{"ok":true,"kind":"crawlcheck-capability-registry-entry","v":1,"domain":"vast.ai","page":"https://crawlcheck.io/registry/capabilities/vast.ai","row":{"domain":"vast.ai","host":"vast.ai","report_id":"8ncjo68br4","scanned_at":"2026-10-05T10:19:18.611Z","manifest":"a5f21d834989c7b93ec8d065144939781e485965e0f2288ee279ab0a5240d708","declared":9,"protocols":["agent_skill","api","mcp"],"by_policy":{"metadata":9},"verified":0,"mismatches":0,"self_scan":false},"policy_classes":[{"id":"public_read_only","safety":"read_only_public","label":"Public read-only","automatic":true,"invoke":"May be called without credentials. CrawlCheck calls it only to check the declaration: GET with no input, on the scanned origin."},{"id":"authenticated_read_only","safety":"read_only_authenticated","label":"Authenticated read-only","automatic":false,"invoke":"Never called by CrawlCheck. An agent needs the user's own credentials and consent."},{"id":"reversible_write","safety":"reversible_write","label":"Reversible write","automatic":false,"invoke":"Never invoked automatically. Needs the owner's written authorisation and a test account."},{"id":"irreversible_write","safety":"irreversible_write","label":"Irreversible write","automatic":false,"invoke":"Never invoked automatically. Deletes or changes something that cannot be undone."},{"id":"financial","safety":"financial","label":"Financial","automatic":false,"invoke":"Never invoked automatically. Moves money or creates a charge."},{"id":"external_communication","safety":"external_communication","label":"External communication","automatic":false,"invoke":"Never invoked automatically. Sends a message, email or notification to someone."},{"id":"identity","safety":"identity_or_account","label":"Identity and accounts","automatic":false,"invoke":"Never invoked automatically. Creates, signs in to or changes an account or credential."},{"id":"unknown","safety":"unknown","label":"Unknown","automatic":false,"invoke":"Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case."},{"id":"metadata","safety":"metadata_only","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."}],"items":[{"capability_id":"cap1:ffa498ba6910493e7bb1","protocol":"api","operation":"Vast.ai OpenAPI","method":null,"endpoint":"https://docs.vast.ai/api-reference/openapi.json","declared":{"by":"https://vast.ai/.well-known/api-catalog","declaration_sha256":"9a8566f3440412f7d544f9dad4c9bb975e0abf03f7e5d80f7de548b596525c8b","authentication":"unknown","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an API the catalog lists; its operations are in its own description"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (docs.vast.ai): only the scanned origin is called"}},{"capability_id":"cap1:c958fbe79c815307f8b7","protocol":"api","operation":"API reference","method":null,"endpoint":"https://docs.vast.ai/api-reference/introduction.md","declared":{"by":"https://vast.ai/.well-known/api-catalog","declaration_sha256":"9a8566f3440412f7d544f9dad4c9bb975e0abf03f7e5d80f7de548b596525c8b","authentication":"unknown","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an API the catalog lists; its operations are in its own description"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (docs.vast.ai): only the scanned origin is called"}},{"capability_id":"cap1:f1e4cf5ee5e4f6d8ccb7","protocol":"api","operation":"Authentication for agents","method":null,"endpoint":"https://vast.ai/auth.md","declared":{"by":"https://vast.ai/.well-known/api-catalog","declaration_sha256":"9a8566f3440412f7d544f9dad4c9bb975e0abf03f7e5d80f7de548b596525c8b","authentication":"unknown","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an API the catalog lists; its operations are in its own description"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"metadata: describes a surface, is not itself an action"}},{"capability_id":"cap1:c8fc10036f6d1c795530","protocol":"api","operation":"API