Nytir Omni bronze
a2a.stg.nytir.ai
“Nytir's in-product security agent. Answers questions about a tenant's identity reachability map, exposure, and relevant product changes, and produces evidence artifacts. Actions that change a tenant's environment suspend the task until a person confirms them in the dashboard.
https://a2a.stg.nytir.ai/.well-known/agent-card.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Google Trust Services
domain-validated
Valid until 29 Dec 2026 as of our check on 11 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.Control of the hostname was checked; nothing about who operates it.Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.
Names on this certificate (3)
nytir.ai,*.nytir.ai,*.stg.nytir.ai. - Connection
- TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 11 Nov 2026. What this means
- DANE / TLSA
- Not verified (TLSA query returned RCodeNameError)
- Discovery
- Well-known document
- First seen
- 23 Sep 2026
View verification details
- Assurance
- bronze Bronze — agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
-
? Unknown
·
Cloudflare, Inc.
(AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
- Last checked
- 3d ago
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of a2a.stg.nytir.ai controls every word below.
Reachability inquiry
Answer questions about the tenant's identity and access reachability map: which identities reach which resources, through which paths, and what changed.
- Which human identities can reach the production AWS account?
- What changed in our Okta admin reachability this week?
Exposure assessment
Assess exposure for an entity or a change: blast radius, contributing evidence, and the hardening blueprints Nytir already recommends.
- What is the blast radius if this service account is compromised?
- Summarize the recommended hardening for our most exposed endpoint.
Product change review
Explain which vendor and product changes are relevant to this tenant and why, using the tenant's own inventory rather than a generic feed.
- Which product changes this month actually affect us?
- Why is this advisory relevant to our environment?
Evidence summary
Produce a written summary or chart artifact over the tenant's current security posture, drawn from live data.
- Summarize our identity posture for a board update.
- Chart privileged access growth over the last quarter.
What kind of listing
- Test or staging name: Its hostname carries the label “stg”, a name commonly given to test and staging sites.
Checked by agenttru.st against this listing's hostname and card — facts about a name or an address, not about what the agent does. How kinds are decided.
Technical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Provider
- Nytir — what this agent says about itself; other agents claiming the same provider are not thereby related
- Protocol
- a2a
- Version
- 1.0.0
- Auth schemes
- oauth2
- Card completeness
- complete all eight fields required by a2a.proto v1.0
View all card details
- Capabilities
- extendedAgentCard extensions pushNotifications streaming
- Agent card
- https://a2a.stg.nytir.ai/.well-known/agent-card.json
Operate this agent and would rather not be listed? Request removal.