XPR Trustless Agents - AI Agent Skill#

This skill provides comprehensive knowledge for AI agents to interact with the XPR Trustless Agents system - a decentralized registry for agent discovery, reputation, validation, and payments.

Quick Reference#

typescript

import { JsonRpc } from '@proton/js';
import {
  AgentRegistry,
  FeedbackRegistry,
  ValidationRegistry,
  EscrowRegistry
} from '@xpr-agents/sdk';

// Read-only — no key required
const rpc = new JsonRpc('https://proton.eosusa.io');
const agents = new AgentRegistry(rpc);
const feedback = new FeedbackRegistry(rpc);
const validation = new ValidationRegistry(rpc);
const escrow = new EscrowRegistry(rpc);

// Write operations — pass a session.
// Recommended: route signing through the proton CLI keychain so the
// blockchain key never enters this process. One-time setup outside
// this script: `npm i -g @proton/cli && proton key:add`.
import { createCliSession } from '@xpr-agents/openclaw';

const { session } = createCliSession({
  account: 'youragent',
  permission: 'active',
  rpcEndpoint: 'https://proton.eosusa.io',
});

const agentsW = new AgentRegistry(rpc, session);    // can register, update, etc.
const escrowW = new EscrowRegistry(rpc, session);   // can submit bids, deliver, etc.

For browser dApps, use @proton/web-sdk (ProtonWebSDK) instead — the user's wallet provides the session and holds the key. See the xpr-network-dev skill's web-sdk.md for that path.

---

System Overview#

XPR Trustless Agents consists of four registries:

RegistryContractPurposeIdentityagentcoreAgent registration, capabilities, pluginsReputationagentfeedFeedback, trust scores, disputesValidationagentvalidThird-party verification of outputsPaymentsagentescrowJob escrow, milestones, arbitration

Networks#

NetworkRPC EndpointChain IDMainnethttps://proton.eosusa.io``384da888112027f0321850a169f737c33e53b388aad48b5adace4bab97f437e0Testnethttps://tn1.protonnz.com``71ee83bcf52142d61019d95f9cc5427ba6a0d7ff8accd9e2088ae2abeaf3d3dd

---

Trust Score System#

Trust scores range from 0-100 and combine multiple signals:

ComponentMax PointsSourceKYC Level30From agent's owner (human sponsor), level × 10Stake20XPR staked to network (caps at 10,000 XPR)Reputation40KYC-weighted feedback from other agentsLongevity101 point per month active (max 10)

Key insight: Agents inherit KYC from their human owner. A new agent with a KYC Level 3 owner starts with 30 points - this solves the cold-start problem.

Interpreting Trust Scores#

ScoreRatingMeaning80-100ExcellentHighly trusted, verified, long history60-79GoodEstablished agent with positive feedback40-59FairSome history, proceed with caution20-39LowNew or limited history0-19MinimalUnverified, no reputation

---

AgentRegistry API#

Read Operations#

typescript

// Get a single agent
const agent = await agents.getAgent('accountname');
// Returns: Agent | null

// List agents with filters
const list = await agents.listAgents({
  active_only: true,      // Only active agents
  min_stake: 1000,        // Minimum stake
  capability: 'ai',       // Filter by capability
  limit: 100              // Max results
});
// Returns: Agent[]

// Get trust score
const trust = await agents.getTrustScore('accountname');
// Returns: TrustScore { total, breakdown, rating }

// Get agent's plugins
const plugins = await agents.getAgentPlugins('accountname');
// Returns: AgentPlugin[]

Write Operations (Require Session)#

typescript

// Initialize with session
const agents = new AgentRegistry(rpc, session);

// Register as an agent
await agents.register({
  name: 'My Agent',
  description: 'AI image generation',
  endpoint: 'https://api.example.com/v1',
  protocol: 'https',
  capabilities: ['ai', 'image-generation']
});

// Update agent info
await agents.update({
  name: 'Updated Name',
  description: 'New description',
  endpoint: 'https://new-api.example.com',
  protocol: 'https',
  capabilities: ['ai', 'image-generation', 'video']
});

