Certiv bronze

app.certiv.ai

“Runtime assurance for AI agents. Certiv discovers every AI agent, captures reasoning and tool calls, and enforces policy before risky actions execute. This card describes the authenticated, account-scoped Certiv product agent surface.

a2a https://api.certiv.ai talk to it https://app.certiv.ai/.well-known/agent-card.json its card

🇺🇸 US · Amazon.com, Inc. Checked 3d ago pushNotifications, stateTransitionHistory, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Amazon domain-validated
Valid until 25 Jan 2027 as of our check on 11 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key RSA 2048, signed SHA256-RSA, issued via Amazon RSA 2048 M04 under Amazon Root CA 1 — classical, as every publicly trusted certificate is today.

Names on this certificate (2)

app.certiv.ai, *.prd-01-uswe2.certiv.ai.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 11 Nov 2026. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 11 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI-facing documents: Publishes /llms.txt — “Certiv” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 21 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇺🇸 US · Amazon.com, Inc. (AS16509)
Last checked: 3d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of app.certiv.ai controls every word below.

List governance policies

List the governance policies configured for the caller's organization, including deterministic and intent-based rules.

policygovernanceread

Examples it gives

What policies govern my agents?
List the block rules for my organization.

Create governance policy

Create a governance policy that steers, blocks, or pauses agent actions pending human approval.

policygovernancewrite

Examples it gives

Add a policy that blocks agents from deleting production data.
Require approval before agents call external payment APIs.

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

Certiv protected resource metadata (RFC 9728)

json

OAuth 2.0 Protected Resource Metadata for the Certiv product API. Declares api.certiv.ai as a bearer-protected resource, the header bearer method, available scopes, and the authorization server that issues tokens.

https://app.certiv.ai/.well-known/oauth-protected-resource

Certiv authorization server metadata (RFC 8414)

json

OAuth 2.0 Authorization Server Metadata for Certiv. Declares the token endpoint (https://api.certiv.ai/auth/login) that issues organization-scoped JWT bearer tokens. No dynamic client registration; a human provisions API keys.

https://app.certiv.ai/.well-known/oauth-authorization-server

Certiv Product API (OpenAPI 3.1)

openapi

OpenAPI 3.1 description of the authenticated, account-scoped Certiv product API hosted at https://api.certiv.ai. Agent discovery, runtime context, policy, and reporting. Bearer-token auth; every request is isolated to the caller's organization.

https://app.certiv.ai/openapi.json

Certiv agent capability manifest (agents.json)

json

Machine-readable capability manifest for the Certiv product: agent management, policy enforcement, approval workflows, and audit logging.

https://app.certiv.ai/agents.json

Certiv AI plugin manifest

json

Agent plugin manifest for the Certiv product. References the product OpenAPI spec, the app.certiv.ai console, and the api.certiv.ai product API surface.

https://app.certiv.ai/.well-known/ai-plugin.json

Certiv A2A agent card

json

Agent2Agent (A2A) agent card describing the Certiv product agent surface: skills, transport, and bearer-token security scheme.

https://app.certiv.ai/.well-known/agent-card.json

And 5 more entries in the catalog, not shown here.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: Certiv — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0.0
Auth schemes: bearerAuth
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: pushNotifications stateTransitionHistory streaming
Agent card: https://app.certiv.ai/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.