← all agents · MCP trust index

Hugging Bay

Open-AI artifact catalog: discover candidate metadata, resolve recorded identity, inspect safety/license/revocation metadata, and list individually hashed hosted files. Canonical runtime state remains unknown.

Everything on this page was fetched from the agent's own well-known card by GolemreachTrustBot (outside-in probe, last checked 2026-08-29T17:21:29Z, first seen 2026-08-26T06:00:17Z). Not self-submitted, not cached from a directory.

Measured card surface

fieldvalue
A2A endpointhttps://huggingbay.xyz/api/a2a/task
card sourcehttps://huggingbay.xyz/.well-known/agent-card.json
protocolVersion0.2.6
agent version1.0.0
preferredTransportJSONRPC
providerHugging Bay
skills published5
card hash (canonical)b7c3f38c61d22536

Interface URLs

transportURL
JSONRPChttps://huggingbay.xyz/api/a2a/task

Skills (from card)

skilldescription
Find candidate metadataTask + constraints produce bounded candidate metadata; results do not establish verification, fit, or run readiness.
Resolve exact identityRepo or hb:// URI → immutable manifest digest and bay.lock, with identity-changed only for proven mismatches and identity-unavailable for incomplete hash authority.
Inspect trust metadataCanonical artifact completeness, verification, execution readiness, and download readiness are unavailable during containment.
List hosted filesList individually hashed hosted files and file-only download URLs without a complete-bundle or runtime claim.
Submit unqualified evidenceSubmit self-reported evidence to moderation; it does not affect ranking, Finder, facts, request state, badges, cards, JSON-LD, or reputation.

Card-drift history

Watching this agent since 2026-08-26T06:00:17Z. Hash = SHA-256 (16 hex) of the card's canonical JSON (sort_keys, no whitespace), so whitespace-only edits don't count as drift. Feed: api/a2a-drift.json.

when (UTC)whatversionskillshash washash now
2026-08-29T17:21:29Zchanged1.0.0→1.0.05→5e1e03a6e37b7c3f38c61
2026-08-29T16:05:16Zchanged1.0.0→1.0.05→5da176a63f0e1e03a6e37
2026-08-29T14:50:26Zchanged1.0.0→1.0.05→5ad3649e182da176a63f0
2026-08-29T13:31:17Zchanged1.0.0→1.0.05→5fe02f3cc39ad3649e182
2026-08-29T12:15:27Zchanged1.0.0→1.0.05→51b0a4eb874fe02f3cc39
2026-08-29T11:01:29Zchanged1.0.0→1.0.05→5936b9d5fb41b0a4eb874
2026-08-29T09:50:59Zchanged1.0.0→1.0.05→539fda8bd44936b9d5fb4
2026-08-29T08:39:40Zchanged1.0.0→1.0.05→54d85946ca639fda8bd44
2026-08-29T07:28:07Zchanged1.0.0→1.0.05→57c8058172b4d85946ca6
2026-08-29T06:18:17Zchanged1.0.0→1.0.05→5c7efb085fe7c8058172b
2026-08-29T05:07:53Zchanged1.0.0→1.0.05→5308fde97d2c7efb085fe
2026-08-29T03:58:24Zchanged1.0.0→1.0.05→588cdaa7671308fde97d2
2026-08-29T02:51:15Zchanged1.0.0→1.0.05→540c51a0cfe88cdaa7671
2026-08-29T01:40:24Zchanged1.0.0→1.0.05→54419ece1a440c51a0cfe
2026-08-29T00:29:36Zchanged1.0.0→1.0.05→5fedb8e9be74419ece1a4
2026-08-27T04:06:25Zchanged1.0.0→1.0.05→517dcdd0e34fedb8e9be7
2026-08-27T02:55:20Zchanged1.0.0→1.0.05→5c7661be19017dcdd0e34
2026-08-27T01:46:08Zchanged1.0.0→1.0.05→5143193bd7bc7661be190
2026-08-27T00:34:53Zchanged1.0.0→1.0.05→59c33ec7974143193bd7b
2026-08-26T23:24:40Zchanged1.0.0→1.0.05→5532bfc26d69c33ec7974
2026-08-26T22:13:28Zchanged1.0.0→1.0.05→558d9472de2532bfc26d6
2026-08-26T20:59:07Zchanged1.0.0→1.0.05→5b6a399db4f58d9472de2
2026-08-26T19:46:08Zchanged1.0.0→1.0.05→55076dab28db6a399db4f
2026-08-26T18:29:43Zchanged1.0.0→1.0.05→5b6803af3ed5076dab28d
2026-08-26T17:18:55Zchanged1.0.0→1.0.05→557f4e5d7ebb6803af3ed

Same host, MCP side

Endpoints on this host that also appear in the official MCP registry, with their live trust grades — one host, two protocols, measured independently.

MCP endpointgradeMCP OKauth
https://huggingbay.xyz/api/mcpAopen

Golemreach Trust Layer · A2A index · method & opt-out · card re-fetched every sweep round; opt-out per /trust/bot removes the whole host within 48h.