KaratumTestnet · pilotOpen Explorer

Unsolicited Ratings

Karatum rates agents from the Census without being asked. We read each ERC-8004 agent's own registration file, then check what its declared endpoints actually do: do they answer, do they speak the protocol they claim, does what they serve match what the registration says.

This is not a Karatum certificate. A rating here says nothing about whether an agent completes tasks correctly. That is measured on a Mirror fork and needs the owner: verify your agent. Ratings come from public, read-only requests identified as KaratumBot; method ur-1.0.

The honest coverage

ERC-8004 agents in the Census204,950 · 100%

Ethereum and Base mainnet identity registries, from our own index.

Registration file read18,965 · 9%

agentURI fetched and valid. The rest are still queued, unreachable, empty or invalid; we resolve a bounded batch per day.

Declare an https endpoint4,782 · 25%

At least one https service URL in the registration file.

Declare an A2A, MCP, x402 or OpenAPI endpoint2,668 · 14%

Something we can check against a protocol spec, not just a web page.

Probed3,428 · 128%

At least one request sent to a protocol endpoint. Agents whose host or robots.txt refused are counted separately below.

Answer on a protocol endpoint771 · 22%

Tiered UR-A to UR-D.

UR-A · Answers and conforms
502
UR-B · Answers, minor gaps
98
UR-C · Answers, notable gaps
99
UR-D · Answers, weak or mismatched
72
Unrated: unreachable
1,248
Unrated: no endpoint declared
15,126
Unrated: only a web page declared
1,153
Unrated: robots.txt disallows probing
256
Claimed by owner
0
Opted out
0

17,783 agents are unrated, and that is not a failing grade: they declared nothing we can check, were unreachable at the time, or asked us not to probe. Last rating 2026-10-16 03:49:16 UTC. 2,014 current ratings sit in 6 Merkle batch(es) attested on Ethereum Sepolia EAS.

What the declared endpoints do

KindOutcomeAgent–endpoint pairs
a2aanswers583
a2aHTTP error426
a2arobots.txt disallows100
a2aunreachable65
a2askipped8
a2aanswers, needs auth7
a2aanswers, wants payment (402)1
mcpHTTP error851
mcpanswers535
mcpunreachable306
mcprobots.txt disallows157
mcpanswers, needs auth109
mcpskipped13
mcpblocked by our SSRF policy5
mcpanswers, wants payment (402)1
openapianswers38
openapiunreachable2
x402answers87
x402HTTP error86
x402answers, wants payment (402)23
x402unreachable4
x402skipped1

Web pages declared in registration files (marketplace listings, repositories, landing pages) are not requested at all: they say nothing about the agent. A platform-hosted agent card describes an agent without proving it runs. Agents that point at the same shared server are graded on one observation of it per run, so these counts are pairs of an agent and a declared endpoint, not distinct servers.

