{"id":"2cfe1503-a877-40f3-b369-b86b175b5b78","slug":"universal-trust-adapter","kind":"mcp","name":"universal-trust-adapter","summary":"ATC/1.0 — Agent Trust Card protocol: Ed25519-signed trust cards, RFC 8785 JCS, 10 verification controls. The USB-C of agent trust. LIVE x402 endpoint (production): https://uta-trust-api.eddyflores100.","owner":"alicelabs-llc","repoUrl":"https://github.com/alicelabs-llc/universal-trust-adapter","license":"MIT","licenseTier":"permissive","trust":"community","stars":1,"match":null,"fewStars":true,"format":"mcp","createdAt":"2026-08-24T18:57:22.000Z","addedAt":"2026-10-14T06:15:16.383Z","logoUrl":"https://avatars.githubusercontent.com/u/272356380?v=4","linkOnly":false,"collection":null,"skillPath":null,"categories":["utilities"],"tags":["agent-trust-card","agents","alicelabs","atc","ed25519","rfc8785","security","trust"],"runtime":"node","local":true,"cloudCapable":false,"cloudCapability":"unknown","cloudReadyOnPlatform":false,"needsApiKey":false,"reviewed":false,"syncedAt":"2026-10-17T19:53:55.012Z","sample":false,"url":"https://conduits.dev/tools/universal-trust-adapter","language":"Python","transports":["stdio"],"install":{"npm":"marketnow-mcp"},"requirements":{"env":[],"upstreamMayCharge":false},"tools":null,"readme":"# Universal Trust Adapter (UTA)\n\n> **Repo ecosystem (one owner per concern, split 2026-09-26):** this repo owns the\n> **ATC protocol** — the v3.0 RFC draft ([`spec/`](./spec/)), the UTS schema, the\n> 36-vector conformance corpus ([`uta-monorepo/vectors/`](./uta-monorepo/vectors/)),\n> the reference implementation ([`uta-monorepo/`](./uta-monorepo/)), format adapters,\n> plugins, and the Stranger Manifesto.\n> Product code (`mcp-server`, npm `marketnow-mcp`, `atc-sdk`, integrations) lives in\n> [`alicelabs-llc/MARKETNOW`](https://github.com/alicelabs-llc/MARKETNOW); the live marketplace\n> (site, catalog data, data pipelines, Vercel deploys of marketnow.site) lives in\n> [`eddyflores100-lang/marketnow`](https://github.com/eddyflores100-lang/marketnow).\n\n**The USB-C of agent trust.**\n\n[![M8ven](https://m8ven.ai/badge/mcp/alicelabs-llc/universal-trust-adapter)](https://www.m8ven.com/mcp/alicelabs-llc/universal-trust-adapter)\n[![npm downloads](https://img.shields.io/npm/dm/marketnow-mcp.svg)](https://www.npmjs.com/package/marketnow-mcp)\n[![npm version](https://img.shields.io/npm/v/agent-trust-card.svg)](https://www.npmjs.com/package/agent-trust-card)\n[![GitHub release](https://img.shields.io/github/v/release/alicelabs-llc/universal-trust-adapter)](https://github.com/alicelabs-llc/universal-trust-adapter/releases)\n[![license](https://img.shields.io/badge/license-open--core%20MIT%20%C2%B7%20AL--1.0%20core-blue.svg)](https://marketnow.site/licensing)\n[![conformance](https://img.shields.io/badge/conformance-v1.3.5-brightgreen.svg)](https://www.marketnow.site/uta/conformance/)\n[![Rekor anchored](https://img.shields.io/badge/Sigstore%20Rekor-anchored-blue.svg)](https://www.marketnow.site/uta/conformance/anchors/)\n\nUTA translates between ALL trust credential formats used by AI agents via a canonical Universal Trust Schema (UTS).\n\nLike Zapier connects applications, **UTA connects trust standards**.\n\nBuilt by **Edison Flores** & **Alejandro Flores** at **AliceLabs LLC** (Wyoming, USA).