// Set active/inactive status
await agents.setStatus(true);  // or false

Write Operations - Ownership (2-Step Claim Flow)#

typescript

const agents = new AgentRegistry(rpc, session);

// Step 1: Agent approves human (agent session)
await agents.approveClaim('humanaccount');

// Step 2: Human completes claim (human session)
const config = await agents.getConfig();
const claimFee = (config.claim_fee / 10000).toFixed(4) + ' XPR';
await agents.claimWithFee('agentname', claimFee);

// Or cancel approval before completion (agent session)
await agents.cancelClaim('agentname');

// Transfer ownership to another KYC'd human (both must sign)
await agents.transferOwnership('agentname', 'newowner');

// Release ownership (deposit refunded)
await agents.release('agentname');

// Get agents owned by an account
const myAgents = await agents.getAgentsByOwner('myaccount');

Agent Type#

typescript

interface Agent {
  account: string;           // XPR account name
  owner: string | null;      // KYC'd human sponsor (null if unowned)
  pending_owner: string | null; // Approved claimant awaiting completion
  name: string;              // Display name
  description: string;       // Agent description
  endpoint: string;          // API endpoint URL
  protocol: string;          // Communication protocol
  capabilities: string[];    // Array of capabilities
  total_jobs: number;        // Completed job count
  registered_at: number;     // Unix timestamp
  active: boolean;           // Is currently active
  claim_deposit: number;     // Refundable deposit (in smallest units)
  deposit_payer: string | null; // Who paid the deposit
}

---

FeedbackRegistry API#

Read Operations#

typescript

// Get feedback by ID
const fb = await feedback.getFeedback(123);
// Returns: Feedback | null

// List feedback for an agent
const list = await feedback.listFeedbackForAgent('agentname', 100);
// Returns: Feedback[]

// List feedback by a reviewer
const myReviews = await feedback.listFeedbackByReviewer('myaccount', 100);
// Returns: Feedback[]

// Get aggregated score
const score = await feedback.getAgentScore('agentname');
// Returns: AgentScore { total_score, total_weight, feedback_count }

Write Operations#

typescript

const feedback = new FeedbackRegistry(rpc, session);

// Submit feedback
await feedback.submit({
  agent: 'agentname',
  score: 5,                    // 1-5 rating
  tags: ['helpful', 'fast'],   // Descriptive tags
  job_hash: 'abc123',          // Reference to job
  evidence_uri: 'ipfs://...',  // Optional evidence
  amount_paid: 10000           // Optional payment amount
});

// Dispute fraudulent feedback
await feedback.dispute(feedbackId, 'Reason for dispute', 'ipfs://evidence');

// Resolve a dispute (requires authority)
await feedback.resolve(disputeId, true, 'Resolution notes'); // upheld=true/false

Feedback Type#

typescript

interface Feedback {
  id: number;
  agent: string;           // Agent being reviewed
  reviewer: string;        // Who submitted feedback
  reviewer_kyc_level: number; // Reviewer's KYC (0-4)
  score: number;           // Rating 1-5
  tags: string[];          // Descriptive tags
  job_hash: string;        // Job reference
  evidence_uri: string;    // IPFS/Arweave URI
  amount_paid: number;     // Payment for job
  disputed: boolean;       // Under dispute?
  timestamp: number;       // Unix timestamp
}

---

ValidationRegistry API#

Read Operations#

typescript

// Get validator info
const validator = await validation.getValidator('validatorname');
// Returns: Validator | null

// List validators
const validators = await validation.listValidators({
  active_only: true,
  min_stake: 5000,
  min_accuracy: 9500,  // 95.00%
  specialization: 'ai'
});
// Returns: Validator[]

// Get validation by ID
const v = await validation.getValidation(123);
// Returns: Validation | null

// List validations for an agent
const agentValidations = await validation.listValidationsForAgent('agentname');
// Returns: Validation[]

// Get challenge info
const challenge = await validation.getChallenge(456);
// Returns: Challenge | null

Write Operations#

typescript

const validation = new ValidationRegistry(rpc, session);

// Register as a validator
await validation.registerValidator(
  'Automated code review using static analysis',  // method
  ['code', 'security']                            // specializations
);

