Signed, offline-verifiable safety scores for the MCP servers, packages & tools an agent connects to
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
What AgentAvow is, which tool to use for what, how to read a verdict, and example scans. Call this for an overview or when getting started. No input, read-only.
This tool takes no arguments.
What AgentAvow is, which tool to use for what, how to read a verdict, and example scans. Call this for an overview or when getting started. No input, read-only.
No arguments.
{
"type": "object",
"properties": {}
}Check whether it is safe to interact with another agent by trust threshold. Thresholds: delegate 0.6, trade 0.5, collaborate 0.4, follow 0.1. Returns is_safe, risk_level, the score, and a recommendation. Read-only, no auth.
| Argument | Type | Description |
|---|---|---|
| interaction_type* | string | |
| target_entity_id* | string | UUID of a registered target entity (resolve one with lookup_identity). |
{
"type": "object",
"required": [
"target_entity_id",
"interaction_type"
],
"properties": {
"interaction_type": {
"enum": [
"delegate",
"trade",
"collaborate",
"follow"
],
"type": "string"
},
"target_entity_id": {
"type": "string",
"maxLength": 64,
"description": "UUID of a registered target entity (resolve one with lookup_identity)."
}
}
}Get an embeddable AgentAvow trust badge (SVG) for an entity, with ready-to-paste Markdown and HTML. The badge auto-updates as the score changes. Read-only, no auth.
| Argument | Type | Description |
|---|---|---|
| entity_id* | string | UUID of a registered AgentAvow entity (resolve one with lookup_identity). |
{
"type": "object",
"required": [
"entity_id"
],
"properties": {
"entity_id": {
"type": "string",
"maxLength": 64,
"description": "UUID of a registered AgentAvow entity (resolve one with lookup_identity)."
}
}
}Look up an AgentAvow entity by W3C DID or display name. Returns the entity's id, name, type, trust score and tier. Read-only, no auth. Use to resolve an identity before checking its trust.
| Argument | Type | Description |
|---|---|---|
| query* | string | A did:web:... or a display name. |
{
"type": "object",
"required": [
"query"
],
"properties": {
"query": {
"type": "string",
"pattern": "^[\\w .:/@#+-]{1,200}$",
"maxLength": 200,
"description": "A did:web:... or a display name."
}
}
}Scan a live MCP server's tool definitions for tool-poisoning, prompt-injection, invisible-unicode, and manifest-execution risks before your agent connects to it. Returns one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, findings, and a signed attestation. Read-only; calls the agentavow.com public API.
| Argument | Type | Description |
|---|---|---|
| force | boolean | Re-scan now instead of returning the cached verdict (results cache ~1h). |
| endpoint_url* | string | The MCP server's https:// URL. |
{
"type": "object",
"required": [
"endpoint_url"
],
"properties": {
"force": {
"type": "boolean",
"description": "Re-scan now instead of returning the cached verdict (results cache ~1h)."
},
"endpoint_url": {
"type": "string",
"maxLength": 512,
"description": "The MCP server's https:// URL."
}
}
}Scan a published package (npm, PyPI, crates, Docker, or Hugging Face) with AgentAvow. Returns one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, an adoption score from real usage (downloads per week), findings with remediation, and a signed attestation. Also reports published advisories that affect the scanned version, the maintainer's deprecation notice, repo-vs-artifact drift (files shipped that aren't in the source), and AgentAvow's behavioral sandbox results when available. Scans the latest version unless `version` (or a pin in the name) names one. Read-only; calls agentavow.com.
| Argument | Type | Description |
|---|---|---|
| name* | string | Package name, e.g. 'chalk' (or 'org/model' for hf). |
| force | boolean | Re-scan now instead of returning the cached verdict (results cache ~1h). Use after a new version ships. |
| surface | string | Alias for registry. |
| version | string | Exact version to scan, e.g. '5.3.0'. Optional: the latest version by default. A pin in the name ('[email protected]', 'requests==2.32.5') works too. |
| registry | string | Package registry: npm, pypi, crates, docker, or hf. |
| ecosystem | string | Alias for registry. |
Scan a public GitHub repository with AgentAvow and return whether it is safe for an agent to connect to: one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, an adoption score from real usage (stars), the findings behind it (with where and how to fix), and a signed, offline-verifiable attestation. Read-only, no account. Calls the AgentAvow public API at agentavow.com.
| Argument | Type | Description |
|---|---|---|
| repo* | string | Repo as 'owner/name' (e.g. 'vercel/next.js'), or just the name when 'owner' is given separately. |
| force | boolean | Re-scan now instead of returning the cached verdict (results cache ~1h). Use after the target has changed. |
| owner | string | Repo owner (optional if 'repo' is already 'owner/name'). |
{
"type": "object",
"required": [
"repo"
],
"properties": {
"repo": {
"type": "string",
"maxLength": 214,
"description": "Repo as 'owner/name' (e.g. 'vercel/next.js'), or just the name when 'owner' is given separately."
},
"force": {
"type": "boolean",
"description": "Re-scan now instead of returning the cached verdict (results cache ~1h). Use after the target has changed."
},
"owner": {
"type": "string",
"maxLength": 214,
"description": "Repo owner (optional if 'repo' is already 'owner/name')."
}
}
}Verify an AgentAvow entity's trust score. Returns trust_score (0-1), trust_score_pct (0-100), trust_tier, and whether it meets a minimum threshold. Read-only, no auth. Use before interacting with an unknown agent.
| Argument | Type | Description |
|---|---|---|
| entity_id* | string | UUID of a registered AgentAvow entity (resolve one with lookup_identity; unknown ids return guidance, not an error). |
| min_trust | number | Min score, 0-1. |
{
"type": "object",
"required": [
"entity_id"
],
"properties": {
"entity_id": {
"type": "string",
"maxLength": 64,
"description": "UUID of a registered AgentAvow entity (resolve one with lookup_identity; unknown ids return guidance, not an error)."
},
"min_trust": {
"type": "number",
"default": 0.3,
"description": "Min score, 0-1."
}
}
}{
"type": "object",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"maxLength": 214,
"description": "Package name, e.g. 'chalk' (or 'org/model' for hf)."
},
"force": {
"type": "boolean",
"description": "Re-scan now instead of returning the cached verdict (results cache ~1h). Use after a new version ships."
},
"surface": {
"type": "string",
"description": "Alias for registry."
},
"version": {
"type": "string",
"maxLength": 64,
"description": "Exact version to scan, e.g. '5.3.0'. Optional: the latest version by default. A pin in the name ('[email protected]', 'requests==2.32.5') works too."
},
"registry": {
"type": "string",
"description": "Package registry: npm, pypi, crates, docker, or hf."
},
"ecosystem": {
"type": "string",
"description": "Alias for registry."
}
}
}