\n\n---\n\n## ⚡ Verify our claims — the stranger test (30 seconds)\n\nEvery trust claim in this repo is re-derivable by a stranger, from live public URLs, with no account and no trust in our endpoints:\n\n```bash\n# 9 checks against Sigstore Rekor's LIVE transparency-log data:\n# entry exists · content hash · countersignature · signed tree head ·\n# Merkle inclusion proof · C2SP checkpoint — all verified locally.\ncurl -sL https://www.marketnow.site/uta/conformance/anchors/verify-rekor.mjs -o verify-rekor.mjs\nnode verify-rekor.mjs\n\n# Full conformance suite (14 vectors, stage scoring, curl + node only):\n# https://www.marketnow.site/uta/conformance/\n```\n\n**Exercised in production, receipts public:** we rotated our CA key `mn-ca-002` → `mn-ca-003` on 2026-09-08 after private-key material was found committed to a public repository (exposure confirmed; no third-party misuse observed). Revocation published same-day, postmortem public: **https://marketnow.site/security/incidents/2026-09-08**. Three Rekor log entries (logIndex `2762061972`, `2764017355`, `2764479676`) anchor the digests, and the published npm tarball's tar layer rebuilds byte-exact from source (sha256 `519d406a…`).\n\n---\n\n## 🌐 The Stranger Manifesto — 13 languages\n\n> **Trust that requires membership is not trust. It's a guest list.**\n\nTen build rules for stranger-verifiable agent trust — read it in your language\n(every version anchored to the same live receipts):\n\n[English](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-en.md) · [Español](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-es.md) · [Português](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-pt.md) · [Français](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-fr.md) · [Deutsch](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-de.md) · [Italiano](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-it.md) · [Русский](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-ru.md) · [日本語](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-ja.md) · [中文](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-zh.md) · [한국어](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-ko.md) · [हिन्दी](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-hi.md) · [العربية](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-ar.md) · [Türkçe](https://github.com/alicelabs-llc/universal-trust-adapter/blob/main/manifesto/manifesto-tr.md)\n\nMarkdown sources: [`manifesto/`](./manifesto/) — one file per language, same content, same receipts.\nRendered right here on GitHub; the marketnow.site/manifesto/ pages ship with the next site deploy.\n\n## 🌍 Visa & Mastercard article — 14 languages\n\n*\"Visa has a Trusted Agent Protocol. Mastercard has Verifiable Intent. Here's the layer neither one gives you.\"*\n\n- **[English — canonical, full version](https://dev.to/edison_flores_6d2cd381b13/visa-has-a-trusted-agent-protocol-mastercard-has-verifiable-intent-heres-the-layer-neither-one-5g41)**\n- [العربية](https://dev.to/edison_flores_6d2cd381b13/fyz-ldyh-brwtwkwl-llwkl-lmwthwqyn-wmstrkrd-ldyh-verifiable-intent-whdhh-hy-ltbq-lty-l-51kl)\n- [Deutsch](https://dev.to/edison_flores_6d2cd381b13/visa-hat-ein-trusted-agent-protokoll-mastercard-hat-verifiable-intent-hier-ist-die-schicht-die-1072)\n- [Español](https://dev.to/edison_flores_6d2cd381b13/visa-tiene-un-protocolo-de-agentes-de-confianza-mastercard-tiene-verifiable-intent-esta-es-la-2blc)\n- [Français](https://dev.to/edison_flores_6d2cd381b13/visa-a-un-protocole-dagents-de-confiance-mastercard-a-la-verifiable-intent-voici-la-couche-4g19)\n- [हिन्दी](https://dev.to/edison_flores_6d2cd381b13/visa-ke-paas-trusted-agent-protocol-hai-aur-mastercard-ke-paas-verifiable-intent-vh-leyr-jo-donon-men-4ofd)\n- [Bahasa