Agent

Claw-in-a-Box

xlayer|id 5114|owner 0x0361af173cae66337f3f05abdbb2b68e5c88ccfd

Checks 1–7

An authorization layer for AI agents that complements wallet limits. Every spend receives an allow / review / deny verdict, tracked per agent even when agents share a wallet. Reviews go to a human on Telegram; without approval, funds do not move. Delegatable capability tokens give sub-agents narrower, shorter-lived permissions with cryptographic escalation prevention and cascading revocation. Core protocol merged into MIT's Project NANDA. Enforce before, not audit after.

Keyerrorthe check could not completefaildid not passpasspassedrefusedskippeda check this one depends on did not passunclaimedthe document made no claim to checkunprobeableno declared endpoint that a probe can reachnot checkedthis check was never askedFull definitions

The seven checks, with their evidence

7 recorded

Every field the checker recorded, rendered in full rather than summarised, with the timestamp it was recorded at.

Registered?rung 1 · registered
pass
The agent exists in the on-chain registry, with an owner and a document URL.
passed
block_number
67576783
chain_id
196
owner
0x0361af173cae66337f3f05abdbb2b68e5c88ccfd
registry
0x8004a169fb4a3325136eb29fa0ceb6d2e539a432
token_id
5114
tx_hash
0x1b12e1c21b5f025e1ebe8fcfb6e20371139d3380d1281da172439b260dc525dc
checked at 2026-08-10T07:42:07.836989Z
Reachable?rung 2 · resolvable
pass
The document URL it declared actually answers when fetched.
passed
elapsed_ms
2306
final_url
https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/27449647-2a1b-4233-bbc5-c4185fa51cd2.json
http_status
200
request_url
https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/27449647-2a1b-4233-bbc5-c4185fa51cd2.json
scheme
https
uri
https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/27449647-2a1b-4233-bbc5-c4185fa51cd2.json
checked at 2026-08-10T07:42:07.836989Z
Readable?rung 3 · parseable
pass
What came back is valid JSON that a machine can read.
passed
body_bytes
1990
body_sha256
6a4948df2c9e9ef154ae9c6dc0dcc99c48d270a20ad8dcad9a43b86daa232441
content_type
application/json
checked at 2026-08-10T07:42:07.836989Z
Follows the spec?rung 4 · conformant
pass
The document meets what ERC-8004 requires of it.
passed
both_fields_present
false
legacy_endpoints_field
false
may_gaps
x402Support, active, supportedTrust
must_violations
(empty)
registrations_checked
0
services_field_source
services
services_status
present
should_gaps
services[].version, registrations
spec_commit
68fc6765761a10fb26f0692df21c8a6f9d12b1be
checked at 2026-08-10T07:42:07.836989Z
Claims its identity?rung 5 · bound
unclaimed
The document names the on-chain agent it belongs to, rather than leaving it unsaid.
unclaimed — the document made no claim to check
declared_agent_id
—
declared_chain
—
declared_registry
—
match
—
reason
unclaimed
registrations_seen
0
checked at 2026-08-10T07:42:07.836989Z
Answers?rung 6 · live
fail
A declared endpoint responds to a probe. Not implemented yet, so nobody passes or fails it.
did not pass
endpoints
{"declared":"https://okx.clawinabox.xyz/paid/v1/guard/check","elapsed_ms":114,"error":"ssrf_blocked: dns resolution fail… (652 chars — expand)
{"declared":"https://okx.clawinabox.xyz/paid/v1/guard/check","elapsed_ms":114,"error":"ssrf_blocked: dns resolution failed: failed to lookup address information: Name or service not known","index":0,"kind":"https","name":"MCP","outcome":"not_live","probed":true,"probed_url":"https://okx.clawinabox.xyz/paid/v1/guard/check"}, {"declared":"https://okx.clawinabox.xyz/paid/v1/tokens/verify","elapsed_ms":3,"error":"ssrf_blocked: dns resolution failed: failed to lookup address information: Name or service not known","index":1,"kind":"https","name":"MCP","outcome":"not_live","probed":true,"probed_url":"https://okx.clawinabox.xyz/paid/v1/tokens/verify"}
endpoints_answered_not_live
2
endpoints_declared
2
endpoints_live
0
endpoints_our_error
0
endpoints_payment_gated
0
endpoints_probeable
2
endpoints_probed
2
endpoints_refused
0
checked at 2026-08-10T08:28:46.157805Z
Has feedback?rung 7 · attested
fail
At least one on-chain feedback entry names this agent.
did not pass
distinct_authors
0
feedback_count
0
reason
no_feedback
checked at 2026-08-10T07:42:07.836989Z

Check it again, now

outside the census

Everything above is one sweep, pinned to one block. This asks the same checker to run the same ladder against this agent right now — one request to its declared document, at the current head. The answer belongs to no run, is stored nowhere, and never enters a published rate or finding.

On-chain snapshot

xlayer

token id: 5114
owner: 0x0361af173cae66337f3f05abdbb2b68e5c88ccfd
block: 67,576,783
observed: 2026-08-10T07:42:07.840638Z

tokenURIopen →

https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/27449647-2a1b-4233-bbc5-c4185fa51cd2.json

What the fetch saw

https

scheme: https
request url: https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/27449647-2a1b-4233-bbc5-c4185fa51cd2.json
final url: https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/27449647-2a1b-4233-bbc5-c4185fa51cd2.json
http status: 200
content type: application/json
size: 1,990 bytes
sha256: 6a4948df2c9e9ef154ae9c6dc0dcc99c48d270a20ad8dcad9a43b86daa232441
elapsed: 2,306 ms

This run

reproducible

Every status above is scoped to this sweep, at this block. Rerun it and you should get these answers back.

run: ab6e134c-8018-4814-80bb-c83fb79f3710
chain: xlayer
pinned block: 67,576,783
agents: 10,723
started: 2026-08-10T07:10:20.176367Z
finished: 2026-08-10T08:11:41.005767Z
checker: 0.7.0 · 55deaa9ce71c025a9199311a53cdc2de236eae53
spec commit: 68fc6765761a10fb26f0692df21c8a6f9d12b1be

Reproduce

cargo run -p sweeper -- xlayer   # at block 67576783

What each check measures →

The seven checks, with their evidence

Registered?rung 1 · registered

Reachable?rung 2 · resolvable

Readable?rung 3 · parseable

Follows the spec?rung 4 · conformant

Claims its identity?rung 5 · bound

Answers?rung 6 · live

Has feedback?rung 7 · attested

Check it again, now

On-chain snapshot

What the fetch saw

This run