Personal Agent Protocol report

thekaivalyam.com

thekaivalyam.com publishes a poppy.json, and no P0 or P1 check Ora measured fails. Ora could not measure 8 P0 or P1 checks, listed below.
Verdict
No problems found
Profile
pap-1.0@2026-11-12PAP Draft 1.0 (in progress, read 2026-11-12; starts from 0.4, published 2026-11-10; may change)
Last run
Tier 1 probed
Not probed

P0 and P1 checks Ora could not measure

  • T1-01 Token endpoint rejects a junk grant (P1): not measured
  • T1-03 Conversation endpoint refuses a request with no credentials (P0): not measured
  • T1-05 MCP server challenges unauthenticated initialize (P1): not measured
  • T1-15 Browser join page is safe to load (P1): not measured
  • T1-07 Browser endpoint rejects a junk join (P0): not measured
  • T1-16 Browser join authorization requires a Session (P1): not measured
  • T1-13 Feedback endpoint requires a token (P1): not measured
  • T1-14 Protocol endpoints answer without a redirect (P1): not measured
Each row is one check from the PAP spec, with its outcome, its severity (P0 blocks every agent or is a security MUST, P1 is a MUST that breaks one feature, P2 is a SHOULD or one of Ora's own consistency checks, Advisory never counts against a site) and the section it tests. The full list is in the check catalog, and what Ora's scanner sends is on its own page.