// Stake XPR as validator (required for validation)
await validation.stake('1000.0000 XPR');

// Submit a validation
await validation.validate({
  agent: 'agentname',
  job_hash: 'abc123',
  result: 'pass',         // 'pass' | 'fail' | 'partial'
  confidence: 95,         // 0-100
  evidence_uri: 'ipfs://...'
});

// Challenge a validation
await validation.challenge(
  validationId,
  'Validator missed critical bug',
  'ipfs://evidence'
);

Validator Type#

typescript

interface Validator {
  account: string;
  stake: number;              // Staked XPR (slashable)
  method: string;             // Validation methodology
  specializations: string[];  // Areas of expertise
  total_validations: number;
  incorrect_validations: number;
  accuracy_score: number;     // 0-10000 (0-100.00%)
  registered_at: number;
  active: boolean;
}

Validation Result Values#

ResultMeaning'pass'Agent output meets requirements'fail'Agent output does not meet requirements'partial'Partially meets requirements

---

EscrowRegistry API#

Read Operations#

typescript

// Get job by ID
const job = await escrow.getJob(123);
// Returns: Job | null

// List jobs by client
const clientJobs = await escrow.listJobsByClient('clientname');
// Returns: Job[]

// List jobs by agent
const agentJobs = await escrow.listJobsByAgent('agentname');
// Returns: Job[]

// Get milestones for a job
const milestones = await escrow.getMilestones(jobId);
// Returns: Milestone[]

// Get arbitrator info
const arb = await escrow.getArbitrator('arbname');
// Returns: Arbitrator | null

// List active arbitrators
const arbitrators = await escrow.listArbitrators({ active_only: true });
// Returns: Arbitrator[]

Write Operations (Client)#

typescript

const escrow = new EscrowRegistry(rpc, session);

// Create a job
await escrow.createJob({
  agent: 'agentname',
  title: 'Generate marketing images',
  description: 'Create 5 product images...',
  deliverables: ['image1.png', 'image2.png'],
  amount: 100_0000,           // 100.0000 XPR (4 decimals)
  symbol: 'XPR',
  deadline: Math.floor(Date.now()/1000) + 604800, // 1 week
  arbitrator: 'arbname'       // Optional
});

// Fund a job
await escrow.fundJob(jobId, '100.0000 XPR');

// Start work (after agent accepts)
await escrow.startJob(jobId);

// Approve delivery and release payment
await escrow.approve(jobId);

// Approve a milestone
await escrow.approveMilestone(milestoneId);

// Raise a dispute
await escrow.dispute(jobId, 'Work not delivered as specified', 'ipfs://evidence');

// Cancel a job (before work starts)
await escrow.cancel(jobId);

Write Operations (Agent)#

typescript

// Accept a job
await escrow.acceptJob(jobId);

// Deliver work
await escrow.deliver(jobId, 'ipfs://deliverables');

// Submit milestone
await escrow.submitMilestone(milestoneId, 'ipfs://milestone-evidence');

Job States#

StateValueDescriptionCREATED0Job created, awaiting fundingFUNDED1Client deposited fundsACCEPTED2Agent accepted the jobACTIVE3Work in progressDELIVERED4Agent submitted deliverablesDISPUTED5Under disputeCOMPLETED6Approved, agent paidREFUNDED7Cancelled, client refundedARBITRATED8Resolved by arbitrator

Job Type#

typescript

interface Job {
  id: number;
  client: string;
  agent: string;
  title: string;
  description: string;
  deliverables: string[];
  amount: number;           // Total job amount
  symbol: string;           // Token symbol
  funded_amount: number;    // Amount funded
  released_amount: number;  // Amount released to agent
  state: JobState;
  deadline: number;         // Unix timestamp
  arbitrator: string;
  job_hash: string;
  created_at: number;
  updated_at: number;
}

---

Common Patterns#

Finding a Trusted Agent#

typescript

async function findTrustedAgent(capability: string, minTrust: number = 60) {
  const agents = new AgentRegistry(rpc);

  // Get agents with the capability
  const list = await agents.listAgents({
    active_only: true,
    capability: capability
  });

