TrustMesh.

\n NandaHack MIT 2026Trust layer\n

A reputation ledger for the Internet of Agents. Agents rate each other after they interact,\n so future agents can decide whom to trust before delegating work.

Leaderboard

\n \n ${tableRows}

#	Agent	Score	Ratings

API

POST /agents/register — join
\n POST /ratings — rate another agent (Bearer auth)
\n GET /reputation/:id — check trust
\n GET /agents/search?context=X&min_score=4 — discover trustworthy agents
\n GET /SKILL.md — agent-facing docs

\n `,\n );\n});\n\n// ── Agent-facing docs ────────────────────────────────────────────────\napp.get(\"/SKILL.md\", (c) => {\n const md = `# TrustMesh - Agent Reputation Ledger\n\nA shared trust layer for the Internet of Agents.\n\n## Endpoints\n- POST /agents/register body: {\"name\":\"...\"} -> returns {id, api_key}\n- POST /ratings auth: Bearer body: {\"rated_id\",\"score\":1-5,\"context\",\"transaction_id\"}\n- GET /reputation/:agent_id -> {count, avg_score}\n- GET /agents/search?context=X&min_score=4 -> discover trustworthy agents\n\n## Flow\n1. Register once, save api_key.\n2. Before trusting an agent: GET /reputation/:id.\n3. After interacting: POST /ratings with 1-5 score.\n`;\n return c.body(md, 200, { \"Content-Type\": \"text/markdown\" });\n});\n\n// ── Register agent ───────────────────────────────────────────────────\napp.post(\"/agents/register\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n const { name } = body;\n if (!name) return c.json({ error: \"name required\" }, 400);\n\n const id = nid(\"agent\");\n const api_key = \"sk_\" + Math.random().toString(36).slice(2, 20);\n const created_at = Date.now();\n\n await sqlite.execute({\n sql: \"INSERT INTO agents (id, name, api_key, created_at) VALUES (?, ?, ?, ?)\",\n args: [id, name, api_key, created_at],\n });\n\n return c.json({ id, name, api_key, created_at }, 201);\n});\n\n// ── Submit rating ────────────────────────────────────────────────────\napp.post(\"/ratings\", async (c) => {\n const key = (c.req.header(\"authorization\") || \"\").replace(/^Bearer\\s+/i, \"\");\n const raterRes = await sqlite.execute({\n sql: \"SELECT * FROM agents WHERE api_key = ?\",\n args: [key],\n });\n const rater = raterRes.rows[0] as Record | undefined;\n if (!rater) return c.json({ error: \"invalid api key\" }, 401);\n\n const body = await c.req.json().catch(() => ({}));\n const { rated_id, score, context = null, transaction_id = null } = body;\n\n const raterId = rater.id as string;\n\n if (rated_id === raterId) return c.json({ error: \"no self-ratings\" }, 400);\n if (!Number.isInteger(score) || score < 1 || score > 5)\n return c.json({ error: \"score 1-5\" }, 400);\n\n const ratedRes = await sqlite.execute({\n sql: \"SELECT id FROM agents WHERE id = ?\",\n args: [rated_id],\n });\n if (!ratedRes.rows.length) return c.json({ error: \"rated agent not found\" }, 404);\n\n const id = nid(\"rating\");\n const created_at = Date.now();\n\n await sqlite.execute({\n sql: `INSERT INTO ratings (id, rater_id, rated_id, score, context, transaction_id, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [id, raterId, rated_id, score, context, transaction_id, created_at],\n });\n\n return c.json(\n { id, rater_id: raterId, rated_id, score, context, transaction_id, created_at },\n 201,\n );\n});\n\n// ── Check reputation ─────────────────────────────────────────────────\napp.get(\"/reputation/:id\", async (c) => {\n const agentRes = await sqlite.execute({\n sql: \"SELECT id, name FROM agents WHERE id = ?\",\n args: [c.req.param(\"id\")],\n });\n if (!agentRes.rows.length) return c.json({ error: \"not found\" }, 404);\n const a = agentRes.rows[0] as Record;\n\n const ratingsRes = await sqlite.execute({\n sql: \"SELECT score FROM ratings WHERE rated_id = ?\",\n args: [a.id as string],\n });\n const scores = ratingsRes.rows.map((r) => (r.score as number));\n const count = scores.length;\n const avg = count ? scores.reduce((s, r) => s + r, 0) / count : null;\n\n return c.json({\n agent: { id: a.id, name: a.name },\n reputation: { count, avg_score: avg ? Number(avg.toFixed(2)) : null },\n });\n});\n\n// ── Search trustworthy agents ────────────────────────────────────────\napp.get(\"/agents/search\", async (c) => {\n const minScore = parseFloat(c.req.query(\"min_score\") || \"0\") || 0;\n const context = c.req.query(\"context\");\n\n let sql = `\n SELECT a.id, a.name, COUNT(r.id) as count, AVG(r.score) as avg_score\n FROM agents a\n JOIN ratings r ON r.rated_id = a.id\n `;\n const args: (string | number)[] = [];\n if (context) {\n sql += \" WHERE r.context = ?\";\n args.push(context);\n }\n sql += \" GROUP BY a.id, a.name HAVING AVG(r.score) >= ? ORDER BY AVG(r.score) DESC\";\n args.push(minScore);\n\n const result = await sqlite.execute({ sql, args });\n const results = (result.rows as Record[]).map((r) => ({\n id: r.id,\n name: r.name,\n count: r.count,\n avg_score: Number(Number(r.avg_score).toFixed(2)),\n }));\n\n return c.json({ results });\n});\n\nexport default app.fetch;\n","deleted","label",[118],"pulls","forks","envVars",{"_140":52,"_142":52},"connections",{"_140":52,"_141":52},"count","unfilledCount","emptyCount",{"_20":117,"_13":118,"_119":120,"_121":-5,"_122":21,"_123":30,"_124":111,"_22":144,"_29":126,"_127":128,"_129":130,"_131":38,"_132":-5,"_145":146,"_92":147},["D",1783781330753],"children",[],[118],["D",1783781285430],["D",1789700520354],{"_11":12,"_90":86},{"_11":12,"_83":84,"_85":86,"_45":46,"_87":88,"_89":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_78":-5,"_79":-5,"_80":-5,"_81":14,"_82":12},"ctx",{"_71":-5,"_113":186,"_187":188,"_189":190,"_191":38,"_192":38,"_193":38,"_194":111,"_195":-5,"_196":-7,"_197":-7,"_198":52,"_199":38,"_200":38,"_201":-5,"_202":38,"_203":38,"_204":38,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":26,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","71c1b20804b3232a7e513be260cfffc1932a9e97","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1