Tier 0: the public files

Plain reads of poppy.json and the documents it points to. None of these requests carries a credential.10 pass, 28 N/A
  1. T0-01Document exists
    Outcome: PassSeverity: P0§3
    served at https://www.thekaivalyam.com/.well-known/poppy.json
  2. T0-02Redirects safe
    Outcome: PassSeverity: P0§3
    1 redirect(s), all HTTPS
  3. T0-03Valid JSON object
    Outcome: PassSeverity: P0§3
    a JSON object
  4. T0-04Supported protocol_version
    Outcome: PassSeverity: P0§3.1
    protocol_version 0.4 (advisory: agents that support only Draft 1.0, which Ora follows and the spec's authors ask builders to use, will not use this file (spec 3…Show the full noteprotocol_version 0.4 (advisory: agents that support only Draft 1.0, which Ora follows and the spec's authors ask builders to use, will not use this file (spec 3.4), so move poppy.json to 1.0 and list a 0.4 document in supported_versions, or list a 1.0 document here)
  5. T0-05Organization names its own host
    Outcome: PassSeverity: P0§3.1
    organization.domain www.thekaivalyam.com; the file was requested from thekaivalyam.com and served by www.thekaivalyam.com, so it speaks for www.thekaivalyam.com
  6. T0-06Has an interface
    Outcome: PassSeverity: P0§3.1
    interfaces: apis, web
  7. T0-07Issuer identified
    Outcome: PassSeverity: P0§3.2
    no issuer (https://www.thekaivalyam.com/.well-known/oauth-protected-resource answers 404): the Company offers signed-out Sessions only
  8. T0-08All URLs HTTPS
    Outcome: PassSeverity: P0§3
    every URL is https
  9. T0-SIBPublished on the requested host
    Outcome: PassSeverity: P2§3.1
    published on thekaivalyam.com
  10. T0-27Other version documents consistent
    Outcome: N/ASeverity: P1§3.4
    supported_versions lists no other version
  11. T0-09Issuer metadata reachable
    Outcome: N/ASeverity: P0§3.2
    The Company has no issuer, so it offers signed-out Sessions only
  12. T0-10Issuer match
    Outcome: N/ASeverity: P0§3.2
    The Company has no issuer, so it offers signed-out Sessions only
  13. T0-11Domain binding
    Outcome: N/ASeverity: P0§3.2
    The Company has no issuer, so it offers signed-out Sessions only
  14. T0-12Required endpoints
    Outcome: N/ASeverity: P0§3.2
    The Company has no issuer, so it offers signed-out Sessions only
  15. T0-21Cache headers
    Outcome: N/ASeverity: P2Draft 0.2 §3.2
    The Company has no issuer, so it offers signed-out Sessions only
  16. T0-22Signing algorithms valid
    Outcome: N/ASeverity: P1§4.1
    The Company has no issuer, so it offers signed-out Sessions only
  17. T0-34Signing algorithm list advertised
    Outcome: N/ASeverity: P2§4.1
    The Company has no issuer, so it offers signed-out Sessions only
  18. T0-23Same sign-in on every domain
    Outcome: N/ASeverity: P1§3.2
    The Company has no issuer, so it offers signed-out Sessions only
  19. ADV-PKCENo plain PKCE
    Outcome: N/ASeverity: Advisoryguides#company-consent
    The Company has no issuer, so it offers signed-out Sessions only
  20. T0-13Scopes defined
    Outcome: N/ASeverity: P1§3.1, §4.7
    no auth.scopes or auth.scope_hints
  21. T0-14Mediated sign-in well formed
    Outcome: N/ASeverity: P1Mediated Sign-In §2
    no Mediated Sign-In extension
  22. T0-19Extensions named correctly
    Outcome: N/ASeverity: P1§3.3
    no extensions
  23. T0-20Extensions advertised fully
    Outcome: N/ASeverity: P1Ops §2
    operations extension not advertised
  24. T0-24Switched off consistently
    Outcome: N/ASeverity: P1§3.2, §6
    neither auth.disabled nor web.disabled is set
  25. T0-26Offered scopes described
    Outcome: N/ASeverity: P2§4.7
    no issuer, so no offered scopes
  26. T0-28Browser sign-in scope listed
    Outcome: N/ASeverity: P2§6
    no browser join (web.browser_session_endpoint)
  27. T0-15Conversation entries
    Outcome: N/ASeverity: P1§3.1
    no agent block
  28. T0-16API entries
    Outcome: PassSeverity: P1§3.1
    1 API entry
  29. T0-17OpenAPI parses
    Outcome: N/ASeverity: P1§7
    no openapi entries
  30. T0-18MCP resource metadata
    Outcome: N/ASeverity: P1§7
    no protected resource metadata for https://www.thekaivalyam.com/_api/mcp, which an MCP server that offers no account access does not need
  31. T0-25Excluded tasks document
    Outcome: N/ASeverity: P1Draft 0.3 §9.1
    Draft 0.4 serves excluded tasks per Session, behind tasks.endpoint, which Ora does not read without a Session header
  32. X-01Same MCP server everywhere
    Outcome: N/ASeverity: P2§7
    the ARD catalog lists no MCP server card
  33. X-02Same organization
    Outcome: N/ASeverity: P2§3.1
    no ARD catalog host to compare
  34. X-04Domains covered
    Outcome: N/ASeverity: P2§3.2
    protected_resources lists no other domain
  35. X-07One issuer
    Outcome: N/ASeverity: P2§3.2
    from Draft 0.3 the issuer comes from the domain's protected resource metadata (spec 3.2), which T0-07 and T0-18 grade
  36. X-08One metadata document
    Outcome: N/ASeverity: Advisory§3.2
    from Draft 0.3 a site may list several authorization servers, and auth.issuer picks the one agents use (spec 3.2)
  37. X-10Shared token endpoint lists both protocols' grants
    Outcome: N/ASeverity: P2§3.2
    no other protocol shares the PAP issuer's token endpoint
  38. X-12Consistent 401s
    Outcome: N/ASeverity: P2§7
    no recorded 401 challenge from a PAP MCP server

