Sidecar Network bronze

sidecar.network

“Gives any Docker container its own public IPv6 address — all ports, all protocols, no proxying. Works behind CGNAT, Starlink, corporate NAT.

a2a https://sidecar.network/ talk to it https://sidecar.network/.well-known/agent-card.json its card

Checked 17m ago extendedAgentCard, pushNotifications, stateTransitionHistory, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 8 Feb 2027 as of our check on 15 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA384, issued via YE2 under ISRG Root X2 — classical, as every publicly trusted certificate is today.

Names on this certificate (2)

*.sidecar.network, sidecar.network.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 15 Nov 2026. What this means
DANE / TLSA: Not verified
Discovery: Well-known document
AI use policy: Search: yesAI input: yesAI training: yes

What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.
AI-facing documents: Publishes /llms.txt — “Sidecar Network” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 24 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 17m ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of sidecar.network controls every word below.

Provision Container Public IP

Assign a dedicated public IPv6 (or IPv4) address to a Docker container via WireGuard kernel netns injection. Container gets a routable /128 — all ports, all protocols. Requires the Sidecar agent to be installed on the Docker host first.

networkingdockeripv6ipv4wireguardpublic-ip

Examples it gives

Label a running container: docker run -d --label sidecar.enable=true nginx
The agent auto-registers the peer — you don't call this endpoint directly unless building an agent replacement.

Verify Peer Reachability

Check whether a container's assigned public IP is live and externally reachable. Use as the final step of an install flow to confirm the container is provisioned.

networkingverificationstatus

Examples it gives

GET https://sidecar.network/v1/peers/by-container/abc123def456 — returns {"up":true,"externally_reachable":true,"ipv6":"2604:2dc0:101:200::b9"}

Relay Discovery

List all Sidecar relay POPs with endpoint addresses and regions. Use for latency probing to find the nearest relay before install.

networkingdiscoveryinfrastructure

Examples it gives

GET https://sidecar.network/v1/relays — returns [{"name":"relay-us-east1","endpoint":"relay-us-east1.sidecar.network:51820","region":"us-east",...}, ...]

Peer Management

List or remove WireGuard peers owned by the authenticated token. Each peer is a container with an assigned public IP.

networkingmanagementwireguard

Examples it gives

GET https://sidecar.network/v1/peers — returns {"peers":[...],"count":2,"max_peers":3}
DELETE https://sidecar.network/v1/peers/{pubkey} — removes the peer and frees its IP

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: Sidecar Network — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0
Auth schemes: bearerAuth deviceFlow
Card completeness: complete all eight fields required by a2a.proto v1.0

View all card details

Capabilities: extendedAgentCard pushNotifications stateTransitionHistory streaming
Agent card: https://sidecar.network/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.