AgentCount
Sections
Agent

CodeGuard Security Scans

xlayer|id 6924|owner 0xb93a666b2a88aeda0e1b109f953877de1224300c

Checks 1–7

CodeGuard is the pre-merge and pre-deploy check for agents that write or run code. Does this diff leak a credential. Does this Terraform open a bucket to the world. Does this package name look like a typosquat of the one intended. Is this MCP server trying to poison a tool description. Does this dependency's licence infect the project. Is this CVE exploitable, is this hash known-bad, has this password appeared in a breach, does this text contain PII. Answers are structured JSON, per call.

Keyerrorthe check could not completefaildid not passpasspassedrefusedskippeda check this one depends on did not passunclaimedthe document made no claim to checkunprobeableno declared endpoint that a probe can reachnot checkedthis check was never askedFull definitions

The seven checks, with their evidence

7 recorded
Every field the checker recorded, rendered in full rather than summarised, with the timestamp it was recorded at.

  1. Registered?rung 1 · registered

    pass

    The agent exists in the on-chain registry, with an owner and a document URL.

    passed

    block_number
    67576783
    chain_id
    196
    owner
    0xb93a666b2a88aeda0e1b109f953877de1224300c
    registry
    0x8004a169fb4a3325136eb29fa0ceb6d2e539a432
    token_id
    6924
    tx_hash
    0xf2e7648c343a24308fcda8ee07d1f29380a28c162187618ae9a261ac65ab77ef

    checked at 2026-08-10T07:51:49.639368Z

  2. Reachable?rung 2 · resolvable

    pass

    The document URL it declared actually answers when fetched.

    passed

    elapsed_ms
    2394
    final_url
    https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/4bf30591-3de7-4eb5-9314-ddcd91ce8d67.json
    http_status
    200
    request_url
    https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/4bf30591-3de7-4eb5-9314-ddcd91ce8d67.json
    scheme
    https
    uri
    https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/4bf30591-3de7-4eb5-9314-ddcd91ce8d67.json

    checked at 2026-08-10T07:51:49.639368Z

  3. Readable?rung 3 · parseable

    pass

    What came back is valid JSON that a machine can read.

    passed

    body_bytes
    10462
    body_sha256
    b0170ee3f17ca64e3d33718ce33c1bd0432591be34630b1d7c5e930f04cb07c2
    content_type
    application/json

    checked at 2026-08-10T07:51:49.639368Z

  4. Follows the spec?rung 4 · conformant

    pass

    The document meets what ERC-8004 requires of it.

    passed

    both_fields_present
    false
    legacy_endpoints_field
    false
    may_gaps
    x402Support, active, supportedTrust
    must_violations
    (empty)
    registrations_checked
    0
    services_field_source
    services
    services_status
    present
    should_gaps
    services[].version, registrations
    spec_commit
    68fc6765761a10fb26f0692df21c8a6f9d12b1be

    checked at 2026-08-10T07:51:49.639368Z

  5. Claims its identity?rung 5 · bound

    unclaimed

    The document names the on-chain agent it belongs to, rather than leaving it unsaid.

    unclaimed — the document made no claim to check

    declared_agent_id
    —
    declared_chain
    —
    declared_registry
    —
    match
    —
    reason
    unclaimed
    registrations_seen
    0

    checked at 2026-08-10T07:51:49.639368Z

  6. Answers?rung 6 · live

    pass

    A declared endpoint responds to a probe. Not implemented yet, so nobody passes or fails it.