Tier 1: junk requests to the listed endpoints

Requests with no valid credential, which a correct site refuses. They run only when the scan asks for them, at most once per domain every 6 hours.No Tier 1 probe result from the last 30 days.11 not measured
  1. T1-01Token endpoint rejects a junk grant
    Outcome: Not measuredSeverity: P1§4.4
    Active probes run only on a scan requested for this domain. No probe result from the last 30 days.
  2. T1-02Error bodies leak nothing
    Outcome: Not measuredSeverity: Advisoryguides#company-errors
    Active probes run only on a scan requested for this domain. No probe result from the last 30 days.
  3. T1-03Conversation endpoint refuses a request with no credentials
    Outcome: Not measuredSeverity: P0§5.3
    Active probes run only on a scan requested for this domain. No probe result from the last 30 days.
  4. T1-05MCP server challenges unauthenticated initialize
    Outcome: Not measuredSeverity: P1§7
    Active probes run only on a scan requested for this domain. No probe result from the last 30 days.
  5. T1-15Browser join page is safe to load
    Outcome: Not measuredSeverity: P1§6
    Active probes run only on a scan requested for this domain. No probe result from the last 30 days.
  6. T1-07Browser endpoint rejects a junk join
    Outcome: Not measuredSeverity: P0§6
    Active probes run only on a scan requested for this domain. No probe result from the last 30 days.
  7. T1-16Browser join authorization requires a Session
    Outcome: Not measuredSeverity: P1§6
    Active probes run only on a scan requested for this domain. No probe result from the last 30 days.
  8. T1-09Operations endpoint requires a token
    Outcome: Not measuredSeverity: P2Draft 0.2 Ops §2
    Active probes run only on a scan requested for this domain. No probe result from the last 30 days.
  9. T1-13Feedback endpoint requires a token
    Outcome: Not measuredSeverity: P1Draft 0.2 §8
    Active probes run only on a scan requested for this domain. No probe result from the last 30 days.
  10. T1-14Protocol endpoints answer without a redirect
    Outcome: Not measuredSeverity: P1§3
    Active probes run only on a scan requested for this domain. No probe result from the last 30 days.
  11. ADV-REDIRECTEndpoint answers without a redirect
    Outcome: Not measuredSeverity: AdvisoryDraft 0.1 guides#agent-dpop
    Active probes run only on a scan requested for this domain. No probe result from the last 30 days.

Tier 2a: coming soon

Valid requests with a real client, once Ora publishes its own client metadata and signs real requests. Not measured yet. These planned checks were written for PAP Draft 0.2, and their sections are its numbering; they will be rewritten for Draft 1.0 before any is built.10 not measured
Show the 10 planned checks
  1. T2-M1Call each read-only OpenAPI GET with no token, then with a valid signed-out token
    Outcome: Not measuredSeverity: P1coming soonDraft 0.2 §6
  2. T2-M5Load the consent page for Ora's real client_id from a valid S256 request and inspect headers; never sign in
    Outcome: Not measuredSeverity: Advisorycoming soonDraft 0.2 guides
  3. T2-01Start a Session for U1
    Outcome: Not measuredSeverity: P0coming soonDraft 0.2 §4.2
  4. T2-02Token lifetime
    Outcome: Not measuredSeverity: P2coming soonDraft 0.2 §4.2
  5. T2-05Renew with session_id
    Outcome: Not measuredSeverity: P1coming soonDraft 0.2 §4.2
  6. T2-14Nonce challenge
    Outcome: Not measuredSeverity: P1coming soonDraft 0.2 §4.3
  7. T2-16Token request with no DPoP proof for an MCP server (resource = MCP url)
    Outcome: Not measuredSeverity: P1coming soonDraft 0.2 §4.3, §6
  8. T2-18Token accepted without cookies
    Outcome: Not measuredSeverity: P1coming soonDraft 0.2 §4.3
  9. T2-19Valid browser assertion, form POST
    Outcome: Not measuredSeverity: P0coming soonDraft 0.2 §5
  10. T2-25Cookie scope
    Outcome: Not measuredSeverity: Advisorycoming soonDraft 0.2 guides

