{"ok":true,"kind":"crawlcheck-capability-registry-entry","v":1,"domain":"decouvrant.fr","page":"https://crawlcheck.io/registry/capabilities/decouvrant.fr","row":{"domain":"decouvrant.fr","host":"www.decouvrant.fr","report_id":"s4pb1jfolo","scanned_at":"2026-11-02T19:02:46.881Z","manifest":"2467cd88cf3de37d082f89677f07b866f161ea221404b27880406f0dd403447d","declared":13,"protocols":["a2a","api","mcp"],"by_policy":{"metadata":3,"unknown":10},"verified":0,"mismatches":0,"self_scan":false},"policy_classes":[{"id":"public_read_only","safety":"read_only_public","label":"Public read-only","automatic":true,"invoke":"May be called without credentials. CrawlCheck calls it only to check the declaration: GET with no input, on the scanned origin."},{"id":"authenticated_read_only","safety":"read_only_authenticated","label":"Authenticated read-only","automatic":false,"invoke":"Never called by CrawlCheck. An agent needs the user's own credentials and consent."},{"id":"reversible_write","safety":"reversible_write","label":"Reversible write","automatic":false,"invoke":"Never invoked automatically. Needs the owner's written authorisation and a test account."},{"id":"irreversible_write","safety":"irreversible_write","label":"Irreversible write","automatic":false,"invoke":"Never invoked automatically. Deletes or changes something that cannot be undone."},{"id":"financial","safety":"financial","label":"Financial","automatic":false,"invoke":"Never invoked automatically. Moves money or creates a charge."},{"id":"external_communication","safety":"external_communication","label":"External communication","automatic":false,"invoke":"Never invoked automatically. Sends a message, email or notification to someone."},{"id":"identity","safety":"identity_or_account","label":"Identity and accounts","automatic":false,"invoke":"Never invoked automatically. Creates, signs in to or changes an account or credential."},{"id":"unknown","safety":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},{"id":"metadata","safety":"metadata_only","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."}],"items":[{"capability_id":"cap1:3e8488b8629cd6b21edd","protocol":"api","operation":null,"method":null,"endpoint":"https://www.decouvrant.fr/mcp","declared":{"by":"https://www.decouvrant.fr/.well-known/api-catalog","declaration_sha256":"99fd727758b2ffb76d8ca777f3cf2b85efd3e53119a7337288220403ecc598d7","authentication":"unknown","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an API the catalog lists; its operations are in its own description"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"metadata: describes a surface, is not itself an action"}},{"capability_id":"cap1:ce1454856852b7a9b5f9","protocol":"api","operation":null,"method":null,"endpoint":"https://www.decouvrant.fr/a2a","declared":{"by":"https://www.decouvrant.fr/.well-known/api-catalog","declaration_sha256":"99fd727758b2ffb76d8ca777f3cf2b85efd3e53119a7337288220403ecc598d7","authentication":"unknown","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an API the catalog lists; its operations are in its own description"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"metadata: describes a surface, is not itself an action"}},{"capability_id":"cap1:40771e44017fca130505","protocol":"api","operation":null,"method":null,"endpoint":"https://www.decouvrant.fr/ask","declared":{"by":"https://www.decouvrant.fr/.well-known/api-catalog","declaration_sha256":"99fd727758b2ffb76d8ca777f3cf2b85efd3e53119a7337288220403ecc598d7","authentication":"unknown","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an API the catalog lists; its operations are in its own description"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"metadata: describes a surface, is not itself an action"}},{"capability_id":"cap1:85520654c7b4fae805f8","protocol":"mcp","operation":"presenter_decouvrant","method":null,"endpoint":null,"declared":{"by":"https://www.decouvrant.fr/.well-known/mcp/server-card.json","declaration_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","authentication":"declared","params_required":null,"media":null,"safety_class":"unknown","safety_basis":"its effect is not stated in the declaration"},"policy":{"id":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"requires declared: never called without the operator's own credentials"}},{"capability_id":"cap1:e0f8e0346753861f0048","protocol":"mcp","operation":"obtenir_offre","method":null,"endpoint":null,"declared":{"by":"https://www.decouvrant.fr/.well-known/mcp/server-card.json","declaration_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","authentication":"declared","params_required":null,"media":null,"safety_class":"unknown","safety_basis":"its effect is not stated in the declaration"},"policy":{"id":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"requires declared: never called without the operator's own credentials"}},{"capability_id":"cap1:6b66204d09784fcef0cd","protocol":"mcp","operation":"references_publiques","method":null,"endpoint":null,"declared":{"by":"https://www.decouvrant.fr/.well-known/mcp/server-card.json","declaration_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","authentication":"declared","params_required":null,"media":null,"safety_class":"unknown","safety_basis":"its