generated: '2026-09-19'
method: probed
source: https://vouchspec.plyrium.com/.well-known/agent-card.json
card:
  file: a2a/plyrium-com-agent-card.json
discovery:
  path: /.well-known/agent-card.json
  canonical: true
  host: vouchspec.plyrium.com
  legacy_path_also_served: /.well-known/agent.json
  note: >-
    The card is served from the VouchSpec product host, not the company apex. Byte-identical bodies were
    returned at the canonical /.well-known/agent-card.json and the legacy /.well-known/agent.json (both
    HTTP 200, application/json). plyrium.com 308s to www.plyrium.com, and www.plyrium.com, demo.plyrium.com
    both answer every /.well-known/* path with a 307 to /login; vouchspec-sandbox.plyrium.com answers 401.
    Ownership is not in question - provider.organization is "Plyrium", provider.url is
    https://vouchspec.plyrium.com, and the same card is what a2aregistry.org lists under Plyrium.
x-evidence:
  fetched: '2026-09-19'
  url: https://vouchspec.plyrium.com/.well-known/agent-card.json
  http_status: 200
  content_type: application/json; charset=utf-8
  body_parses_as: JSON object with AgentCard shape (name, url, version, protocolVersion, capabilities, skills all present)
  cache_control: public, max-age=300
  registry_listings:
  - https://a2aregistry.org (harvest source, fetched 2026-09-19)
  - https://agent-tools.cloud/api/v1/a2a/agents/vouchspec-agent-skill-evidence (HTTP 200)
agent_card:
  name: VouchSpec Agent Skill Evidence
  url: https://vouchspec.plyrium.com/api/vouchspec/v1/a2a
  version: 0.1.0
  protocol_version: 0.3.0
  preferred_transport: JSONRPC
  provider:
    organization: Plyrium
    url: https://vouchspec.plyrium.com
  documentation_url: https://vouchspec.plyrium.com/vouchspec
  capabilities:
    streaming: false
    push_notifications: false
    state_transition_history: false
  security: []
  supports_authenticated_extended_card: false
  default_input_modes: [text/plain, application/json]
  default_output_modes: [text/plain, application/json]
  skill_count: 1
  skills:
  - id: discover_vouchspec_validation
    name: Discover exact-commit Agent Skill validation
    tags: [agent-skills, exact-commit, evidence, x402, usdc, base]
endpoint_probe:
  url: https://vouchspec.plyrium.com/api/vouchspec/v1/a2a
  fetched: '2026-09-19'
  get: 405 with JSON-RPC error -32601 "Method not allowed"
  message_send: >-
    200 - anonymous JSON-RPC message/send returned a role:agent message with a text part and a data part
    carrying the same discovery contract as /api/vouchspec/v1/discovery (schema_version 1.3.0). The card's
    claim that the A2A call is free and read-only held: no payment, registration or side effect.
  methods_declared_by_discovery: [message/send, tasks/get, tasks/cancel]
grade_basis: >-
  Graded against A2A 1.0.0 hard checks: capabilities is an OBJECT (pass), protocolVersion is present (pass),
  skills is an ARRAY (pass). The optional fields that separate near-conformant from conformant are all
  present - preferredTransport (JSONRPC), defaultInputModes and defaultOutputModes are declared.
deviations:
- field: protocolVersion
  observed: 0.3.0
  note: Declares A2A protocol 0.3.0 rather than 1.0.0. A version statement the card asserts about itself; recorded, not penalised.
- field: additionalInterfaces + supportedInterfaces
  observed: both arrays present, pointing at the same JSONRPC endpoint
  note: >-
    The card carries the 0.3 `additionalInterfaces` shape AND a `supportedInterfaces` array whose entries use
    `protocolBinding`/`protocolVersion` keys. Redundant rather than wrong; a strict 0.3 parser ignores the
    second, a newer parser ignores the first.
- field: security
  observed: empty array; no securitySchemes declared
  note: >-
    Consistent with the anonymous read-only endpoint observed live. The paid capability is deliberately NOT
    on A2A - the card's own skill description says it "does not perform paid validation"; purchase is over
    x402 on the REST endpoint described by the OpenAPI.
- field: capabilities
  observed: streaming, pushNotifications, stateTransitionHistory all false
  note: A single synchronous discovery skill; no streaming or task history is offered.
conformance:
  spec: A2A 1.0.0
  grade: conformant
  protocol_version: 0.3.0
  preferred_transport: JSONRPC