{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_ba7vqdgdm28f","handle":"decoy-scan","url":"https://wellknown.network/agents/decoy-scan","links":{"self":"https://wellknown.network/agents/decoy-scan/record.json","html":"https://wellknown.network/agents/decoy-scan","markdown":"https://wellknown.network/agents/decoy-scan/record.md","api":"https://wellknown.network/api/v1/agents/decoy-scan","status":"https://wellknown.network/api/v1/agents/decoy-scan/status","claim":"https://wellknown.network/agents/decoy-scan/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/decoy-scan/claim.json","badge":"https://wellknown.network/agents/decoy-scan/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:decoy-scan","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"decoy-scan","summary":"Security scanner for MCP server configurations. Finds risky tools, vulnerable packages, and suspicious servers across Claude Desktop, Cursor, VS Code, and more.","description":"Security scanner for MCP server configurations. Finds risky tools, vulnerable packages, and suspicious servers across Claude Desktop, Cursor, VS Code, and more.","publisher":{"name":"ad30jone","url":null},"homepage":"https://decoy.run","repository":null,"version":"0.11.0","license":"MIT","protocols":["mcp"],"tags":["mcp","security","scanner","supply-chain","ai-agent","vulnerability","prompt-injection","tool-risk"],"pricing":null,"endpoints":[{"url":"npm:decoy-scan","type":"package_npm","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":{"npmKeywords":["mcp","security","scanner","supply-chain","ai-agent","vulnerability","prompt-injection","tool-risk"]},"attribution":{"kind":"npm","name":"npm","license":"npm","repoUrl":"npm","summary":"npm","version":"npm","description":"npm","homepageUrl":"npm","publisherName":"npm"}},"derived":{"capabilities":[{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"declared"},{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"declared"},{"slug":"documents.ocr","name":"OCR","confidence":0.667,"provenance":"derived"},{"slug":"ai.prompting","name":"Prompt Management","confidence":0.638,"provenance":"derived"}],"categories":["ai","code","documents","security"]},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"decoy-scan","registry":"npm","observedAt":"2026-09-06T13:20:27.334Z","publishedAt":"2026-08-31T20:36:03.291Z","latestVersion":"0.11.0","weeklyDownloads":3}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"npm","key":"decoy-scan","url":"https://www.npmjs.com/package/decoy-scan","firstSeenAt":"2026-09-06T13:20:00.480Z","fetchedAt":"2026-09-06T13:20:00.480Z","normalizedAt":"2026-09-06T13:20:00.480Z"}]},"firstSeenAt":"2026-09-06T13:20:00.480Z","updatedAt":"2026-09-06T13:20:27.334Z"}