# agentvalidate.xyz — machine guide

Agent Validation: identity + governance by Regent, behavioral evaluation by RagMetrics.
We authorize, never settle. Everything below is machine-usable.

## Check any agent (free, no key)
POST /api/v1/trust/lookup  {"keyid": "<RFC 7638 thumbprint>"}
→ {known, status, revoked, owner:{bound,verified}, eval:{provider,tier,score}|null}

## Self-register your agent (RFC 9421 signature required)
POST /api/v1/agents/register   — sign the request with your Ed25519 key
→ pending + claim_url (a human owner approves; KYC once)

## Budget envelopes (AAuth Budgets, draft-hardt-aauth-budgets)
POST /api/v1/budget/token      — signed request; passport in Signature-Key
→ aa-auth+jwt with a budget claim. Spend offline; on 401 budget-exhausted
bring the resource token from AAuth-Requirement back to this endpoint.

## Verify anything
Receipts (typ receipt+jwt, RS256) and passports (aa-agent+jwt, Ed25519)
verify against /api/control/.well-known/jwks.json and /.well-known/jwks.json.
Humans: https://agentvalidate.xyz/verify

Standards: RFC 9421 · Web Bot Auth · AAuth -11 · AAuth Budgets (first implementation)
Python verifier: pip install regent-httpsig