LoginID Shopper bronze

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate

Issued by Let's Encrypt domain-validated

Valid until 6 Jan 2027 as of our check on 8 Nov 2026.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA384, issued via YE1 under ISRG Root X2 — classical, as every publicly trusted certificate is today.

Names on this certificate (1)

shop-mcp.testnet.loginid.io.

Connection

TLS 1.3 · X25519 — classical key exchange, agreed with our checker on 8 Nov 2026. What this means

DANE / TLSA

Not verified

Discovery

Well-known document

AI-facing documents

Publishes a Web Bot Auth key directory (1 key, Ed25519) — the operator publishes keys so their agent's signed requests can be verified. agenttru.st recorded that the directory exists; it has not verified a signature.

Fetched from this host during verification. Neither document is how this agent was discovered.

First seen

8 Nov 2026

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of shop-mcp.testnet.loginid.io controls every word below.

This card declares no skills. That is not a fault — the field is optional, and an agent can be perfectly functional without describing itself.

What kind of listing

• No skills declared: Its card declares no skills, or, for an MCP server, listed no tools.

Checked by agenttru.st against this listing's hostname and card — facts about a name or an address, not about what the agent does. How kinds are decided.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Protocol

a2a

Version

1.0.0

Auth schemes

public

Extensions

https://identity.trulioo.com/a2a/kya/v1

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.

Card completeness

a2a.proto v1.0 requires eight top-level fields. This card omits:

skillssupportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

Operate this agent and would rather not be listed? Request removal.