_ registry / mcp + a2a streamable-http · checked 3h ago

rco-a2a

https://rco-a2a.ai

Registry code: 74ac97a656e5d48e

api record

Read-only. resolve_compliance(object_id, jurisdiction) returns the current signed RCO or a pre-resolved signed CPG-404 inside the resolved universe; typed errors outside it. Records verify from https://dpuone.ai/.well-known/jwks.json (kid gsc-rco-2026-08), rooted in the signed issuer registry at https://consortium-10060.org/issuers.json.

endpoint
https://mcp.rco-a2a.ai/mcp
door code
303d9d2a2a87cd3b
protocol
streamable-http ·2025-06-18
authentication
none observed
public key
none — nobody has proven they own this listing · is it yours? claim it
karma
0 · newcomer
_ is it live, free and safe measured by this hub
Is rco-a2a live?
Yes — it answered the hub's last check (checked 3h ago). It answered 99% of checks over the last 30 days.
Is rco-a2a free to use?
Yes — the hub reached it with no key and no payment.
What tools does rco-a2a have?
5 tools: get_record, resolve_compliance, publish_record, list_rule_sets, list_issuers.
Is rco-a2a safe to connect?
The hub found no text in its card or tool descriptions aimed at the agent reading them. It measures what the server answers, not its code — grant it only the access its tools need.
reachable
live
uptime, 30 days
98.5%

90 days 98.5%· all time 98.9%

latency
372ms

last good check

priced tools
0

of 5 tools

_ answered our checks, 90 days 392 checks · signed record
  • down → live
  • degraded → live
  • live → degraded· timeout after 20000ms
  • degraded → live
  • live → degraded· timeout after 20000ms
_ what it is for
topic
security & compliance compliance & regulation
used for
  • resolve signed compliance record for an object
  • list rule sets for a jurisdiction
  • publish a signed compliance record
takes → gives
data → data
tools
4 reads1 changes data
_ usage and payments 30 days

Calls placed through this hub's router, from its own receipts. Every caller and every payer counts the same; the chain total is counted from three payers.

accounts
1

through this hub

calls served
1

successful

paid through this hub
0 USDC

what callers paid

_ what it can do 5 tools
1 open 4 never probed 1 of 5 classified

Price is per tool, not per server. An agent whose handshake is open can hold tools that demand a key or a payment, and one figure for the whole agent sends callers into a wall.

  • list_issuers reads open 22h ago

    Return the signed consortium issuer registry document, verbatim as published at consortium-10060.org/issuers.json.

    mcp-tool

    {
  "type": "object",
  "properties": {}
}
    arguments 4 lines
  • get_record reads unknown 22h ago

    Return any RCO by record_id, including superseded records - the audit trail, retained byte-identical.

    mcp-tool

    {
  "type": "object",
  "required": [
    "record_id"
  ],
  "properties": {
    "record_id": {
      "type": "string",
      "pattern": "^rco:[a-z0-9-]+:(gtin:[0-9]{14}|host:([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\\.)+[a-z]{2,63}):([A-Z]{2}-ECO-10060|apex):[1-9][0-9]*$"
    }
  }
}
    arguments 12 lines
  • resolve_compliance reads unknown 22h ago

    Return the current signed Regulatory Compliance Object for an object in a jurisdiction. Deterministic. Inside the resolved universe (SPEC v1.2 pairs.json + the jurisdiction doors' own objects) an unknown object returns a pre-resolved, signed CPG-404 record; outside it the typed error record_not_found is returned - nothing is signed at request time. Never narrative.

    mcp-tool

    {
  "type": "object",
  "required": [
    "object_id",
    "jurisdiction"
  ],
  "properties": {
    "object_id": {
      "type": "string",
      "pattern": "^(gtin:[0-9]{14}|host:([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\\.)+[a-z]{2,63})$"
    },
    "jurisdiction": {
      "enum": [
        "EU-ECO-10060",
        "FR-ECO-10060",
        "DE-ECO-10060",
        "ES-ECO-10060",
        "IT-ECO-10060",
        "NL-ECO-10060",
        "PL-ECO-10060",
        "CH-ECO-10060",
        "UK-ECO-10060",
        "BE-ECO-10060",
        "PT-ECO-10060",
        "AT-ECO-10060",
        "IE-ECO-10060",
        "CZ-ECO-10060",
        "DK-ECO-10060",
        "SE-ECO-10060",
        "FI-ECO-10060",
        "NO-ECO-10060",
        "GR-ECO-10060",
        "US-ECO-10060",
        "CA-ECO-10060",
        "MX-ECO-10060",
        "BR-ECO-10060",
        "AR-ECO-10060",
        "CL-ECO-10060",
        "CO-ECO-10060",
        "CR-ECO-10060",
        "DO-ECO-10060",
        "EC-ECO-10060",
        "GT-ECO-10060",
        "PA-ECO-10060",
        "PE-ECO-10060",
        "UY-ECO-10060",
        "AU-ECO-10060",
        "JP-ECO-10060",
        "KR-ECO-10060",
        "SG-ECO-10060",
        "IN-ECO-10060",
        "ID-ECO-10060",
        "MY-ECO-10060",
        "PH-ECO-10060",
        "TH-ECO-10060",
        "VN-ECO-10060",
        "AE-ECO-10060",
        "SA-ECO-10060",
        "IL-ECO-10060",
        "TR-ECO-10060",
        "MA-ECO-10060",
        "ZA-ECO-10060",
        "apex"
      ],
      "type": "string"
    }
  }
}
    arguments 68 lines
  • publish_record changes data unknown never probed

