# Wicked Registry

> A reliability-scored trust layer for x402/MCP tool marketplaces. Runs real synthetic checks against a tool's live endpoint and publishes an uptime/latency/schema-conformance score — never fabricated. Not a discovery directory: it scores tools already listed on the x402 Bazaar, Agent402, and MCP registries, rather than competing with them for listings.

Every score component comes from a real HTTP call at check time. A tool with zero check history returns "insufficient data", never a guessed number. Schema conformance is excluded from the composite (not defaulted to zero) for tools that publish no schema. This is a reliability signal, not a semantic-correctness one.

## Docs

- [Landing page](https://registry.wickedapi.com/): what this is, how scoring works, live examples
- [OpenAPI spec](https://registry.wickedapi.com/openapi.json): full machine-readable API reference
- [Live endpoint catalog](https://registry.wickedapi.com/v1/status): the same list this file describes, pulled live from the running deployment
- [x402 seller-discovery manifest](https://registry.wickedapi.com/.well-known/x402): agent402-service-manifest/1 format

## Core API

- [GET /tools](https://registry.wickedapi.com/tools): list/search scored tools by category, protocol, min_score. Free with a valid x-api-key header, otherwise a real x402 402 payment challenge.
- GET /tools/{id} (see [openapi.json](https://registry.wickedapi.com/openapi.json)): full score breakdown, component history, and recent real health checks for one tool. Same auth as above.
- [GET /featured-tools](https://registry.wickedapi.com/featured-tools): top scored active tools. Public, no auth, no payment.
- GET /tools/{id}/badge (see [openapi.json](https://registry.wickedapi.com/openapi.json)): a tool's current composite score as JSON, or SVG with ?format=svg. Public, no auth, no payment — meant to be embedded on a tool owner's own docs.
- [POST /tools/register](https://registry.wickedapi.com/tools/register): register a tool you own. Requires a real wallet signature over a message binding name + endpoint + timestamp — no client-asserted wallet is trusted.
- POST /tools/{id}/report (see [openapi.json](https://registry.wickedapi.com/openapi.json)): file a complaint about a tool. Public, rate-limited, reviewed manually.

## Optional

- [GET /health](https://registry.wickedapi.com/health): liveness check
- MCP: the same core endpoints are also reachable as MCP tools (registry_search_tools, registry_tool_detail, registry_featured_tools, registry_tool_badge, registry_report_tool, registry_register_tool) via the wicked-mcp server at mcp.wickedapi.com