Universal Trust Adapter (UTA)

The USB-C of agent trust.

UTA translates between ALL trust credential formats used by AI agents via a canonical Universal Trust Schema (UTS).

Like Zapier connects applications, UTA connects trust standards.

Built by Edison Flores & Alejandro Flores at AliceLabs LLC (Wyoming, USA).

⚡ Verify our claims — the stranger test (30 seconds)

Every trust claim in this repo is re-derivable by a stranger, from live public URLs, with no account and no trust in our endpoints:

# 9 checks against Sigstore Rekor's LIVE transparency-log data:
# entry exists · content hash · countersignature · signed tree head ·
# Merkle inclusion proof · C2SP checkpoint — all verified locally.
curl -sL https://www.marketnow.site/uta/conformance/anchors/verify-rekor.mjs -o verify-rekor.mjs
node verify-rekor.mjs

# Full conformance suite (14 vectors, stage scoring, curl + node only):
# https://www.marketnow.site/uta/conformance/

Exercised in production, receipts public: we rotated our CA key mn-ca-002 → mn-ca-003 on 2026-09-08 under suspected compromise (no confirmed leak). Revocation published same-day. Three Rekor log entries (logIndex 2762061972, 2764017355, 2764479676) anchor the digests, and the published npm tarball's tar layer rebuilds byte-exact from source (sha256 519d406a…).

Related MCP server: io.github.yugantm/hvtracker-mcp

🌐 The Stranger Manifesto — 13 languages

Trust that requires membership is not trust. It's a guest list.

Ten build rules for stranger-verifiable agent trust — read it in your language (every version anchored to the same live receipts):

English · Español · Português · Français · Deutsch · Italiano · Русский · 日本語 · 中文 · 한국어 · हिन्दी · العربية · Türkçe

Markdown sources: manifesto/ — one file per language, same content, same receipts. Rendered right here on GitHub; the marketnow.site/manifesto/ pages ship with the next site deploy.

🌍 Visa & Mastercard article — 14 languages

"Visa has a Trusted Agent Protocol. Mastercard has Verifiable Intent. Here's the layer neither one gives you."

• English — canonical, full version

• العربية

• Deutsch

• Español

• Français

• हिन्दी

• Bahasa Indonesia

• Italiano

• 日本語

• 한국어

• Português

• Русский

• Türkçe

• Tiếng Việt

• 中文

🌍 Global Trust Series (multi-language, 2026-09-08)

The 2026 gray-market quota trust crisis, documented — plus the receipts-based fix:

• English — You Paid an AI Reseller — Then the Rules Changed Mid-Cycle

• 中文 — 你买的 AI 合租/中转被改规则或跑路？开发者自保清单

• Русский — Оплатили AI-подписку через посредника — а правила изменились посреди цикла?

• Español — Pagaste por Claude o Cursor a un revendedor ¿y las reglas cambiaron a mitad del ciclo?

• Sourced timeline (EN) — The 2026 AI Quota Gray-Market Trust Crisis — A Sourced Timeline

• Series index · Verify a trust card: https://marketnow.site/verify

🆕 What's new — v5.1 (revocation that answers + tool fingerprinting)

Release v5.1 — roadmap items 1 & 5 (commit 7fb7db6a, Rekor anchor #4):

• ATC Revocation + Transparency Log (MNR-CRL-1.0) — a signed, append-only revocation registry for Agent Trust Cards and CA keys. The /api/trust?action=revocation page used to promise an OCSP responder that returned 404; now GET /api/ocsp?card_id=… / ?kid=… answers for real: VALID / EXPIRED / REVOKED / SUPERSEDED / UNKNOWN, with PERMIT/DENY recommendation, fail-closed semantics, and the CRL signature embedded so any client can verify the signed layer independently (GET /api/crl). Seeded with real events — 3 superseded ATCs + the mn-ca-002 key compromise (2026-09-08).

• Cryptographic Tool Fingerprinting (TFP-1.0) — the OWASP MCP Cheat Sheet control "verify tool descriptions haven't changed", as an MCP tool: SHA-256 over the RFC 8785 JCS canonical form of each tool + a manifest fingerprint for the whole tools/list surface + drift reports (added / removed / changed) against pinned manifests. The core defense against tool poisoning and rug-pull redefinitions.

• MCP endpoint v1.11.0 (8 tools) and npm marketnow-mcp@1.10.3 (15 tools) — both new tools exposed; the npm package also fixes the broken repository.directory link and upgrades the MCP SDK (DNS-rebinding advisory resolved; npm audit clean).

• Interceptor v1.1.0 (@marketnow/cline-trust-plugin, npm) — revocation gate (fail-closed, 5-min TTL) + per-server tool-surface pinning/verification.

• Sentinel semgrep rules v2 — 29 rules: +tool-poisoning (MCP-TP), +exfiltration chains (MCP-EX), +multi-step attack chains (MCP-AC, roadmap v5.4 preview), +stale-trust caching (MCP-RR).