Tier 2b: requires opt-in

Checks that run only for a verified owner who opts in. Not measured yet. These planned checks were written for PAP Draft 0.2, and their sections are its numbering; they will be rewritten for Draft 1.0 before any is built.36 not measured
Show the 36 planned checks
  1. T2-M2Send a valid Session Token in ?access_token= instead of the header
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  2. T2-M3Send a valid browser assertion in the URL instead of the form body
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §5
  3. T2-M4Start Direct Sign-In with code_challenge_method=plain and Ora's real client_id; stop at the authorization endpoint
    Outcome: Not measuredSeverity: Advisoryrequires opt-inDraft 0.2 guides
  4. T1-12Mediated endpoint, only if the company opts in: two bad-credential attempts
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §4.7, guides
  5. T2-03Replay the same assertion jti
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.2
  6. T2-04Assertion with aud as an array, or as an endpoint URL instead of auth.issuer
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §4.2
  7. T2-06Renew U1's Session with a U2 assertion
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.2
  8. T2-07Assertion signed with a key not in Ora's JWKS
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.1
  9. T2-08alg: none or HS256 assertion
    Outcome: Not measuredSeverity: Advisoryrequires opt-inDraft 0.2 guides
  10. T2-09Token request with a reused proof jti
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  11. T2-10Proof with wrong htu or htm
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  12. T2-11Proof with wrong ath
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  13. T2-12Proof signed by a different key than the token's binding
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  14. T2-13Stale iat (beyond ~1 min)
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §4.3
  15. T2-15Token sent as Authorization: Bearer to a non-MCP endpoint
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  16. T2-17That Bearer token at another MCP server or an OpenAPI endpoint
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §4.3
  17. T2-20Replay the same browser assertion
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §5
  18. T2-21exp more than 60 s after iat
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §5
  19. T2-22return_to on a foreign domain
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §5
  20. T2-23Session assertion (wrong typ) at the browser endpoint
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §5
  21. T2-24Browser assertion at the token endpoint
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §5
  22. T2-26Start with a general question
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §7.3
  23. T2-27Retry the same message id and content
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §7.3
  24. T2-28Same id, different content
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §7.3
  25. T2-29Read events with and without wait
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §7.5, §7.7
  26. T2-30POST …/messages?wait=10
    Outcome: Not measuredSeverity: P2requires opt-inDraft 0.2 §7.3
  27. T2-31Junk cursor
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §7.13
  28. T2-32U2 reads U1's conversation
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 §7.2
  29. T2-33Stream with Accept: text/event-stream
    Outcome: Not measuredSeverity: P2requires opt-inDraft 0.2 §7.6
  30. T2-34Ask about the account while signed out
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §7.11
  31. T2-35Message with only context
    Outcome: Not measuredSeverity: P2requires opt-inDraft 0.2 §7.4
  32. T2-36Close, then send a message
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 §7.12
  33. T2-37Handoff (opt-in only; may page staff)
    Outcome: Not measuredSeverity: P2requires opt-inDraft 0.2 §7.9
  34. T2-38Ora client metadata without extensions.operations, trigger a proposing endpoint
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 Ops §2
  35. T2-39U2 reads U1's signed-out operation
    Outcome: Not measuredSeverity: P0requires opt-inDraft 0.2 Ops §3.2
  36. T2-40Confirm an old revision (if revisions can be triggered)
    Outcome: Not measuredSeverity: P1requires opt-inDraft 0.2 Ops §5.2

Tier 3: needs a test account and a person

Checks that need a test account from the company and a person at the keyboard. Ora does not run these on its own. These planned checks were written for PAP Draft 0.2, and their sections are its numbering; they will be rewritten for Draft 1.0 before any is built.17 not measured
Show the 17 planned checks
  1. T3-01Direct sign-in
    Outcome: Not measuredSeverity: P0needs a test account and a personDraft 0.2 §4.5
  2. T3-02Redirect URI not in Ora's redirect_uris
    Outcome: Not measuredSeverity: P0needs a test account and a personDraft 0.2 §4.5
  3. T3-03User declines
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.5
  4. T3-04Device sign-in
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.6
  5. T3-05Mediated sign-in (if offered)
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.7
  6. T3-06Partial scope approval
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.4
  7. T3-07Request an unlisted scope
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.4
  8. T3-08Scope enforcement across channels
    Outcome: Not measuredSeverity: P0needs a test account and a personDraft 0.2 §4.4, guides
  9. T3-09Account Token from another client_id or at an API
    Outcome: Not measuredSeverity: P0needs a test account and a personDraft 0.2 §4.8
  10. T3-10Account Token with narrower and wider scope
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.8
  11. T3-11Sign a Session into account B after account A
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §4.4
  12. T3-12Revoke the Account Token
    Outcome: Not measuredSeverity: P0needs a test account and a personDraft 0.2 §4.9
  13. T3-13Signed-out token on an account-using conversation
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §7.11
  14. T3-14Direct Conversation
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 §7.10
  15. T3-15Operation end to end (sandbox action)
    Outcome: Not measuredSeverity: P0needs a test account and a personDraft 0.2 Ops §3, Ops §6
  16. T3-16standing_permission on a user_approval_required operation
    Outcome: Not measuredSeverity: P1needs a test account and a personDraft 0.2 Ops §5.2
  17. T3-17Account settings
    Outcome: Not measuredSeverity: Advisoryneeds a test account and a personDraft 0.2 guides