MODE: PULL DISCOVERYMACHINE SURFACE: /llms.txt /agent-api.json /mcp.json

AGENT INFRA TRUST CARDS

Agent Infrastructure Component Cards

Cards for OSS components that help agents call tools, cache data, verify outputs, and compose workflows.

canonical: /agent-infra-component-cards api: /v1/query feed: /ai-feed.json rss: /feed.xml

MATCHED CARDS

TOTAL CARDS

WRITE ACCESS

COSTED

AGENT USE CASE

QUERY INTENT: agent infrastructure component cards, verified agent tooling OSS, callability layer for agents

Use this page when an agent builder needs infrastructure components with provenance and verification metadata.

RELEVANT COMPONENT CARDS

TOPICAL MATCHES

Agent n8n Workflow Blueprint

Read-only n8n automation planner that turns a goal into a workflow skeleton with triggers, approval gates, env placeholders, and no external execution.

SIGNED

Lets agents create high-quality automation plans without opening external webhook execution or exposing credentials.

APEX CARD V2

Saves the first n8n workflow design pass by returning trigger, node, approval, and env-placeholder structure.

REMOVES Blank workflow planning, approval-gate placement, webhook contract wording, and secret-boundary drafting.RISK DATA-ONLY

Built into Apex as a signed read-only wrapper.External n8n execution is disabled by default.Secrets are represented as placeholder names only.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 176MARKDOWN /v1/cards/card_agent_n8n_workflow_blueprint.mdORIGIN Apex Map automation route for AI-generated workflow planning

The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 5 CHECKSRECHECK 2026-08-18

workflow.n8n-blueprintautomation.designapproval-flowagent.workflow

POST /v1/tools/agent-n8n-workflow-blueprint/run with {goal,trigger,apps,steps,human_approval,secrets_boundary}; returns workflow plan, import JSON skeleton, env placeholders, and safety warnings.

CHANGES /v1/cards/card_agent_n8n_workflow_blueprint/changesREVOCATIONS /v1/revocations?card_id=card_agent_n8n_workflow_blueprint

OPEN CARD

Agent Test Plan Builder

Change-aware test checklist builder that maps supplied release notes to unit, typecheck, build, API, DB, i18n, visual, and security checks.

SIGNED

Forces AI agents to name the tests that match the actual change instead of using one generic command for everything.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex code-change QA planning before deployCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 130MARKDOWN /v1/cards/card_agent_test_plan_builder.mdORIGIN Apex code-change QA planning before deploy

The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 3 CHECKSRECHECK 2026-08-18

qa.test-planrelease.preflightagent.workflow

POST /v1/tools/agent-test-plan-builder/run with {changes,risk_level?}; returns recommended_tests and release gate hint.

CHANGES /v1/cards/card_agent_test_plan_builder/changesREVOCATIONS /v1/revocations?card_id=card_agent_test_plan_builder

OPEN CARD

Cortex intent parser

Advisory-only intent parser that classifies supplied user goals into release, debug, data, UI, live-risk, or general build routes.

SANDBOXED

Useful for Apex Map because agents need to know what to read next before calling tools. Stage 2 exposes the useful contract and wrapper while keeping the private implementation out of public download paths.

APEX CARD V2

Saves first-pass intent routing and risk classification for AI task setup.

REMOVES Manual prompt classification and next-action routing.RISK DATA-ONLY

Extracted from APEX_Gemini/Cortex as a bounded Stage 2 component.Operator chose this from the planned second-wave upload list.Wrapper is read-only/advisory and returns bounded JSON.

NEXT ACTION READ LEDGERREAD STEPS 9

TIER SANDBOXEDLICENSE operator-controlledVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 173MARKDOWN /v1/cards/card_stage2_cortex_intent_parser.mdORIGIN APEX Gemini intent-routing experiments

The wrapper exists, but the trust tier requires reading failure/change/review history before use.

http stage2-2026-07-02 MED ROT 7 CHECKSRECHECK 2026-08-18

intent.parseragent.routingrisk.classificationworkflow.next-action

POST /v1/tools/stage2-cortex-intent-parser/run. Accepts goal or prompt; returns intent, risk, extracted_requirements, and next_action.