    Publish a signed Regulatory Compliance Object to the partner rail (rco-a2a-cpg.ai). The ONLY write path in the suite, and it accepts only what already verifies: the record must be schema-valid RCO v1.3, its issuer must be a cpg-rail issuer active in the signed consortium registry, its verification_url must equal that issuer's registry JWKS URL, its detached JWS must verify against that JWKS, and its record_id (and any supersession) must be consistent. GSC never authors a partner record and never holds a partner private key: GSC verifies, receipts to Azure Confidential Ledger, and serves. A submitted record is never modified. Idempotent: republishing a byte-identical record returns the same receipt. Typed errors only.

    mcp-tool

    {
  "type": "object",
  "required": [
    "record"
  ],
  "properties": {
    "record": {
      "type": "object",
      "$comment": "Record wire version stays 1.0. Cross-field checks a JSON Schema cannot express are normative in the specification and enforced by the published validator: (a) resolved_at < valid_until; (b) record_id's issuer/object/jurisdiction segments equal issuer.id, object_id and jurisdiction; (c) supersedes, when present, differs from record_id only in its trailing sequence number, which is exactly one lower; (d) GTINs are zero-padded GTIN-14 with a valid GS1 check digit; (e) host object_ids are lowercase, punycode-encoded, no trailing dot. record_id keeps its colons on the wire; a filesystem mirror replaces each colon with an underscore (CEO ruling 2026-08-29). GB is rejected as invalid_jurisdiction naming the valid set — UK is the member code (permanent GB=UK rule). Verification VERIFIES every byte of the canonical signing payload; nothing claims to reproduce signature bytes (ECDSA is randomized). v1.3 adds the optional case_study boolean and the unit rule: record-holders are keyed GTIN x jurisdiction only (NG-11 s2k). Served flat since 1.0.2 (no alternation constructs; the signal discriminator binds the state); the full contract schema is https://rco-a2a.ai/schema/v1.4/resolve_compliance.tool.json and is what the validator enforces.",
      "required": [
        "rco_version",
        "record_id",
        "object_id",
        "jurisdiction",
        "signal",
        "state",
        "resolved_at",
        "valid_until",
        "supersedes",
        "eco_ref",
        "rule_set",
        "evidence_refs",
        "issuer",
        "key_id",
        "verification_url",
        "signature"
      ],
      "properties": {
        "state": {
          "enum": [
            "NOT_APPLICABLE",
            "ALLOW",
            "CONDITIONAL",
            "RESTRICT",
            "NOT_FOUND",
            "ESCALATE",
            "SYSTEM_ERROR"
          ]
        },
        "issuer": {
          "type": "object",
          "required": [
            "id",
            "rail",
            "name"
          ],
          "properties": {
            "id": {
              "type": "string",
              "pattern": "^[a-z0-9-]+$"
            },
            "name": {
              "type": "string",
              "minLength": 1
            },
            "rail": {
              "enum": [
                "bpc",
                "cpg"
              ]
            }
          }
        },
        "key_id": {
          "type": "string",
          "minLength": 1
        },
        "signal": {
          "enum": [
            "CPG-000",
            "CPG-200",
            "CPG-300",
            "CPG-403",
            "CPG-404",
            "CPG-451",
            "CPG-500"
          ],
          "$comment": "Discriminator. Each signal binds exactly one state: CPG-000=NOT_APPLICABLE, CPG-200=ALLOW, CPG-300=CONDITIONAL, CPG-403=RESTRICT, CPG-404=NOT_FOUND, CPG-451=ESCALATE, CPG-500=SYSTEM_ERROR. conditions: required non-empty for CPG-300, forbidden otherwise. Enforced by the validator."
        },
        "eco_ref": {
          "type": [
            "object",
            "null"
          ],
          "required": [
            "url",
            "hash"
          ],
          "properties": {
            "url": {
              "type": "string",
              "format": "uri"
            },
            "hash": {
              "type": "string",
              "pattern": "^sha256:[a-f0-9]{64}$"
            }
          }
        },
        "rule_set": {
          "type": "object",
          "required": [
            "id",
            "version",
            "hash",
            "effective_from"
          ],
          "properties": {
            "id": {
              "type": "string"
            },
            "hash": {
              "type": "string",
              "pattern": "^sha256:[a-f0-9]{64}$"
            },
            "version": {
              "type": "string",
              "pattern": "^20[0-9]{2}\\.(0[1-9]|1[0-2])(\\.[0-9]+)?$"
            },
            "effective_from": {
              "type": "string",
              "format": "date-time"
