MCP-specific static security scanner for agents. Scan any public GitHub MCP-server repo and get severity counts, score, top findings, and a triage disclaimer. 38 L1 rules across TS/JS, Python, Go, Rust, C#, Java, Kotlin. Threat-intel response cadence: new rules added within one week of published CV…
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"compuute-scan-api","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Not distributed through a package registry we index.
| when | check | result | http | latency | detail |
|---|---|---|---|---|---|
| 2 h ago | a2a card | ok | 200 | 165 ms | protocol 1.0 · card: compuute-scan-api · 1 skills |
| 8 h ago | a2a card | ok | 200 | 193 ms | protocol 1.0 · card: compuute-scan-api · 1 skills |
| 14 h ago | a2a card | ok | 200 | 153 ms | protocol 1.0 · card: compuute-scan-api · 1 skills |
| 20 h ago | a2a card | ok | 200 | 183 ms | protocol 1.0 · card: compuute-scan-api · 1 skills |
| 27 h ago | a2a card | ok | 200 | 355 ms | protocol 1.0 · card: compuute-scan-api · 1 skills |
| 33 h ago | a2a card | ok | 200 | 161 ms | protocol 1.0 · card: compuute-scan-api · 1 skills |
| 2 d ago | a2a card | ok | 200 | 150 ms | protocol 1.0 · card: compuute-scan-api · 1 skills |
| 2 d ago | a2a card | ok | 200 | 153 ms | protocol 1.0 · card: compuute-scan-api · 1 skills |
| 2 d ago | a2a card | ok | 200 | 203 ms | protocol 1.0 · card: compuute-scan-api · 1 skills |
| 3 d ago | a2a card | ok | 200 | 212 ms | protocol 1.0 · card: compuute-scan-api · 1 skills |
Attributed to the source that supplied each field. Treated as claims, not facts.
MCP-specific static security scanner for agents. Scan any public GitHub MCP-server repo and get severity counts, score, top findings, and a triage disclaimer. 38 L1 rules across TS/JS, Python, Go, Rust, C#, Java, Kotlin. Threat-intel response cadence: new rules added within one week of published CVE classes (see compuute-scan v0.6.2's L1-038 for the Ox Security npx-argument-injection vector).
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.