Sanction bronze

www.onesanction.com

“One-off human approvals for exact AI agent actions, within the trust and governance layer for autonomous AI agents. Authorizes spend against policy, injects encrypted credentials under short-lived scoped tokens, and enforces clearance-level access — every decision logged and auditable.

a2a https://getsanction.com/api/v1 talk to it https://www.onesanction.com/.well-known/agent-card.json its card

🇺🇸 US · Amazon.com, Inc. Checked 5d ago pushNotifications, stateTransitionHistory, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 16 Jan 2027 as of our check on 8 Nov 2026.

Control of the hostname was checked; nothing about who operates it.

Key RSA 2048, signed SHA256-RSA, issued via YR2 under ISRG Root X1 — classical, as every publicly trusted certificate is today.

Names on this certificate (1)

onesanction.com.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 8 Nov 2026. What this means
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
AI-facing documents: Publishes /llms.txt — “Sanction” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 31 Oct 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇺🇸 US · Amazon.com, Inc. (AS16509)
Last checked: 5d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of www.onesanction.com controls every word below.

Request one-off tool approval

Ask an authorized person to approve or reject an exact tool action (tool, server, and arguments) with require_approval: true. Approval mints an expiring, one-use grant; the caller repeats the identical request with that grant before acting. Hard denials still apply; changed arguments and reused grants are refused. Cooperative: the caller must ask and honor the answer.

approvalhuman-in-the-looppolicygovernance

Examples it gives

Request approval to run sanction.demo.approval with {"synthetic":true,"execute":false}; execute nothing.

Authorize spend

Decide whether an agent may make a purchase/subscription/transfer under wallet policy. Returns approved, denied, or escalated with a typed code and remediation hint. Call before any financial action.

paymentspolicygovernancebudget

Examples it gives

May I spend $12 on an API subscription in the 'software' category?
Authorize a $250 transfer to vendor X.

Inject credential

Exchange a short-lived scoped execution token for a decrypted credential the agent is cleared to use. Every injection is audit-logged; raw values never appear in logs.

credentialsvaultsecretsclearance

Examples it gives

Inject the 'openai' API key for this execution.

Track LLM token usage

Record token counts and cost of an LLM call against the wallet's daily budget for spend tracking and audit.

budgetobservabilityaudit

Examples it gives

Log 1,200 input and 800 output tokens for claude-opus-4-8 costing $0.04.

agenttru.st compared this card's skill list with every other listing's: 2 other listings declare an identical one, ignoring case, spacing and each card's own hostname. See all 3. That says the cards' text is the same, not who runs them.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: Sanction — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0.0
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
supportedInterfaces

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: pushNotifications stateTransitionHistory streaming
Agent card: https://www.onesanction.com/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.