PorscheFanatics payment sandbox bronze

www.porschefanatics.com

“TEST ONLY. No real charge, subscription, publication or listing entitlement. Live garage listings remain free.

a2a https://porschefanatics.com/api/payments/a2a talk to it https://www.porschefanatics.com/.well-known/agent-card.json its card

Checked 4d ago extensions, pushNotifications, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 17 Jan 2027 as of our check on 9 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA256, issued via WE1 under GTS Root R4 — classical, as every publicly trusted certificate is today.

Names on this certificate (2)

porschefanatics.com, *.porschefanatics.com.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 9 Nov 2026. What this means
DANE / TLSA: Not verified
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 7 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI use policy: Search: yesAI input: yesAI training: no

What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.
AI-facing documents: Publishes /llms.txt — “porschefanatics” a curated map of the site's content for language models

Publishes a Web Bot Auth key directory (1 key, Ed25519) — the operator publishes keys so their agent's signed requests can be verified. agenttru.st recorded that the directory exists; it has not verified a signature.

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 2 Nov 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 4d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of www.porschefanatics.com controls every word below.

Create and authorize a test checkout

Create a UCP test checkout, validate an AP2 signed authorization, and return test payment requirements. No real advert is created.

commerceap2ucpmppx402sandbox

Examples it gives

Create a test checkout for one month of a Porsche listing.

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

PorscheFanatics catalogue MCP server

mcp

Read-only MCP tools for searching and browsing the catalogue.

https://porschefanatics.com/.well-known/mcp/server-card.json

PorscheFanatics AP2 payment sandbox

a2a

A2A merchant sandbox with signed AP2 checkout authorization. Catalogue tools remain available through MCP.

https://porschefanatics.com/.well-known/agent-card.json

PorscheFanatics public API

openapi

OpenAPI 3.1 description of the public endpoints and the OAuth-protected garage.

https://porschefanatics.com/openapi.json

PorscheFanatics agent skills

agent-skills

Skills describing how to read this catalogue without misquoting it.

https://porschefanatics.com/.well-known/agent-skills/index.json

Site index for language models

llms-txt

Curated index of the readable site. Every page also answers Accept: text/markdown.

https://porschefanatics.com/llms.txt

This site's crawler signing keys

web-bot-auth

Public keys that porschefanatics' own discovery crawlers sign their outbound requests with, so a site being read can verify them.

https://porschefanatics.com/.well-known/http-message-signatures-directory

And 1 more entry in the catalog, not shown here.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: PorscheFanatics — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0.0
Extensions: AP2 https://github.com/google-agentic-commerce/ap2/tree/v0.1 — required of clients
AP2 v0.1 merchant cart signatures and direct test-buyer payment mandates. Sandbox identities only. Both declared URIs identify the same supported extension.
AP2 https://github.com/google-agentic-commerce/AP2/tree/v0.1.0 — required of clients
AP2 v0.1 merchant cart signatures and direct test-buyer payment mandates. Sandbox identities only. Both declared URIs identify the same supported extension.

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.
Card completeness: complete all eight fields required by a2a.proto v1.0

View all card details

Capabilities: extensions pushNotifications streaming
Agent card: https://www.porschefanatics.com/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.