{"id":188398,"name":"HexStrike Security Agent","description":"AI-driven penetration testing and security automation agent backed by a live HexStrike v6 server. Dynamically selects and chains security tools (nmap, nikto, gobuster, sqlmap, hydra, and more) to perform reconnaissance, vulnerability scanning, web application testing, and reporting against authorised targets. Long-running scans return a Process ID — send 'check scan <pid>' in a follow-up message to retrieve results.","card_url":"https://hexstrike.agently.to/.well-known/agent-card.json","endpoint":"https://hexstrike.agently.to/agent","protocol_version":"0.3.0","first_seen":"2026-10-17T18:20:40.636912+00:00","last_verified":"2026-10-17T20:24:54.421614+00:00","card":{"url":"https://hexstrike.agently.to/agent","name":"HexStrike Security Agent","skills":[{"id":"hexstrike","name":"HexStrike security automation","tags":["security","pentest","hexstrike","mcp","recon","vulnerability","osint"],"examples":["I'm a security researcher. My company owns 192.168.0.1. Run a deep analysis — port scan, service detection, and web vuln scan.","Perform a comprehensive penetration test against example.com (authorised). Use all available HexStrike tools.","Run a quick recon on 10.0.0.1 — discover open ports and services.","Do a WAF detection and directory brute-force against https://target.internal (authorised).","Run a full web application security assessment on https://staging.myapp.com — I own this domain.","Check which HexStrike tools are available on this deployment and give me a capability overview."],"description":"Drive a live HexStrike v6 server to run penetration tests and security assessments. Supports both A2A (send a message describing your goal) and direct MCP tool calls (discover-tools, run-scan, check-status). Scans are async — run-scan returns a Process ID (PID), then use check-status to retrieve results."}],"version":"0.3.0","description":"AI-driven penetration testing and security automation agent backed by a live HexStrike v6 server. Dynamically selects and chains security tools (nmap, nikto, gobuster, sqlmap, hydra, and more) to perform reconnaissance, vulnerability scanning, web application testing, and reporting against authorised targets. Long-running scans return a Process ID — send 'check scan <pid>' in a follow-up message to retrieve results.","capabilities":{"streaming":true,"pushNotifications":false},"protocolVersion":"0.3.0","defaultInputModes":["text/plain"],"defaultOutputModes":["text/plain"]},"signature_status":"unsigned","signature_detail":"No card signature supplied","signature_key_url":null,"signature_checked_at":"2026-10-17T20:24:54.421614+00:00","domain_claimed_at":null,"domain_proof_checked_at":null,"source_name":"Agent Tools Catalog","source_url":"https://agent-tools.cloud","last_check":{"checked_at":"2026-10-17T20:24:54.421614+00:00","success":true,"http_status":200,"detail":"Agent Card validated"},"also_published_at":[],"history_urls":["https://hexstrike.agently.to/.well-known/agent-card.json"],"also_observed_in":[{"source_name":"Agent Tools Catalog","source_url":"https://agent-tools.cloud","last_seen":"2026-10-17T18:19:09.657082+00:00"}],"skills":[{"skill_id":"hexstrike","name":"HexStrike security automation","description":"Drive a live HexStrike v6 server to run penetration tests and security assessments. Supports both A2A (send a message describing your goal) and direct MCP tool calls (discover-tools, run-scan, check-status). Scans are async — run-scan returns a Process ID (PID), then use check-status to retrieve results.","tags":["security","pentest","hexstrike","mcp","recon","vulnerability","osint"],"quality_warning":false}],"quality_flags":[],"check_history":{"checks":2,"passed":2},"recent_checks":[{"card_url":"https://hexstrike.agently.to/.well-known/agent-card.json","checked_at":"2026-10-17T20:24:54.421614+00:00","success":true,"http_status":200,"detail":"Agent Card validated"},{"card_url":"https://hexstrike.agently.to/.well-known/agent-card.json","checked_at":"2026-10-17T18:20:40.636912+00:00","success":true,"http_status":200,"detail":"Agent Card validated"}],"endpoint_tls_check":{"checked_at":"2026-10-17T20:24:54.421614+00:00","success":true,"detail":"Valid TLS connection to advertised endpoint host; no A2A request sent"},"protocol_check":{"checked_at":"2026-10-17T18:20:40.636912+00:00","state":"unconfirmed","http_status":402,"detail":"Endpoint response did not match the JSON-RPC request"},"x402_price_check":null,"events":[],"relationships":[],"verification":{"agent_card_url":"https://hexstrike.agently.to/.well-known/agent-card.json","last_successful_card_check":"2026-10-17T20:24:54.421614+00:00","latest_card_check":{"checked_at":"2026-10-17T20:24:54.421614+00:00","success":true,"http_status":200,"detail":"Agent Card validated"},"signature_status":"unsigned","signature_checked_at":"2026-10-17T20:24:54.421614+00:00","task_endpoint_tested":true,"task_execution_tested":false,"endpoint_tls_checked_at":"2026-10-17T20:24:54.421614+00:00","endpoint_tls_reachable":true,"protocol_check_state":"unconfirmed","protocol_checked_at":"2026-10-17T18:20:40.636912+00:00","provider_identity_verified":false,"domain_claimed_at":null,"domain_proof_checked_at":null}}