Indonesia](https://dev.to/edison_flores_6d2cd381b13/visa-punya-trusted-agent-protocol-mastercard-punya-verifiable-intent-inilah-lapisan-yang-tidak-7bd)\n- [Italiano](https://dev.to/edison_flores_6d2cd381b13/visa-ha-un-protocollo-per-agenti-affidabili-mastercard-ha-la-verifiable-intent-ecco-il-layer-che-21f5)\n- [日本語](https://dev.to/edison_flores_6d2cd381b13/visahatrusted-agent-protocolwo-mastercardhaverifiable-intentwochi-tuteiru-dotiramokurenaireiyagakokoniaruri-ben-yu-ban--3bnc)\n- [한국어](https://dev.to/edison_flores_6d2cd381b13/visaneun-trusted-agent-protocoli-issgo-mastercardneun-verifiable-intentga-issda-dul-da-juji-anhneun-reieoga-yeogi-issda-hangugeo-om5)\n- [Português](https://dev.to/edison_flores_6d2cd381b13/a-visa-tem-um-protocolo-de-agentes-confiaveis-a-mastercard-tem-verifiable-intent-aqui-esta-a-3g8d)\n- [Русский](https://dev.to/edison_flores_6d2cd381b13/u-visa-iest-protokol-dovieriennykh-aghientov-u-mastercard-verifiable-intent-vot-sloi-kotorogho-nie-hed)\n- [Türkçe](https://dev.to/edison_flores_6d2cd381b13/visanin-bir-trusted-agent-protocolu-mastercardin-verifiable-intenti-var-ikisinin-de-size-2o27)\n- [Tiếng Việt](https://dev.to/edison_flores_6d2cd381b13/visa-co-trusted-agent-protocol-mastercard-co-verifiable-intent-day-la-lop-ma-khong-ben-nao-cung-16kg)\n- [中文](https://dev.to/edison_flores_6d2cd381b13/visa-you-liao-ke-xin-dai-li-xie-yi-mastercard-you-liao-ke-yan-zheng-yi-tu-dan-ta-men-du-mei-gei-ni-de-na-ceng-zhong-wen-ban--n4g)\n\n## 🌍 Global Trust Series (multi-language, 2026-09-08)\n\nThe 2026 gray-market quota trust crisis, documented — plus the receipts-based fix:\n\n- [English](https://telegra.ph/You-Paid-an-AI-Reseller--Then-the-Rules-Changed-Mid-Cycle-09-08) — You Paid an AI Reseller — Then the Rules Changed Mid-Cycle\n- [中文](https://telegra.ph/你买的-AI-合租中转被改规则或跑路开发者自保清单附密码学验证思路-09-08) — 你买的 AI 合租/中转被改规则或跑路？开发者自保清单\n- [Русский](https://telegra.ph/Oplatili-AI-podpisku-cherez-posrednika--a-pravila-izmenilis-posredi-cikla-09-08) — Оплатили AI-подписку через посредника — а правила изменились посреди цикла?\n- [Español](https://telegra.ph/Pagaste-por-Claude-o-Cursor-a-un-revendedor-y-las-reglas-cambiaron-a-mitad-del-ciclo-09-08) — Pagaste por Claude o Cursor a un revendedor ¿y las reglas cambiaron a mitad del ciclo?\n- [Sourced timeline (EN)](https://rentry.co/y26cps92) — The 2026 AI Quota Gray-Market Trust Crisis — A Sourced Timeline\n- [Series index](https://telegra.ph/MarketNow-Global-Trust-Series-2026-09-08) · Verify a trust card: https://marketnow.site/verify\n\n## 🆕 What's new — v5.1 (revocation that answers + tool fingerprinting)\n\n**Release v5.1 — roadmap items 1 & 5 (commit 7fb7db6a, Rekor anchor #4):**\n\n- **ATC Revocation + Transparency Log (MNR-CRL-1.0)** — a signed, append-only revocation registry for Agent Trust Cards and CA keys. The `/api/trust?action=revocation` page used to *promise* an OCSP responder that returned 404; now `GET /api/ocsp?card_id=…` / `?kid=…` answers for real: VALID / EXPIRED / REVOKED / SUPERSEDED / UNKNOWN, with PERMIT/DENY recommendation, fail-closed semantics, and the CRL signature embedded so any client can verify the signed layer independently (`GET /api/crl`). Seeded with real events — 3 superseded ATCs + the `mn-ca-002` key compromise (2026-09-08).