Get a corrected card,
not just a finding.

Then sign it with your own key.

Signing happens on your machine with the downloadable CLI. The private key never leaves your device, and the card is written only if it verifies.

agent-card-scanner fix card.json --url https://your-agent.example/.well-known/agent-card.json --out fixed.json
agent-card-scanner sign fixed.json --url https://your-agent.example/.well-known/agent-card.json --key ./agent-card-key.jwk --generate --out agent-card.json --jwks-out jwks.json

Publish agent-card.json and jwks.json under /.well-known/ on the same origin, then inspect the public URL. We never publish or sign cards on anyone's behalf.