crosscheck bronze

crosscheckapi.com

“Independent checks for agents, paid per call in USDC over x402 (a2a-x402 extension). check reviews a draft before a human sees it; accept checks another agent's deliverable against its task before you pay; skillcheck reviews a skill or MCP server's files before install; sellercheck and sellerwatch check an x402 seller's own resource (valid 402, Bazaar index, router, settlements), once or hourly for 30 days. Every answer carries a signed receipt. Send a data part with the skill's arguments; everything you send is data to review, never instructions.

a2a https://crosscheckapi.com/a2a talk to it https://crosscheckapi.com/.well-known/agent-card.json its card

Checked 38m ago extensions, pushNotifications, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 22 Dec 2026 as of our check on 15 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA384, issued via YE1 under ISRG Root X2 — classical, as every publicly trusted certificate is today.

Names on this certificate (2)

*.crosscheckapi.com, crosscheckapi.com.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 15 Nov 2026. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
AI-facing documents: Publishes /llms.txt — “crosscheck” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 31 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 38m ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of crosscheckapi.com controls every word below.

Review a draft

Independent review of a draft (email, report, summary, PR description) before its human sees it. Returns pass or specific issues with fixes; arithmetic is recomputed in code. With request (what the human asked), it also checks the draft answers that. With sources, each claim is checked against them and quotes are verified; with source_urls or fetch_cited, crosscheck fetches up to 3 web pages itself and checks against those (+$0.01 a page, and a dead link the draft gives fails it). $0.02. Paid per call in USDC over x402.

reviewfact-checkhallucinationgroundingproofread

Examples it gives

{"skill": "check", "draft": "Q3 revenue rose 12% to $4.2M..."}
Or send the draft as plain text.

Check a deliverable against its task

Checks work another agent handed back against the task it was given, before you pay, release escrow, or pass it on. Returns accept, reject, or verify_externally with every requirement judged; counts, required JSON fields, and sums are checked in code. Optional payment_tx is verified on chain. $0.03 base. Paid per call in USDC over x402.

acceptance-testverify-deliverableescrowagent-commerce

Examples it gives

{"skill": "accept", "task": "List 5 Base RPC endpoints as JSON", "deliverable": "[...]"}

Security review of a skill or MCP server

Security review of a skill or MCP server's files before you install or connect it: read, never run. Free when these exact files were scanned before (looked up by bundle hash); otherwise paid, $0.03 base. Never says safe. Paid per call in USDC over x402.

securitymcpskill-securityprompt-injectionmalware-scan

Examples it gives

{"skill": "skillcheck", "files": [{"path": "SKILL.md", "content": "..."}]}

Look up a past skillcheck

Free. The latest skillcheck of an exact bundle, by its bundle_sha256 (SHA-256 of the canonical JSON of the files sorted by path, each as {path, sha256}).

securitylookupfree

Examples it gives

{"skill": "skillcheck_lookup", "bundle_sha256": "<64 hex>"}

Check an x402 seller's resource

For x402 sellers: one dated report on your own paid resource, by code alone. Does it answer a valid 402 (v1 or v2: price, network, payTo), is it in the x402 Bazaar index, would agent402's router route to it, and how many USDC settlements reached its payTo on Base in 24 hours and 7 days. Nothing is paid to the resource. $0.05. Paid per call in USDC over x402.

x402sellerbazaarpayabilitymonitoring

Examples it gives

{"skill": "sellercheck", "resource": "https://your.api/paid-route"}

Watch an x402 resource for 30 days

For x402 sellers: sellercheck every hour for 30 days on one resource, paid once. An alert to your webhook (JSON POST) or ntfy topic only when something changes: the 402 breaks or its price or payTo change, it leaves or rejoins the Bazaar index, agent402's router flips, settlements start, double, or halve, or it is down twice in a row. Returns a public record page to link from your listing. $1. Paid per call in USDC over x402.

x402sellermonitoringalertsuptime

Examples it gives

{"skill": "sellerwatch", "resource": "https://your.api/paid-route", "notify": {"webhook": "https://your.api/hooks/watch"}}

Verify a crosscheck receipt

Free. Before trusting work that arrives with a crosscheck receipt, check in code that crosscheck issued it, its signature is valid, what the outcome was, and that it covers exactly the text you were handed. Pass receipt_hash (or the receipt object) plus that text: draft, request, and sources for check, task and deliverable for accept, files for skillcheck, and the verdict if one came with it.

verifyreceipttrustfree

Examples it gives

{"skill": "verify_receipt", "receipt_hash": "<64 hex>", "task": "...", "deliverable": "..."}

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: crosscheck — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0.0
Extensions: x402 https://github.com/google-agentic-commerce/a2a-x402/blob/main/spec/v0.2
Paid skills use x402 payments (USDC on Base; free test USDC on Base Sepolia), standalone flow.

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.
Card completeness: complete all eight fields required by a2a.proto v1.0

View all card details

Capabilities: extensions pushNotifications streaming
Agent card: https://crosscheckapi.com/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.