Agent Trust and Compliance. Five endpoints an autonomous agent can call before it trusts a counterparty domain or address, each backed by a real live check (no simulated or bundled-static data). POST /v1/domain-trust (domain): RDAP registration data + DNS (MX/SPF/DMARC/DNSSEC) -> a 0-100 trust score. POST /v1/brand-verify (domain, brand_name?): a live TLS certificate handshake -> validity, organization-validation, SAN coverage, and an optional brand-name match against the certificate identity. POST /v1/seller-trust (url): a composite of both for one resource-server URL, with a trusted/proceed_with_caution/high_risk recommendation. POST /v1/sanctions-check (address): the U.S. Consolidated Screening List (OFAC SDN + 10+ other restricted-party lists), requires an operator-supplied free API key. POST /v1/reputation (chain: eth, base, arbitrum or polygon; address): an EVM address's reputation. eth uses the public Blockscout explorer (verification, scam flag, tags, ENS) when it answers; base, arbitrum and polygon, and eth when the explorer is down, use on-chain facts from Pocket Network's public RPC (contract or EIP-7702 delegated wallet, outgoing transactions, balance) and say so with coverage 'basic' and score_max_possible 35. Every score is 0-100 with a 'reasons' array explaining exactly how it was computed. All outbound domain/IP lookups are guarded against private/loopback/link-local targets. Every response is a JSON object.
Service Metadata Cardsource: on-chain metadata (LCD)
{10 items
"schema":"pocket-service-card/v1"
"description":"Agent Trust and Compliance. Five endpoints an autonomous agent can call before it trusts a counterparty domain or address, each backed by a real live check (no ..."
"rpc_types":[1 item
0:{4 items
"type":"REST"
"intent":"expected"
"backend_hint":"agent-trust HTTP server on :8080; mount at /"
"notes":"Only POST /v1/domain-trust, /v1/brand-verify, /v1/seller-trust, /v1/sanctions-check, /v1/reputation, and GET /v1/version, /v1/health are expected. Every respons..."
"notes":"Covers all five resources in one document. Pinned to commit 0980209; sha256 of the exact bytes: 4d97f690ed01d55218859e740ee861aa73abf01f1f12e09ae43d7a592fd26a81..."
}
]
"access":"public"
"results":"deterministic"
"serving":{7 items
"backend":"The agent-trust Node.js HTTP server (no external dependencies) behind a RelayMiner, with the REST backend pointed at http://<container>:8080. No auth toward the..."
"notes":"Identity probe: pins the backend to this service so a wrong backend cannot be staked under this id."
}
1:{4 items
"rpc_type":"REST"
"request":{2 items
"path":"/v1/health"
"method":"GET"
}
"expect":{2 items
"json_path":"$.status"
"matches":"^ok$"
}
"notes":"Readiness probe."
}
2:{4 items
"rpc_type":"REST"
"request":{3 items
"path":"/v1/domain-trust"
"method":"POST"
"body":{1 item
"domain":"example.com"
}
}
"expect":{2 items
"json_path":"$.trust_score"
"matches":"^[0-9]+(\.[0-9]+)?$"
}
"notes":"Functional probe against example.com (IANA-reserved for documentation/testing, always resolvable). Proves the backend can reach RDAP and resolve DNS right now; ..."
}
]
"notes":"Suppliers should disable any local rate limiting for the RelayMiner's address. Request bodies are capped at 1 MiB and responses are ordinarily a few KB. Backend..."