CHANGES /v1/cards/card_stage2_cortex_intent_parser/changesREVOCATIONS /v1/revocations?card_id=card_stage2_cortex_intent_parser

OPEN CARD

WebSocket stream manager

Reconnect, backoff, and heartbeat policy wrapper for supplied stream timing facts.

SANDBOXED

High-fit discovery card because AI agents frequently build flaky stream clients without heartbeat/backoff discipline. Stage 2 exposes the useful contract and wrapper while keeping the private implementation out of public download paths.

APEX CARD V2

Saves designing reconnect, jitter, heartbeat, and stale-stream state handling.

REMOVES Stream lifecycle state machine and first backoff policy.RISK DATA-ONLY

Extracted from stillme/NEXUS websocket-streams as a bounded Stage 2 component.Operator chose this from the planned second-wave upload list.Wrapper is read-only/advisory and returns bounded JSON.

NEXT ACTION READ LEDGERREAD STEPS 9

TIER SANDBOXEDLICENSE operator-controlledVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 175MARKDOWN /v1/cards/card_stage2_websocket_stream_manager.mdORIGIN stillme/NEXUS stream freshness and reconnect patterns

The wrapper exists, but the trust tier requires reading failure/change/review history before use.

http stage2-2026-07-02 LOW ROT 7 CHECKSRECHECK 2026-08-18

stream.websocketreconnect.backoffheartbeat.monitoringdata-pipeline.resilience

POST /v1/tools/stage2-websocket-stream-manager/run. Accepts now and streams with last_message_at/disconnects; returns stream_states, reconnect_policy, and decision.

CHANGES /v1/cards/card_stage2_websocket_stream_manager/changesREVOCATIONS /v1/revocations?card_id=card_stage2_websocket_stream_manager

OPEN CARD

Agent Release Readiness Gate

Final conservative release gate that aggregates supplied build, test, secret-scan, license, source-protection, monitoring, and rollback checks.

SIGNED

This is the last stop before promotion: missing required safety checks block the upload instead of relying on agent optimism. Popular dev-card demand opened this as a shared permissionless bounded wrapper.

APEX CARD V2

Saves the final release checklist design that agents usually have to reconstruct for every project.

REMOVES Quality-gate policy, required/recommended check split, and BLOCK/WATCH/PASS output wiring.RISK DATA-ONLY

Built into Apex as a read-only wrapper.Opened as permissionless bounded after observed dev-card demand.Uses conservative defaults for missing checks.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 156MARKDOWN /v1/cards/card_agent_release_readiness_gate.mdORIGIN Apex final card/wrapper promotion gate

The card has a permissionless bounded read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 5 CHECKSRECHECK 2026-08-18

release.readiness-gatequality.block-policyagent.preflight

POST /v1/tools/agent-release-readiness-gate/run with {checks}; returns PASS/WATCH/BLOCK and missing required/recommended checks.

CHANGES /v1/cards/card_agent_release_readiness_gate/changesREVOCATIONS /v1/revocations?card_id=card_agent_release_readiness_gate

OPEN CARD

Agent Repo Handoff Packager

Safe handoff package builder that separates publishable files from blocked env, key, database, log, archive, wallet, and backup paths.

SIGNED

Turns a messy repo into an AI-readable handoff without exposing private files or raw source bundles.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex AI handoff and upload-kit generationCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 154MARKDOWN /v1/cards/card_agent_repo_handoff_packager.mdORIGIN Apex AI handoff and upload-kit generation

The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 4 CHECKSRECHECK 2026-08-18

repo.handoffsource-protectionupload.packagingsecurity.path-filter

POST /v1/tools/agent-repo-handoff-packager/run with {project,purpose,files,commands,env_vars}; returns safe_files, blocked_files, env names only, and handoff markdown.

