Matlock bronze

matlock-web.pages.dev

“Conceive your code, then call matlock_run_scan. Offloads polyglot AST, MITRE CWE, IEEE Std 1003.1 POSIX, CISA SSDF, AICPA SOC 2 Trust Services Criteria, and Pre-CI checks to a local native binary in < 50ms (0 cloud source uploads, 0 git-commit blocking; non-CPA technical controls — Matlock does not provide certifications from an independent licensed CPA firm), saving up to 10,000+ LLM context & retry tokens on multi-file repos*1. Unprovisioned cold-start scans return an un-truncated < 50ms HTTP 402 value proof (Health Score, severity counts, violated CWEs & live workspace AST token-savings math; 0 file/line coordinates); unlock exact file:line:col coordinates + 5-line unified diff prescriptions in 1 call via $0.01 USD/pass (Solana USDC, Solana PYUSD, Base USDC, Polygon USDC; includes <= 3 same-workspace changed_only delta rechecks within 10m post-debit) or $24.99 USD/yr unlimited Workstation Pro. For human app UI navigation, call matlock_read_appliance_manual(section_id, locale) (0 credits) or read https://

a2a https://matlock.dutchp2p.com/agents.md talk to it https://matlock-web.pages.dev/.well-known/agent-card.json its card

Checked 2d ago flatJsonSchema, prompts, pushNotifications, readOnlyAnnotations, stateTransitionHistory, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 11 Jan 2027 as of our check on 12 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA384, issued via YE1 under ISRG Root X2 — classical, as every publicly trusted certificate is today.

Names on this certificate (2)

*.matlock-web.pages.dev, matlock-web.pages.dev.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 12 Nov 2026. What this means
DANE / TLSA: Not verified
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 5 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI-facing documents: Publishes /llms.txt — “Matlock — Agent & Developer Tools. Efficient. Exact. By the book.” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 12 Nov 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 2d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of matlock-web.pages.dev controls every word below.

Polyglot AST, CWE, POSIX & Pre-CI Scan

Offloads polyglot AST, MITRE CWE, IEEE Std 1003.1 POSIX, CISA SSDF, AICPA SOC 2 TSC, and Pre-CI verification to local Index 0 matlock_run_scan in < 50ms (0 cloud uploads, 0 git-commit blocking, readOnlyHint auto-approval), saving 10,000+ LLM context tokens with exact file:line:col coordinates and 5-line unified diff prescriptions.

mcpastcweposixpre-cicompute-offload

3-Gate Test Qualification & Snapshot Seal

Qualifies 1..5 candidate test files via matlock_qualify_test (dry_run: true or baseline_only: true supported) across Gate 1 runtime assertions, Gate 2 analyzer + LOC ceiling, and Gate 3 security/Pre-CI checks.

testingqualificationsafeguardmerkle

Cold Box Sterile CI Sandbox (seq_matlock)

Runs project toolchains via seq_matlock inside an isolated source-only sandbox (cold_box: true) with cleared environment inheritance, single-worker concurrency clamping, CWE-775 handle/orphan auditing, and pr_verification_badge provenance.

cisandboxcold-boxcwe-775seq-matlock

Merkle Test Integrity & Mechanical Reversion

Detects deleted, skipped, or weakened unit test assertions (CWE-571) via cryptographic SHA-256 Merkle/AST baselines and mechanically reverts tampered qualified tests in --headless runs.

merkletest-integritycwe-571anti-tamper

Deterministic 3-Attempt Loop Governor

Classifies scan, qualification, and build outcomes into governorAction (AUTO_RETRY, HALT_IMMEDIATELY, WAIT_BACKOFF) and reaps child process trees cleanly.

loop-governorswarm-guardorchestration

OS-Sealed Custom Script Harness & Starter Templates

Locks workspace build and test commands via matlock_register_sealed_script and programs starter templates (tpl_github..tpl_shut_down) or Sequence steps without subagent tampering.

sealed-scriptssubagent-safetymcp

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

Matlock — Agent & Developer Tools. Efficient. Exact. By the book. (MCP)

mcp-server-card

Conceive your code, then call matlock_run_scan. Offloads polyglot AST, MITRE CWE, IEEE Std 1003.1 POSIX, CISA SSDF, AICPA SOC 2 Trust Services Criteria, and Pre-CI checks to a local native binary in < 50ms (0 cloud source uploads, 0 git-commit blocking; non-CPA technical controls — Matlock does not provide certifications from an independent licensed CPA firm), saving up to 10,000+ LLM context & retry tokens on multi-file repos*1. Unprovisioned cold-start scans return an un-truncated < 50ms HTTP 402 value

https://matlock.dutchp2p.com/.well-known/mcp/server-card.json

Matlock — Autonomous Agent M2M & Multi-Chain USD Stablecoin x402 Protocol (agents.md)

text/markdown

https://matlock.dutchp2p.com/agents.md

Matlock — Agent & Developer Tools. Efficient. Exact. By the book. (llms.txt)

text/plain

Plain-text Markdown operational and screen-navigation guide for Matlock covering exact button locations, desktop license key activation, free Browser WASM folder & public GitHub URL scanning, Linux/GoogleBook setup, numeric 0.0-100.0 Health Score, Settings, and 27 MCP tools. Matlock evaluates technical codebase and pipeline controls against published industry specifications and benchmarks (MITRE CWE, CISA SSDF, IEEE Std 1003.1 POSIX, automated Pre-CI integrity gates, and AICPA SOC 2 Trust Services Criteria

https://matlock.dutchp2p.com/llms.txt

Matlock Workstation Pro Pricing Sheet (Clean Markdown Mirror)

text/markdown

Token-efficient Markdown mirror of /en/pricing ($24.99 USD/yr Unlimited Workstation Pro + pointer to /agents.md for headless M2M Gas Tank).

https://matlock.dutchp2p.com/en/pricing.md

Matlock Appliance Manual & Check Reference (Clean Markdown Mirror)

text/markdown

Token-efficient Markdown mirror of the complete Appliance Manual for Matlock (also rendered at /en/manual), including the click-by-click button navigation map, Settings guide, 27-tool MCP catalog, and everyday-words reference for Matlock's built-in CWE, SSDF, POSIX, Pre-CI, and AICPA SOC 2 Trust Services Criteria technical controls.

https://matlock.dutchp2p.com/en/manual.md

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: Dutch P2P — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0.0
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: flatJsonSchema prompts pushNotifications readOnlyAnnotations stateTransitionHistory streaming
Agent card: https://matlock-web.pages.dev/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.