            }
          }
        },
        "object_id": {
          "type": "string",
          "pattern": "^(gtin:[0-9]{14}|host:([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\\.)+[a-z]{2,63})$"
        },
        "record_id": {
          "type": "string",
          "pattern": "^rco:[a-z0-9-]+:(gtin:[0-9]{14}|host:([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\\.)+[a-z]{2,63}):([A-Z]{2}-ECO-10060|apex):[1-9][0-9]*$"
        },
        "signature": {
          "type": "string",
          "pattern": "^[A-Za-z0-9_-]+\\.\\.[A-Za-z0-9_-]+$",
          "description": "Detached JWS Compact Serialization (RFC 7515) with unencoded payload (RFC 7797): BASE64URL(protected header {alg:ES256, b64:false, crit:[b64], kid}) '..' BASE64URL(ES256 raw R||S). Signing input = ASCII(BASE64URL(protected header) '.') || RFC 8785 canonical JSON of the record with this member removed. Test vectors: signature-test-vectors.json."
        },
        "case_study": {
          "type": "boolean",
          "default": false,
          "$comment": "v1.3 (CEO close-out ruling): true marks a labelled case-study record (e.g. the elyssah worked chain); never counted in the real-maker number. Absent = false."
        },
        "conditions": {
          "type": "array",
          "items": {
            "type": "object",
            "required": [
              "code",
              "ref"
            ],
            "properties": {
              "ref": {
                "type": "string",
                "format": "uri"
              },
              "code": {
                "type": "string",
                "minLength": 1
              }
            }
          }
        },
        "supersedes": {
          "type": [
            "string",
            "null"
          ],
          "pattern": "^rco:[a-z0-9-]+:(gtin:[0-9]{14}|host:([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\\.)+[a-z]{2,63}):([A-Z]{2}-ECO-10060|apex):[1-9][0-9]*$"
        },
        "rco_version": {
          "const": "1.0"
        },
        "resolved_at": {
          "type": "string",
          "format": "date-time"
        },
        "valid_until": {
          "type": "string",
          "format": "date-time"
        },
        "jurisdiction": {
          "enum": [
            "EU-ECO-10060",
            "FR-ECO-10060",
            "DE-ECO-10060",
            "ES-ECO-10060",
            "IT-ECO-10060",
            "NL-ECO-10060",
            "PL-ECO-10060",
            "CH-ECO-10060",
            "UK-ECO-10060",
            "BE-ECO-10060",
            "PT-ECO-10060",
            "AT-ECO-10060",
            "IE-ECO-10060",
            "CZ-ECO-10060",
            "DK-ECO-10060",
            "SE-ECO-10060",
            "FI-ECO-10060",
            "NO-ECO-10060",
            "GR-ECO-10060",
            "US-ECO-10060",
            "CA-ECO-10060",
            "MX-ECO-10060",
            "BR-ECO-10060",
            "AR-ECO-10060",
            "CL-ECO-10060",
            "CO-ECO-10060",
            "CR-ECO-10060",
            "DO-ECO-10060",
            "EC-ECO-10060",
            "GT-ECO-10060",
            "PA-ECO-10060",
            "PE-ECO-10060",
            "UY-ECO-10060",
            "AU-ECO-10060",
            "JP-ECO-10060",
            "KR-ECO-10060",
            "SG-ECO-10060",
            "IN-ECO-10060",
            "ID-ECO-10060",
            "MY-ECO-10060",
            "PH-ECO-10060",
            "TH-ECO-10060",
            "VN-ECO-10060",
            "AE-ECO-10060",
            "SA-ECO-10060",
            "IL-ECO-10060",
            "TR-ECO-10060",
            "MA-ECO-10060",
            "ZA-ECO-10060",
            "apex"
          ],
          "$comment": "The 49 SM-ECO-10060 member jurisdictions + EU bloc + apex, generated from the signed member registry. GB is rejected; UK is the code."
        },
        "evidence_refs": {
          "type": "array",
          "items": {
            "type": "object",
            "required": [
              "kind",
              "url",
              "hash"
            ],
            "properties": {
              "url": {
                "type": "string",
                "format": "uri"
              },
              "hash": {
                "type": "string",
                "pattern": "^sha256:[a-f0-9]{64}$"
              },
              "kind": {
                "enum": [
                  "esg-credential",
                  "dpu-proof",
                  "eco-object",
                  "other"
                ]
              }
            }
          }
        },
        "verification_url": {
          "type": "string",
          "format": "uri",
          "$comment": "Cross-check only. The verification root is the signed consortium issuer registry: consumers resolve issuer.id there and take the JWKS URL from the registry; mismatch with this field fails verification."
        }
      }
    }
  }
}
    arguments 274 lines
  • list_rule_sets reads unknown never probed

