CGBB for AI agents and developers
Technical reference for the CGBB registry: apply for free membership for a brand you represent, confirm its domain, and verify any brand’s Website Trust Credential. Open, no API key, JSON in and out.
Not a developer? The Website Trust Credential, explained for people →
For AI agents
Start with /llms.txt. Everything is open: no API key, JSON in and out.
| What | Where |
|---|---|
| Instructions for agents | https://cgbb.org/llms.txt |
| MCP connector (streamable HTTP) | https://api.cgbb.org/mcp |
| OpenAPI description | https://api.cgbb.org/openapi.json |
| Apply | POST https://api.cgbb.org/api/agent/apply |
| Check the domain | POST https://api.cgbb.org/api/agent/check-domain |
| Application status | GET https://api.cgbb.org/api/agent/applications/{id} |
| Verify a brand | GET https://api.cgbb.org/verify/{domain}?format=json |
| Signed trust.json | GET https://api.cgbb.org/trust/{domain}.json |
| Public signing keys | https://api.cgbb.org/.well-known/cgbb-keys.json |
- Apply only for a brand you are acting for, with that brand’s own website domain.
- Give the email of a real person at the brand. They must confirm; you cannot confirm for them.
- Do not describe the CGBB Member level as a certification, rating or endorsement. It confirms membership and domain control only.
- Before relying on any CGBB claim, check the live record at /verify/{domain}.
| Level | How it is earned | What you can tell your user |
|---|---|---|
member · free | Membership confirmed by the CGBB Secretariat; website domain control and a real contact verified. Includes the CGBB Member badge and a private Baseline self-test. | “This is a real organisation that controls this website.” No public score. |
verified_trusted · Advanced | CGBB checked the evidence in a full Trust Review: 80%+ on the Brand Trust Baseline, enough evidence, no unresolved major risk. Reviewed every year. | “Independently reviewed and trusted”, with the score and five sections from the baseline object. |
inactive / not_found | Membership expired, suspended or revoked, or no record. | Do not rely on any CGBB badge or file shown. |
Connect CGBB to your assistant
Assistants that support custom connectors (MCP), such as Claude and ChatGPT, can work with CGBB directly. Add a custom connector with this address. No account or sign-in is needed.
https://api.cgbb.org/mcpTools in the connector: about CGBB, apply for membership, check the domain, application status, verify a brand, get the credential file.
What’s in the free file
A short record, signed with CGBB’s Ed25519 key. An example:
Show the example file
{
"standard": "CGBB Trust Standard 1.0",
"level": "member",
"level_name": "CGBB Member",
"issuer": {
"name": "Council for Global Brand Building",
"short": "CGBB",
"url": "https://cgbb.org"
},
"organisation": "Example Co. Ltd.",
"domain": "example.com",
"membership": {
"number": "CGBB-OM-2026-021",
"category": "Organizational",
"status": "active",
"since": "2026-11-05"
},
"checks": {
"domain_control": {
"verified": true,
"method": "dns",
"date": "2026-11-04"
},
"membership_reviewed_by_secretariat": true,
"trust_review": {
"completed": false
}
},
"trust_score": null,
"issued": "2026-11-05",
"valid_until": "2027-11-05",
"verify": "https://api.cgbb.org/verify/example.com",
"verify_page": "https://cgbb.org/verify/?d=example.com",
"disclaimer": "CGBB confirms that this organisation is a CGBB member reviewed by the Secretariat, that it controls this website, and that its contact has been verified. It is a membership record, not a rating, endorsement or guarantee of its products, services, professional capabilities or business conduct.",
"signature": {
"alg": "Ed25519",
"kid": "cgbb-2026-1",
"value": "…"
}
}How anyone checks a file
People: cgbb.org/verify. Agents: GET https://api.cgbb.org/verify/{domain}?format=json returns the live record (status, level, who approved the member, whether a genuine file is published on the website, and when it was checked). Website marks are drawn live at https://api.cgbb.org/badge/{domain}.svg and show the domain and current status. Post any trust.json to https://api.cgbb.org/api/verify to check its signature. A copied or edited file fails these checks. Schema: cgbb.org/schemas/trust-1.0.json.