{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_2ncadaxmvuhn","handle":"dep-guard-mcp","url":"https://wellknown.network/agents/dep-guard-mcp","links":{"self":"https://wellknown.network/agents/dep-guard-mcp/record.json","html":"https://wellknown.network/agents/dep-guard-mcp","markdown":"https://wellknown.network/agents/dep-guard-mcp/record.md","api":"https://wellknown.network/api/v1/agents/dep-guard-mcp","status":"https://wellknown.network/api/v1/agents/dep-guard-mcp/status","claim":"https://wellknown.network/agents/dep-guard-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/dep-guard-mcp/claim.json","badge":"https://wellknown.network/agents/dep-guard-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/dep-guard-mcp/history","tools":"https://wellknown.network/api/v1/agents/dep-guard-mcp/tools"},"ard":{"identifier":"urn:air::server:dep-guard-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"dep-guard-mcp","summary":"MCP server that scans dependency manifests and reports known vulnerabilities","description":"# Dep Guard MCP - Dependency Vulnerability Scanner\n\n🔐 A fast, zero-config Model Context Protocol (MCP) server that scans Python, Node.js, Java/Spring, and PHP dependency manifests for known vulnerabilities.\n\n## Status: ⚡ Week 2 Complete\n\n- ✅ All tests passing\n- ✅ MCP server fully functional\n- ✅ Ready for Claude Desktop integration\n- ✅ Production-ready code\n- ✅ Free GitHub Advisory integration\n- ✅ CLI support for local and CI usage\n\n![CI](https://github.com/mdjahidanwar/dep-guard-mcp/actions/workflows/ci.yml/badge.svg)\n![Security Scan](https://github.com/mdjahidanwar/dep-guard-mcp/actions/workflows/security-scan.yml/badge.svg)\n![Release](https://github.com/mdjahidanwar/dep-guard-mcp/actions/workflows/release.yml/badge.svg)\n\n## Features\n\n- 📦 **Multi-Language Support**:\n  - Python (`requirements.txt`, `pyproject.toml`)\n  - Node.js (`package.json`)\n  - Java/Spring (`pom.xml`, `build.gradle`, `build.gradle.kts`)\n  - PHP (`composer.json`)\n- 🎯 **Zero Config**: Automatic dependency discovery and scanning\n- ⚡ **Multi-source Advisories**:\n  - OSV API (free)\n  - GitHub Advisory API (free public endpoint, optional `GITHUB_TOKEN` for higher rate limits)\n- 🔧 **3 Core Tools**:\n  - `scan_dependencies(target_path)` - Scan a project for vulnerabilities\n  - `health_check()` - Verify server status\n  - `get_supported_files()` - List scannable formats\n- 🎨 **Clean Output**: JSON-formatted vulnerability reports with severity levels\n\n## CLI Usage (Week 2)\n\n```bash\n# health check\ndep-guard-scan health\n\n# list supported files\ndep-guard-scan supported-files\n\n# scan and print JSON\ndep-guard-scan scan /path/to/project\n\n# scan and write report file\ndep-guard-scan scan /path/to/project --output report.json\n\n# fail CI if severity threshold is met\ndep-guard-scan scan /path/to/project --fail-on-severity high\n\n# disable GitHub advisories source\ndep-guard-scan scan /path/to/project --no-github-advisories\n```\n\n## Week 3 Launch Prep\n\n### GitHub Workflows\n\nThis repo now includes:\n\n- CI workflow: `.g…","publisher":{"name":"Dep Guard Team","url":null},"homepage":null,"repository":null,"version":"0.1.0","license":null,"protocols":["mcp"],"tags":["mcp"],"pricing":null,"endpoints":[{"url":"pypi:dep-guard-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","summary":"pypi","version":"pypi","description":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.859,"provenance":"derived"}],"categories":["code","dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"dep-guard-mcp","registry":"pypi","observedAt":"2026-11-09T03:24:36.452Z","publishedAt":"2026-03-29T19:43:04.713897Z","latestVersion":"0.1.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"dep-guard-mcp","url":"https://pypi.org/project/dep-guard-mcp/","firstSeenAt":"2026-09-09T14:31:20.975Z","fetchedAt":"2026-11-09T03:23:21.941Z","normalizedAt":"2026-11-09T03:23:21.941Z"}]},"firstSeenAt":"2026-09-09T14:31:20.975Z","updatedAt":"2026-11-09T03:24:36.452Z"}