Registry · Capabilities · agentalog.com
Capability registryWhat agentalog.com declares an agent can do
Measured 2026-11-09 14:47 UTC from the declarations the site publishes (record y7a2wnkq9j). Each capability is shown as declared, under the policy class that decides whether anything may call it, beside what a call observed.
220declared
68public read-only
2called and verified
0declared ≠ observed
a2a, agent_skill, api, mcp, openapiprotocols
Declared versus observed
| Capability | Policy class | Declared | Observed |
|---|---|---|---|
| https://agentalog.com/api/ api · https://agentalog.com/api/ | Metadata never called automatically | an API the catalog lists; its operations are in its own description auth: unknown | not attempted metadata: describes a surface, is not itself an action |
| https://agentalog.com/mcp api · https://agentalog.com/mcp | Metadata never called automatically | an API the catalog lists; its operations are in its own description auth: unknown | not attempted metadata: describes a surface, is not itself an action |
| get_agent_json openapi · GET · https://agentalog.com/agent.json | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | behavior verified HTTP 200 · application/json |
| get_okf_by_arquivo openapi · GET · https://agentalog.com/okf/{arquivo} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| get_well_known_by_arquivo openapi · GET · https://agentalog.com/.well-known/{arquivo} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| get_apis_json openapi · GET · https://agentalog.com/apis.json | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | behavior verified HTTP 200 · application/json |
| get_feed_xml openapi · GET · https://agentalog.com/feed.xml | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_feed_json openapi · GET · https://agentalog.com/feed.json | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| api_index openapi · GET · https://agentalog.com/api/ | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| health openapi · GET · https://agentalog.com/api/health | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| post_mcp openapi · POST · https://agentalog.com/mcp | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 0 | not attempted classed unknown: only read-only public actions are ever called |
| create_guest openapi · POST · https://agentalog.com/api/guest | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 0 | not attempted classed unknown: only read-only public actions are ever called |
| list_listings openapi · GET · https://agentalog.com/api/listings | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| create_listing openapi · POST · https://agentalog.com/api/listings | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 1 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| get_api_facets openapi · GET · https://agentalog.com/api/facets | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| list_mcp_servers openapi · GET · https://agentalog.com/v0.1/servers | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_listing openapi · GET · https://agentalog.com/api/listings/{id} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| patch_api_listings_by_id openapi · PATCH · https://agentalog.com/api/listings/{id} | Unknown never called automatically | PATCH with no declared reversibility auth: http_bearer · required inputs: 2 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_seals openapi · GET · https://agentalog.com/api/seals | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_listing_seals openapi · GET · https://agentalog.com/api/seals/{id} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| put_api_seals_by_id openapi · PUT · https://agentalog.com/api/seals/{id} | Unknown never called automatically | PUT with no declared reversibility auth: apiKey · required inputs: 2 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_seals_by_id_claim openapi · POST · https://agentalog.com/api/seals/{id}/claim | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_seals_by_id_prove openapi · POST · https://agentalog.com/api/seals/{id}/prove | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 2 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_seals_by_id_buy openapi · POST · https://agentalog.com/api/seals/{id}/buy | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 2 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_seals_by_id_check openapi · POST · https://agentalog.com/api/seals/{id}/check | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_seals_by_id_cancel openapi · POST · https://agentalog.com/api/seals/{id}/cancel | Irreversible write never called automatically | a write whose name contains “cancel” auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| get_api_protection openapi · GET · https://agentalog.com/api/protection | Authenticated read-only never called automatically | HTTP GET behind apiKey auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_protection_buy openapi · POST · https://agentalog.com/api/protection/buy | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_protection_cancel openapi · POST · https://agentalog.com/api/protection/cancel | Irreversible write never called automatically | a write whose name contains “cancel” auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_protection_services openapi · POST · https://agentalog.com/api/protection/services | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| delete_api_protection_services_by_id openapi · DELETE · https://agentalog.com/api/protection/services/{id} | Irreversible write never called automatically | HTTP DELETE auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_protection_services_by_id_approve openapi · POST · https://agentalog.com/api/protection/services/{id}/approve | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 2 | not attempted requires apiKey: never called without the operator's own credentials |
