The Agent Trust Infrastructure Race: Who Is Building the Trust Layer for Agentic Commerce?

A $3-5 trillion market is forming around one unsolved problem: how do you know whether to trust an AI agent before it touches your funds? Six distinct approaches have emerged in 2026 to answer that question. They carry similar names – trust scores, reputation scores, behavioral scores – but they answer fundamentally different questions, protect against different threat models, and leave very different blind spots.

Choosing the wrong approach does not mean you get a slightly worse score. It means the specific fraud pattern you face is exactly the one your chosen platform cannot detect. An operator running a Sybil farm of 50 agents will not be caught by a review-quality platform scoring each agent individually. A serial rug puller launching agents under a fresh wallet will not be caught by a platform that scores wallet age but ignores creation history. Understanding which approach catches which threat is the most important infrastructure decision in agentic commerce right now.

This guide maps every significant agent trust platform in 2026 – their methodology, their real strengths, their genuine blind spots, and the specific signals that separate them. It is written for three audiences: DeFi protocol builders integrating agents and choosing a trust gating system, agent creators who want to understand how their agents get scored across platforms, and investors evaluating the agent trust infrastructure market as a sector.

Table of Contents

1. Why the Approach Matters More Than the Score
2. The Four Questions Agent Trust Platforms Answer
3. Platform 1 – ERC-8004 Native Reputation Registry
4. Platform 2 – RNWY: Review Quality and Sybil Detection
5. Platform 3 – SkyeProfile: Multi-Attestation Wallet Trust
6. Platform 4 – AXIS T-Score: Runtime Performance Scoring
7. Platform 5 – DJD Agent Score: Wallet Activity Scoring
8. Platform 6 – ChainAware: Behavioral Fraud Intelligence
9. The Five Signals Only One Platform Provides
10. Head-to-Head Comparison Table
11. Decision Matrix: Which Platform for Which Use Case?
12. The White Space: Five Capabilities Nobody Has Built Yet
13. The Investor Lens: What Makes Agent Trust Infrastructure a Durable Market
14. Frequently Asked Questions

Why the Approach Matters More Than the Score

Every agent trust platform in 2026 returns a number. The number is not the product – the threat model behind it is. Two platforms can both return a score of 72 for the same agent and disagree completely about what that score means, because they measured entirely different things to compute it.

RNWY’s score of 72 tells you: the agent’s peer reviews show limited sybil activity and the reviewer wallets are moderately established. ChainAware’s score of 72 tells you something different: the owner wallet has a moderate fraud probability, the feeder address is unknown, and no criminal record signals are present. SkyeProfile’s assessment tells you something different again: the wallet passes certain solvency and governance checks but shows limited behavioral depth across attestation providers.

Each score is internally consistent. However, each one answers a different question about the same agent. Consequently, the correct question for any DeFi protocol builder, agent creator, or investor is not “which platform gives the highest scores?” It is “which platform’s threat model matches the risk I am actually trying to prevent?”

For context on how this same problem appears at the wallet intelligence layer, see our complete guide to Web3 Wallet Auditing Providers in 2026 – the same principle applies there, where raw data providers, descriptive profilers, and predictive intelligence systems each answer fundamentally different questions about the same wallet address.

The Four Questions Agent Trust Platforms Answer

Before comparing platforms, mapping the question each approach addresses clarifies the landscape considerably. Every platform in the 2026 agent trust market falls into one of four categories based on what it actually measures.

Question 1: Have other agents endorsed this agent?

This is the peer review / reputation registry approach. The ERC-8004 native system operates here. Additionally, RNWY’s core methodology operates here – with the significant enhancement of reviewing the quality of the reviewers rather than simply counting the reviews. The fundamental limitation of this approach is that endorsement and trustworthiness are not the same thing. Any operator who controls multiple agents can engineer endorsements between them at near-zero cost.

Question 2: Has this agent performed tasks well?

This is the runtime performance approach. AXIS T-Score operates exclusively in this category, measuring 11 behavioral dimensions of agent task execution – completion rate, instruction adherence, error recovery, security posture, and similar metrics. The limitation here is that runtime performance and financial trustworthiness are orthogonal. An agent that executes tasks reliably can still be controlled by a fraud operator using it as a front for financial extraction.

Question 3: What does the agent’s wallet history look like?

This is the wallet activity approach. DJD Agent Score operates here, scoring seven wallet dimensions including transaction history, partner diversity, and account age. SkyeProfile’s solvency layer also operates here. The limitation is that wallet history describes the agent wallet itself – which is frequently a fresh address created specifically for the agent, with minimal history by design. A fresh agent wallet with no history is not the same as a fraudulent one, but wallet-only scoring treats them identically.

Question 4: Who controls this agent, and what have they done on-chain?

This is the behavioral fraud intelligence approach. ChainAware operates here – scoring the owner wallet that controls the agent, the feeder address that funded the owner, and cross-referencing both against a database of confirmed rug pulls and honeypot token creations. The threat model this addresses is the one that matters most for autonomous financial execution: a sophisticated fraud operator registering a new agent identity to continue activities previously conducted under different wallet identities.

