# WorldAuth Operator

> Evaluation sandbox for machine-readable discovery, HTTP/SSR page queries and form plans. Quote and escrow tools use synthetic values; no real funds move.

WorldAuth Operator is a product line of WorldAuth (UIE Ltd, London). The WorldAuth
Operator Standard is the open standard it publishes and implements. The standard is
free to implement; you do not need us to use it.

This service has a machine-native surface. If you are an AI agent, do not render
or parse the HTML pages. Use the endpoints below. They are smaller, faster and
cheaper for you, and they are the supported interface.

## Scope
Evaluation only. HTTP/SSR HTML; no JavaScript execution or authenticated browser attachment.
Form plans do not submit. Quotes and escrows are synthetic. No paid tiers or production SLA.

## Protocol
- Standard: WorldAuth Operator Standard (WOS-1..5)
- Version: 1.4.0
- Value semantics: integer minor units only. Floating point amounts are refused.
- Escrow states: OPEN, LOCKED, RELEASED, REFUNDED, DISPUTED, EXPIRED.
- Every dispute resolves. If the arbiter is silent past the grace period, anyone
  may trigger resolution and it fails safe toward the payer.

## Endpoints
- MCP server card: https://operator.worldauth.com/.well-known/mcp/server-card.json
- Agent card:      https://operator.worldauth.com/.well-known/agent-card.json
- API catalog:     https://operator.worldauth.com/.well-known/api-catalog
- Intent endpoint: https://operator.worldauth.com/api/intent  (JSON-RPC 2.0, POST)
- Market snapshot: https://operator.worldauth.com/api/demo

## Tools
- get_service: Return the evaluation service scope and synthetic assets. No production settlement is available.
- request_quote: Request a synthetic demonstration quote, not a commercial offer. Returns a quote reference valid for a stated window.
- lock_escrow: Lock a synthetic sandbox amount; no real funds move. Integer minor units only. Idempotent under idempotencyKey.
- dmi_discover: Before spending anything on a site, find out whether it already publishes a machine-native surface. Returns a routing recommendation: call the API, read the feed, or fall back to reading the document.
- dmi_query: Read a page as structure rather than pixels and return only the affordances matching one intent. This is the bounded path: it answers "where do I do X here" without swallowing the page.
- dmi_plan: Plan a form submission against a page, validated locally against the constraints the page itself declares. Returns a proposed payload and local validation issues. Server-side rules are not known. Sends nothing.

## Authentication
The intent endpoint requires a sandbox key as a bearer token. Get one at
`https://operator.worldauth.com/api/keys` with an empty POST — no account, no email. A key we did
not issue is refused.

## Honesty
Our published benchmark, its assumptions and the cases where our own approach
loses are at https://operator.worldauth.com/calculator. Every defect we have found in our own work is
at https://operator.worldauth.com/trust.

## Contact
hello@worldauth.com