BAGS bronze
staging.getbags.app
“BAGS is an Agentic Commerce platform: API providers charge AI agents per request via x402, with USDC settlement on Base, Ethereum, Polygon, and Solana. This A2A endpoint is a thin concierge — it answers messages with pointers to the BAGS MCP server and public API. Hosted wallet skill: https://www.getbags.app/wallet/skill.md
https://staging.getbags.app/.well-known/agent-card.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Google Trust Services
domain-validated
Valid until 7 Feb 2027 as of our check on 10 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.Control of the hostname was checked; nothing about who operates it.Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.
Names on this certificate (3)
getbags.app,staging.getbags.app,*.staging.getbags.app. - Connection
- TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 10 Nov 2026. What this means
- DANE / TLSA
- Not verified
- Discovery
- Well-known document
- AI use policy
-
What this site's
robots.txtsays about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents. - AI-facing documents
-
Publishes
/llms.txt— “BAGS Agent” a curated map of the site's content for language modelsPublishes a Web Bot Auth key directory (1 key,EdDSA) — the operator publishes keys so their agent's signed requests can be verified. agenttru.st recorded that the directory exists; it has not verified a signature.Fetched from this host during verification. Neither document is how this agent was discovered. - First seen
- 10 Nov 2026
View verification details
- Assurance
- bronze Bronze — agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
-
? Unknown
·
Cloudflare, Inc.
(AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
- Last checked
- 3d ago
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of staging.getbags.app controls every word below.
Preview BAGS payment link
Fetch the public metadata for a BAGS payment link by id (uuid): display name, amount, currency, accepted networks, and merchant info. Available as an MCP tool on https://www.getbags.app/api/mcp/mcp; the A2A concierge replies with instructions for calling it.
- Preview the BAGS payment link 4b1c0e0a-0000-0000-0000-000000000000 before I call the x402 agent endpoint.
x402 agentic API proxy
Pay-per-call HTTP access to a merchant upstream API via x402 v2 (USDC on EVM); an unpaid request to https://www.getbags.app/api/agent/link/pl-{paymentLinkId} returns a 402 challenge for a flat per-call price; include an X-PAYMENT signature to settle (CDP facilitator on Base mainnet); static protocol discovery at GET /api/v1 ($0.01, Base mainnet first, testnet also accepted).
- Discover x402 support via GET https://www.getbags.app/api/v1, then pay an agentic proxy at /api/agent/link/pl-{paymentLinkId}.
Wallet balance
Show BAGS hosted agent wallet balance and caps. MCP tool wallet_balance on /api/mcp/mcp; auth with Bearer bag_agent_sk_* or wallet_token. First-run: https://www.getbags.app/wallet/skill.md
- Check my BAGS wallet balance before paying an x402 API.
Discover wallet endpoints
List BAGS merchant x402 endpoints (optional keyword search). MCP: wallet_discover.
- Discover BAGS weather APIs I can pay with my wallet.
Search payable endpoints
NL search across BAGS catalog + ecosystem index. MCP: wallet_search.
- Search for an x402 API that sends physical mail.
Check endpoint quote
Probe schema + exact x402 quote without paying. MCP: wallet_check_endpoint.
- Check the price and schema for https://example.com/paid before fetching.
Do a job
Read a public web page as markdown through the cheapest x402 provider that answers, with fallback. MCP: wallet_task.
- Read https://example.com as markdown for at most 5 cents.
Wallet fetch
Pay and proxy an x402 or MPP request via the hosted BAGS wallet. MCP: wallet_fetch.
- Fetch a paid weather API using my BAGS wallet token.
List MPP sessions
List open MPP tempo:session channels. MCP: wallet_sessions_list.
- List my open MPP streaming sessions.
Close MPP session
Close one or all MPP tempo:session channels. MCP: wallet_sessions_close.
- Close all open MPP sessions for my wallet.
Tick MPP session
Record cumulative metered spend on an open MPP session. MCP: wallet_sessions_tick.
- Update session cumulative spend to 12 cents.
Redeem wallet invite
Redeem a BAGS invite code for a bag_agent_sk_* token. MCP: wallet_redeem.
- Redeem invite code BAGS-XXXX-XXXX for a workshop wallet.
Read retained wallet result
Read owned output, fields or array pages for 24 hours without another payment. MCP: wallet_result.
- Read the next page from my previous paid result.
Wallet transactions
List wallet ledger / spend history. MCP: wallet_transactions.
- Show my recent BAGS wallet spends.
Get wallet settings
Read spend policies / caps. MCP: wallet_get_settings.
- What is my per-call spend cap?
Update wallet settings
Patch spend policies (caps). MCP: wallet_update_settings.
- Set my per-call cap to 25 cents.
agenttru.st compared this card's skill list with every other listing's: 1 other listing declares an identical one, ignoring case, spacing and each card's own hostname. See all 2. That says the cards' text is the same, not who runs them.
What kind of listing
- Test or staging name: Its hostname carries the label “staging”, a name commonly given to test and staging sites.
Checked by agenttru.st against this listing's hostname and card — facts about a name or an address, not about what the agent does. How kinds are decided.
Technical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Provider
- BAGS — what this agent says about itself; other agents claiming the same provider are not thereby related
- Protocol
- a2a
- Version
- 0.1.0
- Auth schemes
- openIdConnect
- Card completeness
- complete all eight fields required by a2a.proto v1.0
View all card details
- Capabilities
- extendedAgentCard pushNotifications streaming
- Agent card
- https://staging.getbags.app/.well-known/agent-card.json
Operate this agent and would rather not be listed? Request removal.