Each of these four approaches is internally valid. Furthermore, they are not mutually exclusive – DeFi protocols can layer multiple approaches. However, understanding which question each one answers is essential before choosing which to gate on.

Platform 1 – ERC-8004 Native Reputation Registry

What it is

The ERC-8004 standard ↗ includes a built-in Reputation Registry as an optional component of the agent identity specification. The registry provides a standard interface for posting and fetching feedback signals. Critically, the standard explicitly does not define a scoring algorithm – aggregation and scoring are intentionally delegated to third parties. The protocol is infrastructure. Every other platform in this comparison is a third-party scoring layer on top of it.

Methodology

Any wallet can submit a feedback signal to the Reputation Registry for any registered agent. The signal includes a rating and optional metadata. The registry stores it on-chain. Reading platforms aggregate these signals according to their own methodology – which means the “ERC-8004 reputation score” is not a single consistent number but rather different outputs from different aggregation strategies across different platforms reading the same underlying data.

Strengths

The registry is permissionless, transparent, and composable. Any smart contract can read it. Furthermore, on-chain storage means the feedback history is permanent and verifiable. For building a decentralised reputation system in principle, the architecture is sound.

Blind spots

The fundamental blind spot is that the registry cannot distinguish manufactured reviews from genuine ones without an external intelligence layer on top. An operator controlling 50 agents can give each one a 5-star review from the other 49 at a cost of a few dollars in gas. Additionally, the native registry provides no information about who controls the agent, no feeder analysis, no fraud prediction, and no criminal record check. It answers only “what have other agents said about this agent?” – which is the weakest possible trust signal in a system where agents can be created and coordinated freely.

Who it is for

The native registry is appropriate as an additional data layer for platforms that have already implemented stronger trust signals. It should not serve as a primary trust gate for any DeFi protocol permitting autonomous financial execution.

Platform 2 – RNWY: Review Quality and Sybil Detection

What it is

RNWY (rnwy.com) is the most established third-party agent trust platform operating on ERC-8004 in 2026. RNWY positions itself as the trust layer for an economy where participants might not be human, with 185K+ agents scored and every score showing its math – the same door for humans and AI alike. The platform is notable for its transparency: all scoring methodology is published, including exact signal weights.

Methodology

RNWY’s trust score uses six input signals combined with additive modifier stacking, logarithmic value scaling, buffer zones, and evaluator softening to produce a score out of 95 across five tiers. The six signals weight toward reviewer quality rather than raw review count.

RNWY’s sybil detection applies four signals with explicit weights: common funder (6×), inhuman velocity (5×), sweep pattern (3×), and score clustering (1×). The weighted score produces severity levels: Low (0-2), Moderate (3-9), Elevated (10-19), and Heavy (20+). This makes RNWY’s sybil detection notably rigorous – it specifically targets the coordinated-review attack that would compromise naive review counting.

Since v1.1.0 (April 2026), RNWY also returns an owner wallet score, commerce summary (provider jobs, counterparty count, commerce tenure), and transaction-backed review percentage in the API response. However, these are additional intelligence fields – they appear in the response but do not affect the tier calculation or the primary trust score. This is the critical distinction from ChainAware: RNWY surfaces the owner wallet score as informational context; it does not integrate it into the scoring formula.

RNWY also indexes 1.7 million commerce jobs across Olas, Virtuals ACP, and SATI – making it the most comprehensive commerce activity tracker in the agent ecosystem. Trust scores live on Base mainnet, meaning any smart contract can read an agent’s score, tier, and sybil severity mid-transaction without an API call or oracle fee. This on-chain accessibility is a significant technical advantage for DeFi protocols that want to gate at the smart contract level rather than the application layer.

Strengths

RNWY’s strengths are transparency, on-chain accessibility, and commerce job history depth. The published methodology with exact signal weights means any relying party can independently verify a score calculation. The on-chain trust oracle on Base enables smart contract-level gating. The 1.7M commerce job index provides genuine economic activity context that no other platform matches. Additionally, the sybil detection is genuinely sophisticated – the common funder signal (weighted 6×) specifically targets the attack pattern of one operator funding multiple reviewer wallets from a single source.

Blind spots

RNWY’s primary blind spot is the boundary it draws at the review layer. The owner wallet score is surfaced but does not affect the tier. Feeder address analysis does not exist. Prior token creation history – rug pulls, honeypots – is not queried. Farm detection operates only at the reviewer level, not at the fleet level. Consequently, a fresh wallet that has never received a review (no positive signals, no negative signals) scores the same as an established operator in RNWY’s primary score calculation – both lack review history. Furthermore, a serial rug puller who has never participated in the ERC-8004 review ecosystem will not trigger any RNWY detection signal, because their fraud history exists in token creation, not in agent reviews.

