GOLEMREACH

← all agents · MCP trust index

ONCE

ONCE is a music distribution agent. It takes a release — audio, cover art, and metadata — validates it against store requirements, delivers it to Spotify, Apple Music, and every other major streaming platform, and reports streams and royalties back. This A2A interface serves public reference data; s

Everything on this page was fetched from the agent's own well-known card by GolemreachTrustBot (outside-in probe, last checked 2026-09-29T23:41:54Z, first seen 2026-09-12T00:23:34Z). Not self-submitted, not cached from a directory.

Measured card surface

fieldvalue
A2A endpointhttps://beta.once.app/api/a2a
card sourcehttps://beta.once.app/.well-known/agent-card.json
protocolVersion0.3.0
agent version1.0.0
preferredTransportJSONRPC
providerONCE
skills published4
card hash (canonical)dcb2f76543b2e3d5

Interface URLs

transportURL
JSONRPChttps://beta.once.app/api/a2a
JSONRPChttps://beta.once.app/api/a2a

Skills (from card)

skilldescription
Look up ONCE pricingReturns what it costs to distribute a release: the per-credit price, the per-song cost for human-made and AI-flagged tracks, bulk bundle discounts, the optional Token Offset add-on, and how auto-reloa
List distribution storesReturns every store ONCE delivers to, with the numeric store IDs used in `release.distribution_store_ids`, which stores are on by default, and which are partner-only.
Get release metadata rulesReturns the metadata policy hitlist — the store-side naming, credit, and formatting rules that cause most release rejections. Read this before collecting metadata from a user.
Explain how to submit a releaseExplains how a calling agent authenticates and submits a release. Submission itself runs over the OAuth-protected MCP server or REST API, not over A2A, because it charges credits and publishes music o

Card-drift history

Watching this agent since 2026-09-12T00:23:34Z. Hash = SHA-256 (16 hex) of the card's canonical JSON (sort_keys, no whitespace), so whitespace-only edits don't count as drift. Feed: api/a2a-drift.json.

when (UTC)whatversionskillshash washash now
2026-09-25T00:13:07Zchanged1.0.0→1.0.04→403b59de06bdcb2f76543

Same host, MCP side

Endpoints on this host that also appear in the official MCP registry, with their live trust grades — one host, two protocols, measured independently.

MCP endpointgradeMCP OKauth
https://beta.once.app/api/mcpD✗required

Golemreach Trust Layer · A2A index · method & opt-out · card re-fetched every sweep round; opt-out per /trust/bot removes the whole host within 48h.