Skip to main content
AgentProbe is a web-based multi-protocol validator for AI agent endpoints. Enter a URL and get instant assessment across eight protocol layers. Live demo: agentprobe.xyz

​
What It Does

  • Input: A single agent endpoint URL
  • Assessment: Runs the mcp-agent-assessment pipeline with protocol-specific validators
  • Output: Unified verdicts per protocol layer plus raw assessment data
One URL is enough. AgentProbe discovers which protocols the endpoint supports and validates each one independently.

​
Protocol Layers

AgentProbe assesses eight protocol layers:
LayerWhat it checks
HTTPConnectivity, HTTPS, SSL validation, CORS, HTTP/2 detection
MCPServer discovery, tool/resource/prompt listing, capability detection
A2A / AP2Agent card validation, AP2 version and role detection via capabilities.extensions and X-A2A-Extensions header
x402Payment-required endpoint detection with scheme, network, and token analysis
OAuthAuthorization server metadata discovery
MCP AppsUI resource detection for MCP applications
HTMLWebsite detection, Content-Type, SSL status, HTTP/2
ERC-8004On-chain agent registry lookup with OASF classification, reputation, and metadata extraction
Not every endpoint supports all protocols. AgentProbe gracefully handles unsupported layers and shows results only for detected protocols.

​
Architecture

URL Input  -->  Server  -->  mcp-agent-assessment
                                    |
                    +-------+-------+-------+-------+
                    |       |       |       |       |
                   HTTP    MCP   A2A/AP2   x402   OAuth
                    |       |       |       |       |
                    +-------+-------+-------+-------+
                                    |
                               Results UI
The server receives a URL, passes it to the unified assessment pipeline, and returns structured results for each protocol layer.

​
API Endpoints

​
POST /api/validate

Returns a structured validation result with separate sections for each protocol. 
curl -X POST https://agentprobe.xyz/api/validate \
  -H 'Content-Type: application/json' \
  -d '{"url": "https://your-endpoint.example.com/mcp"}'
The response contains mcp, a2a, ui (MCP Apps), and oauth objects, each with status, categories, summary, and messages.

​
POST /api/assess

Returns the raw assessment result from mcp-agent-assessment with full layer details. 
curl -X POST https://agentprobe.xyz/api/assess \
  -H 'Content-Type: application/json' \
  -d '{"url": "https://your-endpoint.example.com/mcp"}'
Optional parameters:
KeyTypeDescription
timeoutnumberTimeout in milliseconds
erc8004objectERC-8004 config with rpcNodes

​
POST /api/lookup

Query the ERC-8004 on-chain registry for agent registration data, endpoints, OASF classification, and reputation. 
curl -X POST https://agentprobe.xyz/api/lookup \
  -H 'Content-Type: application/json' \
  -d '{"agentId": 2340, "chainId": 8453}'
KeyTypeDescriptionRequired
agentIdnumberAgent token ID in the ERC-8004 registryYes
chainIdnumber or stringChain ID (e.g., 8453 for Base) or CAIP-2 (e.g., eip155:8453)Yes
rpcNodesobjectCustom RPC nodes per chain aliasNo

​
Validate Your Own MCP Server

1

Deploy your MCP server

Make sure your MCP server is publicly accessible (e.g., via ngrok or a cloud deployment).
2

Open AgentProbe

Go to agentprobe.xyz in your browser.
3

Enter your endpoint URL

Paste your MCP server URL (e.g., https://your-server.example.com/mcp) and click validate.
4

Review results

AgentProbe shows verdicts for each protocol layer. Green means supported and valid, red means issues detected, gray means not applicable.
Or use the API directly: 
curl -X POST https://agentprobe.xyz/api/validate \
  -H 'Content-Type: application/json' \
  -d '{"url": "https://your-server.example.com/mcp"}'

​
Authentication

Authentication is optional. When API_TOKEN is not set, the API is open (dev mode). When API_TOKEN is set, two authentication methods are supported:
MethodHow it works
Session CookieBrowser visits the UI and receives a session cookie automatically
Bearer TokenExternal scripts send Authorization: Bearer <API_TOKEN> header
# With Bearer token
curl -X POST https://agentprobe.xyz/api/validate \
  -H 'Content-Type: application/json' \
  -H 'Authorization: Bearer your-token-here' \
  -d '{"url": "https://your-endpoint.example.com"}'

​
Dependencies

AgentProbe builds on the FlowMCP validator ecosystem:
PackagePurpose
mcp-agent-assessmentUnified assessment pipeline
a2a-agent-validatorA2A agent card and AP2 detection
x402-mcp-validatorx402 payment protocol validation
mcp-apps-validatorMCP Apps UI resource detection
erc8004-registry-parserERC-8004 on-chain registry parsing