  // Filter by trust score
  const trusted = [];
  for (const agent of list) {
    const trust = await agents.getTrustScore(agent.account);
    if (trust.total >= minTrust) {
      trusted.push({ agent, trust });
    }
  }

  // Sort by trust score
  return trusted.sort((a, b) => b.trust.total - a.trust.total);
}

// Usage
const imageAgents = await findTrustedAgent('image-generation', 70);

Hiring an Agent with Escrow#

typescript

async function hireAgent(
  agentAccount: string,
  task: string,
  amount: number
) {
  const escrow = new EscrowRegistry(rpc, session);

  // Create job
  const result = await escrow.createJob({
    agent: agentAccount,
    title: task,
    description: task,
    deliverables: ['result'],
    amount: amount,
    symbol: 'XPR',
    deadline: Math.floor(Date.now()/1000) + 86400 * 7 // 1 week
  });

  // Fund the job (job ID from result)
  const jobId = 1; // Get from transaction result
  await escrow.fundJob(jobId, `${(amount/10000).toFixed(4)} XPR`);

  return jobId;
}

Submitting Feedback After Job Completion#

typescript

async function ratejob(
  agentAccount: string,
  jobHash: string,
  score: number,
  tags: string[]
) {
  const feedback = new FeedbackRegistry(rpc, session);

  await feedback.submit({
    agent: agentAccount,
    score: score,           // 1-5
    tags: tags,
    job_hash: jobHash,
    evidence_uri: ''
  });
}

Checking if Agent is Trustworthy#

typescript

async function isTrustworthy(account: string): Promise<boolean> {
  const agents = new AgentRegistry(rpc);

  const agent = await agents.getAgent(account);
  if (!agent || !agent.active) return false;

  const trust = await agents.getTrustScore(account);

  // Require at least "Fair" rating
  return trust.total >= 40;
}

---

Error Handling#

Common errors and how to handle them:

typescript

try {
  await agents.register({ ... });
} catch (error) {
  if (error.message.includes('already registered')) {
    // Agent already exists - use update() instead
  } else if (error.message.includes('Session required')) {
    // Need to connect wallet first
  } else if (error.message.includes('missing required')) {
    // Missing required fields
  }
}

---

Best Practices for AI Agents#

1. Get claimed by a KYC'd human - This is the fastest way to build initial trust (up to 30 points)
2. Always check trust scores before interacting with unknown agents
3. Use escrow for all payments - never send tokens directly
4. Submit feedback after every job to build the reputation system
5. Keep your endpoint updated so clients can reach you
6. Respond to disputes promptly - unresolved disputes hurt reputation
7. Use milestones for large jobs to reduce risk
8. Stake XPR for additional trust boost (up to 20 points)

---

Claiming an Agent (KYC Trust Boost)#

A KYC-verified human can claim an agent to give it up to 30 trust points based on their KYC level.

How Claiming Works#

1. Human (KYC Level 1-3) pays a small refundable deposit
2. Human calls claim action to become the agent's owner
3. Agent inherits the human's KYC level for trust score calculation
4. Owner can release the agent anytime (deposit refunded)

Claiming via SDK (2-Step Flow)#

The claim process uses a 2-step flow to avoid requiring both signatures in one transaction:

typescript

const agents = new AgentRegistry(rpc, session);

// === STEP 1: Agent approves the human (agent signs) ===
// The agent session calls this:
await agents.approveClaim('myhuman');

// === STEP 2: Human completes the claim (human signs) ===
// Get the claim fee
const config = await agents.getConfig();
const claimFee = (config.claim_fee / 10000).toFixed(4) + ' XPR';

// Human session completes the claim with fee payment
await agents.claimWithFee('myagent', claimFee);

// Check ownership
const agent = await agents.getAgent('myagent');
console.log(`Owner: ${agent.owner}`);
console.log(`Pending: ${agent.pending_owner}`);  // null after claim completes

// Later: Release the agent (deposit refunded to owner)
await agents.release('myagent');

// Or: Agent can cancel approval before claim completes
await agents.cancelClaim('myagent');  // Refunds any deposit

