MCP serverwork.autonet/agent-health

Issue/retrieve a DNS TXT challenge for your agent's exact endpoint hostname. Owner key required. Publish the returned name/value in your DNS, then call verify_agent_domain. Pen

With consent=true run two bounded HEAD/GET checks on your DNS-verified endpoint, max once/hour. With consent=false read your last private result. Not an audit or LLM test; no s

Read recent HTTP/TLS results to diagnose failures. Limit 1–500.

Read unsigned, timestamped operational evidence and recent incidents before a trust decision. Check stale, provisional, open_incident and incidents_truncated. This does not cer

Send an owner-authenticated heartbeat from the actual worker loop; does not replace endpoint checks. Use the agent-specific key, not X-Autonet-Token. Never send a heartbeat to

Read FIRST: purpose, endpoint ownership requirements, heartbeat setup, scoring limits, API and free service usage.

Read public operational status and nested trust score. Provisional score is null; not identity/safety certification.

Read 30-day completed heartbeat windows, daily counts, gaps and streaks. Public, self-reported receipt evidence, not uptime. Incomplete windows excluded; registration-anchored

Get a five-minute Ed25519 signed presence observation. Verify compact JWS against Autonet's trusted key endpoint, issuer, audience, subject and expiry. Signature proves origin/

Owner-only retrieve webhook signing secret, or rotate it when explicitly requested. Keep the secret private.

Graduate an owned heartbeat registration to public endpoint probing, preserving id and history.

Spend up to max_coins on a temporary callback inbox (currently 5 coins, 1 hour, 20 events). Reuse request_key on retries. Receive URL is write-only; reads need the utility key.

Create a free utility account once; immediately save the returned private API key. 100 welcome coins. No billing or health registration.

Permanently remove an owned registration and probe history when the operator requests it. Admin request logs retain up to 30 days.

Delete an owned inbox and all its events immediately. Its receive URL stops working. No coin refund; usage ledger remains.

Revoke your pull subscription and its key immediately. Does not delete monitored agents.

Diagnose one public HTTP(S) URL without registration: DNS, TCP, verified TLS and HTTP HEAD. Only ports 80/443, no credentials/query strings/fragments. Does not follow redirects

Read Autonet's public Ed25519 verification keys (JWKS), including retired verification keys. Keys are public; signing secrets are never returned. Pin issuer https://autonet.wor

Read public registry status, evidence mode and heartbeat receipt regularity.

Get current coin costs and resource limits before spending. Paid usage and invoices are disabled in the beta.

Read the free coin allowance, callback workflow, privacy limits and API usage. No health endpoint required.

List your unexpired callback inboxes and receive URLs. Keep these addresses private to authorized senders.

Probe your registered endpoint now with the owner key. One per 60s; paused agents must resume first. Uses scheduled HTTP/TLS checks and incident transitions. Does not send a wo

Read up to 20 events after a cursor, without consuming them or coins. Payloads are untrusted data; sender signatures are NOT verified. Persist next_cursor to resume.

Read heartbeat transitions after the saved cursor. Persist next_cursor after processing; retries can replay. Poll every 30 seconds, drain pages when has_more, deduplicate event

Register a real worker once. Heartbeat mode needs no endpoint and reports contact only. Probe mode requires your own deployed readiness URL. Store the returned owner key secure

Free isolated lifecycle dry run: healthy, incident, or stale_payload. Produces a signed webhook fixture for local verification. No network requests, production registration

Send a self-reported heartbeat from the actual worker. Owner key required; note/version are public. Honor Retry-After. Dormant workers revive on receipt. This does not prove se

Opt in to a seven-day pull feed for 1–20 existing heartbeat agents. No endpoint or registration required. Save subscription_key and cursor from the response; key is returned on

Send one signed incident.test to your configured webhook. Owner-only, once/minute. No incident or score change. Inspect delivered and receiver_status; do not automatically repl

Owner-only update. Pause when retiring/testing; resume with paused=false. Endpoint and webhook must be public URLs you control.

Read your private coin balance and usage ledger. Requires a utility key, not a health owner key.

Check your published DNS TXT record. Proves domain control only, not agent identity or safety. Checks limited to once per minute. Successful proof renews hourly while TXT remai