oxom bronze

creator.oxom.lu

“oxom is a workspace platform for professional creator teams: an AI agent with tool access, a shared Drive, real-time Docs, short links and QR codes, and Handover — paid file delivery between creators, editors, and clients. Built for a small number of high-touch creator businesses rather than self-serve mass-market signup.

a2a https://mcp.oxom.de/mcp talk to it https://creator.oxom.lu/.well-known/agent-card.json its card

🇺🇸 US · Amazon.com, Inc. Checked 3d ago pushNotifications, stateTransitionHistory, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 21 Jan 2027 as of our check on 11 Nov 2026.

Control of the hostname was checked; nothing about who operates it.

Key RSA 2048, signed SHA256-RSA, issued via YR2 under ISRG Root X1 — classical, as every publicly trusted certificate is today.

Names on this certificate (1)

creator.oxom.lu.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 11 Nov 2026. What this means
DANE / TLSA: Not verified
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 8 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI-facing documents: Publishes /llms.txt — “OXOM for Creator” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 11 Nov 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇺🇸 US · Amazon.com, Inc. (AS16509)
Last checked: 3d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of creator.oxom.lu controls every word below.

short-link-management

Create and audit branded short links and QR codes for a creator workspace, including click-through counts per link.

creatorworkspacemcp

Examples it gives

Call `list_links` on an authorized oxom workspace.
Call `create_link` on an authorized oxom workspace.

creator-file-handover

Move large video files between a creator and an editor or client: search the workspace Drive and mint signed, expiring upload links for people without an account.

creatorworkspacemcp

Examples it gives

Call `search_drive_files` on an authorized oxom workspace.
Call `create_upload_link` on an authorized oxom workspace.

workspace-docs

Find and create working documents in a creator workspace — stream notes, scripts, sponsor briefings.

creatorworkspacemcp

Examples it gives

Call `search_docs` on an authorized oxom workspace.
Call `create_doc` on an authorized oxom workspace.

stream-operations

Inspect a channel's StreamElements chat-bot commands and manage the team's stream plan and availability calendar.

creatorworkspacemcp

Examples it gives

Call `list_streamelements_commands` on an authorized oxom workspace.
Call `get_team_time` on an authorized oxom workspace.
Call `set_stream_plan` on an authorized oxom workspace.

agenttru.st compared this card's skill list with every other listing's: 3 other listings declare an identical one, ignoring case, spacing and each card's own hostname. See all 4. That says the cards' text is the same, not who runs them.

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

oxom MCP server

mcp-server-cardtrust manifest

Acts on oxom workspaces the user authorized when they connected — either a single workspace or all of theirs, their choice at consent time. Use it to read and create short links, search and create Docs, search Drive files, mint signed upload links, read the caller's own Team Time availability, and read StreamElements bot commands. Call list_workspaces to see which workspaces this connection can reach; pass the `workspace` argument on any tool to pick one. Membership and role are checked on every call, so

https://oxom.de/.well-known/mcp/server-card.json

oxom docs MCP server

mcp-server-cardtrust manifest

Read-only documentation server for oxom. Use list_doc_pages to see what documentation exists, read_doc_page to fetch one page as markdown, and search_oxom to search all public oxom.de content. No authentication — to act on a workspace, connect the product server instead.

https://oxom.de/.well-known/mcp/docs-server-card.json

oxom Public API

vnd.oai.openapitrust manifest

The unauthenticated HTTP surface: Handover pay-link lookup and checkout, workspace slug and domain availability checks, and OG image rendering. Typed JSON errors and RFC 9331 rate-limit headers.

https://oxom.de/openapi.json

oxom Agent Skills

jsontrust manifest

The jobs an agent can accomplish with an oxom workspace, and the MCP tools behind each — plus when oxom is the wrong tool for a request.

https://oxom.de/.well-known/agent-skills/index.json

oxom Workspace Agent

jsontrust manifest

The natural-language agent inside each oxom workspace (web and iOS). Not third-party callable; listed so agents understand the product surface rather than to be invoked.

https://oxom.de/.well-known/agent-card.json

oxom in-browser tools (WebMCP)

text/htmltrust manifest

Tools oxom.de registers with navigator.modelContext for an agent running inside the visitor's browser: oxom_check_workspace_slug, oxom_get_pay_offer, oxom_navigate, oxom_when_to_use, oxom_agent_resources. No authentication; the same public surface as the REST API.

https://oxom.de

And 2 more entries in the catalog, not shown here.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: oxom — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0.0
Auth schemes: oauth2
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: pushNotifications stateTransitionHistory streaming
Agent card: https://creator.oxom.lu/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.