agent protocol inspector x402 v2 derived

{
  "input": {
    "type": "http",
    "method": "POST",
    "schema": {
      "type": "object",
      "required": [
        "url"
      ],
      "properties": {
        "url": {
          "type": "string",
          "description": "URL of the agent/service to scan for MCP, A2A, ARD, and llms.txt support"
        }
      }
    }
  },
  "output": {
    "schema": {
      "type": "object",
      "properties": {
        "origin": {
          "type": "string"
        },
        "scanId": {
          "type": "string",
          "description": "Look up this exact result later via GET /api/v1/agent-protocol-inspector/{scanId}. Present for an authenticated API-key caller; may be absent if the underlying save failed, which never fails the scan itself"
        },
        "target": {
          "type": "string"
        },
        "llmsTxt": {
          "type": "object",
          "description": "Whether an llms.txt file was found, and its URL"
        },
        "igaPacket": {
          "type": "object",
          "description": "Full IGA (identity governance) access-review packet — always the full packet for v1 callers (never the anonymous-tier preview the free dashboard route applies). recommendedDecision is approve/approve_with_changes/review/block; capabilities/risks/reviewerQuestions/ownerQuestions/recommendedRemediations are all deterministically template-generated, never LLM text"
        },
        "protocols": {
          "type": "object",
          "description": "mcp, a2a, and ard detection results, each with status (confirmed/indicated/not_detected), evidence, and details"
        },
        "conformance": {
          "type": "string",
          "description": "pass, warn, or not_applicable (nothing detected) — a rollup of this single scan, not a comparison against a prior one"
        },
        "capabilities": {
          "type": "array",
          "description": "Deterministic keyword-rule matches against declared skills and agent-level text (never LLM-inferred). Each entry has a label, category, risk, confidence, activation ('declared' if backed by an actual skill, 'mentioned' if only found in free text), and evidence"
        },
        "detectedCount": {
          "type": "number"
        },
        "normalizedAgent": {
          "type": "object",
          "description": "Protocol-agnostic identity/skills model derived from whichever of mcp/a2a/ard was detected — name, provider, interfaces, skills (each with evidence tying it back to a specific field), declared capabilities"
        }
      }
    },
    "example": {
      "origin": "https://example.com",
      "scanId": "b3f1c2a4-...-a1b2c3d4e5f6",
      "target": "https://example.com",
      "llmsTxt": {
        "url": "https://example.com/llms.txt",
        "found": true
      },
      "igaPacket": {
        "target": "https://example.com",
        "summary": "Example MCP Server declares 1 reviewable capability — recommended reviewer decision: approve_with_changes.",
        "packetId": "a1b2c3d4-...-e5f6a7b8c9d0",
        "generatedAt": "2026-09-17T12:00:00.000Z",
        "highestRisk": "high",
        "recommendedDecision": "approve_with_changes"
      },
      "protocols": {
        "a2a": {
          "status": "not_detected",
          "evidence": []
        },
        "ard": {
          "status": "not_detected",
          "evidence": []
        },
        "mcp": {
          "status": "confirmed",
          "details": {
            "tools": [
              {
                "name": "search_docs",
                "description": "Search the documentation index",
                "inputSchema": {
                  "type": "object",
                  "required": [
                    "query"
                  ],
                  "properties": {
                    "limit": {
                      "type": "number"
                    },
                    "query": {
                      "type": "string"
                    }
                  }
                }
              }
            ]
          },
          "evidence": [
            "Found /.well-known/mcp.json"
          ]
        }
      },
      "conformance": "pass",
      "capabilities": [
        {
          "risk": "high",
          "label": "Fetch and validate remote agent discovery URLs",
          "source": "search_docs",
          "category": "browse_web",
          "evidence": [
            {
              "field": "tools[].name=search_docs",
              "source": "mcp"
            }
          ],
          "activation": "declared",
          "confidence": "medium"
        }
      ],
      "detectedCount": 1,
      "normalizedAgent": {
        "name": "Example MCP Server",
        "skills": [
          {
            "id": "search_docs",
            "name": "search_docs",
            "tags": [],
            "source": "mcp",
            "evidence": [
              {
                "field": "tools[].name=search_docs",
                "source": "mcp"
              }
            ],
            "description": "Search the documentation index"
          }
        ],
        "evidence": [
          {
            "field": "endpoint",
            "source": "mcp"
          }
        ],
        "inputModes": [],
        "interfaces": [
          {
            "url": "https://example.com/.well-known/mcp.json",
            "protocol": "mcp"
          }
        ],
        "outputModes": [],
        "declaredCapabilities": []
      }
    }
  }
}