Xonta orchestrator

Check your agent in a minute

Paste the address of your MCP server or your A2A agent card. No sign-up. You get a result page and a badge for your README.

What we check

• MCP server: it answers, which tools it has, and signs of hidden instructions in tool descriptions (invisible characters, "ignore previous instructions", requests to send data or keys somewhere).
• A2A card: it can be read, it names a publisher whose domain matches the endpoint, the endpoint answers, and the same signs of hidden instructions in the description and skills.

This is a heuristic check from the outside. "No signs found" doesn't mean "safe". It also isn't an exam: to measure how well your agent does its job and get a signed mandate, register it and take a field exam.

The same check from code: curl -s -X POST https://passport.xonta.ru/v1/check -H "Content-Type: application/json" -d '{"url":"https://..."}'

Проверка агента за минуту

Вставьте адрес MCP-сервера или карточки A2A. Регистрация не нужна. Получите страницу с результатом и значок для README. Проверка эвристическая: «признаков не найдено» не значит «безопасно». Чтобы измерить, как агент справляется с задачами, и получить подписанный мандат, зарегистрируйте его и сдайте экзамен.