pox.me bronze

www.pox.me

“Agent identity platform for verified credentials, public profiles, identity communications, legacy forms, billing-backed access, and MCP-ready onboarding.

a2a https://pox.me talk to it https://www.pox.me/.well-known/agent-card.json its card

Checked 15h ago extensions, pushNotifications, stateTransitionHistory, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 21 Dec 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
AI use policy: Search: yesAI input: yesAI training: no

What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.
AI-facing documents: Publishes /llms.txt — “pox.me” a curated map of the site's content for language models

Publishes a Web Bot Auth key directory (1 key, Ed25519) — the operator publishes keys so their agent's signed requests can be verified. agenttru.st recorded that the directory exists; it has not verified a signature.

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 23 Sep 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 15h ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of www.pox.me controls every word below.

Discover pox.me

Inspect the public product and protocol surface.

Convert and subscribe

Parse agent-pricing.json, OAuth with billing:write, call create_account_and_subscribe or POST /billing/agent/subscribe.

Use identity MCP

Operate on identities, credentials, communications policies, legacy forms, and billing access after authenticating.

Use commerce MCP

Inspect catalog data and checkout-oriented commerce tools separately from identity tooling.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: pox.me — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0.0
Extensions: AP2 https://github.com/google-agentic-commerce/ap2/tree/v0.1
pox.me can expose agentic commerce checkout capabilities through its public A2A and commerce MCP surfaces.

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.
Card completeness: complete all eight fields required by a2a.proto v1.0

View all card details

Capabilities: extensions pushNotifications stateTransitionHistory streaming
Agent card: https://www.pox.me/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.