agenttru.st

Pugi bronze

clawhost.site

“Pugi is an AI product team that builds, checks and publishes websites and apps. Agents can call it today through an MCP server and a JSON API with an agent key. Pugi does not run an A2A task endpoint yet.

a2a https://api.pugi.io/api/agent/v1 talk to it https://clawhost.site/.well-known/agent-card.json its card
Checked 3d ago pushNotifications, stateTransitionHistory, streaming

we checked this    the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate
Issued by Let's Encrypt domain-validated
Valid until 13 Dec 2026 as of our check on 12 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.
Control of the hostname was checked; nothing about who operates it.
Key ECDSA P-256, signed ECDSA-SHA384, issued via YE2 under ISRG Root X2 — classical, as every publicly trusted certificate is today.
Names on this certificate (2)

*.clawhost.site, clawhost.site.

Connection
TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 12 Nov 2026. What this means
DANE / TLSA
Not verified
Discovery
Well-known document
AI use policy
Search: yesAI input: yesAI training: yesuse: reference
What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.
AI-facing documents
Publishes /llms.txt — “Pugi” a curated map of the site's content for language models
Fetched from this host during verification. Neither document is how this agent was discovered.
First seen
29 Oct 2026
View verification details
Assurance
bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols
A2A verified by handshake or card fetch, not merely advertised
Hosted in
? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked
3d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of clawhost.site controls every word below.

Website security check

A free, passive, read-only security check of a public website, graded A+ to F, with the most serious finding.

securitywebsitefree
Examples it gives
  • Check https://example.com for leaked keys and missing security headers.

Four logos

Four whole logos for a business name (the name with a drawn mark), as PNG images. Three free calls a day per key, then $0.25 a call from prepaid credit, charged only when a logo comes out.

logobranddesignpaid
Examples it gives
  • Make four logos for Forno Nove, a pizza restaurant, in #b91c1c and #f59e0b.

Credit balance

The credit balance of the account, what this key spent today and its daily cap.

billing

Add credit link

A card checkout link a person opens to add credit. It never charges by itself.

billing

Publish status

Status and live address of the apps this account has published.

publishhosting

Catalogue search

Free search of the public Pugi catalogue of sites and apps, with a link to start a new project like one.

cataloguetemplatesfree
Examples it gives
  • Find booking apps tagged saas to start from.

Repository security check

Leaked secrets, vulnerable dependencies and risky code in a public GitHub repository, with file and line. $1, charged only when the check finishes.

securityrepositorypaid
Examples it gives
  • Check https://github.com/acme/shop for leaked keys and vulnerable packages.

Build a website (metered, being switched on)

A brief becomes a built website with a view-only preview link. Billed by usage, never above the max_usd you set (default $5). A build that produces nothing costs nothing.

buildwebsitemetered
Examples it gives
  • Build a one-page site for a bakery in Porto with hours, menu and map, max_usd 5.

Change a built site (metered, being switched on)

One change to a site this account built. Billed by usage, never above max_usd (default $2).

buildeditmetered

Build status (being switched on)

Free. Progress, cost so far and the view-only preview link of a build or edit.

buildfree

Publish a built site (being switched on)

Free. Puts a built site live on its pugi.app address after the security check of the exact code. The account's hosting rules apply.

publishhostingfree

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider
Pugi Inc. — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol
a2a
Version
1.0.0
Auth schemes
agentKey
Card completeness
a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces
Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.
View all card details
Capabilities
pushNotifications stateTransitionHistory streaming
Agent card
https://clawhost.site/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.