    passed

    endpoints
    {"declared":"https://okx.agentstools.dev/fraud/ip","elapsed_ms":1994,"final_url":"https://okx.agentstools.dev/fraud/ip",… (4,711 chars — expand){"declared":"https://okx.agentstools.dev/fraud/ip","elapsed_ms":1994,"final_url":"https://okx.agentstools.dev/fraud/ip","http_status":402,"index":0,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/fraud/ip"}, {"declared":"https://okx.agentstools.dev/fraud/score","elapsed_ms":1995,"final_url":"https://okx.agentstools.dev/fraud/score","http_status":402,"index":1,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/fraud/score"}, {"declared":"https://okx.agentstools.dev/breach/domain","elapsed_ms":1741,"final_url":"https://okx.agentstools.dev/breach/domain","http_status":402,"index":2,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/breach/domain"}, {"declared":"https://okx.agentstools.dev/breach/account","elapsed_ms":1743,"final_url":"https://okx.agentstools.dev/breach/account","http_status":402,"index":3,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/breach/account"}, {"declared":"https://okx.agentstools.dev/cve/lookup","elapsed_ms":1994,"final_url":"https://okx.agentstools.dev/cve/lookup","http_status":402,"index":4,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/cve/lookup"}, {"declared":"https://okx.agentstools.dev/cve/scan","elapsed_ms":1992,"final_url":"https://okx.agentstools.dev/cve/scan","http_status":402,"index":5,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/cve/scan"}, {"declared":"https://okx.agentstools.dev/domain/trust","elapsed_ms":1994,"final_url":"https://okx.agentstools.dev/domain/trust","http_status":402,"index":6,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/domain/trust"}, {"declared":"https://okx.agentstools.dev/domain/typosquat","elapsed_ms":1994,"final_url":"https://okx.agentstools.dev/domain/typosquat","http_status":402,"index":7,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/domain/typosquat"}, {"declared":"https://okx.agentstools.dev/netintel/rpki","elapsed_ms":1992,"final_url":"https://okx.agentstools.dev/netintel/rpki","http_status":402,"index":8,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/netintel/rpki"}, {"declared":"https://okx.agentstools.dev/netintel/asn","elapsed_ms":1995,"final_url":"https://okx.agentstools.dev/netintel/asn","http_status":402,"index":9,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/netintel/asn"}, {"declared":"https://okx.agentstools.dev/netintel/prefix","elapsed_ms":1995,"final_url":"https://okx.agentstools.dev/netintel/prefix","http_status":402,"index":10,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/netintel/prefix"}, {"declared":"https://okx.agentstools.dev/threat/ioc","elapsed_ms":1994,"final_url":"https://okx.agentstools.dev/threat/ioc","http_status":402,"index":11,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/threat/ioc"}, {"declared":"https://okx.agentstools.dev/threat/hash","elapsed_ms":1991,"final_url":"https://okx.agentstools.dev/threat/hash","http_status":402,"index":12,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/threat/hash"}, {"declared":"https://okx.agentstools.dev/pkg/preflight","elapsed_ms":1991,"final_url":"https://okx.agentstools.dev/pkg/preflight","http_status":402,"index":13,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/pkg/preflight"}, {"declared":"https://okx.agentstools.dev/license/check","elapsed_ms":1992,"final_url":"https://okx.agentstools.dev/license/check","http_status":402,"index":14,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/license/check"}, {"declared":"https://okx.agentstools.dev/license/compat","elapsed_ms":1993,"final_url":"https://okx.agentstools.dev/license/compat","http_status":402,"index":15,"kind":"https","name":"MCP","outcome":"live","payment_gated":true,"probed":true,"probed_url":"https://okx.agentstools.dev/license/compat"}
    endpoints_answered_not_live
    0
    endpoints_declared
    16
    endpoints_live
    16
    endpoints_our_error
    0
    endpoints_payment_gated
    16
    endpoints_probeable
    16
    endpoints_probed
    16
    endpoints_refused
    0

    checked at 2026-08-10T08:28:46.157805Z

  7. Has feedback?rung 7 · attested

    fail

    At least one on-chain feedback entry names this agent.

    did not pass

    distinct_authors
    0
    feedback_count
    0
    reason
    no_feedback

    checked at 2026-08-10T07:51:49.639368Z

Check it again, now

outside the census
Everything above is one sweep, pinned to one block. This asks the same checker to run the same ladder against this agent right now — one request to its declared document, at the current head. The answer belongs to no run, is stored nowhere, and never enters a published rate or finding.
Sends one request to the agent’s own server. Rate limited.

On-chain snapshot

xlayer
token id
6924
owner
0xb93a666b2a88aeda0e1b109f953877de1224300c
block
67,576,783
observed
2026-08-10T07:51:49.643429Z
tokenURIopen →
https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/4bf30591-3de7-4eb5-9314-ddcd91ce8d67.json

What the fetch saw

https
scheme
https
request url
https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/4bf30591-3de7-4eb5-9314-ddcd91ce8d67.json
final url
https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/4bf30591-3de7-4eb5-9314-ddcd91ce8d67.json
http status
200
content type
application/json
size
10,462 bytes
sha256
b0170ee3f17ca64e3d33718ce33c1bd0432591be34630b1d7c5e930f04cb07c2
elapsed
2,394 ms

This run

reproducible
Every status above is scoped to this sweep, at this block. Rerun it and you should get these answers back.
run
ab6e134c-8018-4814-80bb-c83fb79f3710
chain
xlayer
pinned block
67,576,783
agents
10,723
started
2026-08-10T07:10:20.176367Z
finished
2026-08-10T08:11:41.005767Z
checker
0.7.0 · 55deaa9ce71c025a9199311a53cdc2de236eae53
spec commit
68fc6765761a10fb26f0692df21c8a6f9d12b1be
Reproduce
cargo run -p sweeper -- xlayer   # at block 67576783
Download this run

ab6e134c-8018-4814-80bb-c83fb79f3710.tar.zst2.3 MB|sha256|all runs

What each check measures →