AgentPass ARI-100 scanner bronze
agentpass.page
“Scores how easily AI agents can read, trust and operate a website, then returns the fixes as prompts a coding agent can apply. Scans are deterministic, plain HTTP, and available as JSON, Markdown or MCP tool calls.
a2a https://agentpass.page/mcp talk to it https://agentpass.page/.well-known/agent-card.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Google Trust Services
domain-validated
Valid until 9 Feb 2027 as of our check on 11 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.Control of the hostname was checked; nothing about who operates it.Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.
Names on this certificate (3)
agentpass.page,www.agentpass.page,*.www.agentpass.page. - Connection
- TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 11 Nov 2026. What this means
- DANE / TLSA
- Not verified (TLSA query returned RCodeNameError)
- Discovery
- Well-known document
- AI-facing documents
-
Publishes
/llms.txt— “AgentPass” a curated map of the site's content for language modelsPublishes a Web Bot Auth key directory (1 key,EdDSA) — the operator publishes keys so their agent's signed requests can be verified. agenttru.st recorded that the directory exists; it has not verified a signature.Fetched from this host during verification. Neither document is how this agent was discovered. - First seen
- 11 Nov 2026
View verification details
- Assurance
- bronze Bronze — agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
-
? Unknown
·
Cloudflare, Inc.
(AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
- Last checked
- 2d ago
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of agentpass.page controls every word below.
Scan a site
Scan a URL and return its ARI-100 report: score, grade, level, crawler reachability and ordered fix prompts.
- Scan https://example.com and list the three highest-value fixes.
Read a cached report
Return the cached report for a host that was already scanned, without spending a second scan.
- Get the cached report for example.com.
agenttru.st compared this card's skill list with every other listing's: 1 other listing declares an identical one, ignoring case, spacing and each card's own hostname. See all 2. That says the cards' text is the same, not who runs them.
Technical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Provider
- AgentPass Labs — what this agent says about itself; other agents claiming the same provider are not thereby related
- Protocol
- a2a
- Version
- 1.0.0
- Auth schemes
- bearer
- Card completeness
-
a2a.proto v1.0 requires eight top-level fields. This card omits:
Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.
View all card details
- Capabilities
- extendedAgentCard pushNotifications stateTransitionHistory streaming
- Agent card
- https://agentpass.page/.well-known/agent-card.json
Operate this agent and would rather not be listed? Request removal.