barestate-site bronze
barestate.xyz
“Read-only agent surface for barestate.xyz — reads public pages as Markdown and exposes the site's machine-readable files. Product actions are available through the REST API documented at /openapi.json.
a2a https://barestate.xyz/mcp talk to it https://barestate.xyz/.well-known/agent-card.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Google Trust Services
domain-validated
Valid until 30 Jan 2027 as of our check on 9 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.Control of the hostname was checked; nothing about who operates it.Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.
Names on this certificate (3)
barestate.xyz,oms.barestate.xyz,*.oms.barestate.xyz. - Connection
- TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 9 Nov 2026. What this means
- DANE / TLSA
- Not verified (TLSA query returned RCodeNameError)
- Discovery
-
Well-known document
This host also publishes an ARD catalog (
/.well-known/ai-catalog.json) declaring 5 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified. - AI-facing documents
-
Publishes
/llms.txt— “Barestate” a curated map of the site's content for language modelsPublishes a Web Bot Auth key directory (1 key,Ed25519) — the operator publishes keys so their agent's signed requests can be verified. agenttru.st recorded that the directory exists; it has not verified a signature.Fetched from this host during verification. Neither document is how this agent was discovered. - First seen
- 2 Nov 2026
View verification details
- Assurance
- bronze Bronze — agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
-
? Unknown
·
Cloudflare, Inc.
(AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
- Last checked
- 5d ago
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of barestate.xyz controls every word below.
List public pages
List every public page on barestate.xyz with its Markdown URL.
Read a page as Markdown
Return the Markdown representation of a public barestate.xyz page.
Read machine-readable resources
Fetch llms.txt, openapi.json, ard.json, auth.md, the skills index, or sitemap.xml.
What its catalog declares
From the ARD catalog this host publishes at
/.well-known/ai-catalog.json. The operator controls every entry; agenttru.st
verified that the catalog exists and parses, and nothing about what the entries say.
Barestate Private AI API
REST API for the Barestate Private AI workspace: health reporting, privacy-gated prompt previews, approved dispatch, batch and async operations, RFC RateLimit headers, Idempotency-Key support, path versioning (/api/v1), declared agent_auth endpoints, a product MCP server at POST /api/mcp, and Bearer-scoped persistence.
https://barestate.xyz/openapi.jsonBarestate site MCP server
Streamable-HTTP MCP server exposing every public barestate.xyz page as Markdown plus the machine-readable file index.
https://barestate.xyz/.well-known/mcp/server-card.jsonBarestate agent skills
Agent Skills index describing how to use barestate.xyz's machine-readable surfaces.
https://barestate.xyz/.well-known/agent-skills/index.jsonbarestate.xyz llms.txt
Agent-facing site guide with when-to-use guidance for every public surface.
https://barestate.xyz/llms.txtBarestate developer portal
Developer portal: API reference, OpenAPI spec, MCP endpoint, authentication, and machine-readable resources.
https://barestate.xyz/developersTechnical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Provider
- Barestate — what this agent says about itself; other agents claiming the same provider are not thereby related
- Protocol
- a2a
- Version
- 1.0.0
- Card completeness
-
a2a.proto v1.0 requires eight top-level fields. This card omits:
Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.
View all card details
- Capabilities
- pushNotifications stateTransitionHistory streaming
- Agent card
- https://barestate.xyz/.well-known/agent-card.json
Operate this agent and would rather not be listed? Request removal.