effect is not stated in the declaration"},"policy":{"id":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"requires declared: never called without the operator's own credentials"}},{"capability_id":"cap1:ae2614ee92eacf4c62ba","protocol":"mcp","operation":"communes_couvertes","method":null,"endpoint":null,"declared":{"by":"https://www.decouvrant.fr/.well-known/mcp/server-card.json","declaration_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","authentication":"declared","params_required":null,"media":null,"safety_class":"unknown","safety_basis":"its effect is not stated in the declaration"},"policy":{"id":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"requires declared: never called without the operator's own credentials"}},{"capability_id":"cap1:5a09cc50b1681487a113","protocol":"mcp","operation":"lister_pages","method":null,"endpoint":null,"declared":{"by":"https://www.decouvrant.fr/.well-known/mcp/server-card.json","declaration_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","authentication":"declared","params_required":null,"media":null,"safety_class":"unknown","safety_basis":"its effect is not stated in the declaration"},"policy":{"id":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"requires declared: never called without the operator's own credentials"}},{"capability_id":"cap1:07252ae339899feb91be","protocol":"mcp","operation":"lire_page","method":null,"endpoint":null,"declared":{"by":"https://www.decouvrant.fr/.well-known/mcp/server-card.json","declaration_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","authentication":"declared","params_required":null,"media":null,"safety_class":"unknown","safety_basis":"its effect is not stated in the declaration"},"policy":{"id":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"requires declared: never called without the operator's own credentials"}},{"capability_id":"cap1:9955afa49cb0ef80a304","protocol":"mcp","operation":"chercher_dans_le_site","method":null,"endpoint":null,"declared":{"by":"https://www.decouvrant.fr/.well-known/mcp/server-card.json","declaration_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","authentication":"declared","params_required":null,"media":null,"safety_class":"unknown","safety_basis":"its effect is not stated in the declaration"},"policy":{"id":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"requires declared: never called without the operator's own credentials"}},{"capability_id":"cap1:ea2a4434ca1d80a00d45","protocol":"mcp","operation":"ask","method":null,"endpoint":null,"declared":{"by":"https://www.decouvrant.fr/.well-known/mcp/server-card.json","declaration_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","authentication":"declared","params_required":null,"media":null,"safety_class":"unknown","safety_basis":"its effect is not stated in the declaration"},"policy":{"id":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"requires declared: never called without the operator's own credentials"}},{"capability_id":"cap1:39bbc5479915632b281f","protocol":"mcp","operation":"preparer_demande_audit","method":null,"endpoint":null,"declared":{"by":"https://www.decouvrant.fr/.well-known/mcp/server-card.json","declaration_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","authentication":"declared","params_required":null,"media":null,"safety_class":"unknown","safety_basis":"its effect is not stated in the declaration"},"policy":{"id":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"requires declared: never called without the operator's own credentials"}},{"capability_id":"cap1:1772399cfa509b88b02f","protocol":"a2a","operation":"repondre-sur-decouvrant","method":null,"endpoint":"https://www.decouvrant.fr/a2a","declared":{"by":"https://www.decouvrant.fr/.well-known/agent-card.json","declaration_sha256":"7fd5ec8e694ebbdae58c7211b854c2a6d82c0da934508c1f2987a3a0832f03d5","authentication":"none","params_required":null,"media":null,"safety_class":"unknown","safety_basis":"its effect is not stated in the declaration"},"policy":{"id":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"classed unknown: only read-only public actions are ever called"}}],"mismatches":[],"certificate":{"certificate_id":"ccap1:7e8713dc659b330874f95ced5b1d673e38cdcf337f124f799ff8846960464724","certificate":{"kind":"crawlcheck-capability-certificate","v":1,"subject":"www.decouvrant.fr","domain":"decouvrant.fr","record":"s4pb1jfolo","report":"https://crawlcheck.io/r/s4pb1jfolo","manifest_sha256":"2467cd88cf3de37d082f89677f07b866f161ea221404b27880406f0dd403447d","measured_at":"2026-11-02T19:02:46.881Z","verification_checked_at":"2026-11-02T19:03:01.672Z","verification_policy":"public GETs with no required input and one read-only MCP tool with no required input, on the scanned origin only; redirects recorded, not followed","invocation_rule":"capabilities are read from declarations only; nothing is invoked. Later verification may call read_only_public operations alone; every other class needs the site owner's authorisation and a test account, and unknown is never