State of Agent-to-Agent: Q3 2026

1. Crawl run: Tranco list, start and finish times, domains queued and checked, status.

   SELECT id, list_id, source, started_at, finished_at, domains_total, domains_done, status FROM crawls WHERE id = 'full-20260926-39db43'

2. Domains per rank bucket and outcome class (crawl_stats holds totals only, no per-domain rows).

   SELECT bucket, classification, SUM(count) AS domains FROM crawl_stats WHERE crawl_id = 'full-20260926-39db43' GROUP BY bucket, classification ORDER BY bucket, classification

3. Domains without a card, grouped into reasons from the stored detail (HTTP status, robots.txt result, network error kind).

   SELECT classification, CASE WHEN classification = 'http-error' AND detail IN ('404', '410') THEN 'not-found' WHEN classification = 'http-error' AND detail IN ('401', '403') THEN 'forbidden' WHEN classification = 'http-error' AND detail = '429' THEN 'rate-limited' WHEN classification = 'http-error' AND detail LIKE '5__' THEN 'server-error' WHEN classification = 'http-error' AND detail LIKE '3__' THEN 'redirect-status' WHEN classification = 'http-error' THEN 'other-status' WHEN classification = 'robots-disallowed' AND detail = 'rules' THEN 'robots-rules' WHEN classification = 'robots-disallowed' AND (detail = 'robots.txt 429' OR detail LIKE 'robots.txt 5__') THEN 'robots-unavailable' WHEN classification = 'robots-disallowed' THEN 'robots-redirect' WHEN classification = 'network-error' AND detail LIKE '%530' THEN 'unresolved' WHEN classification = 'network-error' AND detail LIKE '%dns' THEN 'dns' WHEN classification = 'network-error' AND detail LIKE '%tls' THEN 'tls' WHEN classification = 'network-error' AND (detail LIKE '%refused' OR detail LIKE '%reset') THEN 'connection' WHEN classification = 'network-error' THEN 'other-network' WHEN classification = 'timeout' AND detail = 'robots.txt' THEN 'robots-timeout' WHEN classification = 'timeout' THEN 'card-timeout' WHEN classification = 'not-json' AND detail = 'text/html' THEN 'html' WHEN classification = 'not-json' AND detail = 'oversize' THEN 'oversize' WHEN classification = 'not-json' THEN 'other-body' WHEN classification = 'redirect-error' AND detail = 'blocked-not-https' THEN 'redirect-not-https' WHEN classification = 'redirect-error' AND detail = 'too-many-redirects' THEN 'redirect-too-many' WHEN classification = 'redirect-error' THEN 'redirect-blocked' ELSE classification END AS reason, SUM(count) AS domains FROM crawl_stats WHERE crawl_id = 'full-20260926-39db43' AND classification NOT IN ('card-v1', 'card-v0.3') GROUP BY classification, reason ORDER BY domains DESC, classification, reason

4. Cards by shape (1.0 = supportedInterfaces, 0.3 = url plus protocolVersion or preferredTransport) and by the path that served them.

   SELECT version, path, COUNT(*) AS cards FROM cards WHERE crawl_id = 'full-20260926-39db43' GROUP BY version, path ORDER BY cards DESC, version, path

5. Card totals: distinct documents, signatures present, HTTP caching headers, declared capabilities, security schemes, provider organization present.

   SELECT COUNT(*) AS cards, COUNT(DISTINCT raw_sha256) AS distinct_documents, COALESCE(SUM(signed), 0) AS signed, COALESCE(SUM(CASE WHEN cache_control IS NOT NULL AND trim(cache_control) <> '' THEN 1 ELSE 0 END), 0) AS cache_control_present, COALESCE(SUM(CASE WHEN (instr(lower(cache_control), 'max-age=') > 0 AND CAST(substr(lower(cache_control), instr(lower(cache_control), 'max-age=') + 8) AS INTEGER) > 0) THEN 1 ELSE 0 END), 0) AS max_age_positive, COALESCE(SUM(CASE WHEN lower(cache_control) LIKE '%no-store%' THEN 1 ELSE 0 END), 0) AS no_store, COALESCE(SUM(etag_present), 0) AS etag, COALESCE(SUM(CASE WHEN etag_present = 1 AND (instr(lower(cache_control), 'max-age=') > 0 AND CAST(substr(lower(cache_control), instr(lower(cache_control), 'max-age=') + 8) AS INTEGER) > 0) THEN 1 ELSE 0 END), 0) AS max_age_and_etag, COALESCE(SUM(CASE WHEN json_extract(capabilities_json, '$.streaming') = 1 THEN 1 ELSE 0 END), 0) AS streaming, COALESCE(SUM(CASE WHEN json_extract(capabilities_json, '$.pushNotifications') = 1 THEN 1 ELSE 0 END), 0) AS push_notifications, COALESCE(SUM(CASE WHEN json_array_length(capabilities_json, '$.extensions') > 0 THEN 1 ELSE 0 END), 0) AS extensions, COALESCE(SUM(CASE WHEN json_extract(capabilities_json, '$.extendedAgentCard') = 1 THEN 1 ELSE 0 END), 0) AS extended_agent_card, COALESCE(SUM(CASE WHEN json_array_length(security_schemes) = 0 THEN 1 ELSE 0 END), 0) AS no_security_schemes, COALESCE(SUM(CASE WHEN provider_org IS NOT NULL AND trim(provider_org) <> '' THEN 1 ELSE 0 END), 0) AS with_provider_org FROM cards WHERE crawl_id = 'full-20260926-39db43'

