{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_ygns6jjwtybr","handle":"blastradius-mcp","url":"https://wellknown.network/agents/blastradius-mcp","links":{"self":"https://wellknown.network/agents/blastradius-mcp/record.json","html":"https://wellknown.network/agents/blastradius-mcp","markdown":"https://wellknown.network/agents/blastradius-mcp/record.md","api":"https://wellknown.network/api/v1/agents/blastradius-mcp","status":"https://wellknown.network/api/v1/agents/blastradius-mcp/status","claim":"https://wellknown.network/agents/blastradius-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/blastradius-mcp/claim.json","badge":"https://wellknown.network/agents/blastradius-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:blastradius-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"blastradius-mcp","summary":"Cross-repo infrastructure memory for coding agents","description":"<p align=\"center\">\n  <picture>\n    <source media=\"(prefers-color-scheme: dark)\" srcset=\"https://raw.githubusercontent.com/harris-ahmad/blastradius-mcp/main/assets/banner-dark.svg\">\n    <img src=\"https://raw.githubusercontent.com/harris-ahmad/blastradius-mcp/main/assets/banner.svg\" width=\"620\"\n         alt=\"BlastRadius — cross-repo infrastructure memory for coding agents\">\n  </picture>\n</p>\n\n# BlastRadius\n\n[![PyPI](https://img.shields.io/pypi/v/blastradius-mcp?color=0b7285&label=pypi)](https://pypi.org/project/blastradius-mcp/)\n[![Python](https://img.shields.io/pypi/pyversions/blastradius-mcp?color=0b7285)](https://pypi.org/project/blastradius-mcp/)\n[![ci](https://github.com/harris-ahmad/blastradius-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/harris-ahmad/blastradius-mcp/actions/workflows/ci.yml)\n[![License](https://img.shields.io/badge/license-MIT-0b7285)](https://github.com/harris-ahmad/blastradius-mcp/blob/main/LICENSE)\n\nIt remembers what every repository you open depends on, tells your agent who else\nis affected *before* it changes one, and watches those dependencies for\nvulnerabilities while nobody is asking.\n\nNot a code graph. Excellent tools already index functions, classes and imports. BlastRadius indexes the other half — Docker images, Terraform modules, GitHub Actions, Helm charts, npm and Python packages — across repository boundaries, and answers the question a single session cannot: *if I bump this, who breaks?*\n\n---\n\n## What it actually produces\n\n**43 advisories from OSV. 9 that apply to your pinned versions.**\n\n```\n[CRITICAL] vitest                 CVE-2026-47429\n           When Vitest UI server is listening, arbitrary file can be read and executed\n           reaches: 3.2.4  (installed version)\n           in:      acme/checkout\n[HIGH    ] lodash                 CVE-2021-23337\n           lodash vulnerable to Code Injection via `_.template` imports key names\n           reaches: 4.17.21, ^4.17.21\n           in:      acme/checkout, acme/no…","publisher":{"name":"Harris Ahmad","url":null},"homepage":"https://github.com/harris-ahmad/blastradius-mcp","repository":"https://github.com/harris-ahmad/blastradius-mcp","version":"0.3.1","license":null,"protocols":["mcp"],"tags":["claude-code","cve","dependencies","docker","github-actions","helm","mcp","npm","osv","supply-chain","terraform"],"pricing":null,"endpoints":[{"url":"pypi:blastradius-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"declared"},{"slug":"dev.version-control","name":"Version Control","confidence":1,"provenance":"derived"},{"slug":"dev.ci-cd","name":"CI/CD & Deploy","confidence":1,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"declared"},{"slug":"infra.cloud","name":"Cloud Platforms","confidence":1,"provenance":"declared"}],"categories":["code","dev","infra"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"blastradius-mcp","registry":"pypi","observedAt":"2026-09-09T10:31:17.422Z","publishedAt":"2026-09-06T02:42:47.974951Z","latestVersion":"0.3.1"}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"blastradius-mcp","url":"https://pypi.org/project/blastradius-mcp/","firstSeenAt":"2026-09-09T10:27:22.164Z","fetchedAt":"2026-09-09T10:27:22.164Z","normalizedAt":"2026-09-09T10:27:22.164Z"}]},"firstSeenAt":"2026-09-09T10:27:22.164Z","updatedAt":"2026-09-09T10:31:17.422Z"}