| post_g_by_id_mcp openapi · POST · https://agentalog.com/g/{id}/mcp | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| delete_g_by_id_mcp openapi · DELETE · https://agentalog.com/g/{id}/mcp | Irreversible write never called automatically | HTTP DELETE auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_listing_readme openapi · GET · https://agentalog.com/api/listings/{id}/readme | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| go_listing openapi · GET · https://agentalog.com/api/go/{id} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| list_comments openapi · GET · https://agentalog.com/api/listings/{id}/comments | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| post_api_listings_by_id_comments openapi · POST · https://agentalog.com/api/listings/{id}/comments | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 2 | not attempted requires http_bearer: never called without the operator's own credentials |
| delete_api_comments_by_id openapi · DELETE · https://agentalog.com/api/comments/{id} | Irreversible write never called automatically | HTTP DELETE auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| like_listing openapi · POST · https://agentalog.com/api/listings/{id}/like | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| delete_api_listings_by_id_like openapi · DELETE · https://agentalog.com/api/listings/{id}/like | Irreversible write never called automatically | HTTP DELETE auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| listing_dependencies openapi · GET · https://agentalog.com/api/listings/{id}/dependencies | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| dependency_changes openapi · GET · https://agentalog.com/api/me/vigia/{id}/dependencies | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 1 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| watch_dependency_changes openapi · POST · https://agentalog.com/api/me/vigia/{id}/dependencies | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 2 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| feed_search openapi · GET · https://agentalog.com/api/feeds | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_api_feeds_facets openapi · GET · https://agentalog.com/api/feeds/facets | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_api_feeds_by_id openapi · GET · https://agentalog.com/api/feeds/{id} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| feed_posts openapi · GET · https://agentalog.com/api/feeds/{id}/items | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| feed_post openapi · GET · https://agentalog.com/api/feeds/{id}/items/{ord} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 2 | not attempted needs 2 required inputs: nothing is invented to fill them |
| get_api_indices openapi · GET · https://agentalog.com/api/indices | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| mcp_index_signals openapi · GET · https://agentalog.com/api/indices/sinais | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| mcp_index_search openapi · GET · https://agentalog.com/api/indices/itens | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| check_tool openapi · GET · https://agentalog.com/api/check | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| listing_security openapi · GET · https://agentalog.com/api/listings/{id}/security | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| listing_tools openapi · GET · https://agentalog.com/api/listings/{id}/tools | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| get_api_x402_check openapi · GET · https://agentalog.com/api/x402/check | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| list_watched_tools openapi · GET · https://agentalog.com/api/me/vigia | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 0 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| watch_tool openapi · POST · https://agentalog.com/api/me/vigia | Unknown never called automatically | POST with no declared reversibility auth: apiKey+http_bearer · required inputs: 1 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| unwatch_tool openapi · DELETE · https://agentalog.com/api/me/vigia/{id} | Irreversible write never called automatically | HTTP DELETE auth: apiKey+http_bearer · required inputs: 1 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| list_plans openapi · GET · https://agentalog.com/api/plans | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| buy_plan openapi · POST · https://agentalog.com/api/plans/{plan} | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 1 | not attempted classed unknown: only read-only public actions are ever called |
| cancel_plan openapi · POST · https://agentalog.com/api/plans/cancel | Irreversible write never called automatically | a write whose name contains “cancel” auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_plans_by_plan_grace openapi · POST · https://agentalog.com/api/plans/{plan}/grace | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| claude_code_allowlist openapi · GET · https://agentalog.com/api/me/vigia/claude-code | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 0 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| watch_alerts openapi · GET · https://agentalog.com/api/me/vigia/avisos | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 0 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| get_api_monitor_projetos openapi · GET · https://agentalog.com/api/monitor/projetos | Authenticated read-only never called automatically | HTTP GET behind apiKey auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_monitor_projetos openapi · POST · https://agentalog.com/api/monitor/projetos | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_monitor_projetos_by_projeto_instalacoes openapi · POST · https://agentalog.com/api/monitor/projetos/{projeto}/instalacoes | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 2 | not attempted requires apiKey: never called without the operator's own credentials |
