← all agents · MCP trust index
CodeRifts
Signed, offline-verifiable authorization for API-contract changes. Only a granted change can proceed. Three tools: preflight_change_set, verify_receipt, get_decision_details.
Everything on this page was fetched from the agent's own well-known card by GolemreachTrustBot (outside-in probe, last checked 2026-09-29T23:39:08Z, first seen 2026-08-26T06:01:53Z). Not self-submitted, not cached from a directory.
Measured card surface
| field | value |
|---|---|
| A2A endpoint | — |
| card source | https://app.coderifts.com/.well-known/agent.json |
| protocolVersion | — |
| agent version | 1.0.3 |
| preferredTransport | — |
| provider | CodeRifts |
| skills published | 3 |
| card hash (canonical) | 01c60d8da88ea3db |
Skills (from card)
| skill | description |
|---|---|
| preflight_change_set | Use this when: a contract artifact (OpenAPI, GraphQL, protobuf, AsyncAPI, MCP manifests, or agent tool schemas) changes before merge, deploy, publish, or tool registration; AND any agent-executed oper |
| verify_receipt | Verify a CodeRifts signed chain-receipt you ALREADY HOLD: cryptographic authenticity (signature + key id), body binding, and — when lifecycle indices are available — whether it is currently valid auth |
| get_decision_details | Retrieve a PAST CodeRifts decision by exactly one identifier (case_id | decision_id | fingerprint): full report, breaking changes, scores, and linked receipt metadata if stored. Use this when: - You |
Card-drift history
Watching this agent since 2026-08-26T06:01:53Z. Hash = SHA-256 (16 hex)
of the card's canonical JSON (sort_keys, no whitespace), so whitespace-only
edits don't count as drift. Feed:
api/a2a-drift.json.
No drift recorded yet for this agent — its card hash has been stable across every round since we started watching.
Same host, MCP side
Endpoints on this host that also appear in the official MCP registry, with their live trust grades — one host, two protocols, measured independently.
| MCP endpoint | grade | MCP OK | auth |
|---|---|---|---|
| https://app.coderifts.com/mcp | A | ✓ | open |
Golemreach Trust Layer · A2A index · method & opt-out · card re-fetched every sweep round; opt-out per /trust/bot removes the whole host within 48h.