{"name":"AIFW","description":"Enterprise-grade A2A middleware for automated X.509 certificate lifecycle management (Issuance, Revocation, Renewal).","version":"1.0.0","url":"https://platform.aifw.io/a2a/v1","provider":{"organization":"Example Corp","url":"https://platform.aifw.io"},"capabilities":{"streaming":true,"pushNotifications":true,"extendedAgentCard":true,"extensions":["https://platform.aifw.io/extensions/identity-chaining/v1","https://platform.aifw.io/extensions/a2a-methods/v1","https://platform.aifw.io/.well-known/agent-guidance.json"]},"supportedInterfaces":[{"url":"https://platform.aifw.io/a2a/v1","protocolBinding":"HTTP+JSON","protocolVersion":"1.0"}],"securitySchemes":{"mtlsAuth":{"mtlsSecurityScheme":{"description":"Mutual TLS authentication required. Supports both traditional PKI certificates and SPIFFE SVIDs. Client identity (SPIFFE ID URI, SKI, or CN) is mapped to senderId."}},"bearerAuth":{"oauth2Info":{"description":"Bearer JWT (RFC 6750 / RFC 7519), OIDC token, or system API key. The identity claim (JWT `sub` or key id) maps to senderId.","scopes":["openid","a2a"]}}},"securityRequirements":[{"mtlsAuth":[]},{"bearerAuth":["openid","a2a"]}],"defaultInputModes":["application/pkcs10","application/json"],"defaultOutputModes":["application/a2a+json","application/x-x509-ca-cert","application/pkcs7-mime"],"skills":[{"id":"IssueCertificate","name":"Issue Certificate","description":"Signs a provided PKCS#10 CSR and returns the leaf certificate and chain.","tags":["issuance","x509","pki"],"inputModes":["application/pkcs10"],"outputModes":["application/x-x509-ca-cert","application/pkcs7-mime"]},{"id":"RevokeCertificate","name":"Revoke Certificate","description":"Invalidates a certificate. Requires original contextId or serial number.","tags":["revocation","crl","ocsp"],"inputModes":["application/json"],"outputModes":["application/json"]},{"id":"RenewCertificate","name":"Renew Certificate","description":"Re-issues a certificate while maintaining Subject Alternative Name (SAN) consistency based on previous context.","tags":["renewal","pki"],"inputModes":["application/pkcs10"],"outputModes":["application/x-x509-ca-cert","application/pkcs7-mime"]}],"signatures":[]}