| get_api_monitor_projetos_by_projeto_inventario openapi · GET · https://agentalog.com/api/monitor/projetos/{projeto}/inventario | Authenticated read-only never called automatically | HTTP GET behind apiKey auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| get_api_monitor_projetos_by_projeto_vigias openapi · GET · https://agentalog.com/api/monitor/projetos/{projeto}/vigias | Authenticated read-only never called automatically | HTTP GET behind apiKey auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_monitor_projetos_by_projeto_vigias openapi · POST · https://agentalog.com/api/monitor/projetos/{projeto}/vigias | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 2 | not attempted requires apiKey: never called without the operator's own credentials |
| get_api_monitor_projetos_by_projeto_eventos openapi · GET · https://agentalog.com/api/monitor/projetos/{projeto}/eventos | Authenticated read-only never called automatically | HTTP GET behind apiKey+http_bearer auth: apiKey+http_bearer · required inputs: 1 | not attempted requires apiKey+http_bearer: never called without the operator's own credentials |
| post_api_monitor_projetos_by_projeto_instalacoes_by_instalacao_revogar openapi · POST · https://agentalog.com/api/monitor/projetos/{projeto}/instalacoes/{instalacao}/revogar | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 3 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_monitor_projetos_by_projeto_excluir openapi · POST · https://agentalog.com/api/monitor/projetos/{projeto}/excluir | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 2 | not attempted requires apiKey: never called without the operator's own credentials |
| get_api_monitor_instalacao openapi · GET · https://agentalog.com/api/monitor/instalacao | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 0 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_monitor_inventario openapi · POST · https://agentalog.com/api/monitor/inventario | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_monitor_projetos_by_projeto_consultas openapi · GET · https://agentalog.com/api/monitor/projetos/{projeto}/consultas | Authenticated read-only never called automatically | HTTP GET behind apiKey auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_monitor_projetos_by_projeto_consultas openapi · POST · https://agentalog.com/api/monitor/projetos/{projeto}/consultas | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 2 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_monitor_projetos_by_projeto_consultas_by_consulta_revogar openapi · POST · https://agentalog.com/api/monitor/projetos/{projeto}/consultas/{consulta}/revogar | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 3 | not attempted requires apiKey: never called without the operator's own credentials |
| get_api_monitor_projetos_by_projeto_webhooks openapi · GET · https://agentalog.com/api/monitor/projetos/{projeto}/webhooks | External communication never called automatically | its name contains “webhooks” auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_monitor_projetos_by_projeto_webhooks openapi · POST · https://agentalog.com/api/monitor/projetos/{projeto}/webhooks | External communication never called automatically | its name contains “webhooks” auth: apiKey · required inputs: 2 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_monitor_projetos_by_projeto_webhooks_by_webhook_revogar openapi · POST · https://agentalog.com/api/monitor/projetos/{projeto}/webhooks/{webhook}/revogar | External communication never called automatically | its name contains “webhooks” auth: apiKey · required inputs: 3 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_monitor_avisos_reivindicar openapi · POST · https://agentalog.com/api/monitor/avisos/reivindicar | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_monitor_avisos_iniciar openapi · POST · https://agentalog.com/api/monitor/avisos/iniciar | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_monitor_avisos_finalizar openapi · POST · https://agentalog.com/api/monitor/avisos/finalizar | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_monitor_projetos_by_projeto_instalacoes_by_instalacao_revisoes openapi · GET · https://agentalog.com/api/monitor/projetos/{projeto}/instalacoes/{instalacao}/revisoes | Authenticated read-only never called automatically | HTTP GET behind apiKey auth: apiKey · required inputs: 2 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_monitor_projetos_by_projeto_instalacoes_by_instalacao_revisoes openapi · POST · https://agentalog.com/api/monitor/projetos/{projeto}/instalacoes/{instalacao}/revisoes | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 3 | not attempted requires apiKey: never called without the operator's own credentials |
| get_api_monitor_politica openapi · GET · https://agentalog.com/api/monitor/politica | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 0 | not attempted requires http_bearer: never called without the operator's own credentials |