• Rekor anchor #4 (logIndex 2771735480) — the revocation registry itself is anchored in Sigstore's public log; the revocation history is third-party-checkable end-to-end.

v1.3.3 — the receipts release (previous)

Stranger-verifiable trust evidence:

• Rekor transparency anchors (entries #1–#3) — result digests committed to Sigstore's public append-only log; 9 local checks against live third-party data (run the stranger test above)

Stranger-verifiable trust evidence:

• Rekor transparency anchors — result digests committed to Sigstore's public append-only log; 9 local checks against live third-party data (run the stranger test above)

• Exercised CA key rotation — mn-ca-002 → mn-ca-003 under suspected compromise, revocation published same-day, verifiers fail-safe inside the window

• Reproducible build — agent-trust-card@1.1.2's tar layer rebuilds byte-exact from source (the .tgz is anchored by digest; the tar layer by rebuild)

• New failure vectors — premature-atc (credential accepted before verification completes), expired-atc (key no longer valid at verify time), stage scoring, published generator CA

• Conformance v1.3.3 — 14 public vectors · 24 checks + 10 mutants (runner-under-test) · versioned digests

v1.2.0 — Domain Reputation Endpoint (previous)

Domain Reputation Endpoint (/api/reputation) — UTA now answers a second class of trust question. The Universal Trust API verifies credentials; this endpoint answers "can I trust this domain before I show it to a human or act on it?"

• Spec: api/reputation-spec.md · v1.2 engine, stable

• Reference implementation: api/reputation.ts — one file, zero dependencies, hosting-neutral (Node 18+, Deno, Bun, Cloudflare Workers, any edge runtime)

• Verdicts: trusted (95) · unknown (55) · caution (35) · risky (8) — deterministic, transparent reasons, free & keyless, CDN-cacheable 24h

• Client parity: identical engine runs in the browser (ProdIntel services/sourceTrust.ts) — badges render instantly offline, get server-confirmed when reachable

• First consumer in production: ProdIntel source safety gate

• v1.2 engine fix: shortener matching is now exact-host/subdomain — v1.1 substring matching wrongly scored risky marketplaces containing t.co inside <name>.com (walmart.com, target.com, homedepot.com, flipkart.com). Cache consumers should key on v1.2.

Code lives in this repo (GitHub is the single source of truth). Deployment is bring-your-own-host.

ATC Versions in this repo

UTA supports TWO versions of ATC (Agent Trust Card):

ATC v3.0 supersedes ATC v2.0 (which itself was the basis for the simpler ATC/1.0 SDK). A v2.0 ATC remains valid; v3.0 verifiers accept v2.0 credentials and treat them as having a single signature.

🚀 Quick install

# Multi-source installer (tries 5 channels in order)
curl -fsSL https://marketnow.site/install.sh | bash

# Or install individual packages
npm install agent-trust-card        # ATC/1.0 SDK
npm install -g marketnow-mcp       # MCP server (15 trust tools)
npx @marketnow/uta-conformance    # run the 14-vector conformance suite
npx @marketnow/sentinel-rules --path .  # 29 MCP security rules, zero-dep scan
npx marketnow-audit bit.ly        # domain scam-check + ATC + OCSP, CI exit codes

📊 Project stats

📦 Packages

🛡️ 5 Anti-ban download channels

1. NPM Registry — primary, independent of GitHub

2. jsDelivr CDN — free global CDN, mirrors NPM automatically

3. unpkg CDN — alternative CDN, also mirrors NPM

4. marketnow.site — AliceLabs-owned origin server

5. GitHub org — alicelabs-llc/universal-trust-adapter (this repo)

📐 Open-Core Architecture

🧪 Try it

# Verify any ATC card (ATC/1.0 or ATC v3.0)
npx -y agent-trust-card verify card.json

# Run the MCP server (works with Claude Desktop, Cursor, Cline, Continue, Aider)
npx -y marketnow-mcp

# Run the conformance suite
git clone https://github.com/alicelabs-llc/universal-trust-adapter
cd universal-trust-adapter/marketnow/atc-sdk
npm install && node test/conformance.mjs

🧬 Test vectors

ATC/1.0 (5 frozen): marketnow/docs/atc-spec/test-vectors/ — 5 fixtures with canonical JCS bytes per vector + SHA-256 + Ed25519 signature.

ATC v3.0 (36 vectors): marketnow/docs/atc-spec/test-vectors-v3/ — 8 positive + 17 negative + 5 mutation + 6 cross-language.

The test CA keypair is intentionally published (including private key) for cross-language reproducibility.

📋 Specs & docs

• ATC/1.0 Spec: marketnow/docs/atc-spec/SPEC.md

• ATC v3.0 RFC Draft: marketnow/docs/atc-spec/RFC-ATC-v3-Draft-00.md

• Domain Reputation API spec: api/reputation-spec.md

• Universal Trust API spec: api/trust-api-spec.md

• Architecture: docs/ARCHITECTURE.md

• Threat model: uta-repo/THREAT_MODEL.md

• Contributing: CONTRIBUTING.md

• Security policy: SECURITY.md

🌐 Community

• GitHub Discussions: discussions

• Dev.to: @edison_flores_6d2cd381b13 — 96 articles

• Issues: Report a bug

• Email: info@alicelabs.site

📄 License

Author: Edison Flores · Email: info@alicelabs.site · Website: https://marketnow.site
Company: AliceLabs LLC (Wyoming, USA)

License

Dual-licensed under MIT OR Apache-2.0, at your option — free for any use, including commercial use. This repo and all MarketNow npm packages (marketnow-mcp v1.14.0+, agent-trust-card v1.4.0+, @marketnow/*) ship dual-licensed: see LICENSE-MIT and LICENSE-APACHE. Trademarks ("MarketNow", "UTA", "ATC") are reserved by AliceLabs LLC — see NOTICE.