Sections
Agent

AgentFence

xlayer|id 9703|owner 0xefe9b7f1dab9c6351876b81a86c793d26097aff0

Checks 1–7

AgentFence 是专为 AI 智能体设计的输入安全关卡:识别风险,扫描提示词、网页、文档和 MCP 工具中的危险内容;还原攻击,揭开隐藏指令、编码载荷和经过伪装的恶意意图;解释依据,给出风险分数、威胁类别和可验证的命中证据;约束行动,明确必须阻止的工具、权限和钱包操作;净化交付,移除恶意指令并保留有价值的事实内容;安全继续,让智能体隔离风险后仍能完成原任务。

Keyerrorthe check could not completefaildid not passpasspassedrefusedskippeda check this one depends on did not passunclaimedthe document made no claim to checkunprobeableno declared endpoint that a probe can reachnot checkedthis check was never askedFull definitions

The seven checks, with their evidence

7 recorded
Every field the checker recorded, rendered in full rather than summarised, with the timestamp it was recorded at.
  1. Registered?rung 1 · registered

    pass

    The agent exists in the on-chain registry, with an owner and a document URL.

    passed

    block_number
    68181846
    chain_id
    196
    owner
    0xefe9b7f1dab9c6351876b81a86c793d26097aff0
    registry
    0x8004a169fb4a3325136eb29fa0ceb6d2e539a432
    token_id
    9703
    tx_hash
    0x4733dff940c8f59f0988021e9aa4268855f6302c95e052f9ec0853b90328a739

    checked at 2026-08-17T08:11:05.315487Z

  2. Readable?rung 3 · parseable

    pass

    What came back is valid JSON that a machine can read.

    passed

    body_bytes
    1272
    body_sha256
    bc1333ff12e07e30778066a3fc2a7e3e086d817c5f034838fb59b8b6d8c7f7a1
    content_type
    application/json

    checked at 2026-08-17T08:11:05.315487Z

  3. Follows the spec?rung 4 · conformant

    pass

    The document meets what ERC-8004 requires of it.

    passed

    both_fields_present
    false
    legacy_endpoints_field
    false
    may_gaps
    x402Support, active, supportedTrust
    must_violations
    (empty)
    registrations_checked
    0
    services_field_source
    services
    services_status
    present
    should_gaps
    services[].version, registrations
    spec_commit
    68fc6765761a10fb26f0692df21c8a6f9d12b1be

    checked at 2026-08-17T08:11:05.315487Z

  4. Claims its identity?rung 5 · bound

    unclaimed

    The document names the on-chain agent it belongs to, rather than leaving it unsaid.

    unclaimed — the document made no claim to check

    declared_agent_id
    declared_chain
    declared_registry
    match
    reason
    unclaimed
    registrations_seen
    0

    checked at 2026-08-17T08:11:05.315487Z

  5. Answers?rung 6 · live

    fail

    A declared endpoint responds to a probe. Not implemented yet, so nobody passes or fails it.

    did not pass

    endpoints
    {"declared":"https://agentfence-production.up.railway.app/v1/scan/text","elapsed_ms":655,"final_url":"https://agentfence… (325 chars — expand){"declared":"https://agentfence-production.up.railway.app/v1/scan/text","elapsed_ms":655,"final_url":"https://agentfence-production.up.railway.app/v1/scan/text","http_status":404,"index":0,"kind":"https","name":"MCP","outcome":"not_live","probed":true,"probed_url":"https://agentfence-production.up.railway.app/v1/scan/text"}
    endpoints_answered_not_live
    1
    endpoints_declared
    1
    endpoints_live
    0
    endpoints_our_error
    0
    endpoints_payment_gated
    0
    endpoints_probeable
    1
    endpoints_probed
    1
    endpoints_refused
    0

    checked at 2026-08-17T08:36:22.605670Z

  6. Has feedback?rung 7 · attested

    fail

    At least one on-chain feedback entry names this agent.

    did not pass

    distinct_authors
    0
    feedback_count
    0
    reason
    no_feedback

    checked at 2026-08-17T08:11:05.315487Z

Check it again, now

outside the census
Everything above is one sweep, pinned to one block. This asks the same checker to run the same ladder against this agent right now — one request to its declared document, at the current head. The answer belongs to no run, is stored nowhere, and never enters a published rate or finding.
Sends one request to the agent’s own server. Rate limited.

On-chain snapshot

xlayer
token id
9703
owner
0xefe9b7f1dab9c6351876b81a86c793d26097aff0
block
68,181,846
observed
2026-08-17T08:11:05.318122Z
tokenURIopen
https://static.okx.com/cdn/web3/wallet/marketplace/headimages/agent/card/0340f709-1cb2-4baa-b7b0-db97b6f9c980.json

What the fetch saw

https
scheme
https
http status
200
content type
application/json
size
1,272 bytes
sha256
bc1333ff12e07e30778066a3fc2a7e3e086d817c5f034838fb59b8b6d8c7f7a1
elapsed
2,642 ms

This run

reproducible
Every status above is scoped to this sweep, at this block. Rerun it and you should get these answers back.
run
c608c6b7-f483-43bf-9bf2-7ca582984365
chain
xlayer
pinned block
68,181,846
agents
11,003
started
2026-08-17T07:14:43.125385Z
finished
2026-08-17T08:18:04.140255Z
checker
0.7.0 · 55deaa9ce71c025a9199311a53cdc2de236eae53
spec commit
68fc6765761a10fb26f0692df21c8a6f9d12b1be
Reproduce
cargo run -p sweeper -- xlayer   # at block 68181846

What each check measures →