Trust, explained

The Trust Layer
for AI Agents

Agents do not need "more tools." They need tools they can trust. FunctionFly turns functions into verified, signed, auditable building blocks with execution-backed trust scores.

live: L1–L4 verification

Verification levels

Each level adds deeper assurance before a tool can be considered "trusted."

L1
Malware + schema
Validate manifest structure, I/O schema, and scan for malware.
L2
Malware + DRE + FXCERT
Security scans, data-risk evaluation, and platform-signed execution certificates.
L3
Full + manual review
All L2 checks plus manual review of safety-relevant aspects.
L4
Platform signed
All L3 checks plus an Ed25519 platform-signed attestation. Highest trust.

Signing, attestations, revocation

Trust is portable because verification becomes an immutable record.

  • Signing: Function artifacts include platform signatures.
  • Attestations: Verifiable records of what was checked and when.
  • Revocation: If a tool is flagged, it can be downgraded or removed from trusted pools.
What agents see
A trust score and policy-relevant metadata (capabilities, constraints, and verification level).

Execution-backed trust

Trust scores compound from real execution history so "it ran" and "it ran safely" are both represented.

Zero-knowledge vault

Secrets are encrypted client-side. FunctionFly stores ciphertext only, enabling agent tools without exposing plaintext secrets.

Trust API (usage-based)

Query attestations, trust scores, and revocation state. Bill on usage so agent workloads can adapt trust dynamically.

Trust score lifecycle

Trust is not a static label. It starts at publish-time, evolves with execution history, and can be updated through verification, reports, and revocations.

1
Publish
A function is published with a manifest and a declared I/O contract.
2
Verify
Verification stages validate structure, security, and safety-relevant behavior.
3
Sign & attest
Attestations become immutable records that agents can reason about.
4
Execute
Real execution updates trust score components over time.
5
Evolve
History, reports, and revocation keep trust current for agents and clients.

Trust API for agents

Use a scoped API key to read trust scores and trigger verification workflows from your agent runtime.

Get trust score:GET /v1/trust/score/{function_id}
Batch scores:POST /v1/trust/batch
Get history:GET /v1/trust/history/{function_id}
Submit verification:POST /v1/trust/verify
Scopes matter
Trust read endpoints require an API key; verification and reporting endpoints require scopes (e.g. verification:request, reports:submit).

Example: submit verification

Trigger a verification run for a function version, then query status until the verification completes.

POST /v1/trust/verify
Authorization: Bearer API_KEY
Content-Type: application/json

{
  "function_id": "550e8400-e29b-41d4-a716-446655440002",
  "function_version": "1.2.0",
  "verification_level": "standard",
  "metadata": {
    "use_case": "data_processing",
    "expected_traffic": "high"
  }
}
{
  "id": "550e8400-e29b-41d4-a716-446655440005",
  "verification_id": "vfy_abc123def456",
  "function_id": "550e8400-e29b-41d4-a716-446655440002",
  "function_author": "alice",
  "function_name": "data-processor",
  "function_version": "1.2.0",
  "verification_level": "standard",
  "status": "pending",
  "created_at": "2026-03-21T10:00:00Z"
}

Partner tiers

Each tier maps to a verification level, giving your agents the right trust guarantees for the right workload.

Developer
L1–L2
Free
  • ✓ Malware scan + schema (L1)
  • ✓ Security + DRE + FXCERT (L2)
  • ✓ Basic trust scores
  • ✓ 10k API calls/month
  • ✓ Community support
Startup
L2–L3
$49/mo
  • ✓ Security + DRE + FXCERT (L2)
  • ✓ Full verification + manual review (L3)
  • ✓ Full trust score history
  • ✓ 100k API calls/month
  • ✓ Email support
Business
L3–L4
$199/mo
  • ✓ Full verification + manual review (L3)
  • ✓ Platform-signed attestation (L4)
  • ✓ Revocation monitoring
  • ✓ 1M API calls/month
  • ✓ Priority support + SLAs
Enterprise
L4 + Custom
Custom
  • ✓ All Business features
  • ✓ Custom verification policies
  • ✓ Dedicated trust consultant
  • ✓ Unlimited API calls
  • ✓ On-premise deployment option

Why FunctionFly wins on trust

No other platform combines verification, trust scoring, and zero-knowledge security.

Feature
FunctionFly
Trust scoring
✓
Multi-level verification (L1–L3)
✓
Zero-knowledge vault
✓
Function execution
✓
Agent-native tool discovery
✓

Ready to build with trusted tools?

Browse trusted functions in the marketplace, or run your own agent trust policy to select tools safely.