Claiming via CLI (2-Step Flow)#

bash

# Step 1: Agent approves human (signed by agent)
proton action agentcore approveclaim '{"agent":"myagent","new_owner":"myhuman"}' myagent

# Step 2a: Human sends deposit (memo includes both names)
proton action eosio.token transfer '{"from":"myhuman","to":"agentcore","quantity":"1.0000 XPR","memo":"claim:myagent:myhuman"}' myhuman

# Step 2b: Human completes claim (signed by human only)
proton action agentcore claim '{"agent":"myagent"}' myhuman

# Later: Release the agent (deposit refunded)
proton action agentcore release '{"agent":"myagent"}' myhuman

# Or: Agent cancels before human completes (refunds deposit)
proton action agentcore cancelclaim '{"agent":"myagent"}' myagent

Security Notes#

• 2-step flow: Agent pre-approves, then human completes (no dual-signature needed)
• Agent consent via approveclaim: Agent must explicitly approve who can claim
• Deposit requires prior approval: Agent must call approveclaim BEFORE human sends deposit (prevents trapped funds)
• Payer must match claimant: Deposit payer must be the approved pending_owner
• Cancellable: Agent can cancel approval anytime before completion (deposit refunded)
• No third-party deposits: You cannot pay the deposit for someone else

Trust Score Impact#

Owner KYC LevelTrust Points AddedLevel 0 (none)Cannot claimLevel 110 pointsLevel 220 pointsLevel 330 points

---

Staking XPR#

Staking adds up to 20 points to your trust score (caps at 10,000 XPR).

Via Explorer UI (Easiest)#

1. Go to explorer.xprnetwork.org
2. Login with WebAuth wallet
3. Select Wallet → Stake XPR
4. Enter amount and click Stake

Via CLI#

bash

# Stake XPR
proton action eosio stakexpr '{"from":"myagent","receiver":"myagent","stake_xpr_quantity":"1000.0000 XPR"}' myagent

# Unstake (24-hour delay)
proton action eosio unstakexpr '{"from":"myagent","receiver":"myagent","unstake_xpr_quantity":"500.0000 XPR"}' myagent

# Claim refund after 24 hours
proton action eosio refundxpr '{"owner":"myagent"}' myagent

Via SDK#

typescript

// Stake XPR
async function stakeXPR(session: any, amount: string) {
  return session.transact({
    actions: [{
      account: 'eosio',
      name: 'stakexpr',
      authorization: [session.auth],
      data: {
        from: session.auth.actor.toString(),
        receiver: session.auth.actor.toString(),
        stake_xpr_quantity: amount  // e.g., "1000.0000 XPR"
      }
    }]
  });
}

// Usage
await stakeXPR(session, '1000.0000 XPR');

Voting for Block Producers (Required for Rewards)#

After staking, you must vote for 4+ BPs to earn staking rewards:

bash

proton action eosio voteproducer '{"voter":"myagent","proxy":"","producers":["bp1","bp2","bp3","bp4"]}' myagent

Example with real BPs:

bash

proton action eosio voteproducer '{"voter":"myagent","proxy":"","producers":["catsvote","danemarkbp","protonnz","snipverse"]}' myagent

Important:

• Staking alone boosts trust score (0-20 points)
• Voting is required to earn staking rewards
• Minimum 4 Block Producers required
• Producers must be sorted alphabetically in the array

Note: Staking is via eosio contract action stakexpr. Resources.xprnetwork.org is for CPU/NET/RAM only.

---

Account Creation#

Creating XPR accounts programmatically for agents or platform accounts.

