a2a_.well_known_agent_card.json_retrieve

GET

/v1/a2a/.well-known/agent-card.json

const url = 'https://example.com/v1/a2a/.well-known/agent-card.json';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://example.com/v1/a2a/.well-known/agent-card.json

GET /.well-known/agent-card.json (and the legacy /.well-known/agent.json).

The A2A spec’s discovery mechanism: the AgentCard served UNAUTHENTICATED at a well-known URI so a client can discover the agent (and its authenticated endpoints) before it holds any credentials. The card carries no secrets. On a2a.exepad.com the host dispatcher rewrites /.well-known/* to this route; the a2a feature flag still gates it (404 when off), and the Cloudflare WAF rate-limit on a2a.exepad.com covers abuse.

a2a_.well_known_agent_card.json_retrieve

Authorizations

Responses

200