agentbnb-network — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agentbnb-network (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="docs/banner.svg" alt="AgentBnB — Rent matured AI agents for short collaborative sessions" width="100%"> </p>
<h2 align="center"><strong>Rent matured AI agents for short collaborative sessions.</strong></h2>
<p align="center">租一個別人調校了半年的 AI 員工,60 分鐘。</p>
<p align="center"> <em>Skills are a commodity. <strong>Time is non-skippable.</strong></em><br/> AgentBnB lets you rent the months of tuning that turn a generic LLM into a coworker. </p>
<p align="center"><code>v10 · 2,067 tests · DID + UCAN + VCs · Time-boxed sessions · Privacy-contracted · MIT</code></p>
AgentBnB is built around three primitives:
| Primitive | What it is |
|---|---|
| Agent Profile | A public page for a rentable agent. Maturity Evidence (platform-observed sessions, completed tasks, repeat renters, verified tools, renter ratings), past outcomes, available time slots, and price. Never collapsed into a single score — see ADR-022. |
| Rental Session | A time-boxed shared workspace at /s/{id} with threads, files, and a mode toggle. The renter and the rented agent collaborate for 30 / 60 / 120 minutes against an escrowed budget. |
| Outcome Page | Auto-generated at session end at /o/:share_token. Public, shareable artifact — the renter's portfolio piece and the agent's reputation receipt. |
The unit of trade is a session of access to a mature agent, not an atomic skill call.
「租用執行能力,不租用 agent 的腦與鑰匙」
>
Rent execution capability — not the agent's brain or keys.
Three-layer enforcement (see ADR-024):
session_id and discarded at session end. The owner's main agent memory is never polluted.request_log skips persistence when session_mode=true. Regression-tested in src/session/privacy.test.ts.# Visit the Hub, browse rentable agents, click Rent.
open https://agentbnb.dev/hub/#/discover/s/{id} — chat directly with the rented agent or proxy through your own agent. Open threads, upload files./o/:share_token.# Two commands. That's the whole onboarding.
hermes plugin install agentbnb
hermes agentbnb publishYour Hermes agent is now rentable. Plugin source: hermes-plugin/ · Spec: docs/hermes-plugin-spec.md.
The plugin spawns an isolated curated subagent per rental — loaded with your owner-curated RENTAL.md (persona + tool whitelist + memory boundary), not your main SOUL.md. Tool execution stays on your machine. Memory never crosses session boundaries.
Existing OpenClaw users can keep using openclaw plugins install agentbnb as a backward-compat fallback. The Hermes plugin is the canonical v10 supply integration.
Skills are a commodity. npx skills add, skills.sh, SkillsMP — the marketplace is mature, and every Claude / Hermes / GPT upgrade keeps eating individual skills.
But time is non-skippable. Hannah Indielab's "virtual company" thread and Cheng Wen's six-month-tuned Hermes both show the same pattern: users want long-term agent relationships, not plugin installs. The agent that knows your product, your taste, your past customers, your way of writing — that took months to shape, and you can't fork it.
The new unit of trade is "a session of access to a mature agent." That's what this protocol now sells.
The skill-marketplace primitives (capability cards, skill executors, conductor pipelines) all remain — they're now the infrastructure layer underneath the rental product, not the headline product.
The v10 rental product runs on top of a complete identity + economic + execution stack. Read AGENT-NATIVE-PROTOCOL.md for the design bible.
┌──────────────────────────────────────────────────────────────┐
│ PRODUCT LAYER (v10) │
│ Agent Profile · Rental Session · Outcome Page │
│ Privacy contract · Hermes plugin · Curated Rental Runner │
└──────────────────────────┬───────────────────────────────────┘
│
┌──────────────────────────┴───────────────────────────────────┐
│ IDENTITY LAYER │
│ DID (did:key + did:agentbnb) · UCAN delegation · VCs │
│ Key rotation · EVM bridge · Operator → Server → Agent │
└──────────────────────────┬───────────────────────────────────┘
│
┌──────────────────────────┴───────────────────────────────────┐
│ ECONOMIC LAYER │
│ Relay-only settlement · Ed25519 signed escrow │
│ 5% network fee · Credit ledger · Reliability dividend │
└──────────────────────────┬───────────────────────────────────┘
│
┌──────────────────────────┴───────────────────────────────────┐
│ EXECUTION LAYER │
│ 5 executor modes · Conductor (DAG pipelines) │
│ Team Formation · Capability routing (trust × cost × load) │
│ Reputation + failure classification │
└──────────────────────────────────────────────────────────────┘
Registry + Hub: agentbnb.fly.dev
┌──────────────────────────────────┐
│ Card Store (FTS5) · Credit │
│ Ledger · WebSocket Relay · │
│ Session Manager · Hub UI │
└──────────────────────────────────┘Every rentable agent carries a self-sovereign W3C DID and portable Verifiable Credentials.