6. Cards by response media type (Content-Type without parameters); uncommon values fold into 'other'.

   SELECT CASE WHEN mt = '' THEN 'none' WHEN mt IN ('application/json', 'application/a2a+json', 'text/plain', 'text/html', 'application/octet-stream') THEN mt ELSE 'other' END AS media_type, COUNT(*) AS cards FROM (SELECT lower(trim(CASE WHEN instr(COALESCE(content_type, ''), ';') > 0 THEN substr(content_type, 1, instr(content_type, ';') - 1) ELSE COALESCE(content_type, '') END)) AS mt FROM cards WHERE crawl_id = 'full-20260926-39db43') GROUP BY media_type ORDER BY cards DESC, media_type

7. Cards declaring each security scheme type (a card can declare several); non-standard types fold into 'other'.

   SELECT CASE WHEN j.value IN ('apiKey', 'oauth2', 'openIdConnect', 'mutualTLS', 'http:bearer', 'http:basic') THEN j.value WHEN j.value LIKE 'http:%' THEN 'http:other' ELSE 'other' END AS scheme, COUNT(DISTINCT c.domain) AS cards FROM cards AS c, json_each(c.security_schemes) AS j WHERE c.crawl_id = 'full-20260926-39db43' GROUP BY scheme ORDER BY cards DESC, scheme

8. Cards by number of skills.

   SELECT CASE WHEN skills_count = 0 THEN '0' WHEN skills_count = 1 THEN '1' WHEN skills_count <= 4 THEN '2-4' WHEN skills_count <= 9 THEN '5-9' WHEN skills_count <= 19 THEN '10-19' ELSE '20+' END AS skills, COUNT(*) AS cards FROM cards WHERE crawl_id = 'full-20260926-39db43' GROUP BY skills

9. Provider organizations as counts only: how many distinct names (case-insensitive), how many appear on more than one domain.

   SELECT COUNT(*) AS organizations, COALESCE(SUM(CASE WHEN n > 1 THEN 1 ELSE 0 END), 0) AS organizations_on_several_domains, COALESCE(SUM(CASE WHEN n > 1 THEN n ELSE 0 END), 0) AS cards_from_those, COALESCE(MAX(n), 0) AS most_domains_for_one FROM (SELECT lower(trim(provider_org)) AS org, COUNT(*) AS n FROM cards WHERE crawl_id = 'full-20260926-39db43' AND provider_org IS NOT NULL AND trim(provider_org) <> '' GROUP BY org)

10. Internal: the domains with a card and their shape, used only to read the stored raw cards in R2. Never exported.

    SELECT domain, version FROM cards WHERE crawl_id = 'full-20260926-39db43' ORDER BY domain

Read from the stored raw cards (R2 emissar-crawl, key cards/full-20260926-39db43/<domain>.json (npx wrangler r2 object get ... --remote --pipe)):

• Protocol bindings: v1.0 cards, supportedInterfaces[].protocolBinding, or that entry's transport field (the v0.3 name) when protocolBinding is absent; v0.3 cards, preferredTransport and additionalInterfaces[].transport. Compared case-insensitively with JSONRPC, GRPC and HTTP+JSON; any other value counts as 'other'. A card counts once per binding.
• v1TransportField: v1.0 cards with at least one supportedInterfaces entry that has transport but no protocolBinding.
• Extended card: v1.0 cards with capabilities.extendedAgentCard = true; v0.3 cards with supportsAuthenticatedExtendedCard = true.