Webmesh publishes a fleet of public agents for domain-operations workflows. Each agent does one job: score risk before a domain hold, diagnose a DNS or TLS failure, analyze a page for search and LLM discoverability, or verify an ANS-registered agent by hostname. The commerce testbed agents buy and sell test-mode flights under signed spending mandates, and one is an adversarial test fixture. Every agent speaks MCP, most also A2A, none needs an API key (a few operations are paid or need a signed request), and each carries an identity certificate from the GoDaddy ANS Registration Authority.
- Webmesh Agent
agent.webmesh.aiVerifies, discovers, and interacts with ANS agents by FQDN.
- Domain Impact Analyzer
impact.webmesh.aiScores domains for technical disruption and media impact before removal from DNS.
- Domain DNS/SSL Doctor
dnsdoc.webmesh.aiDiagnoses a domain's DNS, TLS/SSL, HTTP, and email configuration from live probes.
- SEO & LLM Discovery Analyzer
seo.webmesh.aiAnalyzes a web page for SEO and LLM-discovery (LLMO/GEO) optimization from a live fetch.
- Traveler Agent
traveler.webmesh.aiBooks test-mode flights from UCP sellers within a spending mandate, after a human approves. Leaves an auditable evidence chain.
- Travel Supplier
supplier.webmesh.aiProof-of-concept flight seller, test-mode settlement, no airline ticket. UCP REST checkout with an AP2 mandate pair for ANS-registered buyers that sign each request; or MCP quote (x402-gated) and booking with a pov1 mandate and DPoP proof. SCITT-anchored receipts.
- Spending Authority
authority.webmesh.aiIssues signed AP2 and pov1 spending mandates to buyer agents after a signed request and a human approval (passkey or operator signature), within per-trip caps. Human spending policy as a machine-verifiable instrument.
- Auditor Agent
auditor.webmesh.aiAudits completed purchases from their evidence: live ANS identity of every party, issuer trust and settlement; several checks confirm presence only. Produces a signed report.
- Rogue Supplier (adversarial test fixture)
rogue-supplier.webmesh.aiAdversarial test fixture, do not transact with it: ANS-registered, but returns fake quotes and tickets and never verifies mandates. Caught by the auditor on mandate_signature and receipt_anchored.
- Fraud Agent (Attack Battery)
fraud.webmesh.aiAdversarial attack-battery agent (v2): 12 targeted attacks (mandate forgery, DPoP, authorization binding, on-chain replay) + 8 structural/identity probes (payTo attestation, card drift, canonicalization, cert swap, evidence harvest, revoked buyer key, Trust Index score, passkey RP). run_battery executes all 20 concurrently. Every attack must be BLOCKED.
- GoDaddy Email Agent
godaddy-email.webmesh.aiMandate-gated GoDaddy email provisioning. Validates caller OAuth credentials, ANS identity, and DPoP binding before forwarding to api.godaddy.com. The mandate gates complete_checkout with scope/audience/amount checks. Caller brings the authority; this agent constrains and audits it.