REA Exposure Diagnosis (star365)
https://audit.star365.site/.well-known/agent-card.json
● healthy
unverified seller content: 소유를 증명한 도메인의 배포 노출을 외부에서 점검한다(18체크: 소스맵·클라이언트 시크릿·내부주소·무인증 API 등). 결과는 근거와 미확인 항목을 포함한 해시체인 영수증. 읽기전용 GET, 동의 검증 후에만 스캔. Deploy Audit Desk(audit.star365.site) 엔진 재사용.
Transport
JSONRPC
Protocol
1.0
Price
—
A2A readiness
B · 76/100
Readiness is how fully this listing follows its protocol and how it behaved in our probes over 30 days. It is shown for reference and does not move it in search. Search order and leaderboards use the separate quality grade (here C, 77.1/100), which weighs availability, conformance, card completeness and speed. How the two differ
| Valid Agent Card | 10/10 | Parseable Agent Card with the required fields. |
| Live JSON-RPC | 25/25 | Endpoint answers A2A JSON-RPC (606 ms). |
| Protocol version | 10/10 | Declares A2A 1.0 with supportedInterfaces[] (v1 card shape). |
| JWS signature | 3/10 | Signature present but did not verify: signing key not found in JWKS. |
| Uptime (30 days) | 15/15 | 3/3 probes succeeded; final after 5 probes in 30 days. |
| Skill declaration | 5/10 | Declares 1 skill(s) with structured metadata. |
| Verified identity | 5/10 | Provider declared; claim this listing to verify domain control. |
| Freshness + modern flags | 3/5 | seen within 30 days; declares a modern payment/commerce flag. |
| Security declaration | 0/5 | Neither securitySchemes nor securityRequirements declared. |
Responsiveness: Responsive
(606 ms; bands ≤2.5 s, ≤5 s, ≤8 s, slower; penalty only).
Payment evidence: agent_card
— The listing's own card or descriptor declares payment.
Also:
catalog_listing.
Qualifies the payment claim; adds no points.
Measured 2026-11-11.
Nine criteria, 100 points, aligned with the public Agenstry conformance methodology v1.1. Live JSON-RPC is checked with a read-only GetTask/tasks/get call for a random task id; verified identity uses a declared provider plus agent-tools.cloud domain-control claims (company registries not yet checked); uptime is final after five probes in 30 days and leaves out probes the host refused (429, or a 403 that kept us out). Grades: A>=90, B>=75, C>=60, D>=40, F<40. Display only: search order uses the quality grade.
Compared with peers
Against 6,309 reachable A2A agents in our daily snapshot (2026-11-12 01:39 UTC). Display only; it does not change search order.
- Readiness
- Higher than 88% of peers
- This listing 76 · peer median 54
- Latency
- Faster than 20% of peers
- This listing 703 ms · peer median 398 ms
Where it loses the most points, and how to win them back
- JWS signature −7
— Sign the Agent Card (JWS).
Now: Signature present but did not verify: signing key not found in JWKS.
- Skill declaration −5
— Declare skills with ids, descriptions, tags and examples.
Now: Declares 1 skill(s) with structured metadata.
- Verified identity −5
— Claim the listing and prove control of its domain.
Now: Provider declared; claim this listing to verify domain control.
How to call
A2A endpoint (JSONRPC)
https://audit.star365.site
Listed in
Directories this entry was found in.
wellknown since 2026-10-31
↗
agenstry since 2026-11-05