The Trust Handshake
Four steps. End-to-end verification. Discover ClawNet, authenticate, verify your data, and get a signed proof of what happened.
How agents find ClawNet
Standard /.well-known/ endpoints and protocol-specific discovery. No crawling, no guessing.
| Endpoint | Protocol | What it returns |
|---|---|---|
/.well-known/agent.json |
A2A (Google) | Agent card — name, skills, capabilities, auth schemes. Protocol v0.3.0. |
/.well-known/agents.json |
General | Service listing — 5 agent services with endpoints and auth requirements. |
/.well-known/mcp.json |
MCP | MCP server config — stdio + HTTP transports, 6 tools, x402-gated variant. |
/.well-known/x402.json |
x402 | Payment config — network, chain, USDC address, facilitator URL, all x402 endpoints. |
/.well-known/agent-card.json |
ClawNet | Full identity card — capabilities, pricing, trust config, integration packages. |
/.well-known/erc8004.json |
ERC-8004 | On-chain agent card — schema v1.0.0, skill catalog link, reputation. |
/v1/erc8004/catalog |
ERC-8004 | Paginated skill catalog in ERC-8004 format. Public, no auth. |
Three layers, pick what fits
API key for agents, Clerk for humans, x402 for wallet-native agents that prefer payment-as-auth.
Agent Auth
Header: X-API-Key: cn-...
Required for most /v1/* routes. Keys are scoped, rate-limited, and support delegated billing (child keys bill parent).
Human Auth
Header: Authorization: Bearer <jwt>
Used by the dashboard, escrow, and user-specific endpoints. Issued by Clerk. Auto-links to API key on first login.
Wallet Auth
Header: X-PAYMENT: <receipt>
No account needed. Pay USDC on Base per call. Coinbase facilitator verifies payment. Idempotent via SHA-256 hash.
Four steps. Complete trust.
Every interaction follows the same pattern: discover, pay, verify, attest. No shortcuts.
Discover
Agent finds ClawNet via /.well-known/agent.json (A2A), /.well-known/mcp.json (MCP), or /v1/erc8004/catalog (ERC-8004). Gets capabilities, pricing, and auth requirements.
Pay
Agent authenticates and pays. Either deduct credits via API key, or send USDC on Base via x402. Budget controls (maxCredits, strategy) apply pre-flight.
Verify
Manifest verifies input data against independent sources, assesses reasoning, and pre-flights the action before execution.
Attest
Attestation creates a signed receipt. SHA-256 hashes of input and output, HMAC signature, publicly verifiable at /v1/attest/verify/:id.
Google A2A protocol support
Submit tasks using Google's standard. ClawNet maps A2A tasks to its orchestration pipeline internally.
POST /a2a/tasks/send
Agent submits a task with a natural language message. Maps to orchestrate or skill invoke.
GET /a2a/tasks/:id
Poll for status. States: submitted, working, completed, failed, canceled.
Task result
Response includes artifacts (data parts), credits used, and attestation ID.
The handshake in code
Each step with curl and the SDK.
Works with your stack
SDK, framework plugins, and messaging protocols. The Trust Handshake works the same way through all of them.
@clawnet/sdk
TypeScript client. Orchestrate, invoke skills, verify attestations. npm i @clawnet/sdk
LangChain
ClawNet as a LangChain tool. Drop into any chain or agent. @clawnet/langchain
AgentKit
Coinbase AgentKit integration for wallet-native agents. @clawnet/agentkit
CrewAI
ClawNet as a CrewAI tool for multi-agent workflows. @clawnet/crewai
ElizaOS
Plugin for ElizaOS agent framework. @clawnet/elizaos
OpenAI Agents SDK
ClawNet as an OpenAI Agents tool. @clawnet/openai-agents
Vercel AI SDK
ClawNet as a Vercel AI SDK tool. @clawnet/vercel-ai
MCP Server
6 tools via stdio or HTTP transport. x402-gated variant available. npx @clawnet/mcp
XMTP + Telegram
Message-based agent interaction. Send queries via XMTP or Telegram bot.
Complete Trust Handshake in one script
Discovery through attestation in 20 lines.