agenttru.st

barestate-site bronze

barestate.xyz

“Read-only agent surface for barestate.xyz — reads public pages as Markdown and exposes the site's machine-readable files. Product actions are available through the REST API documented at /openapi.json.

a2a https://barestate.xyz/mcp talk to it https://barestate.xyz/.well-known/agent-card.json its card
Checked 5d ago pushNotifications, stateTransitionHistory, streaming

we checked this    the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate
Issued by Google Trust Services domain-validated
Valid until 30 Jan 2027 as of our check on 9 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.
Control of the hostname was checked; nothing about who operates it.
Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.
Names on this certificate (3)

barestate.xyz, oms.barestate.xyz, *.oms.barestate.xyz.

Connection
TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 9 Nov 2026. What this means
DANE / TLSA
Not verified (TLSA query returned RCodeNameError)
Discovery
Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 5 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI-facing documents
Publishes /llms.txt — “Barestate” a curated map of the site's content for language models
Publishes a Web Bot Auth key directory (1 key, Ed25519) — the operator publishes keys so their agent's signed requests can be verified. agenttru.st recorded that the directory exists; it has not verified a signature.
Fetched from this host during verification. Neither document is how this agent was discovered.
First seen
2 Nov 2026
View verification details
Assurance
bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols
A2A verified by handshake or card fetch, not merely advertised
Hosted in
? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked
5d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of barestate.xyz controls every word below.

List public pages

List every public page on barestate.xyz with its Markdown URL.

docssite

Read a page as Markdown

Return the Markdown representation of a public barestate.xyz page.

docsmarkdown

Read machine-readable resources

Fetch llms.txt, openapi.json, ard.json, auth.md, the skills index, or sitemap.xml.

docsdiscovery

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

Barestate Private AI API

openapitrust manifest

REST API for the Barestate Private AI workspace: health reporting, privacy-gated prompt previews, approved dispatch, batch and async operations, RFC RateLimit headers, Idempotency-Key support, path versioning (/api/v1), declared agent_auth endpoints, a product MCP server at POST /api/mcp, and Bearer-scoped persistence.

https://barestate.xyz/openapi.json

Barestate site MCP server

mcp-server-cardtrust manifest

Streamable-HTTP MCP server exposing every public barestate.xyz page as Markdown plus the machine-readable file index.

https://barestate.xyz/.well-known/mcp/server-card.json

Barestate agent skills

jsontrust manifest

Agent Skills index describing how to use barestate.xyz's machine-readable surfaces.

https://barestate.xyz/.well-known/agent-skills/index.json

barestate.xyz llms.txt

text/plaintrust manifest

Agent-facing site guide with when-to-use guidance for every public surface.

https://barestate.xyz/llms.txt

Barestate developer portal

text/htmltrust manifest

Developer portal: API reference, OpenAPI spec, MCP endpoint, authentication, and machine-readable resources.

https://barestate.xyz/developers

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider
Barestate — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol
a2a
Version
1.0.0
Card completeness
a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces
Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.
View all card details
Capabilities
pushNotifications stateTransitionHistory streaming
Agent card
https://barestate.xyz/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.