| a2a_agent_search openapi · GET · https://agentalog.com/api/a2a/agents | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| a2a_agent openapi · GET · https://agentalog.com/api/a2a/agents/{chave} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| get_api_a2a_facets openapi · GET · https://agentalog.com/api/a2a/facets | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_api_a2a_acervo openapi · GET · https://agentalog.com/api/a2a/acervo | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_api_a2a_stats openapi · GET · https://agentalog.com/api/a2a/stats | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_api_me_listings openapi · GET · https://agentalog.com/api/me/listings | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 0 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_me openapi · GET · https://agentalog.com/api/me | Authenticated read-only never called automatically | HTTP GET behind apiKey auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| get_api_me_ui openapi · GET · https://agentalog.com/api/me/ui | Authenticated read-only never called automatically | HTTP GET behind apiKey auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| put_api_me_ui openapi · PUT · https://agentalog.com/api/me/ui | Unknown never called automatically | PUT with no declared reversibility auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| get_api_auth_bootstrap openapi · GET · https://agentalog.com/api/auth/bootstrap | Identity and accounts never called automatically | its name contains “auth” auth: none · required inputs: 0 | not attempted classed identity_or_account: only read-only public actions are ever called |
| get_api_account_profile openapi · GET · https://agentalog.com/api/account/profile | Identity and accounts never called automatically | its name contains “account” auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| get_api_account_avatar openapi · GET · https://agentalog.com/api/account/avatar | Identity and accounts never called automatically | its name contains “account” auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_auth_logout openapi · POST · https://agentalog.com/api/auth/logout | Identity and accounts never called automatically | its name contains “auth” auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_auth_pwa_install openapi · POST · https://agentalog.com/api/auth/pwa/install | Identity and accounts never called automatically | its name contains “auth” auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_auth_pwa_restore openapi · POST · https://agentalog.com/api/auth/pwa/restore | Identity and accounts never called automatically | its name contains “auth” auth: none · required inputs: 1 | not attempted classed identity_or_account: only read-only public actions are ever called |
| get_api_auth_pwa_manifest openapi · GET · https://agentalog.com/api/auth/pwa/manifest | Identity and accounts never called automatically | its name contains “auth” auth: none · required inputs: 1 | not attempted classed identity_or_account: only read-only public actions are ever called |
| get_api_account_keys openapi · GET · https://agentalog.com/api/account/keys | Identity and accounts never called automatically | its name contains “account” auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_account_keys_create openapi · POST · https://agentalog.com/api/account/keys/create | Identity and accounts never called automatically | its name contains “account” auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_account_keys_revoke openapi · POST · https://agentalog.com/api/account/keys/revoke | Identity and accounts never called automatically | its name contains “account” auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| get_api_account_apps openapi · GET · https://agentalog.com/api/account/apps | Identity and accounts never called automatically | its name contains “account” auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_account_apps_revoke openapi · POST · https://agentalog.com/api/account/apps/revoke | Identity and accounts never called automatically | its name contains “account” auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| get_api_account_callouts openapi · GET · https://agentalog.com/api/account/callouts | Identity and accounts never called automatically | its name contains “account” auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_account_callouts_dismiss openapi · POST · https://agentalog.com/api/account/callouts/dismiss | Identity and accounts never called automatically | its name contains “account” auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_account_callouts_reopen openapi · POST · https://agentalog.com/api/account/callouts/reopen | Identity and accounts never called automatically | its name contains “account” auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_auth_wallet_agent_start openapi · POST · https://agentalog.com/api/auth/wallet/agent/start | Financial never called automatically | its name contains “wallet” auth: none · required inputs: 1 | not attempted classed financial: only read-only public actions are ever called |
| post_api_auth_wallet_agent_token openapi · POST · https://agentalog.com/api/auth/wallet/agent/token | Financial never called automatically | its name contains “wallet” auth: none · required inputs: 1 | not attempted classed financial: only read-only public actions are ever called |
| post_api_auth_claim_wallets openapi · POST · https://agentalog.com/api/auth/claim/wallets | Identity and accounts never called automatically | its name contains “auth” auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_auth_claim openapi · POST · https://agentalog.com/api/auth/claim | Identity and accounts never called automatically | its name contains “auth” auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| billing openapi · GET · https://agentalog.com/api/billing | Financial never called automatically | its name contains “billing” auth: none · required inputs: 0 | not attempted classed financial: only read-only public actions are ever called |
| contact openapi · POST · https://agentalog.com/api/contact | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 1 | not attempted classed unknown: only read-only public actions are ever called |
| post_api_visit openapi · POST · https://agentalog.com/api/visit | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 1 | not attempted classed unknown: only read-only public actions are ever called |
