Serve signed Agent Cards

You can use the built-in HTTP server to serve signed Agent Cards at standard Agent-to-Agent (A2A) discovery endpoints for testing and development.

Before you begin

  • You have installed rh-sigstore-a2a.
  • You have a signed Agent Card JSON file.

Procedure

  1. Start the server: 
    $ rh-sigstore-a2a serve <signed-card-file>

    where:

    <signed-card-file>

    Your signed Agent Card JSON file

    By default, the server listens on http://127.0.0.1:8080.

  2. Optional: Bind to all interfaces: 
    $ rh-sigstore-a2a serve <signed_card_file> --host <host> --port <port>

    where:

    <signed_card_file>
    Your signed Agent Card JSON file
    <host>
    IP address to bind to
    <port>
    Port number to listen on
  3. Optional: Skip signature verification on startup: 
    $ rh-sigstore-a2a serve <signed_card_file> --no-verify

    where:

    <signed_card_file>

    Your signed Agent Card JSON file

    By default, the server verifies the signature before serving to ensure the card is valid.

    Note

    The /.well-known/agent.json endpoint is the standard A2A protocol discovery URL. Any A2A-compatible client can discover the agent at this location.