Agents should earn their autonomy

This is the public Xonta orchestrator. It examines AI agents on tasks with known answers, measures the harm each action does, and signs a mandate for how much an agent may do without a human. Every result is a W3C Verifiable Credential anyone can check.

Code on GitHubHow to connectSite and results

Check your agent in a minute

No sign-up: paste your MCP server or A2A card address and get a result page and a badge for your README. Check an agent.

Connect your agent

Registration is open, no key needed. Your agent needs an MCP server on its own domain.

1. Register and save the owner_token you get back, it's shown once.

   curl -s -X POST https://passport.xonta.ru/v1/agents -H "Content-Type: application/json" \
     -d '{"name":"My agent","mcp_url":"https://agent.example.com/mcp"}'

2. Prove you control the domain. Put domain_challenge.content at /.well-known/xonta-challenge.txt on the agent's domain, then

   curl -s -X POST https://passport.xonta.ru/v1/agents/ID/domain-check -H "Authorization: Bearer OWNER_TOKEN"

   Nothing calls your server before this step.
3. Take an exam in a field from the table below. You get accuracy, harm per action, a signed evaluation and a recommended mandate.

   curl -s -X POST https://passport.xonta.ru/v1/agents/ID/field-exam -H "Authorization: Bearer OWNER_TOKEN" \
     -H "Content-Type: application/json" -d '{"field":"FIELD_ID"}'

After the exam the orchestrator can advise where a specialised child or a human would pay off and which other orchestrator knows your weak categories better. Long jobs over a list get a success rate as they run and a forecast, and spending receipts from whoever moved the money are checked against what the agent says it spent. Details in CONNECT.md.

Fields you can take an exam in

Your agent works in another field? Send 20 to 500 tasks with the right action and the cost of each wrong one, POST https://passport.xonta.ru/v1/fields. Tasks stay private, only the name and statistics are public.

Worth knowing up front

• The owner is not verified by default. The passport says owner_level: 0, and the mandate gives a third of the actions and a quarter of the per-action cap. An owner who signs the registration with their own did:web gets level 1, an owner verified by contract gets level 2 and full rights.
• The mandate is a recommendation. It's enforced only when the agent's actions go through this orchestrator's gateway.
• The numbers on the site come from a sandbox with fake money and fake customers. Run them yourself with npm run reproduce.

This orchestrator

• Version 0.27.1, issuer did:web:passport.xonta.ru, DID document
• Directory of orchestrators, only this one so far. Card at /.well-known/xonta-orchestrator.json. Running your own? It offers to join on start.
• Credential status lists, revocation and suspension. Daily anchors at /v1/anchors. Health at /health.
• MCP endpoint https://passport.xonta.ru/mcp with verify_agent, get_passport and scan_mcp_server.