GAIP Buyer Assurance Agent

io.github.tjcgraham-rgb由 GitHub 帳號 tjcgraham-rgb 發布v1.5.0更新於 Oct 24, 2026

Now part of GAIP Witness: records a buyer's request and checks what was delivered.

發布方自己的服務：buyer.sh

已驗證Streamable HTTP可網頁執行安全與監控商業與電商

服務詳細資訊

識別碼: io.github.tjcgraham-rgb/gaip-buyer-assurance
傳輸: Streamable HTTP
執行環境: Web executable
信任: Verified
發布於: Sep 27, 2026

安全提示

MCP 服務會接收對話中的工具呼叫請求，並可能執行外部操作。啟用前請先了解該服務能做什麼，並只授予它所需的權限。

註冊中心已驗證此條目所屬的 GitHub 帳號 tjcgraham-rgb。這並不表明該帳號就是產品方。

SourceWeft 的檢查只涵蓋條目是否完整、端點是否回應；不審查伺服器的程式碼，也不審查其工具的行為。

在 README 中新增徽章

向讀者展示該 MCP 服務已收錄於 SourceWeft，徽章連結到本頁。

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.tjcgraham-rgb%2Fgaip-buyer-assurance.svg)](https://sourceweft.com/mcp/io.github.tjcgraham-rgb%2Fgaip-buyer-assurance?utm_source=readme&utm_medium=badge)

概覽

AI 產生的概覽

遠端 GAIP 服務，讓助理為買家選定的公開服務建立、完成並核驗端到端交付檢查，並回傳簽章收據

可以做什麼: 針對公開服務 URL 與所選檢查項目，在明確只讀同意後準備買家保障檢查，回傳供下一步使用的 terms_id。以公開重播或買家提交模式完成檢查，依檢查項目回傳 PASS、FAIL 或 UNKNOWN 以及交付收據。核驗已保存的條款或交付 receipt_id，取回留存紀錄及其完整性證明。
適用情境: 適用於買家已選定某個公開服務、希望端到端核查其交付情況，或持有 GAIP 條款收據、交付收據需要確認的情境。定位為只讀保障，而非評估或認證。
執行需求: 使用 GAIP 服務的遠端 streamable HTTP 端點；未宣告需要帳號、API 金鑰或登入。輸入必須是公開、非個人的 URL 與識別碼，準備步驟要求明確只讀同意。

安裝前請注意

檢查會以 GAIP 收據形式記錄，服務 URL 與檢查細節會提交給第三方。僅接受公開、非個人輸入。結果是帶完整性證明的觀察紀錄，不構成認證、背書或法律、財務、保險建議。

安裝

在 SourceWeft 中

開啟儀表板中的 GAIP Buyer Assurance Agent，將其新增到工作區。
為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.tjcgraham-rgb%2Fgaip-buyer-assurance/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "gaip-buyer-assurance-agent": {
      "type": "http",
      "url": "https://www.gaipagents.com/mcp/agents/buyer-assurance"
    }
  }
}

README

GAIP

[GAIP logo]

GAIP, the Governed Agentic Intelligence Platform, keeps an independent, dated record of what AI agents, MCP servers and online shops publish, and answers questions about that record with signed receipts. Free, read-only, no key; facts at a stated time, never an assessment.

First call: gaip_check with a url on https://www.gaipagents.com/mcp. This one runs as-is; then use the URL of the agent, MCP server or API you care about:

bash

curl -s https://www.gaipagents.com/mcp \  -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"gaip_check","arguments":{"url":"https://mcp.deepwiki.com/mcp"}}}'

curl -s https://www.gaipagents.com/mcp \  -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"gaip_check","arguments":{"url":"https://mcp.deepwiki.com/mcp"}}}'

Without MCP: GET https://www.gaipagents.com/v1/free/conformance/check?url=<url>.

The map: every question GAIP answers, grouped by who asks, with its tool and HTTP route: https://www.gaipagents.com/v1/free/map. Every completed answer carries a continuity handle; send it back and the answer is bound to your own history with GAIP.

One line to connect

Where	One line
Any MCP client	`https://www.gaipagents.com/mcp` (streamable HTTP, no sign-in)
Claude Code	`claude mcp add --transport http gaip https://www.gaipagents.com/mcp`, or the plugin (MCP server and skill): `/plugin install gaip --marketplace tjcgraham-rgb/gaip-agents`
Claude Desktop / claude.ai	Customize > Connectors > Add custom connector, URL `https://www.gaipagents.com/mcp`, no sign-in
Agent Skills (Claude Code, Cursor, Codex and others)	`npx skills add tjcgraham-rgb/gaip-agents` (installs `skills/gaip/SKILL.md`)
Cursor, VS Code	the buttons below, or `{ "mcpServers": { "gaip": { "url": "https://www.gaipagents.com/mcp" } } }`
Gemini CLI	`gemini extensions install https://github.com/tjcgraham-rgb/gaip-agents`
OpenAI Agents SDK	`HostedMCPTool(tool_config={"type": "mcp", "server_label": "gaip", "server_url": "https://www.gaipagents.com/mcp", "require_approval": "never"})`
Vercel AI SDK	`await createMCPClient({ transport: { type: 'http', url: 'https://www.gaipagents.com/mcp' } })` (from `@ai-sdk/mcp`)
LangChain	`pip install langchain-gaip`, then `from langchain_gaip import get_tools`
CrewAI	`Agent(..., mcps=["https://www.gaipagents.com/mcp"])`
A2A (1.0 and 0.3.0)	agent card `https://www.gaipagents.com/.well-known/agent-card.json`; plain text works
x402	nothing to set up: GAIP is free and never answers with HTTP 402 (`https://www.gaipagents.com/.well-known/x402`)
Windsurf	`~/.codeium/windsurf/mcp_config.json`: `{ "mcpServers": { "gaip": { "serverUrl": "https://www.gaipagents.com/mcp" } } }`
Cline	`{ "mcpServers": { "gaip": { "type": "streamableHttp", "url": "https://www.gaipagents.com/mcp" } } }` (see `llms-install.md`)
Everything else, with copy-paste code	https://www.gaipagents.com/docs/quickstart