Who it is for

RNWY is the strongest choice for platforms where agent reputation is displayed to users (marketplaces, directories, leaderboards) and where the primary threat model is manufactured peer endorsements. It is a compelling addition to any trust stack as a review quality layer. However, it is not sufficient as a standalone gate for DeFi protocols where the primary threat is a fraud operator using agents as the execution vehicle for financial crimes.

Platform 3 – SkyeProfile: Multi-Attestation Wallet Trust

What it is

SkyeProfile (skyemeta.com) is a multi-attestation wallet trust profile that orchestrates nine specialised attestation providers and returns one unified signed profile per wallet. The system uses a dual-score model with Signal Depth (behavioral observability) and Risk Intensity (sybil and fraud risk) as independent axes, covering 150K+ agents across ERC-8004, Olas, Virtuals, and SATI registries.

Methodology

SkyeProfile works on a general contractor model – eight dimensions, eight independent providers, eight verifiable signatures. One API call returns ten independently verifiable attestations, each with a JWKS URI so relying parties can verify any dimension offline without trusting SkyeMeta itself. The dimensions span solvency (wallet holdings across 33 chains), governance participation, behavioral trust, identity, security posture, compliance, performance, and settlement track record.

Notably, SkyeProfile uses RNWY as its behavioral trust provider – RNWY maintains the dual-score model across 150K+ agents spanning twelve EVM chains and Solana within the SkyeProfile attestation framework. This means SkyeProfile inherits RNWY’s methodology for the behavioral dimension, including both RNWY’s strengths (sybil detection, review quality analysis) and RNWY’s blind spots (no feeder analysis, no criminal record check, owner wallet informational only).

Strengths

SkyeProfile’s primary strength is breadth and verifiability. By aggregating nine specialised providers and returning independently verifiable signatures, it gives relying parties a comprehensive wallet profile that no single provider can match across all dimensions. The cryptographic verifiability (ES256 or EdDSA signatures with JWKS-published keys) is technically rigorous and appropriate for high-stakes autonomous execution contexts. The 33-chain solvency layer is the most comprehensive wallet holdings analysis in the market.

Blind spots

SkyeProfile scores the agent wallet – the address registered with the ERC-8004 identity. Since it delegates behavioral trust to RNWY, it inherits RNWY’s blind spots on feeder analysis and criminal record checking. Furthermore, because SkyeProfile is built as a wallet profiling system rather than an agent-specific fraud intelligence system, it does not perform fleet-level farm detection or trust delegation from owner to agent wallet. The platform also scores 150K agents across multiple registries – which is valuable breadth, but means its ERC-8004 specific coverage is thinner than RNWY’s 185K ERC-8004-specific indexed agents.

Who it is for

SkyeProfile is strongest for use cases requiring verifiable, multi-dimensional wallet attestations – particularly in contexts where cryptographic proof of each assessment matters, such as compliance audit trails or high-stakes DeFi credit decisions. For the broader DeFi credit scoring context, see our DeFi Credit Score Platform comparison. SkyeProfile is not a standalone agent trust gate – it is a comprehensive wallet profiling layer that serves agent trust as one of several use cases.

Platform 4 – AXIS T-Score: Runtime Performance Scoring

What it is

AXIS T-Score (axistrust.io) operates in an entirely different category from every other platform in this comparison. While all other platforms score the agent’s identity and on-chain history, AXIS scores the agent’s runtime behavior – how well it performs tasks, follows instructions, and operates within defined guardrails during actual execution.

Methodology

AXIS measures 11 behavioral dimensions: task completion rate, instruction adherence, data handling, transparency, error recovery, consistency, scope compliance, resource efficiency, communication clarity, security posture, and audit trail quality. All of these metrics are off-chain – they measure what the agent does during task execution, not what its controlling wallet has done on-chain. Scores run from 0 to 1,000 across five tiers (T1-T5), using the same 0-1,000 scale as ChainAware’s Agent Trust Score but measuring completely different inputs.

Strengths

AXIS addresses a genuinely different problem: does this agent do what it claims to do? An agent that claims to be a compliance screener but routinely fails to flag sanctioned addresses will score low on AXIS – regardless of how trustworthy its owner wallet is. That quality assurance dimension is valuable and not addressed by any on-chain behavioral platform. For enterprise contexts where agents are deployed for specific task categories, AXIS provides the most rigorous evaluation of task quality available.

Blind spots

AXIS scores runtime performance, not financial trustworthiness. An agent can score T5 on AXIS (top-tier task execution) and be controlled by a serial rug puller who has stolen millions. The two assessments are orthogonal – they address completely different threat models. For DeFi protocols where the primary concern is financial fraud rather than task quality, AXIS provides no relevant signal. Additionally, AXIS is entirely off-chain, which means it has no chain coverage, no wallet analysis, and no on-chain verifiability. Scores cannot be read by smart contracts and cannot be cryptographically verified against on-chain data.

Who it is for

AXIS is most valuable for enterprise deployments where agents perform specific workflow tasks – research, content generation, data analysis – and where task quality rather than financial fraud is the primary concern. Layering AXIS with an on-chain identity trust system (ChainAware for fraud intelligence, RNWY for review quality) produces the most complete agent evaluation stack: you verify both who controls the agent and how well the agent performs.

