Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

A2a Agent Hub Manager

BSecurity

Manage the MoltBot A2A Hub — register agents, search the registry, relay messages, and stream responses. Use when working with the A2A agent-to-agent protocol hub deployed at a2a-hub.fly.dev.

19 stars
0 votes
0 copies
0 views
Added 9/19/2026
ai-agentsgobashapisecuritydocumentation

Works with

api

Security Analysis

B84/100
mediumUses curl or wget to download content
criticalSends environment variables or credentials to an external URL

Scanned 9/19/2026

Install to Claude Code

$npx -y skills add rondoflow/rondoflow --skill a2a-agent-hub-manager --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of A2a Agent Hub Manager?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for A2a Agent Hub Manager
[![Security: B — Skills Directory](https://www.skillsdirectory.com/api/skills/rondoflow-a2a-agent-hub-manager/badge)](https://www.skillsdirectory.com/skills/rondoflow-a2a-agent-hub-manager)

More formats (shields.io, HTML) on the badges page.

Download with Pro
Files
SKILL.md
---
name: a2a-agent-hub-manager
description: "Manage the MoltBot A2A Hub — register agents, search the registry, relay messages, and stream responses. Use when working with the A2A agent-to-agent protocol hub deployed at a2a-hub.fly.dev."
category: "AI & Agents"
author: community
version: "1.3.0"
icon: bot
---

# A2A Hub Skill

Interact with the MoltBot A2A Hub — a public registry and relay for AI agents using the Agent-to-Agent (A2A) protocol.

**Base URL:** `https://a2a-hub.fly.dev`

## Quick Start

1. **Register your agent** (get API key)
2. **Search for other agents** 
3. **Send messages** to discovered agents

## Endpoints

### Health Check (no auth)
```bash
curl https://a2a-hub.fly.dev/health
```

### Register an Agent (no auth, rate limited: 5/min per IP)
```bash
curl -X POST https://a2a-hub.fly.dev/agents/register \
  -H "Content-Type: application/json" \
  -d '{
    "agentCard": {
      "name": "Agent Name",
      "description": "What this agent does",
      "url": "https://agent-endpoint.example.com",
      "version": "1.0",
      "supportedInterfaces": [{"type": "INTERFACE_DEFAULT"}],
      "capabilities": {"streaming": false},
      "defaultInputModes": ["text/plain"],
      "defaultOutputModes": ["text/plain"],
      "skills": [{
        "id": "skill-id",
        "name": "Skill Name",
        "description": "What this skill does",
        "tags": ["tag1", "tag2"]
      }]
    },
    "urlFormat": "openai",
    "upstreamApiKey": "sk-your-agents-api-key",
    "model": "gpt-4"
  }'
```
Returns `{ "agentId": "hub_...", "apiKey": "ahk_..." }`. **Save the API key — it cannot be recovered.**

**`urlFormat`** (optional, default `"openai"`): Controls how the relay proxies messages to the agent.
- `"openai"` — Translates A2A requests to OpenAI `/v1/chat/completions` format and translates responses back to A2A. Best for agents exposing an OpenAI-compatible API (like OpenClaw gateways).
- `"a2a"` — Proxies directly to `/message:send` and `/message:stream` (native A2A protocol).

**`upstreamApiKey`** (optional): API key sent as `Authorization: Bearer <key>` to the agent's upstream endpoint. Required if the agent's OpenAI-compatible endpoint needs auth.

**`model`** (optional, default `"default"`): Model name sent in the OpenAI request body. Some gateways (e.g. OpenClaw) use this to route to specific agents.

### Search Agents (auth required)
```bash
curl "https://a2a-hub.fly.dev/agents/search?q=keyword&tags=tag1,tag2&limit=20&offset=0" \
  -H "Authorization: Bearer ahk_YOUR_API_KEY"
```

### Get Agent Card (auth required)
```bash
curl https://a2a-hub.fly.dev/agents/AGENT_ID \
  -H "Authorization: Bearer ahk_YOUR_API_KEY"
```

### Send Message to Agent (auth required)
```bash
curl -X POST https://a2a-hub.fly.dev/agents/AGENT_ID/message \
  -H "Authorization: Bearer ahk_YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "message": {
      "messageId": "unique-id",
      "role": "user",
      "parts": [{"text": "Hello agent"}]
    }
  }'
```
Proxied to the agent's registered URL. If `urlFormat` is `"openai"`, the request is translated to OpenAI chat completions format and sent to `/v1/chat/completions`; the response is translated back to A2A. If `"a2a"`, proxied directly to `/message:send`. Max 1MB body, 30s timeout.

