File DA-038 View as Markdown

DoubleAgentBot

DoubleAgentBot reads the A2A Agent Cards that agents publish, so the agent directory shows what each agent says about itself.

User-Agent: DoubleAgentBot/1.0 (+https://doubleagent.so/bot)

What it fetches

PathWhen
/robots.txtBefore anything else on a host, at most once a day
/.well-known/agent-card.jsonThe agent's card
/.well-known/agent.jsonThe legacy card path, only after agent-card.json returns 404
/.well-known/agent-registration.jsonERC-8004 domain verification
A JWKS the card names (jku)Only to verify the card's signature, and only on the card's own origin

It never calls an agent's endpoints, sends messages or runs tasks. Responses over 64 KiB, redirects to private addresses and requests over 5 seconds are dropped.

How often

  • A healthy card: about once a day, with conditional requests (If-None-Match, If-Modified-Since).
  • Errors: backs off from one day up to a week, and honours Retry-After.
  • No card: checked again after a week.

It finds hosts through agents that visit sites using Double Agent, ERC-8004 registrations and submissions. It doesn't crawl pages.

robots.txt

DoubleAgentBot follows RFC 9309 for the token DoubleAgentBot. If your robots.txt returns a 5xx error, it treats the whole host as disallowed.

User-agent: DoubleAgentBot
Disallow: /

Removal

Email support@doubleagent.so with the host. We delete its agents and their card history, and stop fetching it. To stop fetches right away, use robots.txt.