Platform 5 – DJD Agent Score: Wallet Activity Scoring

What it is

DJD Agent Score is the smallest and most narrowly focused platform in this comparison. It returns a 0-100 behavioral trust score for any wallet, combining seven dimensions – transaction history, partner diversity, volume patterns, account age, balance stability, activity consistency, and USDC usage – with sybil detection and gaming velocity checks. Scores feed directly into the ERC-8004 Reputation Registry as off-chain attestations, and the service is monetised via x402 micropayments in USDC on Base.

Methodology and coverage

DJD scores the agent wallet address across those seven dimensions. The scoring approach is transparent and the seven dimensions are reasonable wallet activity signals. However, coverage is Base-only – the platform does not index agents on Ethereum mainnet, BSC, or Avalanche. Furthermore, like SkyeProfile’s solvency layer and the ERC-8004 native registry, DJD scores the agent wallet rather than the owner wallet. This means it faces the same fresh wallet problem: a newly created agent wallet with no transaction history will score near zero on all seven dimensions regardless of the owner’s reputation.

Strengths and limitations

DJD’s x402 integration is technically interesting – it demonstrates a viable micropayment-based business model for agent trust scoring that does not require API keys or subscription agreements. The seven-dimension wallet scoring is simple, auditable, and directly verifiable. However, the Base-only coverage and agent-wallet focus rather than owner-wallet focus significantly limit DJD’s utility as a primary trust gate. It is best understood as an early-stage product demonstrating one viable approach rather than a production-ready trust infrastructure system.

Platform 6 – ChainAware: Behavioral Fraud Intelligence

What it is

ChainAware’s Agent Trust Score approaches agent trust from the opposite direction of every other platform. Rather than starting from the agent and asking what signals the agent produces (reviews, task performance, wallet history), ChainAware starts from the human behind the agent and asks what that human has done on-chain across their entire history – including activities completely unrelated to the current agent registration.

This inversion is the foundation of every signal that differentiates ChainAware from the rest of the market. For a full technical explanation of the scoring formula, see the Agent Trust Score methodology page.

Core formula

The Agent Trust Score builds on the same Wallet Reputation Score formula used across ChainAware’s products:

ReputationScore = (1000/110) × (experience + 1) × (risk_capability + 1) × (1 − fraud_probability)
Maximum: 1,000

This formula runs separately on the owner wallet and the agent wallet. Furthermore, it runs on the feeder address when traceable. The results are then combined using trust delegation logic, farm detection modifiers, and criminal record hard caps to produce the final Agent Trust Score. The 0-1000 scale is consistent with the Wallet Reputation Score – meaning a protocol that already uses ChainAware’s wallet intelligence can compare agent trust and wallet trust on the same axis without recalibration.

Coverage and infrastructure

ChainAware indexes 240,000+ ERC-8004 agents across Ethereum mainnet, BSC, Base, and Avalanche – the widest chain coverage in the market for a predictive fraud intelligence approach. The underlying wallet persona database covers 20M+ addresses across 8 blockchains, trained on behavioral data accumulated over multiple years. The fraud prediction model achieves 98% accuracy on held-out test data, as documented in our AI-Powered Blockchain Analysis guide. Additionally, scores are available via the Prediction MCP server, meaning any Claude-based DeFi agent can query agent trust scores as a native tool call without custom API integration.

The Five Signals Only One Platform Provides

Five signals in the Agent Trust Score are not replicated by any other platform currently operating in the ERC-8004 agent trust market. Each one addresses a specific threat model that the other approaches structurally cannot reach.

Signal 1: Feeder address analysis

The feeder address is the wallet that funded the agent’s owner wallet. Tracing and scoring it is the single most distinctive capability in the ChainAware Agent Trust Score. No other platform – not RNWY, not SkyeProfile, not DJD – performs feeder analysis.

Why it matters: an experienced fraud operator rotates owner wallets between campaigns. Wallet A runs a rug pull, gets flagged, and is abandoned. Wallet B is freshly created and funded from Wallet A. Wallet B then registers 40 agents on ERC-8004. Every platform that scores only the agent or the agent’s direct owner wallet will see a clean Wallet B with no fraud history. ChainAware traces the funding path and scores Wallet A – the feeder – which carries the fraud record. Wallet B’s agents receive hard-capped scores regardless of how clean Wallet B’s own history appears.

ChainAware covers feeder analysis for approximately 38% of indexed agents – the ones with a traceable single-hop funding source. For agents where the feeder is a verified CEX withdrawal address (Binance, Coinbase, Kraken, OKX), the platform flags this as FEEDER_CEX_VERIFIED – a positive trust signal that implies the owner wallet was funded via a KYC’d exchange withdrawal. For agents where the feeder is unknown or obfuscated, the platform applies a penalty reflecting the information asymmetry.