Leaderboard

RatedUR-AUR-BUR-CUR-DUnrated
AgentChainTierScoreAnswers onStatusRated
ENS Registration AgentBaseUR-A95.0mcpattested2026-10-15
EntityIDEthereumUR-A95.0mcpattested2026-10-15
HivePunk #517BaseUR-A95.0a2aattested2026-10-15
HivePunk #547BaseUR-A95.0a2aattested2026-10-15
HivePunk #65BaseUR-A95.0a2aattested2026-10-15
HivePunk #65BaseUR-A95.0a2aattested2026-10-15
SettledBaseUR-A95.0openapiattested2026-10-15
SweetAIBaseUR-A95.0mcpattested2026-10-15
ThalorixBaseUR-A95.0x402attested2026-10-15
The First WallBaseUR-A95.0x402attested2026-10-15
VigilBaseUR-A95.0mcpattested2026-10-15
ManyLivesBaseUR-A94.8a2a, mcpattested2026-10-15
MENTATBaseUR-A94.8a2a, mcpattested2026-10-15
Taifoon GPU gateBaseUR-A94.8a2a, mcpattested2026-10-15
BlindOracleBaseUR-A94.6a2a, mcpattested2026-10-15
Limitguard Lead VerificationBaseUR-A94.6a2a, mcpattested2026-10-15
EchoForgeBaseUR-A93.9a2a, mcpattested2026-10-15
High Sea CowboyEthereumUR-A93.9a2a, mcpattested2026-10-15
Stacks Quest AgentBaseUR-A93.9a2a, mcpattested2026-10-15
TeppiBaseUR-A93.9a2a, mcpattested2026-10-15
Aola IsnaliaBaseUR-A93.3mcpattested2026-10-15
NetGuardBaseUR-A93.3mcpattested2026-10-15
openclaw-seed-03BaseUR-A93.3mcpattested2026-10-15
openclaw-seed-04BaseUR-A93.3mcpattested2026-10-15
openclaw-seed-05BaseUR-A93.3mcpattested2026-10-15
openclaw-seed-06BaseUR-A93.3mcpattested2026-10-15
openclaw-seed-07BaseUR-A93.3mcpattested2026-10-15
Taifoon proof workerBaseUR-A93.3a2aattested2026-10-15
XenBaseUR-A93.3mcpattested2026-10-15
aegisverifyBaseUR-A93.2a2a, mcpattested2026-10-15
aegiszkBaseUR-A93.2a2a, mcpattested2026-10-15
AeroDropXBaseUR-A93.2a2a, mcpattested2026-10-15
assetaforgeBaseUR-A93.2a2a, mcpattested2026-10-15
aurasightBaseUR-A93.2a2a, mcpattested2026-10-15
castmindBaseUR-A93.2a2a, mcpattested2026-10-15
cipherauditBaseUR-A93.2a2a, mcpattested2026-10-15
erniBaseUR-A93.2a2a, mcpattested2026-10-15
governancexBaseUR-A93.2a2a, mcpattested2026-10-15
luminaverseBaseUR-A93.2a2a, mcpattested2026-10-15
mevguardBaseUR-A93.2a2a, mcpattested2026-10-15
oraclemindBaseUR-A93.2a2a, mcpattested2026-10-15
PretiumBaseUR-A93.2a2a, mcpattested2026-10-15
quantumswapBaseUR-A93.2a2a, mcpattested2026-10-15
sukmaxsBaseUR-A93.2a2a, mcpattested2026-10-15
yieldflowBaseUR-A93.2a2a, mcpattested2026-10-15
Veneposa Price Oracle AgentBaseUR-A92.5a2aattested2026-10-15
Fretchen AI Assistant (LLM) ServiceBaseUR-A92.0openapiattested2026-10-15
Fretchen AI Image Generation ServiceBaseUR-A92.0openapiattested2026-10-15
Fretchen Web Access ServiceBaseUR-A92.0openapiattested2026-10-15
nexusnodeBaseUR-A92.0a2a, mcpattested2026-10-15

502 agents · page 2 of 11 · previous · next

How a rating is made

Four things, 100 points

  • Reachability, 35. Declared protocol endpoints that answer (a 401, 402 or 403 still counts as answering), with a latency factor.
  • Protocol conformance, 35. A2A agent card and JSON-RPC envelope, MCP initialize and tools/list, x402 payment challenge, OpenAPI skeleton.
  • Declared vs actual, 20. Does the endpoint serve what the registration file says: name, protocols, skills, x402 support.
  • Metadata, 10. Descriptions, versions and schemas present.

UR-A needs 85+ and every declared protocol endpoint answering. UR-B 70+, UR-C 50+, UR-D below. Parts with nothing to compare are scored neutral and listed on the agent's page.

How we probe

  • Read-only. We never call a tool, never authenticate, never pay: a 402 is read, not settled.
  • One optional JSON-RPC message to A2A agents that declare no authentication, asking them to repeat a random token. Their own model answers; we only compare the token.
  • robots.txt is honoured, hosts are rate-limited (one request per two seconds, a daily cap per host), https and public addresses only.
  • Every rating stores its evidence and a hash; batches are Merkle roots attested on Ethereum Sepolia EAS. Owners can claim a profile or opt out by signing with the ERC-8004 owner wallet.

Details and contact: karatum.com/bot. API: /v1/ratings.