GAIP Buyer Assurance Agent

io.github.tjcgraham-rgb由 GitHub 账号 tjcgraham-rgb 发布v1.5.0更新于 Oct 24, 2026

Now part of GAIP Witness: records a buyer's request and checks what was delivered.

发布方自己的服务：buyer.sh

已验证Streamable HTTP可网页运行安全与监控商业与电商

服务详情

标识符: io.github.tjcgraham-rgb/gaip-buyer-assurance
传输: Streamable HTTP
运行时: Web executable
信任: Verified
发布于: Sep 27, 2026

安全提示

MCP 服务会接收对话中的工具调用请求，并可能执行外部操作。启用前请先了解该服务能做什么，并只授予它所需的权限。

注册中心已验证此条目所属的 GitHub 账号 tjcgraham-rgb。这并不表明该账号就是产品方。

SourceWeft 的检查只涵盖条目是否完整、端点是否响应；不审查服务器的代码，也不审查其工具的行为。

在 README 中添加徽章

向读者展示该 MCP 服务已收录于 SourceWeft，徽章链接到本页。

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.tjcgraham-rgb%2Fgaip-buyer-assurance.svg)](https://sourceweft.com/mcp/io.github.tjcgraham-rgb%2Fgaip-buyer-assurance?utm_source=readme&utm_medium=badge)

概览

AI 生成的概览

远程 GAIP 服务，让助手为买家选定的公共服务建立、完成并核验端到端交付检查，并返回签名回执

可以做什么: 针对公共服务 URL 和所选检查项，在明确只读同意后准备买家保障检查，返回供下一步使用的 terms_id。以公开重放或买家提交模式完成检查，按检查项返回 PASS、FAIL 或 UNKNOWN 以及交付回执。核验已保存的条款或交付 receipt_id，取回留存记录及其完整性证明。
适用场景: 适用于买家已选定某个公共服务、希望端到端核查其交付情况，或持有 GAIP 条款回执、交付回执需要确认的场景。定位是只读保障，而非评估或认证。
运行要求: 使用 GAIP 服务的远程 streamable HTTP 端点；未声明需要账户、API 密钥或登录。输入必须是公开、非个人的 URL 和标识符，准备步骤要求明确只读同意。

安装前请注意

检查会以 GAIP 回执形式记录，服务 URL 和检查细节会提交给第三方。仅接受公开、非个人输入。结果是带完整性证明的观察记录，不构成认证、背书或法律、财务、保险建议。

安装

在 SourceWeft 中

打开控制台中的 GAIP Buyer Assurance Agent，将其添加到工作区。
为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.tjcgraham-rgb%2Fgaip-buyer-assurance/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "gaip-buyer-assurance-agent": {
      "type": "http",
      "url": "https://www.gaipagents.com/mcp/agents/buyer-assurance"
    }
  }
}

README

GAIP

[GAIP logo]

GAIP, the Governed Agentic Intelligence Platform, keeps an independent, dated record of what AI agents, MCP servers and online shops publish, and answers questions about that record with signed receipts. Free, read-only, no key; facts at a stated time, never an assessment.

First call: gaip_check with a url on https://www.gaipagents.com/mcp. This one runs as-is; then use the URL of the agent, MCP server or API you care about:

bash

curl -s https://www.gaipagents.com/mcp \  -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"gaip_check","arguments":{"url":"https://mcp.deepwiki.com/mcp"}}}'

curl -s https://www.gaipagents.com/mcp \  -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"gaip_check","arguments":{"url":"https://mcp.deepwiki.com/mcp"}}}'

Without MCP: GET https://www.gaipagents.com/v1/free/conformance/check?url=<url>.

The map: every question GAIP answers, grouped by who asks, with its tool and HTTP route: https://www.gaipagents.com/v1/free/map. Every completed answer carries a continuity handle; send it back and the answer is bound to your own history with GAIP.

One line to connect

Where	One line
Any MCP client	`https://www.gaipagents.com/mcp` (streamable HTTP, no sign-in)
Claude Code	`claude mcp add --transport http gaip https://www.gaipagents.com/mcp`, or the plugin (MCP server and skill): `/plugin install gaip --marketplace tjcgraham-rgb/gaip-agents`
Claude Desktop / claude.ai	Customize > Connectors > Add custom connector, URL `https://www.gaipagents.com/mcp`, no sign-in
Agent Skills (Claude Code, Cursor, Codex and others)	`npx skills add tjcgraham-rgb/gaip-agents` (installs `skills/gaip/SKILL.md`)
Cursor, VS Code	the buttons below, or `{ "mcpServers": { "gaip": { "url": "https://www.gaipagents.com/mcp" } } }`
Gemini CLI	`gemini extensions install https://github.com/tjcgraham-rgb/gaip-agents`
OpenAI Agents SDK	`HostedMCPTool(tool_config={"type": "mcp", "server_label": "gaip", "server_url": "https://www.gaipagents.com/mcp", "require_approval": "never"})`
Vercel AI SDK	`await createMCPClient({ transport: { type: 'http', url: 'https://www.gaipagents.com/mcp' } })` (from `@ai-sdk/mcp`)
LangChain	`pip install langchain-gaip`, then `from langchain_gaip import get_tools`
CrewAI	`Agent(..., mcps=["https://www.gaipagents.com/mcp"])`
A2A (1.0 and 0.3.0)	agent card `https://www.gaipagents.com/.well-known/agent-card.json`; plain text works
x402	nothing to set up: GAIP is free and never answers with HTTP 402 (`https://www.gaipagents.com/.well-known/x402`)
Windsurf	`~/.codeium/windsurf/mcp_config.json`: `{ "mcpServers": { "gaip": { "serverUrl": "https://www.gaipagents.com/mcp" } } }`
Cline	`{ "mcpServers": { "gaip": { "type": "streamableHttp", "url": "https://www.gaipagents.com/mcp" } } }` (see `llms-install.md`)
Everything else, with copy-paste code	https://www.gaipagents.com/docs/quickstart

