GAIP Buyer Assurance Agent

io.github.tjcgraham-rgbPublished by GitHub account tjcgraham-rgbv1.5.0Updated Oct 24, 2026

Now part of GAIP Witness: records a buyer's request and checks what was delivered.

The publisher's own server: buyer.sh

VerifiedStreamable HTTPWeb executableSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

A remote GAIP service that lets an assistant set up, complete and verify end-to-end delivery checks on a public service a buyer chose, returning signed receipts

What you can do
Prepare a buyer assurance check on a public service URL with chosen checks and explicit read-only consent, returning a terms_id for the next step. Complete the check in public replay or buyer-submitted mode and get PASS, FAIL or UNKNOWN per check plus a delivery receipt. Verify a stored terms or delivery receipt_id and retrieve the retained record with its integrity proof.
When to use it
Use it when a buyer has picked a public service and wants its delivery checked end to end, or when someone holds a GAIP terms or delivery receipt and wants to confirm it. It is aimed at read-only assurance rather than assessment or certification.
Requirements
A remote streamable HTTP endpoint at the GAIP service; no account, API key or sign-in is declared. Inputs must be public, non-personal URLs and identifiers, and the prepare step requires explicit read-only consent.
Before you install
Checks are recorded as GAIP receipts, so the service URL and check details are submitted to a third party. Only public, non-personal inputs are accepted. Results are observations with integrity proofs, not certification, endorsement or legal, financial or insurance advice.

Installation

In SourceWeft

  1. Open GAIP Buyer Assurance Agent in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.tjcgraham-rgb%2Fgaip-buyer-assurance/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "gaip-buyer-assurance-agent": {
      "type": "http",
      "url": "https://www.gaipagents.com/mcp/agents/buyer-assurance"
    }
  }
}

README

GAIP

[GAIP logo]

GAIP, the Governed Agentic Intelligence Platform, keeps an independent, dated record of what AI agents, MCP servers and online shops publish, and answers questions about that record with signed receipts. Free, read-only, no key; facts at a stated time, never an assessment.

First call: gaip_check with a url on https://www.gaipagents.com/mcp. This one runs as-is; then use the URL of the agent, MCP server or API you care about:

bash
curl -s https://www.gaipagents.com/mcp \  -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"gaip_check","arguments":{"url":"https://mcp.deepwiki.com/mcp"}}}'

Without MCP: GET https://www.gaipagents.com/v1/free/conformance/check?url=<url>.

The map: every question GAIP answers, grouped by who asks, with its tool and HTTP route: https://www.gaipagents.com/v1/free/map. Every completed answer carries a continuity handle; send it back and the answer is bound to your own history with GAIP.

One line to connect

WhereOne line
Any MCP clienthttps://www.gaipagents.com/mcp (streamable HTTP, no sign-in)
Claude Codeclaude mcp add --transport http gaip https://www.gaipagents.com/mcp, or the plugin (MCP server and skill): /plugin install gaip --marketplace tjcgraham-rgb/gaip-agents
Claude Desktop / claude.aiCustomize > Connectors > Add custom connector, URL https://www.gaipagents.com/mcp, no sign-in
Agent Skills (Claude Code, Cursor, Codex and others)npx skills add tjcgraham-rgb/gaip-agents (installs skills/gaip/SKILL.md)
Cursor, VS Codethe buttons below, or { "mcpServers": { "gaip": { "url": "https://www.gaipagents.com/mcp" } } }
Gemini CLIgemini extensions install https://github.com/tjcgraham-rgb/gaip-agents
OpenAI Agents SDKHostedMCPTool(tool_config={"type": "mcp", "server_label": "gaip", "server_url": "https://www.gaipagents.com/mcp", "require_approval": "never"})
Vercel AI SDKawait createMCPClient({ transport: { type: 'http', url: 'https://www.gaipagents.com/mcp' } }) (from @ai-sdk/mcp)
LangChainpip install langchain-gaip, then from langchain_gaip import get_tools
CrewAIAgent(..., mcps=["https://www.gaipagents.com/mcp"])
A2A (1.0 and 0.3.0)agent card https://www.gaipagents.com/.well-known/agent-card.json; plain text works
x402nothing to set up: GAIP is free and never answers with HTTP 402 (https://www.gaipagents.com/.well-known/x402)
Windsurf~/.codeium/windsurf/mcp_config.json: { "mcpServers": { "gaip": { "serverUrl": "https://www.gaipagents.com/mcp" } } }
Cline{ "mcpServers": { "gaip": { "type": "streamableHttp", "url": "https://www.gaipagents.com/mcp" } } } (see llms-install.md)
Everything else, with copy-paste codehttps://www.gaipagents.com/docs/quickstart

[Add to Cursor] [Install in VS Code]

In CI: two GitHub Actions

GAIP Watch fails your build when an MCP server or agent your agent depends on changed its tools, schemas, sign-in or prices, with dated receipts (watch/):

yaml
- uses: tjcgraham-rgb/gaip-agents/watch@main  with:    urls: https://mcp.example.com/mcp

GAIP Agents check runs gaip_check on your own agent card, MCP server or OpenAPI document on every push:

yaml
- uses: tjcgraham-rgb/gaip-agents@v1  with:    agent-url: https://your-agent.example/.well-known/agent-card.json    fail-on-error: "true"

Outputs: verdict (READY, FIXES_NEEDED, UNREACHABLE or NOT_CHECKED), receipt-id, error-count, warning-count. Providers can show their own dated record with the badge https://www.gaipagents.com/v1/free/watch/badge.svg?url=<your endpoint>.

