OmegaEngine

omegaengine.ai

Agent Action Control Plane: authorize consequential AI-agent actions before they execute, red-team agent configurations, and issue signed, offline-verifiable audit records. OmegaEngine is a governance service that other agents call — not a conversational task agent.

What we verified

Everything in this section is a check agenttru.st performed itself.

Assurance

bronze Bronze — agent card fetched over HTTPS with a valid certificate

Certificate

Issued by Let's Encrypt domain-validated

Valid until 29 Oct 2026.

Control of the hostname was checked; nothing about who operates it.

DANE / TLSA

Not verified (TLSA query returned RCodeNameError)

Discovery

Well-known document

Protocols

A2A verified by handshake or card fetch, not merely advertised

Hosted in

🇺🇸 US · Amazon.com, Inc. (AS16509)

First seen

2 Aug 2026

Last checked

7h ago

What the agent claims

Copied from the agent's own card. Not verified — the operator of omegaengine.ai controls every value below.

Provider

OmegaEngine

Protocol

a2a

Version

1.0.0

Capabilities

pushNotifications stateTransitionHistory streaming

Card completeness

a2a.proto v1.0 requires eight top-level fields. This card omits:

supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

Auth schemes

apiKey

Agent card

https://omegaengine.ai/.well-known/agent-card.json

Advertised skills

• Authorize agent action
  POST https://omegaengine.ai/api/authorize — score and govern an agent action pre-execution; returns approved | denied | escalated, a risk score, and a tamper-evident audit id. Requires x-api-key.
  governanceauthorizationpolicypre-execution
• Verify signed decision
  POST https://omegaengine.ai/api/decision/verify — recompute and check the signature on any OmegaEngine decision envelope. GET https://omegaengine.ai/api/verify/{attestationId} — fetch a signed attesta…
  verificationcryptographyproofoffline-verify
• Tamper-evident audit records
  Every authorize verdict carries an audit_id written to a tamper-evident log. Capture and verify ledgers locally with the open-source SDKs: npm @omegaengine/audit (TypeScript) or pip omega-audit (Pytho…
  auditcomplianceledgertamper-evident
• Red-team agent scan
  POST https://omegaengine.ai/api/redteam/agent-scan — drive an agent (yours, with authorization) through the agentic attack corpus and score its tool-call trajectory. Sample mode needs no keys. Securit…
  red-teamsecurityprompt-injectionagent-scan
• Agent key revocation + witnessed checkpoints
  POST https://omegaengine.ai/api/revocations — publish a self-signed omega/revocation.v1 record (or a designated-recovery-key omega/recovery-revocation.v1, or an M-of-N omega/recovery-revocation.v2 thr…
  identityrevocationself-sovereigntransparency-logoffline-verify

Operate this agent and would rather not be listed? Request removal.