← all agents · MCP trust index
Read-only discovery for XGuard Secretless Agent Gateway: canonical MCP/API metadata, Secretless Egress and ProofRail. Reusable credentials are not provisioned or exposed through this discovery surface.
Everything on this page was fetched from the agent's own well-known card by GolemreachTrustBot (outside-in probe, last checked 2026-08-29T17:30:13Z, first seen 2026-08-26T06:08:23Z). Not self-submitted, not cached from a directory.
| field | value |
|---|---|
| A2A endpoint | — |
| card source | https://api.xguardgate.com/.well-known/agent-card.json |
| protocolVersion | — |
| agent version | 5.0.2 |
| preferredTransport | — |
| provider | XGuard |
| skills published | 4 |
| card hash (canonical) | b352dbcf548628eb |
| skill | description |
|---|---|
| Secretless Agent Egress | Discover how an agent can call credential-protected APIs through scoped XGuard capabilities while the reusable credential remains server-side. |
| Discover XGuard | Return canonical public XGuard discovery endpoints for MCP, OpenAPI, llms.txt, registry manifests and security metadata. |
| Connect to XGuard MCP | Return the canonical Streamable HTTP MCP endpoint and concise client connection snippets. |
| Explain Secretless Egress | Explain XGuard's secretless credential custody, scoped capabilities and ProofRail execution evidence without performing credential-backed actions. |
Watching this agent since 2026-08-26T06:08:23Z. Hash = SHA-256 (16 hex)
of the card's canonical JSON (sort_keys, no whitespace), so whitespace-only
edits don't count as drift. Feed:
api/a2a-drift.json.
| when (UTC) | what | version | skills | hash was | hash now |
|---|---|---|---|---|---|
| 2026-08-29T15:00:42Z | changed | 5.0.2→5.0.2 | 3→4 | d742e93d17 | b352dbcf54 |
| 2026-08-29T00:44:47Z | changed | 4.0.0→5.0.2 | 6→3 | 4000d9b955 | d742e93d17 |
Endpoints on this host that also appear in the official MCP registry, with their live trust grades — one host, two protocols, measured independently.
| MCP endpoint | grade | MCP OK | auth |
|---|---|---|---|
| https://api.xguardgate.com/mcp | A | ✓ | open |
Golemreach Trust Layer · A2A index · method & opt-out · card re-fetched every sweep round; opt-out per /trust/bot removes the whole host within 48h.