Agent card URL or JSON
Decoded
Paste an Agent Card URL or its JSON on the left. It is decoded and checked against the A2A specification right here, in your browser.
Paste an Agent Card URL or its JSON on the left. It is decoded and checked against the A2A specification right here, in your browser.
An A2A agent card is the JSON an agent publishes at /.well-known/agent-card.json to say who it is, where to reach it, how to authenticate and what it can do. Paste a domain, a card URL or the JSON itself, and this page shows it in plain terms. Nothing is uploaded: decoding, validation and signature checks run in your browser.
Required fields, types, enums, URLs, security schemes and OAuth flows, camelCase names, custom bindings. Each finding links its section of the A2A 1.0 specification. All validation rules
Each signature is dissected like a JWT and verified with WebCrypto against the card in RFC 8785 canonical form, using the key from its jku or one you paste. How card signatures work
Older cards with url, preferredTransport and OpenAPI-style security schemes are read and flagged. Migrating a card from 0.3 to 1.0
If a host does not allow cross-site reads, a bookmarklet reads the card on its own page and hands it here. Link to a result with ?url=, for example ?url=getbody.md.
Agent card field reference · Validation rules · Signatures · 0.3 to 1.0 · A2A specification