permissions","method":null,"endpoint":"https://docs.vast.ai/api-reference/permissions.md","declared":{"by":"https://vast.ai/.well-known/api-catalog","declaration_sha256":"9a8566f3440412f7d544f9dad4c9bb975e0abf03f7e5d80f7de548b596525c8b","authentication":"unknown","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an API the catalog lists; its operations are in its own description"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (docs.vast.ai): only the scanned origin is called"}},{"capability_id":"cap1:6e3fdae055e2029242e9","protocol":"api","operation":"Pricing for agents","method":null,"endpoint":"https://vast.ai/pricing.md","declared":{"by":"https://vast.ai/.well-known/api-catalog","declaration_sha256":"9a8566f3440412f7d544f9dad4c9bb975e0abf03f7e5d80f7de548b596525c8b","authentication":"unknown","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an API the catalog lists; its operations are in its own description"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"metadata: describes a surface, is not itself an action"}},{"capability_id":"cap1:5674e64e782a1c5da97b","protocol":"api","operation":"Platform status","method":null,"endpoint":"https://status.vast.ai/","declared":{"by":"https://vast.ai/.well-known/api-catalog","declaration_sha256":"9a8566f3440412f7d544f9dad4c9bb975e0abf03f7e5d80f7de548b596525c8b","authentication":"unknown","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an API the catalog lists; its operations are in its own description"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (status.vast.ai): only the scanned origin is called"}},{"capability_id":"cap1:00b4c450b25ecd0bef69","protocol":"mcp","operation":"server","method":null,"endpoint":"https://vastai-80aa3a82.main-kill-isr.mintlify.me/mcp","declared":{"by":"https://vast.ai/.well-known/mcp/server-card.json","declaration_sha256":"e8315cb670e02ce0813cb31eba15558cdbb6aff18131837aa15db8d4a66886c8","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"a server declaration; its tools are listed only by the server itself (tools/list), which is not called"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (vastai-80aa3a82.main-kill-isr.mintlify.me): only the scanned origin is called"}},{"capability_id":"cap1:ec7cbe67f73d09085706","protocol":"agent_skill","operation":"vast-ai-cli","method":null,"endpoint":"https://raw.githubusercontent.com/vast-ai/vast-cli/master/vastai/SKILL.md","declared":{"by":"https://vast.ai/.well-known/agent-skills/index.json","declaration_sha256":"f0250d911f100d29065f9cee829132bc9bc06c16954404b4ffadd7433bd45309","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (raw.githubusercontent.com): only the scanned origin is called"}},{"capability_id":"cap1:83b86c84195e73bceae9","protocol":"agent_skill","operation":"vast-ai-python-sdk","method":null,"endpoint":"https://raw.githubusercontent.com/vast-ai/vast-cli/master/vastai_sdk/SKILL.md","declared":{"by":"https://vast.ai/.well-known/agent-skills/index.json","declaration_sha256":"f0250d911f100d29065f9cee829132bc9bc06c16954404b4ffadd7433bd45309","authentication":"none","params_required":null,"media":null,"safety_class":"metadata_only","safety_basis":"an instruction file an agent reads; not an operation"},"policy":{"id":"metadata","label":"Metadata","automatic":false,"invoke":"Nothing to invoke: a listing, a server card or a skill file, not an operation."},"observed":{"state":"not_attempted","verified":false,"at":null,"status":null,"content_type":null,"sha256":null,"mismatches":[],"not_attempted_because":"on another origin (raw.githubusercontent.com): only the scanned origin is called"}}],"mismatches":[],"certificate":{"certificate_id":"ccap1:26e69b38553b893ecc21c1d7f2cd4df1d9e9205961c66ce92a2fb0549d80e193","certificate":{"kind":"crawlcheck-capability-certificate","v":1,"subject":"vast.ai","domain":"vast.ai","record":"8ncjo68br4","report":"https://crawlcheck.io/r/8ncjo68br4","manifest_sha256":"a5f21d834989c7b93ec8d065144939781e485965e0f2288ee279ab0a5240d708","measured_at":"2026-10-05T10:19:18.611Z","verification_checked_at":"2026-10-05T10:19:20.939Z","verification_policy":"public