host39 integration guide

{
  "locator": "urn:ai:domain:moonbakery39.com:agent:orders",
  "identifier": "orders",
  "index_record": {
    "registry_url": "https://agentcards.host39.org/moonbakery39.com/orders.json",
    "media_type": "application/a2a-agent-card+json",
    "identifier": "urn:ai:domain:moonbakery39.com:agent:orders",
    "ttl_seconds": 86400,
    "display_name": "Moon Bakery",
    "status": "active"
  }
}

When media_type contains agent-card, registry_url is the direct card JSON URL (host39 SMB path). Re-resolve after ttl_seconds expires.

{
  "name": "Moon Bakery Orders Agent",
  "url": "https://time.moonbakery39.com",
  "authentication": { "schemes": ["Bearer"] },
  "capabilities": { "streaming": false, "pushNotifications": false },
  "_meta": {
    "identifier": "urn:ai:domain:moonbakery39.com:agent:orders",
    "publicUrl": "https://agentcards.host39.org/moonbakery39.com/orders.json",
    "hostedBy": "host39.org"
  }
}

Agent Status reads url as the runtime probe target. name and authentication inform dashboard display and future scoped probes.

{
  "name": "Time Agent",
  "url": "https://time.moonbakery39.com",
  "authentication": { "schemes": ["none"] },
  "skills": [{
    "id": "get-time",
    "name": "getTime",
    "inputModes": ["text"],
    "outputModes": ["text"]
  }]
}

Optional when hop 2 JSON already contains a usable url. Demo agent serves a time skill at the same base URL.

{
  "message": {
    "role": "user",
    "parts": [{ "type": "text", "text": "what time is it?" }]
  }
}

Mapped to Rora request_format a2a_jsonrpc. Verdict aggregated across 2,500+ residential probe nodes.

LOCATOR="urn:ai:domain:moonbakery39.com:agent:orders"
curl -sS -w "\nHTTP %{http_code}\n" \
  "https://api.nandaindex.org/api/v1/resolve?locator=$(python3 -c "import urllib.parse; print(urllib.parse.quote('$LOCATOR'))")" | jq .

Verify

• HTTP 200
• Response includes index_record with registry_url or card_url
• Note: Index registry_url may lag card moves — always fetch the live card URL host39 serves (step 2)

curl -sS -w "\nHTTP %{http_code}\n" \
  "https://agentcards.host39.org/moonbakery39.com/orders.json" | jq .

Verify

• HTTP 200
• Card JSON includes url (runtime base) and name
• Card _meta.identifier matches the URN locator

curl -sS -w "\nHTTP %{http_code}\n" -X POST "https://time.moonbakery39.com/run" \
  -H "Content-Type: application/json" \
  -d '{"message":{"role":"user","parts":[{"type":"text","text":"what time is it?"}]}}'

Verify

• HTTP 200 (or structured auth error — confirms reachability)
• Response body is non-empty JSON

# Tier 1 — enable monitoring (replace SECRET; agent_card_url = live host39 card JSON)
BODY='{"event":"monitoring.enabled","locator":"urn:ai:domain:moonbakery39.com:agent:orders","enable_monitoring":true,"agent_card_url":"https://agentcards.host39.org/moonbakery39.com/orders.json","display_name":"Moon Bakery Orders Agent","status":"active"}'
SIG=$(printf '%s' "$BODY" | openssl dgst -sha256 -hmac "$NANDA_WEBHOOK_SECRET" | awk '{print $2}')

curl -sS -w "\nHTTP %{http_code}\n" -X POST "https://api.rora.carmel.so/api/partner/nanda/webhooks/card-published" \
  -H "Content-Type: application/json" \
  -H "X-Nanda-Signature: sha256=$SIG" \
  -d "$BODY" | jq .

Verify

• HTTP 202 Accepted
• Response includes agent_id and reliability block
• reliability.claim_url present when owner_email omitted (Tier 3 opt-in later)

curl -sS -w "\nHTTP %{http_code}\n" \
  "https://api.rora.carmel.so/api/partner/nanda/agents/urn:ai:domain:moonbakery39.com:agent:orders/registration" \
  -H "X-Nanda-Api-Token: $NANDA_STATUS_API_TOKEN" | jq .

Verify

• monitoring_state is registered or active
• probe_state may be pending_first_probe until the first scheduled probe (~60 min)

curl -sS -w "\nHTTP %{http_code}\n" \
  "https://api.rora.carmel.so/api/partner/nanda/agents/urn:ai:domain:moonbakery39.com:agent:orders/status" \
  -H "X-Nanda-Api-Token: $NANDA_STATUS_API_TOKEN" | jq .

