BrainSAIT-Bot bronze

bot.brainsait.org

“First-party automation identity of BrainSAIT Ltd: Cloudflare Web Bot Auth signed identity directory, signature verification, bot-score telemetry, tiered API access, and discovery handoff.

a2a https://bot.brainsait.org/ talk to it https://bot.brainsait.org/.well-known/agent-card.json its card

Checked 1d ago extensions, pushNotifications, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 4 Dec 2026.

Control of the hostname was checked; nothing about who operates it.
DANE / TLSA: Not verified
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 7 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI use policy: Search: yesAI input: yesAI training: no

What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.
AI-facing documents: Publishes /llms.txt — “BrainSAIT (bot.brainsait.org)” a curated map of the site's content for language models

Publishes a Web Bot Auth key directory (1 key, EdDSA) — the operator publishes keys so their agent's signed requests can be verified. agenttru.st recorded that the directory exists; it has not verified a signature.

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 9 Sep 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 1d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of bot.brainsait.org controls every word below.

Verify provider

Look up a healthcare provider by SPID: verification status, OID, trust level. GET https://verify.brainsait.org/{spid} or /{spid}/qr.

Bot identity

Stable egress IPs and Web Bot Auth signing keys for BrainSAIT-Bot traffic.

Verify BrainSAIT-Bot signature

Verify an HTTP Message Signature produced by BrainSAIT-Bot. POST https://bot.brainsait.org/verify-signature with {method, url, headers, body}.

Bot score telemetry

Inspect Cloudflare bot management signals for the current request. GET https://bot.brainsait.org/bot-api/bot-score.

Store UCP Agent

BrainSAIT Store Agent for product search, checkout preparation, and UCP/A2A discovery. See https://ucp-agent.brainsait-fadil.workers.dev/.well-known/agent-card.json.

Universal Cart

Assemble multi-merchant carts (POST cart.brainsait.org/v1/cart), PEN-verified identity, eligibility pre-checks, native Shopify checkout.

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

Platforms MCP server

mcp-server-card

https://bot.brainsait.org/.well-known/mcp/server-card.json

BrainSAIT-Bot agent

a2a-agent-card

https://bot.brainsait.org/.well-known/agent-card.json

BrainSAIT Store UCP Agent

a2a-agent-card

https://ucp-agent.brainsait-fadil.workers.dev/.well-known/agent-card.json

BrainSAIT UCP discovery

json

https://ucp-agent.brainsait-fadil.workers.dev/.well-known/ucp

Verify lookup skill

text/markdown

https://bot.brainsait.org/skills/verify-lookup/SKILL.md

Public API catalog

linkset

https://bot.brainsait.org/.well-known/api-catalog

And 1 more entry in the catalog, not shown here.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: BrainSAIT Ltd — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.4.0
Extensions: https://ucp.dev/2026-01-23/specification/overview?v=2026-01-23
AP2 https://github.com/google-agentic-commerce/ap2/tree/v0.1
https://developers.cloudflare.com/bots/reference/bot-verification/web-bot-auth/

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
defaultInputModesdefaultOutputModes

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: extensions pushNotifications streaming
Agent card: https://bot.brainsait.org/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.