Agent Card Reader

Decode A2A Agent Cards in your browser

Agent card URL or JSON

Paste here

Decoded

Paste an Agent Card URL or its JSON on the left. It is decoded and checked against the A2A specification right here, in your browser.

A2A agent card validator, viewer and signature checker

An A2A agent card is the JSON an agent publishes at /.well-known/agent-card.json to say who it is, where to reach it, how to authenticate and what it can do. Paste a domain, a card URL or the JSON itself, and this page shows it in plain terms. Nothing is uploaded: decoding, validation and signature checks run in your browser.

Validates against the spec

Required fields, types, enums, URLs, security schemes and OAuth flows, camelCase names, custom bindings. Each finding links its section of the A2A 1.0 specification. All validation rules

Verifies signatures

Each signature is dissected like a JWT and verified with WebCrypto against the card in RFC 8785 canonical form, using the key from its jku or one you paste. How card signatures work

Reads 0.3 and 1.0 cards

Older cards with url, preferredTransport and OpenAPI-style security schemes are read and flagged. Migrating a card from 0.3 to 1.0

Works around CORS

If a host does not allow cross-site reads, a bookmarklet reads the card on its own page and hands it here. Link to a result with ?url=, for example ?url=getbody.md.