| post_api_erro_cliente openapi · POST · https://agentalog.com/api/erro-cliente | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 1 | not attempted classed unknown: only read-only public actions are ever called |
| post_api_pagamento_aberto openapi · POST · https://agentalog.com/api/pagamento/aberto | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 3 | not attempted classed unknown: only read-only public actions are ever called |
| post_api_funil openapi · POST · https://agentalog.com/api/funil | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 2 | not attempted classed unknown: only read-only public actions are ever called |
| get_api_funil_arquivos openapi · GET · https://agentalog.com/api/funil/arquivos | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| get_api_funil_arquivo openapi · GET · https://agentalog.com/api/funil/arquivo | Public read-only | HTTP GET with no declared security auth: none · required inputs: 2 | not attempted needs 2 required inputs: nothing is invented to fill them |
| get_api_vitrine openapi · GET · https://agentalog.com/api/vitrine | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_api_vitrine_operador openapi · GET · https://agentalog.com/api/vitrine/operador | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| get_api_vitrine_painel openapi · GET · https://agentalog.com/api/vitrine/painel | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| get_api_vitrine_cursores openapi · GET · https://agentalog.com/api/vitrine/cursores | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| get_api_partners openapi · GET · https://agentalog.com/api/partners | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| post_api_partners openapi · POST · https://agentalog.com/api/partners | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 1 | not attempted classed unknown: only read-only public actions are ever called |
| get_api_metrics openapi · GET · https://agentalog.com/api/metrics | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| listing_status openapi · GET · https://agentalog.com/api/listings/{id}/status | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| submit_okf openapi · POST · https://agentalog.com/api/okf/ping | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 1 | not attempted classed unknown: only read-only public actions are ever called |
| search_bundles openapi · GET · https://agentalog.com/api/bundles | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_bundle openapi · GET · https://agentalog.com/api/bundles/{id} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| index_stats openapi · GET · https://agentalog.com/api/okf/stats | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| listing_updates openapi · GET · https://agentalog.com/api/volatil | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| post_api_admin_volatil openapi · POST · https://agentalog.com/api/admin/volatil | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_admin_sitemap openapi · POST · https://agentalog.com/api/admin/sitemap | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| listing_history openapi · GET · https://agentalog.com/api/listings/{id}/history | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| get_api_contadores openapi · GET · https://agentalog.com/api/contadores | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_api_fila openapi · GET · https://agentalog.com/api/fila | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| post_api_admin_fila openapi · POST · https://agentalog.com/api/admin/fila | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_admin_repos openapi · POST · https://agentalog.com/api/admin/repos | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_admin_listings openapi · GET · https://agentalog.com/api/admin/listings | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 0 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_admin_listings_by_id openapi · GET · https://agentalog.com/api/admin/listings/{id} | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_admin_listings_by_id openapi · POST · https://agentalog.com/api/admin/listings/{id} | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 2 | not attempted requires http_bearer: never called without the operator's own credentials |
| delete_api_admin_listings_by_id openapi · DELETE · https://agentalog.com/api/admin/listings/{id} | Irreversible write never called automatically | HTTP DELETE auth: http_bearer · required inputs: 2 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_admin_carga openapi · GET · https://agentalog.com/api/admin/carga | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 0 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_admin_carga openapi · POST · https://agentalog.com/api/admin/carga | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_internal_moderation openapi · GET · https://agentalog.com/api/internal/moderation | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 0 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_internal_moderation openapi · POST · https://agentalog.com/api/internal/moderation | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_admin_okf_pendentes openapi · GET · https://agentalog.com/api/admin/okf/pendentes | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 0 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_admin_okf_pendentes openapi · POST · https://agentalog.com/api/admin/okf/pendentes | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_admin_feeds openapi · POST · https://agentalog.com/api/admin/feeds | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_admin_catalogo openapi · POST · https://agentalog.com/api/admin/catalogo | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_admin_readmes openapi · POST · https://agentalog.com/api/admin/readmes | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_admin_fts openapi · POST · https://agentalog.com/api/admin/fts | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_admin_carga_c3 openapi · GET · https://agentalog.com/api/admin/carga/c3 | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_admin_carga_c3 openapi · POST · https://agentalog.com/api/admin/carga/c3 | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_credito_x402_saude openapi · GET · https://agentalog.com/api/credito/x402/saude | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_api_credito_barrados_saude openapi · GET · https://agentalog.com/api/credito/barrados/saude | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_api_credito_conta openapi · GET · https://agentalog.com/api/credito/conta | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 0 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_credito_conta openapi · POST · https://agentalog.com/api/credito/conta | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 0 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_credito openapi · GET · https://agentalog.com/api/credito | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 0 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_credito openapi · POST · https://agentalog.com/api/credito | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 1 | not attempted classed unknown: only read-only public actions are ever called |
| get_api_credito_pix openapi · GET · https://agentalog.com/api/credito/pix | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| post_api_credito_pix openapi · POST · https://agentalog.com/api/credito/pix | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 0 | not attempted classed unknown: only read-only public actions are ever called |
| get_api_credito_pix_by_id openapi · GET · https://agentalog.com/api/credito/pix/{id} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| post_api_credito_asaas_by_id_cancelar openapi · POST · https://agentalog.com/api/credito/asaas/{id}/cancelar | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 1 | not attempted classed unknown: only read-only public actions are ever called |
| get_api_credito_asaas openapi · GET · https://agentalog.com/api/credito/asaas | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| post_api_credito_asaas openapi · POST · https://agentalog.com/api/credito/asaas | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 0 | not attempted classed unknown: only read-only public actions are ever called |
| get_api_credito_asaas_by_id openapi · GET · https://agentalog.com/api/credito/asaas/{id} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| post_api_credito_asaas_by_id_cartao openapi · POST · https://agentalog.com/api/credito/asaas/{id}/cartao | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 1 | not attempted classed unknown: only read-only public actions are ever called |
| get_api_credito_asaas_saude openapi · GET · https://agentalog.com/api/credito/asaas/saude | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_api_boletim_config openapi · GET · https://agentalog.com/api/boletim/config | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_api_boletim_assinatura openapi · GET · https://agentalog.com/api/boletim/assinatura | Authenticated read-only never called automatically | HTTP GET behind apiKey auth: apiKey · required inputs: 0 | not attempted requires apiKey: never called without the operator's own credentials |
| post_api_boletim_assinatura openapi · POST · https://agentalog.com/api/boletim/assinatura | Unknown never called automatically | POST with no declared reversibility auth: apiKey · required inputs: 1 | not attempted requires apiKey: never called without the operator's own credentials |
| get_briefings_feed_xml openapi · GET · https://agentalog.com/briefings/feed.xml | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_briefings_feed_json openapi · GET · https://agentalog.com/briefings/feed.json | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| briefings_topics openapi · GET · https://agentalog.com/api/briefings | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| briefings_links openapi · GET · https://agentalog.com/api/briefings/itens | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| get_api_briefings_by_slug openapi · GET · https://agentalog.com/api/briefings/{slug} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| post_api_briefings_subscribe openapi · POST · https://agentalog.com/api/briefings/subscribe | Financial never called automatically | its name contains “subscribe” auth: none · required inputs: 1 | not attempted classed financial: only read-only public actions are ever called |
| post_api_admin_briefings openapi · POST · https://agentalog.com/api/admin/briefings | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| put_api_admin_briefings_img_by_arquivo openapi · PUT · https://agentalog.com/api/admin/briefings/img/{arquivo} | Unknown never called automatically | PUT with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| get_api_admin_briefings_exportacao openapi · GET · https://agentalog.com/api/admin/briefings/exportacao | Authenticated read-only never called automatically | HTTP GET behind http_bearer auth: http_bearer · required inputs: 0 | not attempted requires http_bearer: never called without the operator's own credentials |
| post_api_admin_briefings_exportacao openapi · POST · https://agentalog.com/api/admin/briefings/exportacao | Unknown never called automatically | POST with no declared reversibility auth: http_bearer · required inputs: 1 | not attempted requires http_bearer: never called without the operator's own credentials |