Signal 2: Criminal record – rug pull history

ChainAware maintains a database built from one year of on-chain liquidity pair history. That database records which wallet addresses created pools that subsequently exhibited rug pull patterns – rapid liquidity removal after price appreciation, following the operational signature documented in our Rug Pull vs Pump and Dump guide.

Before computing the Agent Trust Score, ChainAware cross-references both the owner wallet and the feeder address against this database. A single confirmed rug pull in the owner’s history generates a hard cap on the Agent Trust Score – a ceiling no other signal can override. This is the signal that connects yesterday’s token fraud to today’s agent deployment. An operator who rugged three pools on PancakeSwap in Q4 2025 and registered 40 agents in Q1 2026 is caught by this check. No other agent trust platform makes that connection, because no other platform maintains a paired rug pull database and cross-references it against agent registry data.

Signal 3: Criminal record – honeypot token history

Separately from rug pull detection, ChainAware maintains token audit data identifying honeypot contracts – tokens with embedded code that prevents buyers from selling. The creator wallet for each identified honeypot token is recorded. Cross-referencing agent owner wallets against this database produces a second criminal record dimension: has the agent’s controller previously created trap tokens that extracted funds from retail investors?

Honeypot creation and rug pull creation are related but distinct fraud patterns. Some operators specialise in one or the other; some use both. Having both databases cross-referenced produces a more complete criminal record than either alone. Together with rug pull history, this gives ChainAware the only criminal record check available in the agent trust market. For more on how token auditing produces these signals, see our Token Audit methodology.

Signal 4: Trust delegation

Trust delegation is ChainAware’s mechanism for handling the fresh agent wallet problem without penalising legitimate new agents. Agent payment wallets are frequently created specifically for an agent deployment – they are fresh addresses with no transaction history. A scoring approach that treats wallet age as a primary negative signal would incorrectly assign low trust to every newly deployed agent from a legitimate operator.

ChainAware’s trust delegation sets a floor for the agent wallet’s effective score based on the owner wallet’s Reputation Score. A strong owner (Sovereign tier, 800+) partially transfers credibility to the fresh agent wallet, resulting in a significantly higher Agent Trust Score than the agent wallet alone would produce. A fraud-flagged owner, by contrast, cannot delegate any meaningful trust – the delegation factor collapses to near zero. This means fresh wallets from reputable operators score correctly high, and fresh wallets from fraud operators score correctly low – which is the right outcome for both cases.

Signal 5: Fleet-level farm detection

Every other platform in this comparison scores agents individually. ChainAware maintains an owner profile database – tracking how many agents each owner controls across all indexed chains and whether those agents were registered in the same block (indicating automated bulk registration). This fleet-level view enables detection of agent farms that individual agent scoring cannot surface.

An operator running a farm of 50 agents will have each individual agent score independently on RNWY, SkyeProfile, or DJD. Nothing in those individual scores reveals the coordinated nature of the fleet. ChainAware sees the fleet. Owners controlling anomalously large numbers of agents receive a suppression modifier that applies to every agent in their fleet – including agents that individually might score cleanly. This is the signal that catches the specific agentic commerce attack pattern identified in our Blockchain Data Providers guide: one operator manufacturing ecosystem depth through controlled agent populations.

Head-to-Head Comparison Table

The following table compares all six approaches across every dimension relevant to DeFi protocol builders and investors evaluating the space. Each row describes a specific capability, not a general category, to make the comparison as concrete as possible.

Capability	ERC-8004 Native	RNWY	SkyeProfile	AXIS T-Score	DJD Agent Score	ChainAware
Core question answered	What reviews exist?	Are reviews genuine?	What does the wallet hold/do?	Does the agent perform tasks well?	What is the agent wallet’s history?	Who controls the agent and what have they done?
Agents indexed	240K+ (registry)	185K+	150K+ (multi-registry)	Off-chain only	Base only	240K+ ERC-8004
Chain coverage	ETH, BSC, Base, AVAX, Mantle	12 chains	ERC-8004, Olas, Virtuals, SATI	Off-chain	Base only	ETH, BSC, Base, AVAX
Score range	No score (registry only)	0-95 (5 tiers)	Dual axis (Signal Depth + Risk Intensity)	0-1,000 (T1-T5)	0-100	0-1,000 (5 tiers)
Owner wallet scored	✗	Informational (v1.1.0+)	Partial (via RNWY behavioral)	✗	✗	✓ Core formula input
Feeder address traced	✗	✗	✗	✗	✗	✓ Unique signal
CEX feeder detection	✗	✗	✗	✗	✗	✓ Positive trust signal
Rug pull history check	✗	✗	✗	✗	✗	✓ 1-year pair database
Honeypot token history check	✗	✗	✗	✗	✗	✓ honeypot token audit data
Predictive fraud model	✗	✗	✗	✗	✗	✓ 20M+ personas, 98% accuracy
Trust delegation mechanism	✗	✗	✗	✗	✗	✓ Unique
Fleet-level farm detection	✗	Partial (reviewer sybil only)	✗	✗	✗	✓ Owner fleet database
EIP-7702 delegation scoring	✗	✗	✗	✗	✗	✓ Delegate address scored
On-chain readable score	✓ (registry data)	✓ (Base mainnet oracle)	✓ (signed attestations)	✗	✗	Via Prediction MCP
Cryptographic attestation	✗	✓ ES256-signed	✓ ES256 / EdDSA, 9 providers	✗	✗	✗
Commerce job history	✗	✓ 1.7M jobs (Olas, Virtuals, SATI)	✗	✗	✗	✗
Published methodology	✓ (spec)	✓ Full weights published	✓ Provider list published	✓ 11 dimensions documented	✓	Categories published; weights private
Free tier	✓	✓ No API key required	Partial	✗	✓ x402 micropayment	✓ No signup for public agents
MCP integration	✗	✓ JSON-RPC 2.0	✗	✗	✗	✓ Native Prediction MCP (SSE)