[Add to Cursor] [Install in VS Code]

In CI: two GitHub Actions

GAIP Watch fails your build when an MCP server or agent your agent depends on changed its tools, schemas, sign-in or prices, with dated receipts (watch/):

GAIP Agents check runs gaip_check on your own agent card, MCP server or OpenAPI document on every push:

yaml

- uses: tjcgraham-rgb/gaip-agents@v1  with:    agent-url: https://your-agent.example/.well-known/agent-card.json    fail-on-error: "true"

- uses: tjcgraham-rgb/gaip-agents@v1  with:    agent-url: https://your-agent.example/.well-known/agent-card.json    fail-on-error: "true"

Outputs: verdict (READY, FIXES_NEEDED, UNREACHABLE or NOT_CHECKED), receipt-id, error-count, warning-count. Providers can show their own dated record with the badge https://www.gaipagents.com/v1/free/watch/badge.svg?url=<your endpoint>.

In this repository

Path	What it is
`registry/`	The Official MCP Registry records: `gaip-broker.json` (GAIP itself) and one record per specialist agent
`listing-kit.json`	The sentence, the first call, the map's rows, endpoints and example calls for directories (also served at `/v1/free/discovery/listing-kit`)
`skills/gaip/SKILL.md`	GAIP as an Agent Skill (agentskills.io format; also served at `/.well-known/agent-skills/gaip/SKILL.md`)
`.claude-plugin/`	Claude Code plugin and marketplace manifests: the skill plus the remote MCP server
`.cursor-plugin/plugin.json`, `mcp.json`	Cursor plugin manifest and its MCP server
`gemini-extension.json`, `GEMINI.md`	Gemini CLI extension: installs GAIP's MCP server and tells the model when to use each tool
`packages/gaip-check/`	Python client: `check_agent("https://other-agent.example")`
`action.yml`, `packages/gaip-check-action/`	The check Action (`uses: tjcgraham-rgb/gaip-agents@v1`)
`watch/`	The GAIP Watch Action
`packages/aipref-signals/`	Dependency-free parser and test vectors for AI-preference signals (IETF AI Preferences `Content-Usage`, RSL licence links, W3C TDMRep, Content Signals)
`assets/`	GAIP logo (SVG, and a 400×400 PNG) and the specialist icons (SVG)
`llms-install.md`	Install steps for AI assistants that set up MCP servers themselves (Cline)

The registry records, listing kit, packages, Watch Action, skill and Gemini extension are copies of what GAIP's service generates; a check in the service's repository warns when a copy here falls out of step. The service itself runs at www.gaipagents.com.

What an answer means

Every answer states what was observed and when. It is not a certification, endorsement, ranking or universal score, and not legal, financial or insurance advice. Receipts are signed with GAIP's Ed25519 key, published at https://www.gaipagents.com/.well-known/gaip-receipt-keys.json.

Terms: https://www.gaipagents.com/terms
Privacy: https://www.gaipagents.com/privacy
Corrections and opt-out: https://www.gaipagents.com/corrections
Methodology: https://www.gaipagents.com/methodology
Security contact: https://www.gaipagents.com/.well-known/security.txt

Licence

MIT (see LICENSE) for everything in this repository.

来源：README.md，提交 0bfeca4

工具

assurance_prepare

Prepare a buyer-side delivery check

Use this when you, the buyer, chose a public service and want its delivery checked end to end. Pass `service_url`, `checks` and explicit_read_only_consent=true. GAIP preflights it and records your checks; returns a `terms_id` for assurance_complete. Free, no account; records a GAIP receipt only. Inputs must be public and non-personal.

输入参数checks必填episode_idtask_classservice_url必填counterparty_iddata_classificationexplicit_read_only_consent必填

assurance_complete

Complete a buyer-side delivery check

Use this when finishing a Buyer Assurance check. Pass the `terms_id` from assurance_prepare and mode PUBLIC_REPLAY (GAIP replays the service) or BUYER_SUBMITTED. Returns PASS / FAIL / UNKNOWN per check and a delivery receipt. Free, no account; records a GAIP receipt only. Inputs must be public and non-personal.

输入参数bodymode必填terms_id必填body_sha256http_statuscontent_typedata_classification

assurance_verify

Verify a Buyer Assurance receipt

Use this when you hold a Buyer Assurance terms or delivery receipt_id and want to confirm it. Returns the retained record and its integrity proof (integrity only). Free, read-only, no account; inputs must be public and non-personal.

输入参数receipt_id必填