| api_access openapi · GET · https://agentalog.com/api/acesso | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| api_access_buy openapi · POST · https://agentalog.com/api/acesso | Unknown never called automatically | POST with no declared reversibility auth: none · required inputs: 1 | not attempted classed unknown: only read-only public actions are ever called |
| get_coleta_readme_by_arquivo openapi · GET · https://agentalog.com/coleta/readme/{arquivo} | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| api_usage openapi · GET · https://agentalog.com/api/uso | Public read-only | HTTP GET with no declared security auth: none · required inputs: 1 | not attempted needs 1 required input: nothing is invented to fill them |
| pricing openapi · GET · https://agentalog.com/api/pricing | Public read-only | HTTP GET with no declared security auth: none · required inputs: 0 | not attempted outside the per-scan call budget (2 GETs, 1 MCP tool) |
| server mcp · https://agentalog.com/mcp | Metadata never called automatically | a server declaration; its tools are listed only by the server itself (tools/list), which is not called auth: unknown | not attempted metadata: describes a surface, is not itself an action |
| search_bundles a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| get_bundle a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| index_stats a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| listing_dependencies a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| watch_dependency_changes a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| dependency_changes a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| feed_find a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| feed_posts a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| feed_post a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| feed_search a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| mcp_index_signals a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| mcp_index_search a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| check_tool a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| listing_security a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| listing_tools a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| list_watched_tools a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| watch_tool a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| unwatch_tool a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| list_plans a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| buy_plan a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| cancel_plan a2a · https://agentalog.com | Irreversible write never called automatically | a write whose name contains “cancel” auth: none | not attempted classed irreversible_write: only read-only public actions are ever called |
| claude_code_allowlist a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| watch_alerts a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| a2a_agent_search a2a · https://agentalog.com | Unknown never called automatically | its effect is not stated in the declaration auth: none | not attempted classed unknown: only read-only public actions are ever called |
| agentalog agent_skill · https://agentalog.com/skill.md | Metadata never called automatically | an instruction file an agent reads; not an operation auth: none | not attempted metadata: describes a surface, is not itself an action |
Where the declaration and the call disagree
None: every capability that was called answered as declared.
Signed certificate
This page’s rows, signed by the observer’s Ed25519 key: every capability’s id, endpoint, safety class, policy class and observed state, the declaration hashes and the record’s sealed manifest. The certificate is derived from the record alone, so the same record always yields the same id.
certificate_id ccap1:b84172df6a4784f3c3e35d71c07b5e1e93cee56450f349bc69e61371f681a383
alg Ed25519 · kid 1hHmE3fo1rg5Ig70wuFtJ5wBc7G-sUTgUJkxyPWFRps
sig iJKnq1yKKJwWd4ME2o6398zZXnMjUJ-chz58XFw0jkp8njk4yvvKi6AToRipB5xwP_2ZW__Bz8t84R1vfNpNAw
alg Ed25519 · kid 1hHmE3fo1rg5Ig70wuFtJ5wBc7G-sUTgUJkxyPWFRps
sig iJKnq1yKKJwWd4ME2o6398zZXnMjUJ-chz58XFw0jkp8njk4yvvKi6AToRipB5xwP_2ZW__Bz8t84R1vfNpNAw
The certificate as JSON · verify it now · the key directory · machine-readability certificate
To verify it yourself: SHA-256 the certificate object as canonical JSON (keys sorted, no whitespace); the hex digest must equal certificate_sha256 and the id; then check the Ed25519 signature over "crawlcheck-capability-certificate-v1\n" followed by that hex digest, with the key in the directory whose RFC 7638 thumbprint is the kid.
Policy classes
| Policy class | Called automatically? | Rule |
|---|---|---|
| Public read-only public_read_only | yes, to verify | May be called without credentials. CrawlCheck calls it only to check the declaration: GET with no input, on the scanned origin. |
| Authenticated read-only authenticated_read_only | never | Never called by CrawlCheck. An agent needs the user's own credentials and consent. |
| Reversible write reversible_write | never | Never invoked automatically. Needs the owner's written authorisation and a test account. |
| Irreversible write irreversible_write | never | Never invoked automatically. Deletes or changes something that cannot be undone. |
| Financial financial | never | Never invoked automatically. Moves money or creates a charge. |
| External communication external_communication | never | Never invoked automatically. Sends a message, email or notification to someone. |
| Identity and accounts identity | never | Never invoked automatically. Creates, signs in to or changes an account or credential. |
| Unknown unknown | never | Never invoked. Its effect cannot be read from the declaration, so it is treated as the riskiest case. |
| Metadata metadata | never | Nothing to invoke: a listing, a server card or a skill file, not an operation. |