{"name":"OmegaEngine","description":"Agent Action Control Plane: authorize consequential AI-agent actions before they execute, red-team agent configurations, and issue signed, offline-verifiable audit records. OmegaEngine is a governance service that other agents call — not a conversational task agent.","url":"https://omegaengine.ai","provider":{"organization":"OmegaEngine","url":"https://omegaengine.ai"},"version":"1.0.0","documentationUrl":"https://omegaengine.ai/docs","discovery":{"openapi":"https://omegaengine.ai/openapi.yaml","llms":"https://omegaengine.ai/llms.txt","llmsFull":"https://omegaengine.ai/llms-full.txt","postman":"https://omegaengine.ai/postman-collection.json","aiPlugin":"https://omegaengine.ai/.well-known/ai-plugin.json","pricing":"https://omegaengine.ai/api/pricing","transparencyLog":"https://omegaengine.ai/api/transparency/sth","transparencyCheckpoint":"https://omegaengine.ai/api/transparency/checkpoint","revocations":"https://omegaengine.ai/api/revocations","jwks":"https://omegaengine.ai/.well-known/jwks.json"},"capabilities":{"streaming":false,"pushNotifications":false,"stateTransitionHistory":false},"securitySchemes":{"apiKey":{"type":"apiKey","in":"header","name":"x-api-key","description":"OmegaEngine API key — create one at https://omegaengine.ai."}},"security":[{"apiKey":[]}],"defaultInputModes":["application/json"],"defaultOutputModes":["application/json"],"skills":[{"id":"authorize","name":"Authorize agent action","description":"POST https://omegaengine.ai/api/authorize — score and govern an agent action pre-execution; returns approved | denied | escalated, a risk score, and a tamper-evident audit id. Requires x-api-key.","tags":["governance","authorization","policy","pre-execution"],"examples":["POST /api/authorize {\"agent_id\":\"treasury-agent\",\"action\":\"wire_transfer\",\"amount\":1200,\"vendor\":\"acme\"}"]},{"id":"verify","name":"Verify signed decision","description":"POST https://omegaengine.ai/api/decision/verify — recompute and check the signature on any OmegaEngine decision envelope. GET https://omegaengine.ai/api/verify/{attestationId} — fetch a signed attestation (Ed25519 + Merkle proof) for independent offline re-verification. No auth required.","tags":["verification","cryptography","proof","offline-verify"],"examples":["POST /api/decision/verify {\"payload\":{...},\"signature\":\"omega-...\"}"]},{"id":"audit","name":"Tamper-evident audit records","description":"Every authorize verdict carries an audit_id written to a tamper-evident log. Capture and verify ledgers locally with the open-source SDKs: npm @omegaengine/audit (TypeScript) or pip omega-audit (Python) — `npx omega-audit verify ledger.jsonl` verifies offline.","tags":["audit","compliance","ledger","tamper-evident"],"examples":["npx omega-audit verify ledger.jsonl"]},{"id":"redteam","name":"Red-team agent scan","description":"POST https://omegaengine.ai/api/redteam/agent-scan — drive an agent (yours, with authorization) through the agentic attack corpus and score its tool-call trajectory. Sample mode needs no keys. Security scans may only target agents you are authorized to test (https://omegaengine.ai/aup).","tags":["red-team","security","prompt-injection","agent-scan"],"examples":["npx @omegaengine/agent-scan --sample support-vulnerable"]},{"id":"identity","name":"Agent key revocation + witnessed checkpoints","description":"POST https://omegaengine.ai/api/revocations — publish a self-signed omega/revocation.v1 record (or a designated-recovery-key omega/recovery-revocation.v1, or an M-of-N omega/recovery-revocation.v2 threshold container). No API key: the record is self-authenticating, since only the holder of key T can sign a valid revocation of T. GET https://omegaengine.ai/api/revocations?thumbprint=…&proofs=1 — fetch the set with each record's transparency-log seq and Merkle inclusion proof. GET https://omegaengine.ai/api/transparency/checkpoint — the witnessed head: Signed Tree Head, witness cosignatures, and the witness registry + threshold to check them against. Verify all of it OFFLINE with @omegaengine/verify (verifyAgentIdentity, verifyAnyRevocation, evaluateLiveness, verifyWitnessedCheckpoint) — no account, no trust in OmegaEngine. DISTRIBUTION + VERIFICATION ONLY: no OmegaEngine authorization or decision path consults revocations, so publishing one does NOT block a revoked key at the gate. Enforcement is not wired yet.","tags":["identity","revocation","self-sovereign","transparency-log","offline-verify"],"examples":["POST /api/revocations {\"jws\":\"eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9...\"}","GET /api/revocations?thumbprint=<rfc7638-kid>&proofs=1","GET /api/transparency/checkpoint"]}],"interoperability":{"rest":{"baseUrl":"https://omegaengine.ai","docs":"https://omegaengine.ai/docs/api","auth":"x-api-key header"},"mcp":{"remote":{"url":"https://omegaengine.ai/api/mcp","transport":"streamable-http","auth":"x-api-key header (OAuth not yet available)"},"stdio":"npx -y @omegaengine/mcp","tools":["check_action","claim_approval","scan_agent","verify_proof","judge","verify_attestation","get_pricing","get_usage"],"stdioTools":["check_action","claim_approval","scan_agent","verify_proof"],"remoteOnlyTools":["judge","verify_attestation","get_pricing","get_usage"]},"a2a":{"supported":false,"note":"AgentCard descriptor only. The A2A message/task JSON-RPC protocol is not implemented yet — integrate via REST or MCP above."}}}