Altixia ID bronze

id.altixia.com

“The identity provider for Altixia's tools. Tells an agent how to obtain an Altixia ID credential and which credential each Altixia service takes — both without any credential — and, with the caller's own token, whether that token is live and whose it is. Issues no token itself: tokens come from the OAuth endpoints.

https://id.altixia.com/.well-known/agent-card.json its card

Checked 3d ago extendedAgentCard, pushNotifications, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 18 Jan 2027 as of our check on 11 Nov 2026.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.

Names on this certificate (1)

id.altixia.com.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 11 Nov 2026. What this means
DANE / TLSA: Not verified
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 3 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI use policy: Search: yesAI input: yesAI training: no

What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.
First seen: 4 Nov 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 3d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of id.altixia.com controls every word below.

How to obtain an Altixia ID credential

Which OAuth 2.0 grants Altixia ID accepts, at which URLs, and which one fits: the device-code grant or the authorization code with PKCE for an agent acting for a person, client credentials for an agent acting as itself. Needs no credential. Send a `data` Part {"skill": "how_to_authenticate"}. No token is issued here: tokens come from the token endpoint this answer names.

identityauthenticationoauth2openid-connect

Examples it gives

How does an agent get a token for an Altixia service?
I have no browser: how do I sign in to Altixia ID?

Which credential an Altixia service takes

Says which credential each Altixia service accepts — an Altixia ID access token or an Altixia Sign API token. Presenting one where the other is expected is refused in a way that looks like an expired token. Needs no credential. Send a `data` Part {"skill": "which_credential", "service"?: "sign.altixia.com"}; without `service`, every service is listed.

identitycredentialsapi-tokentroubleshooting

Examples it gives

Does sign.altixia.com take my Altixia ID token?
My call to an Altixia service was refused: is it the wrong kind of token?

Whose token is this

Says whether the caller's own Altixia ID access token is live and whose it is — or plainly that no token was sent, or that it was refused, three answers kept distinct. Send the token as `Authorization: Bearer <access token>` on the A2A request and a `data` Part {"skill": "whoami"}. The token is relayed to the userinfo endpoint and never stored or logged.

identitytoken-validationuserinfo

Examples it gives

Am I still signed in to Altixia?
Who does this bearer token belong to?

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

Altixia ID MCP server

mcp-server-card

Streamable HTTP JSON-RPC endpoint. whoami says whether a token is live and whose it is; how_to_authenticate and which_credential answer without any credential, so an agent that is locked out can still learn the way in. Holds no secret of its own.

https://id.altixia.com/.well-known/mcp/server-card.json

Altixia ID A2A agent

a2a-agent-card

A2A 1.0 JSON-RPC endpoint with the same three answers as the MCP server, from the same code: how_to_authenticate and which_credential answer without any credential; whoami takes the caller's own Altixia ID token. Every answer is an immediate message — no task to follow — and no token is ever issued here.

https://id.altixia.com/.well-known/agent-card.json

Agent skill — authenticate with Altixia ID

text/markdown

The steps from a 401 on any Altixia service to a working bearer token.

https://id.altixia.com/.well-known/agent-skills/authenticate.md

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: Altixia LLC — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0.0
Auth schemes: altixiaId
Card completeness: complete all eight fields required by a2a.proto v1.0

View all card details

Capabilities: extendedAgentCard pushNotifications streaming
Agent card: https://id.altixia.com/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.