claim OBSERVED_AS_REPORTED / CONTRADICTED / MIXED / UNTESTED with pass/fail counts and evidence, warnings for unusable observations, an interface check and a receipt. Not a certification. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"claims":[{"id":"c1","text":"Returns JSON forecasts over MCP"},{"id":"c2","text":"Responds within 2 seconds"}],"counterparty_id":"example-weather-agent","metadata":{"protocolVersion":"2025-06-18","url":"https://weather.example.com/mcp"},"observations":[{"claim_id":"c1","detail":"tools/call returned valid JSON","result":"PASS"},{"claim_id":"c2","detail":"p95 latency 4.8 s over 20 calls","result":"FAIL"}]}

Read recent change events for your watches (all, or one `watch_id`): verdict before and after, a compact change summary, the event receipt and whether the webhook delivery succeeded. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"continuity_handle":{"continuity_id":"\u003ccontinuity_handle.continuity_id returned by any GAIP tool\u003e","token":"\u003ccontinuity_handle.token returned by any GAIP tool\u003e"},"limit":10,"watch_id":"\u003cwatch_id from gaip_watch_register\u003e"}

See your watches: kind, target, last verdict, last and next check, and webhook endpoint (never the secret). Pass your `continuity_handle`. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"continuity_handle":{"continuity_id":"\u003ccontinuity_handle.continuity_id returned by any GAIP tool\u003e","token":"\u003ccontinuity_handle.token returned by any GAIP tool\u003e"}}

Keep watching an agent you depend on, for free. kind=AGENT_READINESS re-checks an agent URL's readiness, SUPPLIER_CARD re-fetches its published card and flags BREAKING / NON_BREAKING changes, DELIVERY_TERMS replays witness terms (terms_id from witness_register_terms) and flags NOT_MET. Pass the `continuity_handle` an earlier GAIP result gave you (it proves the watches are yours) and optionally your own public https `webhook_url`: changes are POSTed there signed with X-GAIP-Signature (HMAC-SHA256; the `webhook_secret` is shown once). FREE: 3 watches, each checked at most every 24 hours; every change gets a receipt. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"continuity_handle":{"continuity_id":"\u003ccontinuity_handle.continuity_id returned by any GAIP tool\u003e","token":"\u003ccontinuity_handle.token returned by any GAIP tool\u003e"},"interval_hours":24,"kind":"SUPPLIER_CARD","target_url":"https://weather.example.com/.well-known/agent-card.json","webhook_url":"https://hooks.example.com/gaip-watch"}

Stop a watch: pass your `continuity_handle` and the `watch_id`. Its stored events are deleted; retained receipts stay verifiable. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"continuity_handle":{"continuity_id":"\u003ccontinuity_handle.continuity_id returned by any GAIP tool\u003e","token":"\u003ccontinuity_handle.token returned by any GAIP tool\u003e"},"watch_id":"\u003cwatch_id from gaip_watch_register\u003e"}

Need evidence about an agent before you delegate to it? Pass its `counterparty_id`, the `task_class` and any `observations` you have; get task-specific evidence coverage, conflicts and gaps with a receipt. No universal trust score or decision. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"counterparty_id":"example-weather-agent","observations":[{"claim":"Publishes a public weather_forecast skill","evidence_digest":"3f0a9c1e5b7d2468ace013579bdf2468ace013579bdf2468ace013579bdf2468","lifecycle_state":"observed","observed_at":"2026-09-27T12:00:00Z","source":"https://forecast.example.com/.well-known/agent-card.json"},{"claim":"Returned a London forecast in 1.2 s","lifecycle_state":"OBSERVED","observed_at":"2026-09-27T12:05:00Z","source":"caller_task_log"}],"task_class":"weather_forecast"}

Choosing between agents or services for a task? Pass the `task_class` and your `candidates` (each {counterparty_id, explicit_read_only_consent, payment_required, authentication_required, task_classes}) and get which ones you can call now and why the others are held, with a receipt. No ranking, outreach or appointment. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"candidates":[{"agent_card":{"description":"Public weather forecasts over A2A.","name":"Open Forecast Agent","skills":[{"description":"7-day forecast for a named city.","id":"weather_forecast","name":"Weather forecast","tags":["weather","forecast"]}],"url":"https://forecast.example.com/a2a","version":"1.2.0"},"explicit_read_only_consent":true},{"agent_card":{"name":"Premium Weather Agent","security":[{"bearer":[]}],"securitySchemes":{"bearer":{"scheme":"bearer","type":"http"}},"skills":[{"id":"forecast","name":"Hyperlocal forecast","tags":["weather","forecast"]}],"url":"https://premium-weather.example.com/a2a"},"explicit_read_only_consent":true},{"agent_card":{"name":"FX Agent","skills":[{"id":"currency_conversion","name":"Currency conversion","tags":["fx","currency"]}],"url":"https://fx.example.com/a2a"}}],"task_class":"weather_forecast"}

Verify any GAIP receipt ID: retained history, hash chain and Merkle inclusion proof. Integrity only; it does not make the underlying claim true. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"receipt_id":"\u003creceipt_id returned by any GAIP tool\u003e"}

Check a service's real response against terms you registered with witness_register_terms. mode=PUBLIC_REPLAY makes GAIP fetch the public URL itself; mode=BUYER_SUBMITTED checks a response you pass in. Returns PASS/FAIL/UNKNOWN per check and a receipt. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"mode":"PUBLIC_REPLAY","terms_id":"\u003cterms_id from witness_register_terms\u003e"}

Export a neutral, no-fault evidence bundle for a witnessed delivery receipt, e.g. to share with the other party. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"receipt_id":"\u003creceipt_id from witness_delivery\u003e"}

About to depend on a public HTTPS service? Register what a good response looks like (`checks`: http_status_in, content_type_is, non_empty, json_parses) and get a `terms_id`. Then call witness_delivery to have GAIP independently check what the service returns. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

{"checks":[{"allowed":[200],"id":"http_status_in"},{"id":"json_parses"}],"seller_ref":"example-weather-agent","service_url":"https://weather.example.com/forecast.json"}