\n- **Cryptographic Tool Fingerprinting (TFP-1.0)** — the OWASP MCP Cheat Sheet control \"verify tool descriptions haven't changed\", as an MCP tool: SHA-256 over the RFC 8785 JCS canonical form of each tool + a manifest fingerprint for the whole `tools/list` surface + drift reports (added / removed / changed) against pinned manifests. The core defense against tool poisoning and rug-pull redefinitions.\n- **MCP endpoint v1.15.0** (9 public remote tools — discovery/trust surface) and **npm `marketnow-mcp@1.15.0`** (15 local trust/security tools) — remote surface and package surface are different by design: the endpoint exposes public discovery over the live catalog, the package runs client-side against local credentials. The npm package also fixed the broken `repository.directory` link and upgraded the MCP SDK (DNS-rebinding advisory resolved; `npm audit` clean).\n- **Interceptor v1.1.0** (`@marketnow/cline-trust-plugin`, [npm](https://www.npmjs.com/package/@marketnow/cline-trust-plugin)) — revocation gate (fail-closed, 5-min TTL) + per-server tool-surface pinning/verification.\n- **Sentinel semgrep rules v2** — 29 rules: +tool-poisoning (MCP-TP), +exfiltration chains (MCP-EX), +multi-step attack chains (MCP-AC, roadmap v5.4 preview), +stale-trust caching (MCP-RR).\n- **Rekor anchor #4** (logIndex 2771735480) — the revocation registry itself is anchored in Sigstore's public log; the revocation history is third-party-checkable end-to-end.\n\n### v1.3.3 — the receipts release (previous)\n\n**Stranger-verifiable trust evidence:**\n\n- **Rekor transparency anchors (entries #1–#3)** — result digests committed to Sigstore's public append-only log; 9 local checks against live third-party data (run the stranger test above)\n- **Exercised CA key rotation** — `mn-ca-002` → `mn-ca-003` (key material found in a public repo; exposure confirmed, no third-party misuse), revocation published same-day — [postmortem](https://marketnow.site/security/incidents/2026-09-08), verifiers fail-safe inside the window\n- **Reproducible build** — `agent-trust-card`'s tar layer rebuilds byte-exact from source (the `.tgz` is anchored by digest; the tar layer by rebuild)\n- **New failure vectors** — `premature-atc` (credential accepted before verification completes), `expired-atc` (key no longer valid at verify time), stage scoring, published generator CA\n- **Conformance v1.3.3** — 14 public vectors · 24 checks + 10 mutants (runner-under-test) · versioned digests\n\n### v1.2.0 — Domain Reputation Endpoint (previous)\n\n**Domain Reputation Endpoint** (`/api/reputation`) — UTA now answers a second class of trust\nquestion. The Universal Trust API verifies *credentials*; this endpoint answers\n*\"can I trust this domain before I show it to a human or act on it?