Marketplace widget

Badges, cards and inline verification for a marketplace listing agents it did not build, so a buyer can see who is verified without leaving the listing.

Marketplace Trust Widget

Embeddable trust badges for agent marketplaces, directories, and any page that lists AI agents. One script tag — shows a live trust score, verification status, and links to the full verification page. No backend work required.

Badge (Compact)

Best for agent listings, search results, and cards. Shows trust score and verification status inline.

<!-- Drop this on any page -->
<div data-vorim-agent="agid_acme_a1b2c3d4"></div>
<script src="https://vorim.ai/widget/vorim-trust.js"></script>

html

Card (Detailed)

Best for agent detail pages. Shows trust score, org name, scopes, creation date, and key fingerprint.

<div
  data-vorim-agent="agid_acme_a1b2c3d4"
  data-vorim-style="card"
  data-vorim-theme="dark"
></div>
<script src="https://vorim.ai/widget/vorim-trust.js"></script>

html

Inline (Minimal)

Best for tables, lists, and compact UIs. Shows a colored dot + score.

<div
  data-vorim-agent="agid_acme_a1b2c3d4"
  data-vorim-style="inline"
></div>

html

Options

data-vorim-agentstringRequired

The agent ID to verify (e.g. agid_acme_a1b2c3d4)

data-vorim-stylestring

Display style: badge (default), card, or inline

data-vorim-themestring

Color theme: dark (default) or light

data-vorim-sizestring

Size: small, medium (default), or large

data-vorim-linkstring

Link to verification page: true (default) or false

Static SVG Badge

For README files, GitHub repos, and static pages. Live SVG that updates automatically:

![Vorim Trust](https://vorim.ai/v1/trust/badge/agid_acme_a1b2c3d4.svg)

markdown

Verification API

For deeper integration. Public endpoint — no authentication required. Returns the live trust score plus a coarse band, an evidence-confidence indicator, the agent's positive trust signals, and a platform-signed attestation a counterparty can verify offline:

curl https://vorim.ai/v1/trust/verify/agid_acme_a1b2c3d4

# Returns (payload wrapped in a top-level "data" envelope):
{
  "data": {
    "agent_id": "agid_acme_a1b2c3d4",
    "verified": true,
    "trust_score": 85,
    "trust_band": "trusted",          // untrusted | building | established | trusted
    "confidence": "established",       // new | developing | established (evidence maturity)
    "signals": ["identity_anchor", "reliability", "maturity"],
    "status": "active",
    "owner": { "org_name": "Acme Corp", "verified": true },
    "attestation": {
      "attestation_id": "f544370d-...",
      "agent_id": "agid_acme_a1b2c3d4",
      "trust_band": "trusted",
      "confidence": "established",
      "issued_at": "2026-06-19T15:41:01Z",
      "expires_at": "2026-06-19T15:46:01Z",
      "kid": "93da0741...",            // matches a key from GET /v1/trust/keys
      "signature": "ed25519:aRK3sIs0..."
    }
  }
}

bash

Verify the attestation offline. Fetch Vorim's public signing keys once, match the kid, and verify the Ed25519 signature over the signed fields — no live call back to Vorim, and tampering (e.g. upgrading the band) is rejected. The signed payload deliberately excludes the raw weights and gate thresholds.

curl https://vorim.ai/v1/trust/keys

# Returns the platform public key(s) for verifying attestations:
{
  "data": {
    "keys": [
      { "kid": "93da0741...", "alg": "ed25519",
        "use": "trust-attestation",
        "public_key_pem": "-----BEGIN PUBLIC KEY-----\n..." }
    ]
  }
}

bash

Want the full breakdown of why an agent has a given score? The authenticated, owner-only GET /v1/agents/:id/trust endpoint returns ranked, plain-language reason codes for agents in your own org (also shown in the dashboard agent detail). The public surface stays coarse by design — bands and positive signals, never magnitudes or distance-to-threshold.

Public Agent Directory

Each agent has a List in public directory setting. When enabled, the agent's name, organization, and live trust score appear on the public Agent Directory, so anyone can look it up and verify it before interacting. It is off by default: nothing is listed until you explicitly opt an agent in. Toggle it from the agent's page in the dashboard, or via the API by setting public_listing:

# Opt an agent into the public directory
curl -X PATCH https://vorim.ai/v1/agents/agid_acme_a1b2c3d4 \
  -H "Authorization: Bearer agid_sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{ "public_listing": true }'    # set false to remove it again

bash

Read the directory from the public, unauthenticated endpoint. It returns only agents that opted in and are active (revoked, expired, and soft-deleted-org agents are excluded), newest first:

curl https://vorim.ai/v1/trust/directory

# Returns opted-in agents with their live trust score:
{
  "data": {
    "agents": [
      {
        "agent_id": "agid_acme_a1b2c3d4",
        "name": "invoice-processor",
        "org_name": "Acme Corp",
        "status": "active",
        "trust_score": 85,
        "created_at": "2026-06-01T09:12:00Z"
      }
    ],
    "total": 1
  }
}

bash

Use Cases

Agent marketplaces — show trust badges on every listing, filter by minimum trust score
Agent directories — sort and filter agents by verification status
Multi-agent platforms — check trust score before allowing agent-to-agent interaction
Enterprise procurement — require minimum trust score for agent onboarding
GitHub READMEs — show live trust badge in your agent's README

Need Help?

Book a demo for a walkthrough, or contact us for support. For enterprise needs, reach out at sales@vorim.ai.