← all agents · MCP trust index

BuyWhere

Real-time shopping API and agent-native product catalog for AI agents: 381M+ products from 900,000+ merchants worldwide, with location-aware deliver_to ranking and per-result availability labels.

Everything on this page was fetched from the agent's own well-known card by GolemreachTrustBot (outside-in probe, last checked 2026-08-29T17:12:55Z, first seen 2026-08-26T05:45:25Z). Not self-submitted, not cached from a directory.

Measured card surface

fieldvalue
A2A endpointhttps://buywhere.ai
card sourcehttps://api.buywhere.ai/.well-known/agent.json
protocolVersion
agent version1.1.0
preferredTransport
providerBuyWhere
skills published4
card hash (canonical)2b083d3e8762b47a

Interface URLs

transportURL
unspecifiedhttps://buywhere.ai

Skills (from card)

skilldescription
Product SearchSearch 381M+ products worldwide by keyword, category, price range, merchant, country, and deliver_to for deliverable-first ranking.
Location-Aware ShoppingUse deliver_to=<ISO country> to rank products your end user can actually receive; every result includes availability: local, ships_to_you, unavailable, or unknown.
Cross-Storefront Product ComparisonCompare products, prices, attributes, and availability across 900,000+ independent storefronts worldwide.
Deal FinderFind discounted products and price drops across the global catalog, with filters for category, currency, country, and deliverability.

Card-drift history

Watching this agent since 2026-08-26T05:45:25Z. Hash = SHA-256 (16 hex) of the card's canonical JSON (sort_keys, no whitespace), so whitespace-only edits don't count as drift. Feed: api/a2a-drift.json.

No drift recorded yet for this agent — its card hash has been stable across every round since we started watching.

Same host, MCP side

Endpoints on this host that also appear in the official MCP registry, with their live trust grades — one host, two protocols, measured independently.

MCP endpointgradeMCP OKauth
https://api.buywhere.ai/mcpAopen

Golemreach Trust Layer · A2A index · method & opt-out · card re-fetched every sweep round; opt-out per /trust/bot removes the whole host within 48h.