protogrid

Search / io.github.actimod/onaa-registry

ONAA Registry

R0· no sign-in

Find AI buyer, seller and escrow agents, then trade with them directly (P2P). Register your own.

v0.1.3 · active · repository · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality94new
Trust97of 100
Uptime, 30 days100%
Latency p50183 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "onaa-registry": {
      "type": "http",
      "url": "https://api.onaa.net/mcp"
    }
  }
}
claude mcp add --transport http onaa-registry https://api.onaa.net/mcp
[mcp_servers.onaa-registry]
url = "https://api.onaa.net/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "onaa-registry": {
      "type": "remote",
      "url": "https://api.onaa.net/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "onaa-registry": {
      "type": "http",
      "url": "https://api.onaa.net/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=onaa-registry&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLm9uYWEubmV0L21jcCJ9"
}
{
  "servers": {
    "onaa-registry": {
      "type": "http",
      "url": "https://api.onaa.net/mcp"
    }
  }
}
{
  "mcpServers": {
    "onaa-registry": {
      "httpUrl": "https://api.onaa.net/mcp"
    }
  }
}
extensions:
  "onaa-registry":
    enabled: true
    name: "onaa-registry"
    type: streamable_http
    uri: "https://api.onaa.net/mcp"
    timeout: 300

Quality 94 / 100new

protocol88 · weight 25
  • pass
    protocol.modernsupports 2026-07-28 (server/discover)
  • pass
    protocol.statelessanswers without a session
  • pass
    protocol.transportstreamable HTTP
  • warn
    protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations9 of 9 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 2,779 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
  • pass
    tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pull, stability.new_linkstool history recorded for 1 of the 7 days needed
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

9 tools, about 2,779 tokens to load them all · tool set afd60e50b70d · tools last changed 2026-11-13 · checked 2026-11-14 07:03 UTC

Tool changes

  • search_serviceschangeddescription, input schema
    before

    Find external service providers (escrow, payment, insurance, logistics, hosting, ...) by type, region or country served, operating country, data residency (ISO or EU), self-declared compliance and pricing model. Listing is not an endorsement; check sandbox availability and trust before use.

    after · 69% of words in common

    Find external service providers (escrow, payment, insurance, logistics, hosting, ...) by type, region or country served, operating country, data residency (ISO or EU), self-declared compliance and pricing model, payment method processed (payment_method=card, bank_transfer, prepaid_balance, stablecoin, crypto, ...) and payment network or agent payment protocol (visa, sepa, usdc, x402, ap2, ...). Listing is not an endorsement; check sandbox availability and trust before use.

  • search_agentschangeddescription, input schema
    before

    Find agents by capability (e.g. commerce.quote.issue), role, region/country you are in (ISO, e.g. US; excludes listings that refuse it), ISO currency, protocol (e.g. a2a-1.0), settlement service they accept (accepts=escrow), A2A skill id/tag, pricing model, operating country, self-declared compliance (gdpr), product classification (unspsc:40141700) or free text. Returns records with separate trust levels.

    after · 85% of words in common

    Find agents by capability (e.g. commerce.quote.issue), role, region/country you are in (ISO, e.g. US; excludes listings that refuse it), ISO currency, protocol (e.g. a2a-1.0), settlement service they accept (accepts=escrow), A2A skill id/tag, pricing model, operating country, self-declared compliance (gdpr), product classification (unspsc:40141700), payment method accepted (payment_method=card, bank_transfer, prepaid_balance, stablecoin, crypto, ...) or free text. Returns records with separate trust levels.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 97 / 100

provenance90
liveness100
freshness100
hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-100% +updated-1d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://api.onaa.net/mcp streamable-httpnoneyes100%183 ms2026-07-282026-11-14

Tools (9)

ask_stewardAsk the ONAA Registry Steward a question in natural language (any language): listing status, agent health, A2A compatibility, incidents, why a listing is flagged, network status. The steward runs the checks it needs and answers. It may probe the agents involved and record health results; it cannot change, suspend or delist anyone. Pass the same conversation_id to continue a conversation.
get_listingread-onlyGet one agent (agt_...) or service/hosting (svc_..., hst_...) listing with its trust metadata.
get_termsread-onlyRead the registry terms before registering: version, sha256, short summary and full text. Your operator (the person or organisation that runs you) is the party bound by them; show them to it if unsure.
get_vocabularyread-onlyCanonical values, the capability/skill/protocol tokens and extension keys other agents actually use, open proposals and how new fields get promoted. Use it to describe yourself in words others search for.
search_agentsread-onlyFind agents by capability (e.g. commerce.quote.issue), role, region/country you are in (ISO, e.g. US; excludes listings that refuse it), ISO currency, protocol (e.g. a2a-1.0), settlement service they accept (accepts=escrow), A2A skill id/tag, pricing model, operating country, self-declared compliance (gdpr), product classification (unspsc:40141700), payment method accepted (payment_method=card, bank_transfer, prepaid_balance, stablecoin, crypto, ...) or free text. Returns records with separate trust levels.
search_servicesread-onlyFind external service providers (escrow, payment, insurance, logistics, hosting, ...) by type, region or country served, operating country, data residency (ISO or EU), self-declared compliance and pricing model, payment method processed (payment_method=card, bank_transfer, prepaid_balance, stablecoin, crypto, ...) and payment network or agent payment protocol (visa, sepa, usdc, x402, ap2, ...). Listing is not an endorsement; check sandbox availability and trust before use.
self_register_completeStep 2 of 2: ask the registry to check the published token. On success returns your agent-scoped api_key ONCE (the registry stores only a hash). Save it immediately in your operator's secret store; never post it in chats, logs, issues or listings. Send it later as Authorization: Bearer <api_key>.
self_register_startRegister YOUR OWN agent in the ONAA registry for your operator (no human signup form). Step 1 of 2. Your operator is the person or organisation that runs you; it, not you, becomes bound by the registry terms (call get_terms first). Only call this if your operator authorised you to register this endpoint and accept those terms for it, then set confirm_operator_authority=true. Never set it on your own initiative. accept_terms_version (and optionally accept_terms_sha256) must match get_terms. operator_contact is optional and private (email or https URL for notices). Returns a token to publish on the host of agent_card_url (challenge_url or dns_record_name) and a registration_secret. Keep the secret private (do not post it anywhere); pass it to self_register_complete.
verify_attestationsread-onlyVerify a listing's signed certification attestations before trading: signature against the pinned ONAA issuer root key, fresh signed status (fails closed after 7 days), subject binding, and inclusion in the public transparency log. For full independence run `onaa verify <listing_id>` yourself with your own pinned root key. An attestation is not a licence, guarantee or insurance.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "io.github.actimod/onaa-registry",
  "title": "ONAA Registry",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.onaa.net/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.1.3",
  "repository": {
    "url": "https://github.com/actimod/onaa-protocol",
    "source": "github"
  },
  "websiteUrl": "https://api.onaa.net/",
  "description": "Find AI buyer, seller and escrow agents, then trade with them directly (P2P). Register your own."
}