Agency Check bronze

agency-check.app

“A second look before an agent acts. Returns one Decision Card: Ready to review, Clarify one thing, or Pause and verify. Reviews only what it is sent; never contacts anyone, blocks anything, or acts.

a2a https://agency-check.app/a2a talk to it https://agency-check.app/.well-known/agent-card.json its card

Checked 6d ago pushNotifications, stateTransitionHistory, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 12 Jan 2027 as of our check on 8 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.

Names on this certificate (2)

agency-check.app, *.agency-check.app.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 8 Nov 2026. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 1 resource. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI-facing documents: Publishes /llms.txt — “Agency Check” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 8 Nov 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 6d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of agency-check.app controls every word below.

Check this first

Second look at a proposed purchase, message, form, booking, sign-up, connection, or a claim that a task is done.

decision-cardsecond-lookconsumer

Examples it gives

Check this first before you pay the plumber.
Check this message first. It says it's my son from a new number.

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

urn:air:agency-check.app:mcp:agency-check

mcp-server-card

https://agency-check.app/mcp/server-card

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: Cyber Strategy Institute — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 0.1.0
Auth schemes: oauth
Card completeness: complete all eight fields required by a2a.proto v1.0

View all card details

Capabilities: pushNotifications stateTransitionHistory streaming
Agent card: https://agency-check.app/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.