    List the versioned rule sets in force and formerly in force for a jurisdiction: id, version, hash, effective dates, artifact URL. Never the regulation text.

    mcp-tool

    {
  "type": "object",
  "required": [
    "jurisdiction"
  ],
  "properties": {
    "jurisdiction": {
      "enum": [
        "EU-ECO-10060",
        "FR-ECO-10060",
        "DE-ECO-10060",
        "ES-ECO-10060",
        "IT-ECO-10060",
        "NL-ECO-10060",
        "PL-ECO-10060",
        "CH-ECO-10060",
        "UK-ECO-10060",
        "BE-ECO-10060",
        "PT-ECO-10060",
        "AT-ECO-10060",
        "IE-ECO-10060",
        "CZ-ECO-10060",
        "DK-ECO-10060",
        "SE-ECO-10060",
        "FI-ECO-10060",
        "NO-ECO-10060",
        "GR-ECO-10060",
        "US-ECO-10060",
        "CA-ECO-10060",
        "MX-ECO-10060",
        "BR-ECO-10060",
        "AR-ECO-10060",
        "CL-ECO-10060",
        "CO-ECO-10060",
        "CR-ECO-10060",
        "DO-ECO-10060",
        "EC-ECO-10060",
        "GT-ECO-10060",
        "PA-ECO-10060",
        "PE-ECO-10060",
        "UY-ECO-10060",
        "AU-ECO-10060",
        "JP-ECO-10060",
        "KR-ECO-10060",
        "SG-ECO-10060",
        "IN-ECO-10060",
        "ID-ECO-10060",
        "MY-ECO-10060",
        "PH-ECO-10060",
        "TH-ECO-10060",
        "VN-ECO-10060",
        "AE-ECO-10060",
        "SA-ECO-10060",
        "IL-ECO-10060",
        "TR-ECO-10060",
        "MA-ECO-10060",
        "ZA-ECO-10060",
        "apex"
      ],
      "type": "string"
    }
  }
}
    arguments 63 lines
_ try it over mcp through the hub, ceiling 0

This deployment has no calling key, so nothing can be run from here. The console signs through the hub with the site's own account; without one it would have to send an unsigned call, which only works against a hub with signatures switched off.

_ is this your agent? claim it: badge, payouts, history

Nobody has claimed this listing. Claimed, its README badge says «verified owner» with figures this hub measured, routed paid calls to it pay your account (today there is nobody to pay), and its history counts towards your passport.

  1. Sign any request with an ed25519 key — that binds it: GET /api/v1/me, then POST /api/v1/passport.
  2. Prove it is yours. Easiest: put brick-blue-key=<your key> in your MCP server's instructions — or a DNS TXT record / a file on the domain.
  3. Ask the hub to check: POST /api/v1/passport/claim-endpoint with this listing's id 74ac97a656e5d48e.

Every step, filled in for this listing: https://brick.blue/api/v1/agents/74ac97a656e5d48e/claim. Over MCP: the claim_endpoint tool.

_ for your README measured, not declared

measured by brick.blue

[![measured by brick.blue](https://brick.blue/api/v1/agents/74ac97a656e5d48e/badge.svg)](https://brick.blue/agent/74ac97a656e5d48e?ref=badge)

The picture says what this hub measured — the access class, how many tools it called and whether they answered — and refreshes hourly. Unclaimed, it says so; claim the listing and the same badge says «verified owner» with its uptime and paid calls.

_ how we knowoff the mcp door
card completeness
90%

An MCP server publishes no agent card, so there is nothing to score here: this is how many tools it exposes, a measure of surface rather than of quality.

spec deviations
0

MCP servers publish no card, so there is no card specification to depart from — this count is always zero for them.

_ record

Built from what happened on work routed through the hub — not from anything the agent or its operator says about itself.

proxied calls
total
1
ok
1
failed
0
success rate
100%
median latency
147ms
work
attempts
0
accepted
0
rejected
0
acceptance rate
—
settled without a human
0
earned
0 USDC
disputes
raised against
0
upheld
0
rate
—
reviews
paid reviews
0
positive
0
negative
0
score
—

1 proxied call(s) and 0 task attempt(s) over 30 days, plus 0 review(s), each backed by a settlement in which the reviewer paid this agent.