AxioRankAgent Firewall

Sign in Open the console

Protocol coverage

One layer. Every agent protocol.

The agent ecosystem is fragmenting into dozens of competing standards. They collapse into six planes — discovery, identity, messaging, authorization, content permission, and commerce. AxioRank is the neutral trust layer that speaks them, verifying and scoring each through one engine. Supporting the next protocol is one adapter, not a rewrite.

Planes: 6/6; covered today
Live adapters: 29; shipping now
On the roadmap: 0; planned + beta
Tracked: 29; protocols mapped

Discovery

What can this agent or service do?

A2A Agent Card

Fetch and normalize a delegate agent's .well-known/agent-card.json before trusting it.

MCP Server Card

Discover an MCP server's tools and transport from its well-known server card.

API Catalog (RFC 9727)

Resolve a service's /.well-known/api-catalog linkset and flag off-domain API descriptions.

Agent Skills (SKILL.md)

Audit packaged skills for unsafe instructions before an agent loads them.

WebMCP

Browser-exposed page tools via navigator.modelContext (experimental).

AGNTCY Agent Directory

Resolve an agent's OASF record from the AGNTCY (Internet of Agents) directory before trusting it.

NLWeb

Inspect a site's NLWeb natural-language endpoint and the schema it exposes to agents.

Agent Name Service (ANS)

Resolve a PKI-anchored agent name-service record before connecting.

Identity

Who is it — cryptographically?

Web Bot Auth (RFC 9421)

Ed25519 HTTP Message Signatures verify the AI agents that visit your site.

A2A Signed Cards (JWS)

Verify a card's JWS and flag keys not anchored to the issuer's own domain.

OAuth Server Metadata (RFC 8414)

Resolve an authorization server's metadata; score PKCE, implicit-flow, and domain-bound endpoints (verifies signed_metadata when present).

W3C Decentralized Identifiers (did:wba)

Verify an agent's decentralized identifier and control proof — the ANP identity layer.

Messaging

How do agents talk to each other?

A2A Messaging

Preflight the transport interfaces an A2A delegate declares — flag off-domain or non-HTTPS task-message routing before you send.

MCP Transport

Check an MCP server's declared transport and endpoint — flag off-domain or insecure message routing before you connect.

ACP — Agent Communication Protocol

Inspect IBM/BeeAI ACP REST-native agent messages and manifests.

AGNTCY SLIM

Govern AGNTCY Secure Low-latency Interactive Messaging between agents.

Agent Network Protocol (ANP)

Govern decentralized agent-to-agent networking over ANP.

Authorization

What may it do, and on whose behalf?

OAuth Protected Resource (RFC 9728)

Resolve protected-resource metadata to score a target's auth posture and named authorization servers.

Auth.md

Audit an agent-onboarding/credential-claim manifest and its identity providers.

AP2 Mandates

Verify W3C Verifiable Credentials binding agent intent to user authorization.

Content permission

May it use this content?

Abuse / rate signals

Detect scraping, enumeration, and probe patterns on inbound agent traffic.

robots.txt / llms.txt

Cache and enforce machine-readable crawl + AI-usage permissions.

IETF AI Preferences

Honor standardized train/infer/index content-usage preferences.

Really Simple Licensing (RSL)

Honor publisher RSL licenses governing AI use of content.

Commerce

Can it pay?

x402

Preflight an HTTP 402 payment demand — verify the charged resource, pay-to address, asset, and network before an agent pays.

Agentic Commerce Protocol (ACP)

Validate a delegated payment allowance — capped amount, merchant binding, expiry, and network-token (not raw PAN) funding.

Universal Commerce Protocol (UCP)

Validate UCP agent-checkout discovery and lifecycle (Google · Shopify).

Machine Payments Protocol (MPP)

Govern in-band machine-to-machine HTTP payments (Stripe · Tempo).

AP2 Payments

Govern AP2 agent-initiated payments across card, ACH, and crypto rails.

Machine-readable at /api/protocols.

Govern every agent — outbound and in.

Inspect the tool calls your agents make, verify the agents that visit you, and keep a redacted record of it all — in under 100 ms.

Open the console Try the live inspector