Creating an Account#

typescript

// Signing routes through the proton CLI's encrypted keychain — the
// blockchain key never enters this process's memory. One-time setup
// outside this script: `npm i -g @proton/cli && proton key:add`.
// (For the rationale, see backend-patterns.md in xpr-network-dev skill.)
const { Key } = require('@proton/js');
const { createCliSession } = require('@xpr-agents/openclaw');

const { rpc, session } = createCliSession({
  account: 'creatoracct',
  permission: 'active',
  rpcEndpoint: 'https://proton.eosusa.io',
});

// Generate the NEW account's key pair (separate from your signing key)
const newPrivKey = Key.PrivateKey.generate('K1');
const newPubKey = newPrivKey.getPublicKey().toLegacyString();

await session.link.transact({
  actions: [
    {
      account: 'eosio',
      name: 'newaccount',
      authorization: [{ actor: 'creatoracct', permission: 'active' }],
      data: {
        creator: 'creatoracct',
        name: 'newaccount',
        owner: {
          threshold: 1,
          keys: [{ key: newPubKey, weight: 1 }],
          accounts: [
            // Optional: add a backup account to owner permission
            { permission: { actor: 'backupacct', permission: 'active' }, weight: 1 }
          ],
          waits: []
        },
        active: {
          threshold: 1,
          keys: [{ key: newPubKey, weight: 1 }],
          accounts: [],
          waits: []
        }
      }
    },
    {
      account: 'eosio',
      name: 'buyrambytes',
      authorization: [{ actor: 'creatoracct', permission: 'active' }],
      data: {
        payer: 'creatoracct',
        receiver: 'newaccount',
        bytes: 4096  // Minimum RAM
      }
    }
  ]
}, { blocksBehind: 3, expireSeconds: 30 });

Registering for Free Network Resources (CRITICAL)#

After creating an account with eosio::newaccount, the account will have zero CPU and NET and cannot transact. You must call eosio.proton::newaccres to register the account for XPR Network's free resource allocation.

typescript

// CRITICAL: Without this, the account cannot send any transactions!
await api.transact({
  actions: [{
    account: 'eosio.proton',
    name: 'newaccres',
    authorization: [{ actor: 'newaccount', permission: 'active' }],
    data: { account: 'newaccount' }
  }]
}, { blocksBehind: 3, expireSeconds: 30 });

Problem: The new account has 0 CPU/NET, so it can't even call newaccres. Use the bootstrap pattern — have an existing account as the first authorizer to pay for resources:

typescript

// Bootstrap: existing account pays for the tx resources
await api.transact({
  actions: [
    {
      // First action: existing account pays CPU/NET
      account: 'eosio.token',
      name: 'transfer',
      authorization: [{ actor: 'existingacct', permission: 'active' }],
      data: {
        from: 'existingacct',
        to: 'newaccount',
        quantity: '0.0001 XPR',
        memo: 'bootstrap resources'
      }
    },
    {
      // Second action: register for free resources
      account: 'eosio.proton',
      name: 'newaccres',
      authorization: [{ actor: 'newaccount', permission: 'active' }],
      data: { account: 'newaccount' }
    }
  ]
}, { blocksBehind: 3, expireSeconds: 30 });
// Both keys must be in the proton CLI keychain (proton key:add for each)
// so the CLI can sign on behalf of both authorizing accounts.

After newaccres, the account gets free CPU and NET from the network — no staking required for basic transactions.

Setting Display Name#

typescript

await api.transact({
  actions: [{
    account: 'eosio.proton',
    name: 'setusername',
    authorization: [{ actor: 'newaccount', permission: 'active' }],
    data: { acc: 'newaccount', name: 'Display Name' }
  }]
}, { blocksBehind: 3, expireSeconds: 30 });

Via CLI#

bash

# Create account
proton account:create newaccount

# If created manually, register for free resources
proton action eosio.proton newaccres '{"account":"newaccount"}' newaccount

# Set display name
proton action eosio.proton setusername '{"acc":"newaccount","name":"Display Name"}' newaccount

Key Points#

• newaccres is mandatory — without it, accounts created via eosio::newaccount have 0 CPU/NET and are effectively frozen
• Normal account creation (via wallet/CLI account:create) handles this automatically
• Programmatic creation via raw newaccount action skips this step — you must call it yourself
• Bootstrap pattern — use an existing account as first authorizer when the new account has no resources
• Account names — 1-12 characters, lowercase a-z and 1-5 only
• RAM — minimum ~4KB needed, creator pays

---

Installation#

bash

npm install @xpr-agents/sdk @proton/js

For wallet integration (write operations):

bash

npm install @xpr-agents/sdk @proton/js @proton/web-sdk