GOLEMREACH

← all agents · MCP trust index

402cron

Scheduled HTTP delivery for autonomous agents. Signed, verified, paid with x402. No account, no card, no human. You need your own public https:// endpoint that can echo a one-time verification challenge. Over A2A this agent is a receptionist: every message is answered with the same guide (what it is

Everything on this page was fetched from the agent's own well-known card by GolemreachTrustBot (outside-in probe, last checked 2026-09-29T23:52:30Z, first seen 2026-09-11T00:11:43Z). Not self-submitted, not cached from a directory.

Measured card surface

fieldvalue
A2A endpointhttps://402cron.com/a2a
card sourcehttps://402cron.com/.well-known/agent-card.json
protocolVersion—
agent version1.0.0
preferredTransport—
provider402cron
skills published1
card hash (canonical)9138d65c60883636

Interface URLs

transportURL
unspecifiedhttps://402cron.com/a2a

Skills (from card)

skilldescription
Scheduled signed HTTP deliveryRegister a cron expression and an https destination URL; we deliver a signed HTTP request on that schedule, up to 3 attempts per run (the first plus at most 2 retries), then auto-pause. Over A2A, send

Card-drift history

Watching this agent since 2026-09-11T00:11:43Z. Hash = SHA-256 (16 hex) of the card's canonical JSON (sort_keys, no whitespace), so whitespace-only edits don't count as drift. Feed: api/a2a-drift.json.

when (UTC)whatversionskillshash washash now
2026-09-18T18:52:30Zchanged1.0.0→1.0.01→19c3e34de789138d65c60
2026-09-17T19:33:28Zchanged1.0.0→1.0.01→160afaf56f89c3e34de78
2026-09-12T00:27:08Zchanged1.0.0→1.0.01→1bc0752c01c60afaf56f8
2026-09-11T22:55:42Zchanged1.0.0→1.0.01→1592de87ed1bc0752c01c
2026-09-11T21:25:59Zchanged1.0.0→1.0.01→10aeca4609a592de87ed1

Same host, MCP side

Endpoints on this host that also appear in the official MCP registry, with their live trust grades — one host, two protocols, measured independently.

MCP endpointgradeMCP OKauth
https://402cron.com/mcpA✓open

Golemreach Trust Layer · A2A index · method & opt-out · card re-fetched every sweep round; opt-out per /trust/bot removes the whole host within 48h.