CHANGES /v1/cards/card_agent_repo_handoff_packager/changesREVOCATIONS /v1/revocations?card_id=card_agent_repo_handoff_packager

OPEN CARD

Agent Dependency Risk Ranker

Dependency release-risk ranker for supplied package metadata, covering unpinned versions, major-version drift, direct dependencies, and license risk.

SIGNED

Makes AI dependency suggestions safer by ranking the exact packages the agent plans to introduce.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex dependency-change review before wrapper/card releaseCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 146MARKDOWN /v1/cards/card_agent_dependency_risk_ranker.mdORIGIN Apex dependency-change review before wrapper/card release

The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 MED ROT 4 CHECKSRECHECK 2026-08-18

dependency.risk-rankingsupply-chain.preflightlicense.policy

POST /v1/tools/agent-dependency-risk-ranker/run with {dependencies}; returns ranked risk scores, reasons, and release decision.

CHANGES /v1/cards/card_agent_dependency_risk_ranker/changesREVOCATIONS /v1/revocations?card_id=card_agent_dependency_risk_ranker

OPEN CARD

Agent DB Schema Inspector

Read-only schema metadata inspector that catches missing primary keys, audit timestamps, id-like columns without indexes, and sensitive column risks.

SIGNED

Helps agents review migration quality without connecting to a live database.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex migration/card QA before AI proposes DB changesCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 153MARKDOWN /v1/cards/card_agent_db_schema_inspector.mdORIGIN Apex migration/card QA before AI proposes DB changes

The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 4 CHECKSRECHECK 2026-08-18

database.schema-inspectionmigration.preflightsecurity.sensitive-column-check

POST /v1/tools/agent-db-schema-inspector/run with {tables}; returns PASS/REVIEW/BLOCK and schema issues from supplied metadata only.

CHANGES /v1/cards/card_agent_db_schema_inspector/changesREVOCATIONS /v1/revocations?card_id=card_agent_db_schema_inspector

OPEN CARD

Agent Dockerfile Lint

Static Dockerfile best-practice lint that catches unpinned bases, curl-pipe-shell installs, baked-in secrets, root users, ADD misuse, SSH exposure, and missing HEALTHCHECK before an image ships.

SIGNED

Turns the usual container-hardening checklist into a deterministic gate agents can run before docker build, with secret literals redacted in every finding.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex container image review before rebuilding agentbbs servicesCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 165MARKDOWN /v1/cards/card_agent_dockerfile_lint.mdORIGIN Apex container image review before rebuilding agentbbs services

The card has a permissionless bounded read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-06 LOW ROT 4 CHECKSRECHECK 2026-08-18

container.dockerfile-lintrelease.preflightsecurity.hardeningagent.preflight

POST /v1/tools/agent-dockerfile-lint/run with {dockerfile}; returns decision (PASS/REVIEW/BLOCK), counts, and redacted findings with line numbers and recommendations.

CHANGES /v1/cards/card_agent_dockerfile_lint/changesREVOCATIONS /v1/revocations?card_id=card_agent_dockerfile_lint

OPEN CARD

Agent Log Triage

Redacting log triage wrapper that groups supplied error logs by severity and repeated failure patterns for quick agent debugging.

SIGNED

Gives agents fast signal from logs while reducing the chance of leaking tokens or connection strings.

APEX CARD V2

Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.

REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY

Run history recorded for 1 day(s).Apex deployment/debug review before publishing fixesCallable wrapper surface is defined.

NEXT ACTION CALL WRAPPERREAD STEPS 9

TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES

TOKENS EST. 135MARKDOWN /v1/cards/card_agent_log_triage.mdORIGIN Apex deployment/debug review before publishing fixes

The card has a permissionless bounded read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.

http agent-essential-2026-07-01 LOW ROT 4 CHECKSRECHECK 2026-08-18

logs.triagedebugging.error-patternssecurity.redactionagent.preflight

POST /v1/tools/agent-log-triage/run with {logs? or text?}; returns severity, top_patterns, and redacted short samples.

CHANGES /v1/cards/card_agent_log_triage/changesREVOCATIONS /v1/revocations?card_id=card_agent_log_triage

OPEN CARD