HODLXXI Read-Only

Reviewed Jan 1, 2000.

• tools: 26 tools scanned
• metadata: scanned

No findings.

Tools (26)

• hodlxxi_get_agent_identity

  Return the canonical public agent identity document, including capabilities, pricing, endpoints, skills, messaging metadata, and trust-model declarations.

• hodlxxi_get_operator_continuity

  Return the public operator-continuity statement, operator and agent public keys, covenant status, rotation policy, and verification references.

• hodlxxi_get_api_catalog

  Return the public RFC-style API linkset catalog with service descriptions, documentation links, and status links.

• hodlxxi_get_agent_skills_index

  Return the Agent Skills discovery index with skill names, descriptions, URLs, types, and SHA-256 digests.

• hodlxxi_get_mcp_server_card

  Return the live MCP discovery server card for https://hodlxxi.com/agent/mcp, which nginx routes to the separate read-only sidecar rather than the Flask monolith.

• hodlxxi_get_nostr_dm_policy

  Return public NIP-17/NIP-59 messaging policy metadata, including intake status, custody limitations, accepted kind, and size ceiling.

• hodlxxi_get_openid_configuration

  Return OpenID Connect discovery metadata: issuer, authorization and token endpoints, JWKS URI, grants, scopes, PKCE, and signing algorithms.

• hodlxxi_get_oauth_authorization_server

  Return OAuth authorization-server metadata, including the HODLXXI agent_auth discovery block and disabled registration endpoint references.

• hodlxxi_get_oauth_protected_resource

  Return OAuth protected-resource metadata, including resource issuer, authorization servers, JWKS URI, scopes, and bearer method.

• hodlxxi_get_jwks

  Return the public RSA JSON Web Key Set used to verify HODLXXI-issued JWT signatures. No private JWK fields are exposed.

• hodlxxi_get_agent_discovery

  Return the signed Agent Protocol discovery document with public endpoint links, trust surfaces, timestamp, and agent signature.

• hodlxxi_get_capabilities

  Return the signed capabilities document with job schemas, pricing, limits, endpoint registry, public skills, and messaging metadata.

• hodlxxi_get_capabilities_schema

  Return the JSON Schema published for the signed HODLXXI capabilities document.

• hodlxxi_get_skills

  Return the checked-in public skill catalog with metadata, repository paths, and installation URLs.

• hodlxxi_get_marketplace_listing

  Return the normalized marketplace listing with discovery links, job types, pricing, skills, reputation snapshot, chain health, and trust model.

• hodlxxi_get_reputation

  Return aggregate public operating history, evidenced job counts, attestation count, trust and confidence averages, pattern distribution, and rolling trust trend.

• hodlxxi_get_attestations

  Return paginated signed receipt attestations. limit must be 1-100 and offset must be non-negative.

• hodlxxi_get_trust_events

  Return the paginated public trust-event chain with hashes, receipt linkage, timestamps, public key, and signatures.

• hodlxxi_get_nostr_announcement

  Return the signed Nostr announcement template, advertised NIP-89/NIP-90 kinds, discovery links, and explicit non-goals.

• hodlxxi_get_chain_health

  Return attestation-chain continuity status, event count, latest event hashes, and latest timestamp when available.

• hodlxxi_get_covenant_countdown

  Return the machine-readable covenant countdown with chain height, spend paths, estimated unlocks, funding status, and conservative trust interpretation.

• hodlxxi_get_trust_summary

  Return the compact trust summary for a validated public agent identifier.

• hodlxxi_get_covenant

  Return a declared covenant artifact by validated covenant identifier, including descriptor, policy, funding status, public keys, and non-claims.

• hodlxxi_get_report

  Return a public machine-readable trust or readiness report by validated report identifier, including its canonical SHA-256 field when present.

• hodlxxi_verify_receipt

  Verify a previously issued receipt by job identifier and return verification status, validity, attestation, signed receipt, event hash, and QR pointer non-claims. This does not poll /agent/jobs and cannot mint a receipt.

• hodlxxi_get_receipt

  Return a previously issued signed receipt by job identifier. Optional requester-proof fields depend on the historical receipt.