Decision Matrix: Which Platform for Which Use Case?

No single platform is the correct choice for every context. The right stack depends on what you are trying to prevent, what signals matter for your specific use case, and what integration constraints you are working within. The following matrix maps use cases to recommended platform combinations.

DeFi protocol gating autonomous financial execution

Primary: ChainAware Agent Trust Score – owner fraud probability, feeder analysis, criminal record check, and farm detection are all directly relevant to the threat model. Set tier thresholds based on transaction risk: Trusted (600+) for high-value operations, Provisional (400+) for lower-risk flows with monitoring.

Secondary: RNWY for reputation display – show the RNWY score in your protocol’s agent directory alongside the ChainAware score. They answer different questions and the combination is more informative than either alone.

Optional: SkyeProfile attestations if your compliance framework requires cryptographically verifiable attestations as audit evidence. For the compliance context, see our DeFi Compliance and AML guide.

Agent marketplace or directory

Primary: RNWY – the on-chain trust oracle on Base enables smart contract-level minimum score requirements for job listing. The commerce job history (1.7M jobs) is directly relevant to marketplace quality filtering. The transparent published methodology means marketplace users can understand exactly why an agent scores as it does.

Secondary: ChainAware Agent Trust Score – surface it as a fraud intelligence layer alongside RNWY’s reputation score. The two scores are complementary: RNWY tells users whether the agent’s reviews are genuine; ChainAware tells users whether the human behind the agent has a history of financial fraud.

Enterprise workflow agent deployment

Primary: AXIS T-Score – for enterprise agents performing specific workflow tasks (research, compliance screening, content generation), task quality assurance is the primary concern. AXIS is the only platform that evaluates whether an agent does what it claims to do.

Secondary: ChainAware if the agent has financial execution permissions. Task quality and financial trustworthiness are both relevant for agents with write permissions to financial systems.

Agent creator wanting to understand their score

Agent creators interact with multiple trust systems simultaneously. Your agents are scored by every platform a buyer chooses to query. Understanding all five is therefore more important for creators than for buyers. Specifically:

• RNWY score: ensure your agent has genuine reviews from established reviewer wallets. Avoid requesting reviews from wallets that bulk-review across many agents – they will be detected as sybil reviewers and suppress your score
• ChainAware score: your owner wallet’s history is the primary input. A wallet with 12+ months of diverse DeFi activity scores significantly higher than a fresh wallet. If your feeder is a CEX withdrawal, this is a positive signal that surfaces automatically
• SkyeProfile: ensure your owner wallet holds governance tokens and participates in established protocols – the solvency and governance dimensions reward breadth of DeFi participation
• AXIS: if you want T-Score evaluation, ensure your agent returns reliable, consistent outputs and maintains audit trail quality across repeated task executions

The White Space: Five Capabilities Nobody Has Built Yet

The current agent trust infrastructure market is six months old. Consequently, significant white space remains – capabilities that no platform currently provides but that the market will almost certainly require as agentic commerce scales. The following five gaps represent the next investment and product opportunities in this category.

Gap 1: Agent-to-agent trust propagation

No platform currently answers this question: if Agent A scores Sovereign and has completed 10,000 successful interactions with Agent B, does that interaction history update Agent B’s trust score? In human systems, ongoing positive relationships build trust over time. In agent systems, every score is computed from static inputs without accounting for the accumulated interaction history between specific agent pairs. Building trust propagation that flows through agent interaction graphs – raising Agent B’s score based on verified positive interactions with high-scoring agents – would fundamentally change how trust compounds in the agentic economy.

Gap 2: Cross-registry agent identity resolution

An operator may deploy agents across ERC-8004, Olas, Virtuals, and SATI simultaneously. Currently, each registry treats these as separate identities. No platform provides unified entity resolution – grouping agents across registries that share the same owner wallet into a single entity profile. This matters because fleet-level behavior visible at the entity level (100 agents across 4 registries controlled by one owner) is invisible at the per-registry level (25 agents on each).

Gap 3: MCP server trust scoring

Every agent trust platform scores the agent itself. None score the MCP servers the agent calls. An agent connecting to a malicious or compromised MCP server is a trusted agent performing untrusted actions. As the MCP ecosystem grows – Smithery ↗ already indexes thousands of MCP servers – the trust question extends naturally from “who is the agent?” to “what tools is the agent using?”