[Add to Cursor] [Install in VS Code]

In CI: two GitHub Actions

GAIP Watch fails your build when an MCP server or agent your agent depends on changed its tools, schemas, sign-in or prices, with dated receipts (watch/):

GAIP Agents check runs gaip_check on your own agent card, MCP server or OpenAPI document on every push:

yaml

- uses: tjcgraham-rgb/gaip-agents@v1  with:    agent-url: https://your-agent.example/.well-known/agent-card.json    fail-on-error: "true"

- uses: tjcgraham-rgb/gaip-agents@v1  with:    agent-url: https://your-agent.example/.well-known/agent-card.json    fail-on-error: "true"

Outputs: verdict (READY, FIXES_NEEDED, UNREACHABLE or NOT_CHECKED), receipt-id, error-count, warning-count. Providers can show their own dated record with the badge https://www.gaipagents.com/v1/free/watch/badge.svg?url=<your endpoint>.

In this repository

Path	What it is
`registry/`	The Official MCP Registry records: `gaip-broker.json` (GAIP itself) and one record per specialist agent
`listing-kit.json`	The sentence, the first call, the map's rows, endpoints and example calls for directories (also served at `/v1/free/discovery/listing-kit`)
`skills/gaip/SKILL.md`	GAIP as an Agent Skill (agentskills.io format; also served at `/.well-known/agent-skills/gaip/SKILL.md`)
`.claude-plugin/`	Claude Code plugin and marketplace manifests: the skill plus the remote MCP server
`.cursor-plugin/plugin.json`, `mcp.json`	Cursor plugin manifest and its MCP server
`gemini-extension.json`, `GEMINI.md`	Gemini CLI extension: installs GAIP's MCP server and tells the model when to use each tool
`packages/gaip-check/`	Python client: `check_agent("https://other-agent.example")`
`action.yml`, `packages/gaip-check-action/`	The check Action (`uses: tjcgraham-rgb/gaip-agents@v1`)
`watch/`	The GAIP Watch Action
`packages/aipref-signals/`	Dependency-free parser and test vectors for AI-preference signals (IETF AI Preferences `Content-Usage`, RSL licence links, W3C TDMRep, Content Signals)
`assets/`	GAIP logo (SVG, and a 400×400 PNG) and the specialist icons (SVG)
`llms-install.md`	Install steps for AI assistants that set up MCP servers themselves (Cline)

The registry records, listing kit, packages, Watch Action, skill and Gemini extension are copies of what GAIP's service generates; a check in the service's repository warns when a copy here falls out of step. The service itself runs at www.gaipagents.com.

What an answer means

Every answer states what was observed and when. It is not a certification, endorsement, ranking or universal score, and not legal, financial or insurance advice. Receipts are signed with GAIP's Ed25519 key, published at https://www.gaipagents.com/.well-known/gaip-receipt-keys.json.

Terms: https://www.gaipagents.com/terms
Privacy: https://www.gaipagents.com/privacy
Corrections and opt-out: https://www.gaipagents.com/corrections
Methodology: https://www.gaipagents.com/methodology
Security contact: https://www.gaipagents.com/.well-known/security.txt

Licence

MIT (see LICENSE) for everything in this repository.

來源：README.md，提交 0bfeca4

工具

assurance_prepare

Prepare a buyer-side delivery check

Use this when you, the buyer, chose a public service and want its delivery checked end to end. Pass `service_url`, `checks` and explicit_read_only_consent=true. GAIP preflights it and records your checks; returns a `terms_id` for assurance_complete. Free, no account; records a GAIP receipt only. Inputs must be public and non-personal.

輸入參數checks必填episode_idtask_classservice_url必填counterparty_iddata_classificationexplicit_read_only_consent必填

assurance_complete

Complete a buyer-side delivery check

Use this when finishing a Buyer Assurance check. Pass the `terms_id` from assurance_prepare and mode PUBLIC_REPLAY (GAIP replays the service) or BUYER_SUBMITTED. Returns PASS / FAIL / UNKNOWN per check and a delivery receipt. Free, no account; records a GAIP receipt only. Inputs must be public and non-personal.

輸入參數bodymode必填terms_id必填body_sha256http_statuscontent_typedata_classification

assurance_verify

Verify a Buyer Assurance receipt

Use this when you hold a Buyer Assurance terms or delivery receipt_id and want to confirm it. Returns the retained record and its integrity proof (integrity only). Free, read-only, no account; inputs must be public and non-personal.

輸入參數receipt_id必填