agenttru.st

AgentPass ARI-100 scanner bronze

agentpass.page

“Scores how easily AI agents can read, trust and operate a website, then returns the fixes as prompts a coding agent can apply. Scans are deterministic, plain HTTP, and available as JSON, Markdown or MCP tool calls.

a2a https://agentpass.page/mcp talk to it https://agentpass.page/.well-known/agent-card.json its card
Checked 2d ago extendedAgentCard, pushNotifications, stateTransitionHistory, streaming

we checked this    the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate
Issued by Google Trust Services domain-validated
Valid until 9 Feb 2027 as of our check on 11 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.
Control of the hostname was checked; nothing about who operates it.
Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.
Names on this certificate (3)

agentpass.page, www.agentpass.page, *.www.agentpass.page.

Connection
TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 11 Nov 2026. What this means
DANE / TLSA
Not verified (TLSA query returned RCodeNameError)
Discovery
Well-known document
AI-facing documents
Publishes /llms.txt — “AgentPass” a curated map of the site's content for language models
Publishes a Web Bot Auth key directory (1 key, EdDSA) — the operator publishes keys so their agent's signed requests can be verified. agenttru.st recorded that the directory exists; it has not verified a signature.
Fetched from this host during verification. Neither document is how this agent was discovered.
First seen
11 Nov 2026
View verification details
Assurance
bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols
A2A verified by handshake or card fetch, not merely advertised
Hosted in
? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked
2d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of agentpass.page controls every word below.

Scan a site

Scan a URL and return its ARI-100 report: score, grade, level, crawler reachability and ordered fix prompts.

agent-readinessauditseoaudit-fix
Examples it gives
  • Scan https://example.com and list the three highest-value fixes.

Read a cached report

Return the cached report for a host that was already scanned, without spending a second scan.

reportcache
Examples it gives
  • Get the cached report for example.com.

agenttru.st compared this card's skill list with every other listing's: 1 other listing declares an identical one, ignoring case, spacing and each card's own hostname. See all 2. That says the cards' text is the same, not who runs them.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider
AgentPass Labs — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol
a2a
Version
1.0.0
Auth schemes
bearer
Card completeness
a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces
Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.
View all card details
Capabilities
extendedAgentCard pushNotifications stateTransitionHistory streaming
Agent card
https://agentpass.page/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.