Vizier bronze

vizier.agendamcp.dpdns.org

“Try the free example: Show why an action without a signed grant is blocked. Vizier evaluates proposed agent actions against caller-supplied authority; anonymous calls cannot authorize ALLOW. An authenticated integration is required for enforcement receipts. Not factuality verification or independent execution proof; REVIEW requires a human decision.

https://vizier.agendamcp.dpdns.org/.well-known/agent-card.json its card

Checked 5d ago extendedAgentCard, extensions, pushNotifications, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 9 Jan 2027 as of our check on 9 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.

Names on this certificate (3)

agendamcp.dpdns.org, vizier.agendamcp.dpdns.org, *.vizier.agendamcp.dpdns.org.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 9 Nov 2026. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 4 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI use policy: Search: yesAI input: yesAI training: no

What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.
AI-facing documents: Publishes /llms.txt — “Vizier” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 11 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 5d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of vizier.agendamcp.dpdns.org controls every word below.

Verify Agent Action

Evaluate whether a proposed agent action is allowed by delegated authority, policy, target, and context. The free worked example evaluates a fictional purchase and explains why a missing principal grant blocks it.

authorizationpolicyagent-actions

Examples it gives

Show why an action without a signed grant is blocked

Evaluate Delegated Authority

Determine whether an agent has sufficient delegated authority for a requested action.

delegationauthorityleast-privilege

Generate Authorization Decision Record

Return a machine-readable audit record of the decision on a proposed agent action under delegated authority and policy.

authorizationpolicy-decisionaudit-recordagent-actions

Activate Action Covenant

Through authenticated REST, activate one exact-action covenant after the integration supplies principal acceptance bound to the draft hash.

action-covenantacceptancerest

Examples it gives

Activate a deployment covenant accepted by the principal for one exact target and parameter set.

Authorize Covenant Action

Through authenticated REST, authorize an exact action against an active covenant, supplied evidence, and invalidation signals, returning a signed authorization receipt.

action-covenantauthorizationsigned-receiptrest

Examples it gives

Authorize the exact deployment action bound to an active covenant before execution.

Record Action Outcome

Through authenticated REST, bind a caller-reported execution outcome to a valid ALLOW receipt and return a signed outcome receipt. Not independent execution proof.

action-covenantreported-outcomesigned-receiptrest

Examples it gives

Record the reported result of an authorized deployment and bind it to the authorization receipt.

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

Vizier

a2a-agent-card

Deterministic authorization for proposed agent actions, with an authenticated Action Covenant lifecycle and signed authorization and reported-outcome receipts. Caller-supplied authority and evidence; not factuality verification or independent execution proof.

https://vizier.agendamcp.dpdns.org/.well-known/agent-card.json

Vizier action authorization API

vnd.oai.openapi

OpenAPI 3.1 contract for verification, Action Covenant activation, exact-action authorization, and reported-outcome binding.

https://vizier.agendamcp.dpdns.org/openapi.json

Vizier MCP server

json

MCP server manifest for the Streamable HTTP endpoint at /mcp, which exposes one tool, vizier_verify_action. Anonymous callers receive evaluation-only decisions; enforcement also requires the server’s delegation policy, including a signed principal grant in required mode.

https://vizier.agendamcp.dpdns.org/.well-known/mcp.json

RFC 9728 OAuth 2.0 Protected Resource Metadata

json

RFC 9728 discovery metadata advertising OAuth 2.0 protected resource capabilities, authorization servers, and scopes.

https://vizier.agendamcp.dpdns.org/.well-known/oauth-protected-resource

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: Vassiliy Lakhonin — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 0.5.16
Auth schemes: bearerAuth
Extensions: https://vizier.dev/extensions/security-posture/v1
Vizier Security Posture and Data Retention

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.
Card completeness: complete all eight fields required by a2a.proto v1.0

View all card details

Capabilities: extendedAgentCard extensions pushNotifications streaming
Agent card: https://vizier.agendamcp.dpdns.org/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.