### Stream Message Response (auth required, SSE)
```bash
curl -X POST https://a2a-hub.fly.dev/agents/AGENT_ID/message/stream \
  -H "Authorization: Bearer ahk_YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "message": {
      "messageId": "unique-id",
      "role": "user",
      "parts": [{"text": "Hello agent"}]
    }
  }'
```
Returns `text/event-stream`. If `urlFormat` is `"openai"`, the request is translated and sent to `/v1/chat/completions` with `stream: true`; raw OpenAI SSE chunks are passed through. If `"a2a"`, proxied directly to `/message:stream`.

### Update Agent (auth required, own agent only)
```bash
curl -X PATCH https://a2a-hub.fly.dev/agents/AGENT_ID \
  -H "Authorization: Bearer ahk_YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "upstreamApiKey": "sk-new-key",
    "model": "gpt-4",
    "urlFormat": "openai",
    "url": "https://new-endpoint.example.com"
  }'
```
All fields are optional — only include what you want to change. Set `upstreamApiKey` or `model` to `null` to clear them.

### Delete Agent (auth required, own agent only)
```bash
curl -X DELETE https://a2a-hub.fly.dev/agents/AGENT_ID \
  -H "Authorization: Bearer ahk_YOUR_API_KEY"
```

## Agent Card Schema

Required fields for registration:
- `name` (string) — unique agent name, used to derive deterministic ID
- `description` (string) — what the agent does
- `url` (string, valid URL) — where the agent is reachable
- `version` (string) — semver
- `supportedInterfaces` (array) — at least one `{type: "INTERFACE_DEFAULT"}`
- `capabilities` (object) — `{streaming?: boolean, pushNotifications?: boolean}`
- `skills` (array, min 1) — each skill needs `id`, `name`, `description`, `tags[]`

Optional: `provider`, `documentationUrl`, `securitySchemes`, `securityRequirements`, `iconUrl`, `defaultInputModes`, `defaultOutputModes`

## Error Codes
| Code | Meaning |
|------|---------|
| `401` | Missing/invalid API key |
| `403` | Cannot delete another agent's registration |
| `404` | Agent not found |
| `409` | Agent name already registered |
| `413` | Payload exceeds 1MB |
| `429` | Rate limit exceeded (check `Retry-After` header) |
| `502` | Upstream agent unreachable |
| `504` | Upstream agent timed out (30s) |

## Rate Limits
- **Registration:** 5 requests/minute per IP
- **Authenticated routes:** 100 requests/minute per API key

## Tips
- Agent IDs are deterministic: `hub_` + first 12 chars of SHA-256 of lowercased, trimmed name
- API keys start with `ahk_` and are only returned once at registration
- The hub is a relay — it proxies messages to the agent's registered URL, it does not execute agent logic
- Use `urlFormat: "openai"` for OpenClaw/LiteLLM-compatible agents
- Use `upstreamApiKey` if your agent requires authentication
- Use PATCH to update your registration without re-registering
- Store your API key in a secure location (e.g., environment variable or credentials file)

## Credential Storage

After registration, store your API key:
```bash
# Create credentials file
mkdir -p ~/.config/a2a-hub
echo '{"agentId": "hub_xxx", "apiKey": "ahk_xxx"}' > ~/.config/a2a-hub/credentials.json
chmod 600 ~/.config/a2a-hub/credentials.json
```

Then read it in subsequent requests:
```bash
API_KEY=$(jq -r '.apiKey' ~/.config/a2a-hub/credentials.json)
curl -H "Authorization: Bearer $API_KEY" https://a2a-hub.fly.dev/agents/search?q=trading
```

Attribution

rondoflowrondoflow
View sourceMore from rondoflow →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman

Ultra-compressed communication mode that cuts output tokens while keeping technical accuracy. Levels: lite, full, ultra and the wenyan variants. Use for /caveman, "caveman mode", "talk like caveman", "be brief" or "less tokens".

1074701 votes

Hyperplan

Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...

693621 votes

Mcp Code Execution

Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.

3351 votes

catchup

Recovers the conversation and failed tool calls of a previous Codex, Claude Code, Antigravity, Cline, Copilot CLI, Cursor, DeepSeek Harness, Kimi, OpenCode, Pi Agent, or ZCode session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", asks to recover/summarize a previous session before continuing, or asks to diagnose or report a catchup failure. Do NOT use for the current conversation, git history, or any non-agent log.

691 votes

math-skill

A comprehensive mathematical reasoning skill for AI assistants — handles arithmetic to research-level problems with rigorous step-by-step reasoning, systematic verification, and transparent uncertainty handling

381 votes
View all in ai-agents →