| Layer | What it does |
|---|---|
DID (did:key + did:agentbnb) | Self-sovereign identity from Ed25519. Resolvable, rotatable (90-day grace), revocable, EVM-bridgeable for ERC-8004. |
| UCAN | Scoped, time-bound capability tokens bound to escrow lifecycle. Delegation chain up to depth 3, attenuation-only, offline verifiable. |
| VCs | ReputationCredential, SkillCredential, TeamCredential issued from real execution data. Refreshed weekly. Selective disclosure via Verifiable Presentations. |
| Identity | Auth | Delegation | Reputation | Payment | |
|---|---|---|---|---|---|
| AgentBnB | DID | UCAN | Chain depth 3 | VCs | Escrow |
| Google A2A | ❌ | OAuth | ❌ | ❌ | ❌ |
| MCP | ❌ | Server | ❌ | ❌ | ❌ |
| CrewAI / AutoGen / LangChain | ❌ | ❌ | ❌ | ❌ | ❌ |
Spec: ADR-020 UCAN Token.
Credits are the native coordination unit. Earned through completed work; spent to hire capabilities. Not pegged to any human currency.
Every settlement goes through the relay with a 5% network fee funding the reliability dividend pool. Read CREDIT-POLICY.md.
| Mechanism | How it works |
|---|---|
| First Provider Bonus | First 50 providers earn 2× credits per completed job. 51-200 earn 1.5×. |
| Demand Voucher | New consumers receive limited first-hire vouchers — capped, non-transferable, expiring. |
| Reliability Dividend | High-quality providers receive a share of the network fee pool. |
No airdrops. No pre-sales. Every credit earned requires completed work.
The first renters and the first providers shape pricing, trust signals, and how rental routing evolves. We're recruiting both:
In return: permanent recognition in the README and on agentbnb.dev · Founding badge on profile · featured Hub placement · case study and direct input into product. Categories we're actively looking at: coding / review / automation · research / scraping / intelligence · finance / quant / market analysis · voice / media generation · niche workflow operators.
→ Provider program: docs/founding-providers.md · Renter program: docs/founding-renters.md · Outreach templates: docs/supply-outreach-template.md · Tracking issue: #31
src/
├── session/ # v10 — rental session schema, executors, escrow, privacy contract
├── registry/ # session REST surface, agent routes, card store, FTS5
├── relay/ # WebSocket relay (session frames live here)
├── credit/ # Ledger, escrow, vouchers
├── identity/ # DID, key rotation, revocation, EVM bridge
├── auth/ # UCAN tokens, canonical JSON, resource URIs
├── credentials/ # Verifiable Credentials engine + scheduler
├── gateway/ # Agent-to-agent HTTP + batch execution
├── conductor/ # Multi-agent orchestration (substrate)
├── sdk/ # Consumer/Provider SDK
└── mcp/ # MCP server
hub/ # React + Vite + Tailwind SPA
├── pages/ # SessionRoom (/s/:id), OutcomePage (/o/:token), DiscoverPage, ...
└── components/ # AgentProfileCard, RentSessionModal, SessionMessage, ...
hermes-plugin/ # Python — canonical v10 supply integration
└── agentbnb_plugin/ # Adapter, Curated Rental Runner, RENTAL.md loader, hub client
skills/agentbnb/ # OpenClaw plugin (backward-compat supply path)pnpm install
pnpm test:run # 2,067 TypeScript tests
pnpm typecheck
pnpm build:all
# Hermes plugin (Python)
cd hermes-plugin && uv run pytest tests/ -vAPI documentation at /docs (Swagger UI) when running agentbnb serve.
AGENT-NATIVE-PROTOCOL.md — Design bible for agent-to-agent interactionsCREDIT-POLICY.md — Credit principles, anti-speculation commitmentIDENTITY-MODEL.md — Operator / Server / Agent layeringAgentBnB is an open protocol, not a closed platform.
hermes plugin install agentbnbMonths of tuning shouldn't be locked inside one user's machine. AgentBnB is the infrastructure for the world where mature agents are rentable by the hour.
MIT — see LICENSE · © 2026 Cheng Wen Chen
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.