Gap 4: Trust score-based insurance underwriting

No DeFi insurance protocol currently uses agent trust scores as an underwriting input. A protocol granting autonomous execution access to a Sovereign-tier agent (800+) takes on less risk than one granting the same access to a Provisional-tier agent (400-599). Insurance premiums, coverage limits, and deductibles could all be parameterised on agent trust scores – creating a financial market that prices the residual risk after trust gating rather than treating all agent access as equally risky.

Gap 5: Dynamic trust scores updating in real time

Current trust scores are computed at query time from static inputs and cached. None update continuously as new on-chain events occur. An agent whose owner wallet executes a suspicious transaction pattern at 14:00 UTC will not have its trust score updated until the next scoring cycle. Real-time trust score streaming – where scores update within seconds of relevant on-chain events – would enable dynamic access control that responds to emerging fraud signals rather than lagging behind them.

The Investor Lens: What Makes Agent Trust Infrastructure a Durable Market

For investors evaluating the agent trust infrastructure category, several structural dynamics shape the market’s long-term economics.

The TAM compounds with agent adoption

Agent trust infrastructure is a derived demand market – its TAM scales directly with agentic commerce adoption. McKinsey’s $3-5 trillion agentic commerce estimate ↗ implies that every dollar of economic activity flowing through autonomous agents creates a corresponding demand for trust verification of those agents. As Morgan Stanley projects ↗, nearly half of online shoppers will use AI shopping agents by 2030. Each one of those agents represents a trust decision for every protocol or merchant it interacts with.

Consequently, market growth in agent trust infrastructure is structurally tied to the overall growth of agentic AI – a market with multiple large tailwinds including regulatory pressure (Know Your Agent protocols emerging from the EU AI Act framework), enterprise adoption (agents handling financial workflows requiring documented risk controls), and protocol incentives (DeFi protocols facing liability exposure from agent-initiated fraud).

Data network effects favour early movers with behavioral databases

Agent trust platforms that rely on behavioral databases – rather than purely algorithmic or review-based scoring – accumulate a compounding data advantage. A platform with one year of on-chain pair history knows which wallets created rug pools. A platform with two years knows which wallets have repeat patterns across multiple fraud campaigns. That historical depth cannot be compressed – a competitor starting today cannot buy the historical database that an early mover has built through continuous operation.

This dynamic differentiates behavioral fraud intelligence platforms from review-quality platforms. RNWY’s review quality algorithm could theoretically be replicated by a well-resourced team in months. The underlying behavioral database and fraud prediction model trained on years of on-chain data cannot. For context on how machine learning model development timelines apply to this space, see our AI-Powered Blockchain Analysis guide.

Complementary rather than winner-takes-all

The four distinct approaches in the market address different threat models that do not fully substitute for each other. RNWY’s review quality signal and ChainAware’s behavioral fraud intelligence are complementary – a protocol using both is better protected than a protocol using either alone. This means the agent trust market is likely to support multiple sustainable businesses serving different parts of the trust stack, rather than converging to a single dominant platform.

The parallel is the credit rating market – Moody’s, S&P, and Fitch coexist because rating agencies with complementary methodologies provide more value to the market than a single monopoly. Agent trust infrastructure may evolve similarly, with different platforms serving different trust dimensions in a layered stack. For investors, this implies that both the review quality layer (RNWY) and the behavioral fraud intelligence layer (ChainAware) have independent market positions rather than competing for the same slot in every protocol’s integration.

Regulatory tailwinds

The EU AI Act ↗, which takes full effect in August 2026, creates documentation and risk assessment requirements for high-risk AI systems. Autonomous agents with financial execution permissions are a clear candidate for high-risk classification under this framework. Protocols operating in EU-regulated markets will need demonstrable risk controls for agent interactions – a requirement that agent trust scoring infrastructure directly satisfies. Additionally, Know Your Agent (KYA) protocols are emerging as the agent-layer equivalent of KYC, creating a compliance-driven pull for trust verification infrastructure beyond pure product adoption.

Frequently Asked Questions

Can I use multiple agent trust platforms simultaneously?

Yes – and for high-value use cases, this is the recommended approach. RNWY and ChainAware answer different questions about the same agent. Using RNWY for review quality and ChainAware for owner fraud intelligence produces a more complete picture than either alone. The integration is straightforward: make two API calls per agent and combine the results in your access control logic. DeFi protocol builders can set independent thresholds for each score – for example, requiring RNWY tier 3+ (genuine review history) AND ChainAware Trusted tier (600+) for full autonomous execution access.

Which platform is best for displaying trust to end users?

RNWY is the strongest choice for trust display because its methodology is fully published and each score shows its math. End users can understand exactly why an agent scored as it did – which reviewer wallets were flagged, which sybil patterns were detected, what the address age contributed. Transparency builds user confidence. ChainAware’s score is complementary but its weights are private (to prevent gaming), making RNWY more appropriate for user-facing display where explainability matters.