Verify

• reliability.provider = agentstatus.dev
• reliability.verdict + reliability_label present
• reliability.report_url and reliability.badge_url populated

curl -sS -w "\nHTTP %{http_code}\n" \
  "https://api.rora.carmel.so/api/partner/nanda/agents/urn:ai:domain:moonbakery39.com:agent:orders/status/public" | jq .reliability

Verify

• HTTP 200 without X-Nanda-Api-Token
• reliability block matches authenticated status poll

curl -sS -w "\nHTTP %{http_code}\n" \
  "https://api.rora.carmel.so/api/partner/nanda/agents/urn:ai:domain:moonbakery39.com:agent:orders/badge.svg" \
  -o /tmp/nanda-badge.svg && head -c 200 /tmp/nanda-badge.svg

Verify

• HTTP 200, Content-Type image/svg+xml
• SVG renders verdict label (e.g. Pending, UP)

# Copy token from reliability.claim_url (step 6) — URL ends with ?token=…
TOKEN="{claim_token}"
curl -sS "https://api.rora.carmel.so/api/partner/nanda/claim/$TOKEN" | jq .

Verify

• valid: true
• Response includes agent_id, signup_url, dashboard_url, redeem_url
• claim_url in status poll matches agentstatus.dev/nanda/claim?token=…

# Same URL as reliability.report_url from step 6 — open in browser (no login)
open "https://agentstatus.dev/nanda/status?locator=urn%3Aai%3Adomain%3Amoonbakery39.com%3Aagent%3Aorders"

# Smoke: public report page loads (same URL as reliability.report_url)
curl -sS -o /dev/null -w "HTTP %{http_code}\n" \
  "https://agentstatus.dev/nanda/status?locator=urn%3Aai%3Adomain%3Amoonbakery39.com%3Aagent%3Aorders"

Verify

• HTTP 200
• Page shows agent name, URN, verdict / reliability label, and last checked time
• URL matches reliability.report_url from the status poll exactly

{# Use reliability.report_url from status poll — do not hardcode #}
<a href="{{ reliability.report_url }}" target="_blank" rel="noopener noreferrer">
  View full report
</a>

Verify

• “View full report” visible on the host39 card / AgentFacts surface
• href equals reliability.report_url (not a hardcoded or different URL)
• Opens agentstatus.dev/nanda/status?locator=… in a new tab

{# Option A — img from status poll (simplest) #}
<a href="{{ reliability.report_url }}" target="_blank" rel="noopener noreferrer">
  <img src="{{ reliability.badge_url }}" alt="Agent reliability status" height="28" />
</a>

{# Option B — live widget (auto-links to report_url) #}
<script
  src="https://api.rora.carmel.so/static/widget/nanda_badge.js"
  data-locator="urn:ai:domain:moonbakery39.com:agent:orders"
  data-report-url="https://agentstatus.dev/nanda/status?locator=urn%3Aai%3Adomain%3Amoonbakery39.com%3Aagent%3Aorders"
  async
></script>

Verify

• Badge renders on the host39 card (img or widget)
• Badge label matches current verdict (e.g. Pending, UP, Client error)
• Clicking badge opens the same report URL as step 10

# Copy full URL from: jq -r .reliability.claim_url  (step 6)
# Shape: https://agentstatus.dev/nanda/claim?token={claim_token}
open "https://agentstatus.dev/nanda/claim?token={claim_token}"

Verify

• Page loads without login
• Shows agent name, locator, and current reliability label
• Continue / signup links present (not a 404 or expired token)

# From step 9 response — new user signup URL
# platform.agentstatus.dev/auth/signup?source=nanda&claim_token=…&locator=…

# Existing logged-in user — attach agent (Bearer session token)
curl -sS -X POST "https://api.rora.carmel.so/api/partner/nanda/claim/{claim_token}/redeem" \
  -H "Authorization: Bearer $RORA_SESSION_TOKEN" | jq .

Verify

• Signup verify completes with nanda_claim_token (auto-redeem on verify)
• OR POST …/redeem returns ok: true for an existing session
• Do not use the pilot ops account (nanda@…) for this gate — that sees the fleet, not a single claim

# From step 9 response — dashboard deep link
# platform.agentstatus.dev/rora/agents/{agent_id}?source=nanda&locator=…

curl -sS "https://platform.agentstatus.dev/api/rora/agents" \
  -H "Authorization: Bearer $RORA_SESSION_TOKEN" | jq '.agents | map({id, name})'

Verify

• Dashboard opens to the claimed agent (agent_id from step 9)
• GET /api/rora/agents lists this agent under the redeemer's rora_signup_id
• Agent does not appear on a different user's account until they claim separately

{# Use reliability.claim_url from status poll — not dashboard URL directly #}
<a href="{{ reliability.claim_url }}" target="_blank" rel="noopener noreferrer">
  Manage alerts &amp; metrics
</a>

# Webhook — optional owner invite
# Optional on webhook — enables magic invite for card owner (Tier 3)
{
  "event": "monitoring.enabled",
  "locator": "urn:ai:domain:moonbakery39.com:agent:orders",
  "enable_monitoring": true,
  "agent_card_url": "https://agentcards.host39.org/moonbakery39.com/orders.json",
  "owner_email": "owner@example.com"
}

Verify

• “Manage alerts & metrics” (or similar) links to reliability.claim_url
• Tier 1 checkbox still does not require Agent Status signup
• When owner_email is sent, GET …/claim/{token}/start redirects owner toward signup/login with token prefilled