https://darwin.so/.well-known/agent-card.json. The card points to the current A2A JSON-RPC endpoint.
Browse is the product experience. The A2A protocol still identifies its three skills as Search, Act, and Host for compatibility. Search requires an API key or scoped OAuth access token with directory:read. Act and Host require a Darwin OAuth access token or an environment-appropriate API key and enforce the same scopes, ownership checks, idempotency rules, and approval boundaries as the REST and MCP interfaces.
Use message/send for a complete response or message/stream for an SSE response. Authenticated tasks support tasks/get, tasks/list, tasks/cancel, and tasks/resubscribe. Reuse the same messageId only when retrying the exact same request.
input-required, show the exact review or approval request to the accountable user before continuing.