{
 "name": "Bewary: scam, phishing and fraud detection",
 "description": "Threat intelligence for AI agents: checks URLs, domains, phones, emails, wallets and IBANs for scams",
 "version": "1.11.0",
 "supportedInterfaces": [
  {
   "url": "https://api.bewary.app/a2a",
   "protocolBinding": "JSONRPC",
   "protocolVersion": "1.0"
  },
  {
   "url": "https://api.bewary.app/a2a",
   "protocolBinding": "JSONRPC",
   "protocolVersion": "0.3"
  }
 ],
 "provider": {
  "organization": "Bewary",
  "url": "https://bewary.app"
 },
 "iconUrl": "https://bewary.app/brand/icon-512.png",
 "documentationUrl": "https://bewary.app/docs/ai-agents",
 "capabilities": {
  "streaming": false,
  "pushNotifications": false,
  "extendedAgentCard": false
 },
 "securitySchemes": {
  "apiKey": {
   "httpAuthSecurityScheme": {
    "scheme": "Bearer"
   }
  },
  "oauth": {
   "oauth2SecurityScheme": {
    "oauth2MetadataUrl": "https://bewary.app/.well-known/oauth-authorization-server",
    "flows": {
     "authorizationCode": {
      "authorizationUrl": "https://bewary.app/account/authorize",
      "tokenUrl": "https://api.bewary.app/oauth/token",
      "refreshUrl": "https://api.bewary.app/oauth/token",
      "scopes": {
       "api": "Run lookups and manage watches on the account, spending its credits"
      },
      "pkceRequired": true
     }
    }
   }
  }
 },
 "securityRequirements": [
  {
   "schemes": {
    "apiKey": {
     "list": []
    }
   }
  },
  {
   "schemes": {
    "oauth": {
     "list": [
      "api"
     ]
    }
   }
  }
 ],
 "defaultInputModes": [
  "text/plain",
  "application/json"
 ],
 "defaultOutputModes": [
  "text/plain",
  "application/json"
 ],
 "skills": [
  {
   "id": "lookup_domain",
   "name": "Look up a domain",
   "description": "Domain age, lookalike-brand technique, abused TLD, blocklist status and a verdict. 1 credit.",
   "tags": [
    "scam",
    "fraud",
    "domain"
   ],
   "examples": [
    "{\"type\": \"domain\", \"value\": \"usps-redeliver.top\"}"
   ],
   "inputModes": [
    "text/plain",
    "application/json"
   ],
   "outputModes": [
    "text/plain",
    "application/json"
   ]
  },
  {
   "id": "lookup_url",
   "name": "Look up a link",
   "description": "Is this link safe to open? Resolves shorteners and redirects and checks where it really goes; on a shortener, says whether the shortener itself disabled, flagged or removed the link. 1 credit.",
   "tags": [
    "scam",
    "fraud",
    "url"
   ],
   "examples": [
    "{\"type\": \"url\", \"value\": \"https://usps-redeliver.top/pay\"}"
   ],
   "inputModes": [
    "text/plain",
    "application/json"
   ],
   "outputModes": [
    "text/plain",
    "application/json"
   ]
  },
  {
   "id": "lookup_ip",
   "name": "Look up an IP address",
   "description": "Network owner, ASN, country, hosting type, reverse DNS. 1 credit.",
   "tags": [
    "scam",
    "fraud",
    "ip"
   ],
   "examples": [
    "{\"type\": \"ip\", \"value\": \"45.155.205.233\"}"
   ],
   "inputModes": [
    "text/plain",
    "application/json"
   ],
   "outputModes": [
    "text/plain",
    "application/json"
   ]
  },
  {
   "id": "lookup_phone",
   "name": "Look up a phone number",
   "description": "Country, number type, blocklist status and a verdict for a phone number. 1 credit.",
   "tags": [
    "scam",
    "fraud",
    "phone"
   ],
   "examples": [
    "{\"type\": \"phone\", \"value\": \"+18774196664\"}"
   ],
   "inputModes": [
    "text/plain",
    "application/json"
   ],
   "outputModes": [
    "text/plain",
    "application/json"
   ]
  },
  {
   "id": "lookup_shortcode",
   "name": "Look up an SMS short code",
   "description": "Who operates this SMS short code, and is it legitimate, shared or a scam code? 1 credit.",
   "tags": [
    "scam",
    "fraud",
    "shortcode"
   ],
   "examples": [
    "{\"type\": \"shortcode\", \"value\": \"86006\"}"
   ],
   "inputModes": [
    "text/plain",
    "application/json"
   ],
   "outputModes": [
    "text/plain",
    "application/json"
   ]
  },
  {
   "id": "lookup_email",
   "name": "Look up an email address",
   "description": "Mail server, disposable or free provider, role mailbox, and the sender domain's facts. 1 credit.",
   "tags": [
    "scam",
    "fraud",
    "email"
   ],
   "examples": [
    "{\"type\": \"email\", \"value\": \"support@paypa1-billing.com\"}"
   ],
   "inputModes": [
    "text/plain",
    "application/json"
   ],
   "outputModes": [
    "text/plain",
    "application/json"
   ]
  },
  {
   "id": "lookup_wallet",
   "name": "Look up a crypto wallet",
   "description": "Is this wallet on Bewary's scam list? 1 credit.",
   "tags": [
    "scam",
    "fraud",
    "wallet"
   ],
   "examples": [
    "{\"type\": \"wallet\", \"value\": \"bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh\"}"
   ],
   "inputModes": [
    "text/plain",
    "application/json"
   ],
   "outputModes": [
    "text/plain",
    "application/json"
   ]
  },
  {
   "id": "lookup_iban",
   "name": "Look up an IBAN",
   "description": "Is this IBAN valid (country length and structure, check digits), which bank does it belong to (name, BIC), and did a community report name it? Pass the country the payee claims to catch a mismatch. 1 credit.",
   "tags": [
    "scam",
    "fraud",
    "iban"
   ],
   "examples": [
    "{\"type\": \"iban\", \"value\": \"DE89370400440532013000\"}"
   ],
   "inputModes": [
    "text/plain",
    "application/json"
   ],
   "outputModes": [
    "text/plain",
    "application/json"
   ]
  },
  {
   "id": "lookup_app",
   "name": "Look up a mobile app",
   "description": "Is this app live on the Apple App Store or Google Play, or did the store pull it? Name, developer, rating count and when we first and last saw it live. 1 credit.",
   "tags": [
    "scam",
    "fraud",
    "app"
   ],
   "examples": [
    "{\"type\": \"app\", \"value\": \"apple:310633997\"}"
   ],
   "inputModes": [
    "text/plain",
    "application/json"
   ],
   "outputModes": [
    "text/plain",
    "application/json"
   ]
  },
  {
   "id": "lookup_payment_handle",
   "name": "Look up a payment handle",
   "description": "Does this Cash App $Cashtag, PayPal.me name or Venmo username exist, is it active, and is it on Bewary's scam list? Existence and status only, never the person's name. 1 credit.",
   "tags": [
    "scam",
    "fraud",
    "payment handle"
   ],
   "examples": [
    "{\"type\": \"payment_handle\", \"value\": \"$cashsupport\"}"
   ],
   "inputModes": [
    "text/plain",
    "application/json"
   ],
   "outputModes": [
    "text/plain",
    "application/json"
   ]
  }
 ]
}