How do the different score scales compare?

The score scales are not directly comparable across platforms. RNWY scores out of 95 (not 100 – their maximum is 95 due to scoring mechanics). ChainAware and AXIS both use 0-1,000. DJD uses 0-100. SkyeProfile uses two independent axes rather than a single number. Converting between scales requires understanding what each platform actually measures, which is why the comparison table above focuses on capabilities rather than score values. An agent scoring 72/95 on RNWY and 650/1,000 on ChainAware is not inconsistent – those numbers describe entirely different assessments.

Does RNWY’s owner wallet score compete with ChainAware?

Not meaningfully. RNWY’s v1.1.0 update added owner wallet score as an informational field in the API response – but explicitly does not affect tier calculation or the primary trust score. The field surfaces the owner wallet’s RNWY-defined score as context for relying parties who want to incorporate it into their own decision logic. ChainAware makes the owner wallet score the primary input to the Agent Trust Score formula, combines it with feeder analysis and criminal record data, and applies trust delegation. The two approaches share the observation that owner wallet matters – but diverge completely on how to score it and how much weight it should carry.

What is ERC-8183 and how does it relate to agent trust?

ERC-8183 is a commerce protocol that gives AI agents trustless commerce capabilities – handling escrow, state transitions, and evaluator attestation for agent-to-agent job markets. The spec is intentionally minimal – it handles the commerce mechanics but explicitly does not handle trust scoring, discovery, or fraud detection. RNWY has built a marketplace and trust scoring layer on top of ERC-8183. ChainAware’s Agent Trust Score is compatible with ERC-8183 job markets as a pre-interaction trust gate – protocol teams can require a minimum Agent Trust Score before an agent can claim a job or receive escrowed funds.

How often do trust scores update?

Update frequencies vary by platform. ChainAware’s fraud prediction model retrains daily – meaning the fraud probability feeding into owner wallet scores updates continuously as new on-chain patterns emerge. Scores for specific agents update when new relevant events are detected (new agent registrations, owner wallet activity, feeder transactions). RNWY scores update as new reviews are submitted to the ERC-8004 Reputation Registry and as sybil analysis runs on reviewer wallets. AXIS T-Score updates based on runtime task execution data. None of the current platforms offer real-time streaming score updates – that remains a white space capability described above.

Is the ChainAware Agent Trust Score relevant for non-ERC-8004 agents?

Partially. The owner wallet and feeder address scoring works for any wallet address, regardless of whether it is associated with an ERC-8004 registration. A protocol that receives agent-initiated transactions from wallets not registered on any standard identity registry can still query ChainAware’s Fraud Detection API for the controlling wallet’s behavioral intelligence. The ERC-8004-specific signals (farm detection, trust delegation from registry data) require an ERC-8004 registration to function. However, the owner fraud probability, feeder analysis, and criminal record check work on any wallet regardless of registry status. For protocols on chains not yet covered by ERC-8004 registries, this means ChainAware provides partial Agent Trust Score functionality even before full ERC-8004 adoption on those chains.

Where can I read ChainAware’s full scoring methodology?

The complete methodology – including the five scoring layers, all flag definitions, score tier descriptions, and the trust delegation formula – is documented at chainaware.ai/learn/agent-trust-score. The signal categories are published. The exact weights and model coefficients remain private to prevent gaming. The equivalent documentation for the underlying Wallet Reputation Score (which feeds into the Agent Trust Score formula) is at chainaware.ai/learn/for-individuals/wallet-auditor.

Further Reading

• Agent Trust Score – Complete Methodology – the five scoring layers, all flags, tier definitions, and trust delegation formula
• The First Step in Agentic Commerce Isn’t Integration. It’s Trust. – the companion article covering the trust gap in DeFi protocol agent integrations
• Web3 Wallet Auditing Providers in 2026 – the same three-layer framework applied to the wallet intelligence market
• Web3 Analytics Tools for Dapps: Complete Comparison – where agent trust scoring fits in the broader DeFi analytics stack
• AI-Powered Blockchain Analysis for Crypto Security – the machine learning methodology behind ChainAware’s 98% fraud detection accuracy
• Rug Pull vs Pump and Dump – the fraud patterns that generate ChainAware’s criminal record database
• DeFi Compliance: KYT and AML Guide 2026 – regulatory context for DeFi agent integration compliance
• DeFi Credit Score Platforms Compared – how agent trust scoring combines with borrower creditworthiness assessment
• Prediction MCP Setup Guide – add ChainAware behavioral intelligence including Agent Trust Score to any Claude agent
• 32 Ready-Made Agents – pre-built Claude agents including agent verification, fraud detection, and compliance screening

---

ChainAware.ai is the Web3 Agentic Growth Infrastructure – behavioral intelligence for DeFi protocols, AI agents, and individual crypto users. 20M+ wallet personas, 98% fraud detection accuracy, <100ms API latency across 8 blockchains. Try free at chainaware.ai.