\"*\n\n- **Spec:** [`api/reputation-spec.md`](./api/reputation-spec.md) · v1.2 engine, stable\n- **Reference implementation:** [`api/reputation.ts`](./api/reputation.ts) — one file, zero\n  dependencies, hosting-neutral (Node 18+, Deno, Bun, Cloudflare Workers, any edge runtime)\n- **Verdicts:** `trusted` (95) · `unknown` (55) · `caution` (35) · `risky` (8) — deterministic,\n  transparent reasons, free & keyless, CDN-cacheable 24h\n- **Client parity:** identical engine runs in the browser ([ProdIntel](https://github.com/alicelabs-llc/Scraper)\n  `services/sourceTrust.ts`) — badges render instantly offline, get server-confirmed when reachable\n- **First consumer in production:** ProdIntel source safety gate\n- **v1.2 engine fix:** shortener matching is now exact-host/subdomain — v1.1 substring\n  matching wrongly scored `risky` marketplaces containing `t.co` inside `<name>.com`\n  (walmart.com, target.com, homedepot.com, flipkart.com). Cache consumers should key on v1.2.\n\nCode lives in this repo (GitHub is the single source of truth). Deployment is bring-your-own-host.\n\n---\n\n## ATC Versions in this repo\n\nUTA supports **TWO versions of ATC** (Agent Trust Card):\n\n| Version | Status | Multi-sig | Spec file | Description |\n|---|---|---|---|---|\n| **ATC/1.0** | Public, stable | Single-sig (Ed25519) | [`SPEC.md` → MARKETNOW repo](https://github.com/alicelabs-llc/MARKETNOW/blob/master/docs/atc-spec/SPEC.md) | Simple, single-CA credential. SDK: npm [`agent-trust-card`](https://www.npmjs.com/package/agent-trust-card). |\n| **ATC v3.0** | Draft 00, pre-public review | Multi-format (Ed25519 + EAT-CWT + W3C VC) | [`spec/RFC-ATC-v3-Draft-00.md`](./spec/RFC-ATC-v3-Draft-00.md) | Multi-sig (N-of-M), multi-format. Backward-compatible with v2.0. Used internally by UTA. |\n\nATC v3.0 supersedes ATC v2.0 (which itself was the basis for the simpler ATC/1.0 SDK). A v2.0 ATC remains valid; v3.0 verifiers accept v2.0 credentials and treat them as having a single signature.\n\n---\n\n## 🚀 Quick install\n\n```bash\n# Install the uta-verify CLI (npm channel — works for everyone with Node.js)\nnpm install -g @marketnow/uta-verify\n# or: curl -fsSL https://marketnow.site/install.sh | bash\n#    (the site script wraps the same npm channel; it carries the new flow\n#     after the next marketnow.site deploy — see eddyflores100-lang/marketnow)\n\n# Or install individual packages\nnpm install agent-trust-card        # ATC/1.0 SDK\nnpm install -g marketnow-mcp       # MCP server (15 trust tools)\nnpx @marketnow/uta-conformance    # run the 14-vector conformance suite\nnpx @marketnow/sentinel-rules --path .  # 29 MCP security rules, zero-dep scan\nnpx marketnow-audit bit.ly        # domain scam-check + ATC + OCSP, CI exit codes\n```\n\n## 📊 Project stats\n\n| Metric | Value |\n|---|---|\n| NPM packages | 12 (combined last-week downloads: 4,901+) |\n| Conformance (live) | 14 public vectors · 24 checks + 10 mutants · v1.3.5 (npm-synced) |\n| Transparency anchors | 3 Rekor log entries (verify-rekor.mjs, 9 checks) |\n| CA key rotation | exercised 2026-09-08 (`mn-ca-002` → `mn-ca-003`) — [postmortem](https://marketnow.site/security/incidents/2026-09-08) |\n| Test vectors (ATC/1.0) | 5 frozen + manifest — [MARKETNOW repo](https://github.com/alicelabs-llc/MARKETNOW/tree/master/docs/atc-spec/test-vectors) |\n| Test vectors (ATC v3.0) | 36 (8 positive + 17 negative + 5 mutation + 6 cross-language) — [`uta-monorepo/vectors/`](./uta-monorepo/vectors/) |\n| Format adapters | 9 (ATC, EAT-AI, ZTA, A2A, MCP Card, W3C VC, OAuth, SPIFFE, X.509) |\n| Dev.to articles | 100 (EN + 15 languages) |\n| Download channels | 5 (NPM, jsDelivr, unpkg, marketnow.site, GitHub) |\n\n## 📦 Packages\n\n| Package | Version | Description | Downloads (last week) |\n|---|---|---|---|\n| [`marketnow-mcp`](https://www.npmjs.com/package/marketnow-mcp) | 1.15.0 | MCP server with 15 trust tools (+revocation, +fingerprinting; SDK hardened, `npm audit` clean) | 1,003/wk |\n| [`agent-trust-card`](https://www.npmjs.com/package/agent-trust-card) | 1.4.1 | ATC/1.0 SDK (issue, verify, inspect) | 616/wk |\n| [`marketnow-install-stack`](https://www.npmjs.com/package/marketnow-install-stack) | 1.2.1 | Multi-source installer (5 stacks over the live catalog) | 178/wk |\n| [`@marketnow/uts`](https://www.npmjs.com/package/@marketnow/uts) | 2.0.3 | Universal Trust Schema | 298/wk |\n| [`@marketnow/trust-core`](https://www.npmjs.com/package/@marketnow/trust-core) | 2.0.3 | Trust Engine core: verification pipeline + behavior/drift + policy + trajectory + cross-agent (92 exports, zero deps) | 313/wk |\n| [`@marketnow/trust-adapters`](https://www.npmjs.com/package/@marketnow/trust-adapters) | 1.0.4 | 9 format adapters (X509 exported; self-contained, zero deps) | 282/wk |\n| [`@marketnow/trust-gateway`](https://www.npmjs.com/package/@marketnow/trust-gateway) | 1.0.5 | MCP middleware gateway + ReceiptStore/ReceiptGenerator exported (self-contained, zero deps) | 307/wk |\n| [`@marketnow/cline-trust-plugin`](https://www.npmjs.com/package/@marketnow/cline-trust-plugin) | 1.1.2 | Cline interceptor: revocation gate + TFP tool-surface pinning | 346/wk |\n| [`@marketnow/uta-conformance`](https://www.npmjs.com/package/@marketnow/uta-conformance) | 1.3.5 | 14 signed vectors + reference scorer + card generator — `npx @marketnow/uta-conformance` | 307/wk |\n| [`@marketnow/sentinel-rules`](https://www.npmjs.com/package/@marketnow/sentinel-rules) | 1.1.2 | 29 MCP security rules: semgrep config + zero-dep lite scanner — `npx @marketnow/sentinel-rules --path .` | 471/wk |\n| [`@marketnow/trust-mcp-middleware`](https://www.npmjs.com/package/@marketnow/trust-mcp-middleware) | 1.0.2 | MCP `tools/call` wrapper: credential enforcement + signed audit receipts | 319/wk |\n| [`@marketnow/trust-observability`](https://www.npmjs.com/package/@marketnow/trust-observability) | 1.0.3 | Zero-dep observability: structured logging, tracing, Prometheus metrics | 461/wk |\n| [`@marketnow/uta-verify`](https://www.npmjs.com/package/@marketnow/uta-verify) | 1.0.2 | CLI credential verifier: ATC v3, JWT, VC, A2A, EAT, ZTA, MCP — CI exit codes | new |\n| [`marketnow-audit`](https://www.npmjs.com/package/marketnow-audit) | 1.0.1 | Security audit CLI: domain scam-check, ATC verify, OCSP status, catalog — exit codes for CI (`0` PERMIT / `1` DENY / `2` CAUTION) | new |\n\n## 🛡️ 5 Anti-ban download channels\n\n1. **NPM Registry** — primary, independent of GitHub\n2. **jsDelivr CDN** — free global CDN, mirrors NPM automatically\n3. **unpkg CDN** — alternative CDN, also mirrors NPM\n4. **marketnow.site** — AliceLabs-owned origin server\n5. **GitHub org** — `alicelabs-llc/universal-trust-adapter` (this repo)\n\n## 🔢 Taxonomy — which count belongs to which system\n\nThree different counts coexist in this ecosystem. They are **not** three ways of\ncounting the same thing:\n\n| System | Count | What it counts | Where to verify |\n|---|---|---|---|\n| **Sentinel** (audit pipeline) | **12 stages / 10 layers** | Index certification (L1), static analysis (L1.5–L1.9), deep tarball scan (L2, 29 rules), sandbox (L2.5), runtime monitoring (L3), dependency/secrets/SBOM/policy (L4–L9) | [/security/sentinel-v3.0](https://marketnow.site/security/sentinel-v3.0) |\n| **ATC/1.0** (credential verification) | **10 controls — 8 required + 2 optional** | Signature, key selection, expiry, status, revocation… per ATC card | [SPEC.md §2 → MARKETNOW repo](https://github.com/alicelabs-llc/MARKETNOW/blob/master/docs/atc-spec/SPEC.md) |\n| **UTA** (interop layer) | **9 format adapters** | Credential formats translated through UTS: ATC, EAT-AI, ZTA, A2A, MCP Card, W3C VC, OAuth, SPIFFE, X.509 | [/uta](https://marketnow.site/uta) |\n\nIf a surface says \"8-layer audit\" anywhere, it is stale — the Sentinel pipeline is\n12 stages grouped into 10 audit layers (L1–L9). ATC's \"8\" is the count of *required*\nverification controls (10 total). UTA's number is *formats*, not layers.\n\n## 📐 Open-Core Architecture\n\n| Layer | What | License |\n|---|---|---|\n| **1. Plugin Template** | Interface + boilerplate for third-party adapters | **MIT** |\n| **2. UTS Specification** | Universal Trust Schema (spec + JSON Schema) | **CC-BY-NC-ND 4.0** |\n| **3. The Engine + Sentinel + Interceptor** | TrustEngine core, Sentinel 12-stage / 10-layer audit, eBPF enforcement | **AL-1.0** |\n\n## 🧪 Try it\n\n```bash\n# Verify any ATC card (ATC/1.0 or ATC v3.0)\nnpx -y agent-trust-card verify card.json\n\n# Run the MCP server (works with Claude Desktop, Cursor, Cline, Continue, Aider)\nnpx -y marketnow-mcp\n\n# Run the conformance suite (no clone needed)\nnpx -y @marketnow/uta-conformance\n\n# Or from source (atc-sdk lives in the MARKETNOW repo since the 2026-09-26 split):\ngit clone https://github.com/alicelabs-llc/MARKETNOW\ncd MARKETNOW/atc-sdk && npm install && node test/conformance.mjs\n```\n\n## 🧬 Test vectors\n\n**ATC/1.0 (5 frozen):** [MARKETNOW repo → `docs/atc-spec/test-vectors/`](https://github.com/alicelabs-llc/MARKETNOW/tree/master/docs/atc-spec/test-vectors) — 5 fixtures with canonical JCS bytes per vector + SHA-256 + Ed25519 signature.\n\n**ATC v3.0 (36 vectors):** [`uta-monorepo/vectors/`](./uta-monorepo/vectors/) — 8 positive + 17 negative + 5 mutation + 6 cross-language, plus a prompt-injection corpus. MANIFEST with per-vector expected outcomes.\n\nThe test CA keypair is intentionally published (including private key) for cross-language reproducibility.\n\n> ⚠️ **TEST ONLY — this private key is intentionally public. It MUST NEVER be trusted in production.**\n> `ca-test-2` exists so any stranger can regenerate and re-sign the conformance vectors in any language.\n> Signatures under `ca-test-2` prove conformance-suite behavior — nothing else. Production CAs\n> (`mn-ca-003`) are separate keys, never published, and their lifecycle is auditable in the\n> [revocation registry](https://marketnow.site/api/crl) and the\n> [2026-09-08 incident postmortem](https://marketnow.site/security/incidents/2026-09-08).