In this repository

PathWhat it is
registry/The Official MCP Registry records: gaip-broker.json (GAIP itself) and one record per specialist agent
listing-kit.jsonThe sentence, the first call, the map's rows, endpoints and example calls for directories (also served at /v1/free/discovery/listing-kit)
skills/gaip/SKILL.mdGAIP as an Agent Skill (agentskills.io format; also served at /.well-known/agent-skills/gaip/SKILL.md)
.claude-plugin/Claude Code plugin and marketplace manifests: the skill plus the remote MCP server
.cursor-plugin/plugin.json, mcp.jsonCursor plugin manifest and its MCP server
gemini-extension.json, GEMINI.mdGemini CLI extension: installs GAIP's MCP server and tells the model when to use each tool
packages/gaip-check/Python client: check_agent("https://other-agent.example")
action.yml, packages/gaip-check-action/The check Action (uses: tjcgraham-rgb/gaip-agents@v1)
watch/The GAIP Watch Action
packages/aipref-signals/Dependency-free parser and test vectors for AI-preference signals (IETF AI Preferences Content-Usage, RSL licence links, W3C TDMRep, Content Signals)
assets/GAIP logo (SVG, and a 400×400 PNG) and the specialist icons (SVG)
llms-install.mdInstall steps for AI assistants that set up MCP servers themselves (Cline)

The registry records, listing kit, packages, Watch Action, skill and Gemini extension are copies of what GAIP's service generates; a check in the service's repository warns when a copy here falls out of step. The service itself runs at www.gaipagents.com.

What an answer means

Every answer states what was observed and when. It is not a certification, endorsement, ranking or universal score, and not legal, financial or insurance advice. Receipts are signed with GAIP's Ed25519 key, published at https://www.gaipagents.com/.well-known/gaip-receipt-keys.json.

Licence

MIT (see LICENSE) for everything in this repository.

Source: README.md at commit 0bfeca4

Tools

3

assurance_prepare

Prepare a buyer-side delivery check

Use this when you, the buyer, chose a public service and want its delivery checked end to end. Pass `service_url`, `checks` and explicit_read_only_consent=true. GAIP preflights it and records your checks; returns a `terms_id` for assurance_complete. Free, no account; records a GAIP receipt only. Inputs must be public and non-personal.

Parameterschecksrequiredepisode_idtask_classservice_urlrequiredcounterparty_iddata_classificationexplicit_read_only_consentrequired

assurance_complete

Complete a buyer-side delivery check

Use this when finishing a Buyer Assurance check. Pass the `terms_id` from assurance_prepare and mode PUBLIC_REPLAY (GAIP replays the service) or BUYER_SUBMITTED. Returns PASS / FAIL / UNKNOWN per check and a delivery receipt. Free, no account; records a GAIP receipt only. Inputs must be public and non-personal.

Parametersbodymoderequiredterms_idrequiredbody_sha256http_statuscontent_typedata_classification

assurance_verify

Verify a Buyer Assurance receipt

Use this when you hold a Buyer Assurance terms or delivery receipt_id and want to confirm it. Returns the retained record and its integrity proof (integrity only). Free, read-only, no account; inputs must be public and non-personal.

Parametersreceipt_idrequired

Version history

6
  1. v1.5.0LatestOct 10, 2026
  2. v1.4.0Oct 2, 2026
  3. v1.2.0Sep 30, 2026
  4. v1.1.1Sep 29, 2026
  5. v1.1.0Sep 28, 2026
  6. v1.0.0Sep 27, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Buyer integrations

buyer.sh

sh.buyerOfficial publisher

buyer.sh lets an assistant search products across online stores and get titles, prices, merchants, ratings, product links and checkout links.

Streamable HTTPWeb executable
Web Search & Scraping1 toolOct 27, 2026

Corbelworks Utility Defect Scan and Buyer Intake

dev.pages.corbelworksOfficial publisher

A remote Corbelworks server that lets an assistant preflight utility audit claims, open a paid scan checkout, verify signed receipts, triage permit rows, and

Streamable HTTPWeb executable
Productivity & Workflow5 toolsOct 24, 2026

Instagram Comments Analyzer: Buyer Intent

Published by GitHub account Nero-Engine

Instagram Comments Analyzer: Buyer Intent's hosted MCP server; credential required; Streamable HTTP.

Streamable HTTPWeb executableAuth
Credential requiredNov 3, 2026

AI Market - Real AI Agent Services & Buyer Demand

Published by GitHub account bracha55555-hue

A remote marketplace MCP server for discovering AI agent services, signed buyer requests and nonbinding purchase intents, with no escrow.

Streamable HTTPWeb executable
Finance15 toolsNov 12, 2026

Agoranome buyer checks and market data

Published by GitHub account Agoranome

Agoranome inspects x402 machine-payment markets: free pre-payment checks for buying agents plus paid, signed market data for sellers.

Streamable HTTPWeb executable
Finance28 toolsNov 12, 2026