GETs with no required input and one read-only MCP tool with no required input, on the scanned origin only; redirects recorded, not followed","invocation_rule":"capabilities are read from declarations only; nothing is invoked. Later verification may call read_only_public operations alone; every other class needs the site owner's authorisation and a test account, and unknown is never called","counts":{"declared":9,"verified":0,"mismatches":0},"items":[{"id":"cap1:ffa498ba6910493e7bb1","protocol":"api","operation":"Vast.ai OpenAPI","method":null,"endpoint":"https://docs.vast.ai/api-reference/openapi.json","declared_by_sha256":"9a8566f3440412f7d544f9dad4c9bb975e0abf03f7e5d80f7de548b596525c8b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:c958fbe79c815307f8b7","protocol":"api","operation":"API reference","method":null,"endpoint":"https://docs.vast.ai/api-reference/introduction.md","declared_by_sha256":"9a8566f3440412f7d544f9dad4c9bb975e0abf03f7e5d80f7de548b596525c8b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:f1e4cf5ee5e4f6d8ccb7","protocol":"api","operation":"Authentication for agents","method":null,"endpoint":"https://vast.ai/auth.md","declared_by_sha256":"9a8566f3440412f7d544f9dad4c9bb975e0abf03f7e5d80f7de548b596525c8b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:c8fc10036f6d1c795530","protocol":"api","operation":"API permissions","method":null,"endpoint":"https://docs.vast.ai/api-reference/permissions.md","declared_by_sha256":"9a8566f3440412f7d544f9dad4c9bb975e0abf03f7e5d80f7de548b596525c8b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:6e3fdae055e2029242e9","protocol":"api","operation":"Pricing for agents","method":null,"endpoint":"https://vast.ai/pricing.md","declared_by_sha256":"9a8566f3440412f7d544f9dad4c9bb975e0abf03f7e5d80f7de548b596525c8b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:5674e64e782a1c5da97b","protocol":"api","operation":"Platform status","method":null,"endpoint":"https://status.vast.ai/","declared_by_sha256":"9a8566f3440412f7d544f9dad4c9bb975e0abf03f7e5d80f7de548b596525c8b","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:00b4c450b25ecd0bef69","protocol":"mcp","operation":"server","method":null,"endpoint":"https://vastai-80aa3a82.main-kill-isr.mintlify.me/mcp","declared_by_sha256":"e8315cb670e02ce0813cb31eba15558cdbb6aff18131837aa15db8d4a66886c8","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:ec7cbe67f73d09085706","protocol":"agent_skill","operation":"vast-ai-cli","method":null,"endpoint":"https://raw.githubusercontent.com/vast-ai/vast-cli/master/vastai/SKILL.md","declared_by_sha256":"f0250d911f100d29065f9cee829132bc9bc06c16954404b4ffadd7433bd45309","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null},{"id":"cap1:83b86c84195e73bceae9","protocol":"agent_skill","operation":"vast-ai-python-sdk","method":null,"endpoint":"https://raw.githubusercontent.com/vast-ai/vast-cli/master/vastai_sdk/SKILL.md","declared_by_sha256":"f0250d911f100d29065f9cee829132bc9bc06c16954404b4ffadd7433bd45309","safety_class":"metadata_only","policy":"metadata","observed":"not_attempted","status":null,"observed_sha256":null}],"mismatches":[]},"signature":{"alg":"Ed25519","kid":"hcIAczGf-8EFBnkunmZlvFWnD2nHHeHeC9cM4BTiBVo","certificate_sha256":"26e69b38553b893ecc21c1d7f2cd4df1d9e9205961c66ce92a2fb0549d80e193","message":"the UTF-8 bytes of \"crawlcheck-capability-certificate-v1\\n\" followed by certificate_sha256 (hex), where certificate_sha256 = SHA-256 of the certificate as canonical JSON (keys sorted, no whitespace)","sig":"7CbA-Fy3OPC4RIW4B06uIBYCBMNA9tEPer-9IsE_GOfF1oWS9q3q5aidUqAffzuKnkA_LyGcFP1q0fJZVyQeBA"},"issuer":{"name":"CrawlCheck observer","key":{"jwk":{"kty":"OKP","crv":"Ed25519","x":"Ny5tAiGdpyVWTm64G1_0g_sTo4ocLL7kqjZ6cK7G5KM"},"directory":"https://crawlcheck.io/.well-known/http-message-signatures-directory"}}},"verify":"https://crawlcheck.io/api/registry/capabilities/verify?domain=vast.ai"}