{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_922kduj86t52","handle":"cleanlib-mcp-server","url":"https://wellknown.network/agents/cleanlib-mcp-server","links":{"self":"https://wellknown.network/agents/cleanlib-mcp-server/record.json","html":"https://wellknown.network/agents/cleanlib-mcp-server","markdown":"https://wellknown.network/agents/cleanlib-mcp-server/record.md","api":"https://wellknown.network/api/v1/agents/cleanlib-mcp-server","status":"https://wellknown.network/api/v1/agents/cleanlib-mcp-server/status","claim":"https://wellknown.network/agents/cleanlib-mcp-server/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/cleanlib-mcp-server/claim.json","badge":"https://wellknown.network/agents/cleanlib-mcp-server/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/cleanlib-mcp-server/history","tools":"https://wellknown.network/api/v1/agents/cleanlib-mcp-server/tools"},"ard":{"identifier":"urn:air::server:cleanlib-mcp-server","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"cleanlib-mcp-server","summary":"CleanLibrary MCP server — exposes verdict-aware supply-chain risk assessment as Model Context Protocol tools for AI agent workflows","description":"# cleanlib-mcp-server\n\nCleanLibrary MCP (Model Context Protocol) server — gives AI agents (Claude Code, Claude Desktop, Cursor, etc.) read access to CleanLibrary's library-verdict + vulnerability-intelligence APIs. Your agent can call `cleanlib_fetch_verdict` to ask *\"should we use `lodash@4.17.20`?\"* and get a structured response with verdict tier (`ALLOW` / `WARN` / `DENY`), CVE references, fix recommendations, and KMS-signed attestation.\n\n## Install\n\n```bash\npip install cleanlib-mcp-server\n```\n\nLatest: **0.5.x** on PyPI. 14 tools covering verdict / advisories / exploitability / EPSS / KEV / remediation / Vector / bulk operations.\n\n## Configure\n\n### Claude Desktop\n\nEdit `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS) or `%APPDATA%\\Claude\\claude_desktop_config.json` (Windows):\n\n```json\n{\n  \"mcpServers\": {\n    \"cleanlib\": {\n      \"command\": \"cleanlib-mcp-server\",\n      \"env\": {\n        \"CLEANLIB_ENDPOINT\": \"https://cleanapp.clnstrt.dev\",\n        \"CLEANLIB_API_KEY\": \"clk_YOUR_BEARER_HERE\",\n        \"CLEANLIB_ENRICH_BEARER\": \"clk_YOUR_BEARER_HERE\"\n      }\n    }\n  }\n}\n```\n\nRestart Claude Desktop. The 14 tools should appear in the tool picker.\n\n### Claude Code\n\nIn your `.claude/settings.json` or via the `claude mcp add` command:\n\n```bash\nclaude mcp add cleanlib \\\n  --command cleanlib-mcp-server \\\n  --env CLEANLIB_ENDPOINT=https://cleanapp.clnstrt.dev \\\n  --env CLEANLIB_API_KEY=clk_YOUR_BEARER_HERE \\\n  --env CLEANLIB_ENRICH_BEARER=clk_YOUR_BEARER_HERE\n```\n\n### Cursor / other MCP clients\n\nThe server speaks standard MCP over stdio. The same `command` + `env` pattern applies — consult your client's MCP server configuration docs for the exact file location.\n\n## Bearer provisioning\n\nCleanLibrary uses two bearer scopes:\n\n| Bearer | Scope | What it accesses |\n|---|---|---|\n| `CLEANLIB_API_KEY` | App-side (`cleanapp.clnstrt.dev`) | `cleanlib_fetch_verdict` + `cleanlib_health_check` |\n| `CLEANLIB_ENRICH_BEARER` | Tricorder substrate (`cleanlib-enrich.cln…","publisher":null,"homepage":"https://cleanlibrary.clnstrt.dev","repository":null,"version":"0.5.17","license":"CleanStart Inc Proprietary","protocols":["mcp"],"tags":["cleanlibrary","mcp","model-context-protocol","cleanstart","supply-chain-security","verdict","policy-evaluation"],"pricing":null,"endpoints":[{"url":"pypi:cleanlib-mcp-server","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":0.814,"provenance":"derived"},{"slug":"dev.docs-lookup","name":"Documentation Lookup","confidence":0.791,"provenance":"derived"},{"slug":"ai.evaluation","name":"Evaluation & Benchmarks","confidence":0.713,"provenance":"derived"}],"categories":["ai","code","dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"cleanlib-mcp-server","registry":"pypi","observedAt":"2026-10-27T21:24:55.179Z","publishedAt":"2026-09-25T13:44:34.765167Z","latestVersion":"0.5.17"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"cleanlib-mcp-server","url":"https://pypi.org/project/cleanlib-mcp-server/","firstSeenAt":"2026-09-09T11:30:57.084Z","fetchedAt":"2026-10-27T21:24:24.477Z","normalizedAt":"2026-10-27T21:24:24.477Z"}]},"firstSeenAt":"2026-09-09T11:30:57.084Z","updatedAt":"2026-10-27T21:24:55.179Z"}