VerifyFlow

Check the contract before an agent acts.

VerifyFlow exposes the Agent Trust Contract Kit: no-key samples, public manifests, failure-mode contracts, payload ceilings, and keyed scans for APIs, MCP servers, and workflows.

no_key_sample usable_with_limits
{
  "can_use": "yes_with_limits",
  "agent_contract_score": 92,
  "safe_to_call": "readiness and first-safe-call only",
  "first_missing": "operator-specific approval policy",
  "failure_routes": ["400", "401", "403", "409", "410", "429"],
  "payload_ceiling": "200000 request bytes",
  "safe_next_action": "run one no-secret synthetic test"
}

30-second path

Start no-key, inspect the public contract, then use a key only when another service needs a live scan. K-Work Trust is the first proof pack; the contract shape is broader than KWT.

No-key sample

Check score, missing fields, failure routes, payload ceilings, and the safe next action.

Public contract

Read manifests, OpenAPI, MCP metadata, skill files, readiness, and runtime errors.

Keyed scan

Scan another public API base URL only after the no-key response shape is useful.