AgoraHub

AgoraHub agent registry — discover and use 14+ verified AI agents for dev tasks like hashing, encoding, formatting, and more. No signup needed for demo agents.

Security Scan

The skill is an instruction-only registry client that issues curl calls to agorahub.dev and only needs an API key when calling community (non-demo) agents — its requirements and instructions are coherent, with a small documentation/config mismatch about the API key being required.

Purpose & Capability

Name/description (agent registry) matches the runtime instructions: SKILL.md documents listing and calling agents via HTTPS endpoints on https://agorahub.dev using curl and parsing with jq. Required binaries (curl, jq) are exactly what the skill's examples use.

Instruction Scope

Instructions are narrowly scoped to making HTTP POST/GET calls to agorahub.dev and parsing responses with jq. This is expected for a registry. However, the examples send arbitrary user-provided text to the remote service — do not pass secrets, private tokens, or sensitive files to these calls because they will be transmitted to the external endpoint.

Install Mechanism

No install spec and no code files (instruction-only). This minimizes on-disk execution risk; the skill only relies on system-provided curl and jq.

Credentials

The skill declares AGORAHUB_API_KEY as required/primaryEnv, which is reasonable for calling community agents, but SKILL.md states that all 14 demo agents work without an API key and only community agents require it. Marking the API key as strictly required in metadata is slightly inconsistent with the documented usage and could prevent running demo calls in environments without the key.

Persistence & Privilege

The skill is not marked always:true and does not request system-wide config or modify other skills. Model invocation is allowed (default) which is normal for skills.

Assessment

This skill appears to do what it says: it runs curl+jq against https://agorahub.dev to list and invoke agents. Before installing or using it: (1) Confirm you trust agorahub.dev — the skill will transmit any text you send to the remote service; never include passwords, private keys, or other secrets in requests. (2) The metadata requires AGORAHUB_API_KEY, but SKILL.md shows demo agents that don't need a key; expect the key is only necessary for non-demo/community agents — verify whether the platform actually requires the key in your environment. (3) No code is installed by the skill, but it depends on curl and jq being present. (4) If you plan to use the JWT decoder, password/hash generators, or paste sensitive content, consider running those operations locally or in a trusted environment instead of sending them to a third-party. (5) If you need stronger assurance, ask the publisher for a homepage or source code, and review the service’s privacy/security policy; keep your API key scoped and be prepared to revoke it if you suspect misuse.

AgoraHub — AI Agent Registry

AgoraHub is an open agent registry with 14+ verified demo agents you can use instantly — no signup required. For community agents, get an API key at https://agorahub.dev/dashboard/api-keys.

Base URL: https://agorahub.dev

---

1. Discover Available Agents

List all agents exposed as MCP tools:

curl -s https://agorahub.dev/api/mcp/tools | jq '.tools[] | {name, description}'

Filter by Tags

curl -s "https://agorahub.dev/api/mcp/tools?tags=crypto" | jq '.tools[] | {name, description}'

Search by Name/Description

curl -s "https://agorahub.dev/api/mcp/tools?q=hash" | jq '.tools[] | {name, description}'

---

2. Call an Agent

All 14 demo agents work without an API key. For community agents, add -H "Authorization: Bearer $AGORAHUB_API_KEY".

General Call Format

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_<agent-slug>_<skill-id>","arguments":{...}}' | jq

---

3. Agent Quick Reference

Echo Agent

Echo back a message with a timestamp.

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_echo-agent_echo","arguments":{"message":"hello world"}}' | jq

Hash Generator

Generate cryptographic hashes (md5, sha1, sha256, sha512).

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_hash-generator_hash","arguments":{"text":"hello","algorithm":"sha256"}}' | jq

Hash with all algorithms at once:

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_hash-generator_hash-all","arguments":{"text":"hello"}}' | jq

Password Generator

Generate secure passwords with customizable options.

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_password-generator_generate","arguments":{"length":20,"count":3,"symbols":true}}' | jq

JSON Formatter

Validate, pretty-print, or minify JSON.

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_json-formatter_format","arguments":{"json":"{\"key\":\"value\",\"num\":42}"}}' | jq

Base64 Codec

Encode text to Base64:

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_base64-codec_encode","arguments":{"text":"hello world"}}' | jq

Decode Base64 back to text:

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_base64-codec_decode","arguments":{"text":"aGVsbG8gd29ybGQ="}}' | jq

UUID Generator

Generate UUIDs in v4 or v7 format.

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_uuid-generator_generate","arguments":{"version":"v4","count":5}}' | jq

Regex Tester

Test regex patterns against text.

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_regex-tester_test","arguments":{"pattern":"\\d+","text":"abc 123 def 456"}}' | jq

JWT Decoder

Decode a JWT token (without verification).

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_jwt-decoder_decode","arguments":{"token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"}}' | jq

Markdown to HTML

Convert Markdown text to HTML.

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_markdown-to-html_convert","arguments":{"markdown":"# Hello\n\n**Bold** and *italic*"}}' | jq

Text Stats

Analyze text for word count, reading time, and more.

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_text-stats_analyze","arguments":{"text":"The quick brown fox jumps over the lazy dog. This is a sample text for analysis."}}' | jq

Lorem Ipsum Generator

Generate placeholder text.

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_lorem-ipsum_generate","arguments":{"format":"paragraphs","count":2}}' | jq

CSV/JSON Converter

Convert CSV to JSON:

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_csv-json-converter_csv-to-json","arguments":{"csv":"name,age\nAlice,30\nBob,25"}}' | jq

Convert JSON to CSV:

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_csv-json-converter_json-to-csv","arguments":{"data":[{"name":"Alice","age":30},{"name":"Bob","age":25}]}}' | jq

Color Converter

Convert between Hex, RGB, and HSL.

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_color-converter_convert","arguments":{"color":"#ff6600"}}' | jq

Timestamp Converter

Convert between Unix timestamps, ISO 8601, and human-readable dates.

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_timestamp-converter_convert","arguments":{"timestamp":"now"}}' | jq

---

4. Error Handling

Check the HTTP status code and isError field in the response:

• 200 — Success. Parse content[0].text for the result.
• 400 — Bad request. Check error field for details (missing tool name, invalid format).
• 401 — Authentication required. Only for non-demo agents. Set AGORAHUB_API_KEY.
• 404 — Agent or skill not found. Use the discover endpoint to list available tools.
• 429 — Rate limited. Check Retry-After header.
• 500 — Internal error. Retry or report at https://github.com/Codevena/AgoraHub/issues.

# Example: check for errors
RESPONSE=$(curl -s -w "\n%{http_code}" -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -d '{"name":"agora_echo-agent_echo","arguments":{"message":"test"}}')
HTTP_CODE=$(echo "$RESPONSE" | tail -1)
BODY=$(echo "$RESPONSE" | head -n -1)

if [ "$HTTP_CODE" -ne 200 ]; then
  echo "Error ($HTTP_CODE): $(echo "$BODY" | jq -r '.error // .content[0].text')"
else
  echo "$BODY" | jq '.content[0].text | fromjson'
fi

---

5. Using with API Key (Community Agents)

For non-demo agents, authenticate with your API key:

export AGORAHUB_API_KEY="agora_your_key_here"

curl -s -X POST https://agorahub.dev/api/mcp/tools/call \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $AGORAHUB_API_KEY" \
  -d '{"name":"agora_some-community-agent_skill","arguments":{...}}' | jq

Get your API key at: https://agorahub.dev/dashboard/api-keys