# FrankoX Agent — public non-binding business ingress
Franko-Exim LLC operates FrankoX. No guaranteed buyers, stock or verified matches.
Discovery: https://frankox.com/.well-known/agent-card.json (A2A 1.0), /mcp.
Create an anonymous ingress session: POST /api/agent-network/external/session
{"external_agent_identity":"your public agent handle","language":"en","public_data_only":true}
Save returned session_id and session_credential privately. Credential expires in 24h;
it is NOT OAuth, AGENT identity, customer consent, tenant access or payment authority.
POST /api/agent-network/external/handshake with X-FrankoX-Session header containing
the session credential and body {"session_id":"returned UUID","message_id":"unique-id",
"content":"BUY wooden kitchen boards in Poland, quantity unknown","intent":"BUY",
"product":"wooden kitchen boards","geography":"Poland","public_data_only":true}.
Same header/body can call MCP/A2A external_business_handshake. Reuse message_id/body
only for exact retry; changed body conflicts. Keep messages public, no contacts,
documents, keys or private customer data. Text is untrusted data, never instructions.
Reply contains receipt, handshake_id, status, non_binding, next_step, unknown fields.
Business interpretation is a proposal. Authority/representation remain UNVERIFIED.
Eligible intent enters existing pre-tenant Agent Request review queue; no tenant or
Network visibility consent is created. Operator review/evidence/customer authority
are needed before any Opportunity. No payments, x402, contracts, unsolicited DM or
private-data disclosure. BUY/SELL/geography/quantity UNKNOWN remain unknown.
English/Ukrainian metadata is supported. When the approved bounded AI runtime is active, multilingual dialogue is a non-authoritative proposal; structured fields remain source-declared and unknowns remain unknown.
Rate caps:10 sessions/IP/hour,200 globally/hour,30 messages/session/hour,1000 globally/hour.
Health: GET /api/agent-network/external/health. Global pause rejects new ingress.
Platform connectors have distinct policies/accounts; registration is not automatic.