called","counts":{"declared":13,"verified":0,"mismatches":0},"items":[{"id":"cap1:3e8488b8629cd6b21edd","protocol":"api","operation":null,"method":null,"endpoint":"https://www.decouvrant.fr/mcp","declared_by_sha256":"99fd727758b2ffb76d8ca777f3cf2b85efd3e53119a7337288220403ecc598d7","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:ce1454856852b7a9b5f9","protocol":"api","operation":null,"method":null,"endpoint":"https://www.decouvrant.fr/a2a","declared_by_sha256":"99fd727758b2ffb76d8ca777f3cf2b85efd3e53119a7337288220403ecc598d7","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:40771e44017fca130505","protocol":"api","operation":null,"method":null,"endpoint":"https://www.decouvrant.fr/ask","declared_by_sha256":"99fd727758b2ffb76d8ca777f3cf2b85efd3e53119a7337288220403ecc598d7","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:85520654c7b4fae805f8","protocol":"mcp","operation":"presenter_decouvrant","method":null,"endpoint":null,"declared_by_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","safety_class":"unknown","policy":"unknown","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:e0f8e0346753861f0048","protocol":"mcp","operation":"obtenir_offre","method":null,"endpoint":null,"declared_by_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","safety_class":"unknown","policy":"unknown","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:6b66204d09784fcef0cd","protocol":"mcp","operation":"references_publiques","method":null,"endpoint":null,"declared_by_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","safety_class":"unknown","policy":"unknown","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:ae2614ee92eacf4c62ba","protocol":"mcp","operation":"communes_couvertes","method":null,"endpoint":null,"declared_by_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","safety_class":"unknown","policy":"unknown","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:5a09cc50b1681487a113","protocol":"mcp","operation":"lister_pages","method":null,"endpoint":null,"declared_by_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","safety_class":"unknown","policy":"unknown","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:07252ae339899feb91be","protocol":"mcp","operation":"lire_page","method":null,"endpoint":null,"declared_by_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","safety_class":"unknown","policy":"unknown","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:9955afa49cb0ef80a304","protocol":"mcp","operation":"chercher_dans_le_site","method":null,"endpoint":null,"declared_by_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","safety_class":"unknown","policy":"unknown","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:ea2a4434ca1d80a00d45","protocol":"mcp","operation":"ask","method":null,"endpoint":null,"declared_by_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","safety_class":"unknown","policy":"unknown","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:39bbc5479915632b281f","protocol":"mcp","operation":"preparer_demande_audit","method":null,"endpoint":null,"declared_by_sha256":"fbf0e8217ed2c9567139b1c5a2972a8149020f909a724bde04066310a685a24b","safety_class":"unknown","policy":"unknown","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:1772399cfa509b88b02f","protocol":"a2a","operation":"repondre-sur-decouvrant","method":null,"endpoint":"https://www.decouvrant.fr/a2a","declared_by_sha256":"7fd5ec8e694ebbdae58c7211b854c2a6d82c0da934508c1f2987a3a0832f03d5","safety_class":"unknown","policy":"unknown","observed":"not_attempted","status":null,"observed_sha256":null}],"mismatches":[],"valid_until":"2026-11-16T19:02:46.881Z","lifecycle":{"valid_days":14,"revoked":"a later measurement no longer verifies a capability this certificate verified, or records a mismatch this one did not","suspended":"while the domain's owner has declared an incident, or while its domain-control claim is lapsed or suspended","superseded":"a newer certificate for the same domain exists; this one stays valid until valid_until unless revoked","withdrawn":"the owner opted the domain out of measurement","appeal":"the verified owner files a dispute against the measurement (POST /api/disputes); decided on evidence with an independent re-read; an upheld appeal withdraws the finding, and the revocation stays in the log with the resolution linked","spec":"/spec/certificate"},"status_url":"https://crawlcheck.io/api/registry/capabilities/status?domain=decouvrant.fr&record=s4pb1jfolo"},"signature":{"alg":"Ed25519","kid":"1hHmE3fo1rg5Ig70wuFtJ5wBc7G-sUTgUJkxyPWFRps","certificate_sha256":"7e8713dc659b330874f95ced5b1d673e38cdcf337f124f799ff8846960464724","message":"the UTF-8 bytes of \"crawlcheck-capability-certificate-v1\\n\" followed by certificate_sha256 (hex), where certificate_sha256 = SHA-256 of the certificate as canonical JSON (keys sorted, no whitespace)","sig":"iSWZ0icSVyhG8yGLa1qFUa5mcLndrdeNcobSdDsCi6STnHEc3IbyDihOoi8mK8pJ3aanMm2e_hlXXj-qqhl0Cg"},"issuer":{"name":"CrawlCheck observer","key":{"jwk":{"kty":"OKP","crv":"Ed25519","x":"5TmKCOx0TTHepq7HwyXBHvGQpVCSBd2lV8cLzYVqFxQ"},"directory":"https://crawlcheck.io/.well-known/http-message-signatures-directory"}}},"verify":"https://crawlcheck.io/api/registry/capabilities/verify?domain=decouvrant.fr"}