\n\n## 🛰️ Live x402 endpoint (production)\n\nThe UTA Trust API is LIVE and payable with x402 (USDC, base-sepolia) — no API keys, no accounts, no signups:\n\n| | |\n|---|---|\n| **Verify one card** | `POST https://uta-trust-api.eddyflores100.workers.dev/v1/trust/verify` — 0.01 USDC |\n| **Batch (1..10 cards)** | `POST https://uta-trust-api.eddyflores100.workers.dev/v1/trust/batch` — 0.08 USDC |\n| **Free** | `GET /health` · `GET /v1` (machine-readable docs) · `GET /` (landing) |\n\n```bash\n# 1) ask the resource — you get 402 + accepts[] (payment requirements)\ncurl -s https://uta-trust-api.eddyflores100.workers.dev/v1/trust/verify -X POST \\\n  -H \"Content-Type: application/json\" -d '{\"card\": { ...ATC... }}'\n# 2) build the EIP-3009 payment for the quoted amount, base64-encode the payload JSON\n# 3) retry with  X-PAYMENT: <base64>  →  200 + X-PAYMENT-RESPONSE (settlement proof)\n```\n\nAny x402 client works (`x402-fetch`, `x402-requests`, or your own EIP-3009 signer). The edge\nverifier is a faithful port of the reference scorer semantics (JCS signed subtree, pinned trust\nanchors, two-sided validity window, active-status check) and scores **14/14** on the ATC/1.0\nconformance vectors. verify + settle run against the x402 facilitator — no settlement, no 200.\n\n## 📋 Specs & docs\n\n- **ATC/1.0 Spec:** [MARKETNOW repo → `docs/atc-spec/SPEC.md`](https://github.com/alicelabs-llc/MARKETNOW/blob/master/docs/atc-spec/SPEC.md)\n- **ERC-8004 crosswalk:** [`docs/crosswalks/erc-8004-atc-v1.md`](./docs/crosswalks/erc-8004-atc-v1.md) — Trustless Agents identity ↔ ATC/1.0 verification\n- **ATC v3.0 RFC Draft:** [`spec/RFC-ATC-v3-Draft-00.md`](./spec/RFC-ATC-v3-Draft-00.md)\n- **UTS v1:** [`spec/UTS-v1.md`](./spec/UTS-v1.md) · [`spec/uts-v1.json`](./spec/uts-v1.json)\n- **Domain Reputation API spec:** [`api/reputation-spec.md`](./api/reputation-spec.md)\n- **Universal Trust API spec:** [`api/trust-api-spec.md`](./api/trust-api-spec.md)\n- **Threat model (STRIDE + MITRE ATLAS):** [`uta-monorepo/threat-model/THREAT_MODEL.md`](./uta-monorepo/threat-model/THREAT_MODEL.md)\n- **Architecture:** [`docs/ARCHITECTURE.md`](./docs/ARCHITECTURE.md)\n- **License matrix (all components):** https://marketnow.site/licensing\n- **CA incident postmortem 2026-09-08:** https://marketnow.site/security/incidents/2026-09-08\n- **Contributing:** [`CONTRIBUTING.md`](./CONTRIBUTING.md)\n- **Security policy:** [`SECURITY.md`](./SECURITY.md)\n\n## 🌐 Community\n\n- **GitHub Discussions:** [discussions](https://github.com/alicelabs-llc/universal-trust-adapter/discussions)\n- **Dev.to:** [@edison_flores_6d2cd381b13](https://dev.to/edison_flores_6d2cd381b13) — 96 articles\n- **Issues:** [Report a bug](https://github.com/alicelabs-llc/universal-trust-adapter/issues/new?labels=bug&template=bug-report.md)\n- **Email:** info@alicelabs.site\n\n## 📄 License\n\n| Component | License |\n|---|---|\n| Plugin template | MIT |\n| UTS specification | CC-BY-NC-ND 4.0 |\n| Engine + Sentinel + Interceptor | **AL-1.0** |\n\n---\n\n**Author:** Edison Flores · **Email:** info@alicelabs.site · **Website:** https://marketnow.site  \n**Company:** AliceLabs LLC (Wyoming, USA)\n\n## License\n\nDual-licensed under **MIT OR Apache-2.0, at your option** — free for any use, including\ncommercial use. This repo and all MarketNow npm packages (marketnow-mcp v1.14.0+,\nagent-trust-card v1.4.0+, @marketnow/*) ship dual-licensed: see\n[LICENSE-MIT](LICENSE-MIT) and [LICENSE-APACHE](LICENSE-APACHE).\nTrademarks (\"MarketNow\", \"UTA\", \"ATC\") are reserved by AliceLabs LLC — see [NOTICE](NOTICE).\n"}