{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_gv3xqw5qrf7t","handle":"depscout","url":"https://wellknown.network/agents/depscout","links":{"self":"https://wellknown.network/agents/depscout/record.json","html":"https://wellknown.network/agents/depscout","markdown":"https://wellknown.network/agents/depscout/record.md","api":"https://wellknown.network/api/v1/agents/depscout","status":"https://wellknown.network/api/v1/agents/depscout/status","claim":"https://wellknown.network/agents/depscout/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/depscout/claim.json","badge":"https://wellknown.network/agents/depscout/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/depscout/history","tools":"https://wellknown.network/api/v1/agents/depscout/tools"},"ard":{"identifier":"urn:air:depscout.salesup.workers.dev:server:depscout","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"DepScout","summary":"Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.","description":"Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.","publisher":{"name":"yc-droid","url":null},"homepage":"https://depscout.salesup.workers.dev/","repository":null,"version":"1.0.0","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://depscout.salesup.workers.dev/mcp","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-10-07T15:07:51.236169Z","publishedAt":"2026-10-07T15:07:51.236169Z","registryName":"io.github.yc-droid/depscout"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","homepageUrl":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"derived"},{"slug":"content.writing","name":"Writing & Editing","confidence":0.51,"provenance":"derived"}],"categories":["code","content","dev"],"language":"fr"},"observed":{"status":"live","statusReason":"Responded 2h ago.","lastOkAt":"2026-10-24T05:28:41.545Z","lastProbedAt":"2026-10-24T05:28:41.545Z","statusComputedAt":"2026-10-24T05:31:43.250Z","reliability30d":{"probes":57,"successRate":1,"p50Ms":94,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":57,"ok":57,"authBoundaryOk":0,"serviceOk":57,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-10-24T05:28:41.545Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":69,"error":null,"detail":{"tools":[{"name":"check_package","description":"Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware a"},{"name":"check_dependencies","description":"Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against"},{"name":"check_lockfile","description":"Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock"},{"name":"get_vulnerability","description":"Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vect"}],"toolCount":4,"toolsHash":"85248fb6967e010b9a47a3ebd5dc69355acf3f41a94d13723ae1172b4942a0d8","serverName":"depscout","capabilities":["tools","prompts"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-23T22:25:43.403Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":136,"error":null,"detail":{"tools":[{"name":"check_package","description":"Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware a"},{"name":"check_dependencies","description":"Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against"},{"name":"check_lockfile","description":"Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock"},{"name":"get_vulnerability","description":"Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vect"}],"toolCount":4,"toolsHash":"85248fb6967e010b9a47a3ebd5dc69355acf3f41a94d13723ae1172b4942a0d8","serverName":"depscout","capabilities":["tools","prompts"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-23T16:29:58.329Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":88,"error":null,"detail":{"tools":[{"name":"check_package","description":"Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware a"},{"name":"check_dependencies","description":"Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against"},{"name":"check_lockfile","description":"Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock"},{"name":"get_vulnerability","description":"Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vect"}],"toolCount":4,"toolsHash":"85248fb6967e010b9a47a3ebd5dc69355acf3f41a94d13723ae1172b4942a0d8","serverName":"depscout","capabilities":["tools","prompts"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-23T10:35:08.438Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":162,"error":null,"detail":{"tools":[{"name":"check_package","description":"Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware a"},{"name":"check_dependencies","description":"Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against"},{"name":"check_lockfile","description":"Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock"},{"name":"get_vulnerability","description":"Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vect"}],"toolCount":4,"toolsHash":"85248fb6967e010b9a47a3ebd5dc69355acf3f41a94d13723ae1172b4942a0d8","serverName":"depscout","capabilities":["tools","prompts"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-23T03:23:41.847Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":109,"error":null,"detail":{"tools":[{"name":"check_package","description":"Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware a"},{"name":"check_dependencies","description":"Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against"},{"name":"check_lockfile","description":"Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock"},{"name":"get_vulnerability","description":"Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vect"}],"toolCount":4,"toolsHash":"85248fb6967e010b9a47a3ebd5dc69355acf3f41a94d13723ae1172b4942a0d8","serverName":"depscout","capabilities":["tools","prompts"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-22T20:27:00.061Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":109,"error":null,"detail":{"tools":[{"name":"check_package","description":"Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware a"},{"name":"check_dependencies","description":"Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against"},{"name":"check_lockfile","description":"Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock"},{"name":"get_vulnerability","description":"Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vect"}],"toolCount":4,"toolsHash":"85248fb6967e010b9a47a3ebd5dc69355acf3f41a94d13723ae1172b4942a0d8","serverName":"depscout","capabilities":["tools","prompts"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-22T13:29:58.669Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":143,"error":null,"detail":{"tools":[{"name":"check_package","description":"Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware a"},{"name":"check_dependencies","description":"Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against"},{"name":"check_lockfile","description":"Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock"},{"name":"get_vulnerability","description":"Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vect"}],"toolCount":4,"toolsHash":"85248fb6967e010b9a47a3ebd5dc69355acf3f41a94d13723ae1172b4942a0d8","serverName":"depscout","capabilities":["tools","prompts"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-22T06:27:59.983Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":89,"error":null,"detail":{"tools":[{"name":"check_package","description":"Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware a"},{"name":"check_dependencies","description":"Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against"},{"name":"check_lockfile","description":"Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock"},{"name":"get_vulnerability","description":"Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vect"}],"toolCount":4,"toolsHash":"85248fb6967e010b9a47a3ebd5dc69355acf3f41a94d13723ae1172b4942a0d8","serverName":"depscout","capabilities":["tools","prompts"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-22T00:32:28.023Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":123,"error":null,"detail":{"tools":[{"name":"check_package","description":"Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware a"},{"name":"check_dependencies","description":"Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against"},{"name":"check_lockfile","description":"Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock"},{"name":"get_vulnerability","description":"Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vect"}],"toolCount":4,"toolsHash":"85248fb6967e010b9a47a3ebd5dc69355acf3f41a94d13723ae1172b4942a0d8","serverName":"depscout","capabilities":["tools","prompts"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-21T18:32:30.533Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":199,"error":null,"detail":{"tools":[{"name":"check_package","description":"Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware a"},{"name":"check_dependencies","description":"Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against"},{"name":"check_lockfile","description":"Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock"},{"name":"get_vulnerability","description":"Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vect"}],"toolCount":4,"toolsHash":"85248fb6967e010b9a47a3ebd5dc69355acf3f41a94d13723ae1172b4942a0d8","serverName":"depscout","capabilities":["tools","prompts"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}}],"tools":[{"name":"check_package","description":"Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware a"},{"name":"check_dependencies","description":"Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against"},{"name":"check_lockfile","description":"Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock"},{"name":"get_vulnerability","description":"Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vect"}],"package":null,"toolSurface":{"id":"ts_gkyn8kvtfv38","endpointId":"ep_9appsgn4r8dc","hash":"85248fb6967e010b9a47a3ebd5dc69355acf3f41a94d13723ae1172b4942a0d8","toolCount":4,"serverName":"depscout","serverVersion":"1.0.0","protocolVersion":"2025-06-18","firstSeenAt":"2026-10-08T16:29:34.500Z","lastSeenAt":"2026-10-24T05:28:41.549Z","observations":57,"toolNames":["check_package","check_dependencies","check_lockfile","get_vulnerability"],"distinctSurfaces":1},"endpointFacts":[{"id":"ep_9appsgn4r8dc","url":"https://depscout.salesup.workers.dev/mcp","type":"mcp_streamable_http","factsCheckedAt":"2026-10-16T02:29:09.979Z","auth":{"observedAt":"2026-10-16T02:29:10.025Z","authRequired":false,"scheme":null,"resourceMetadata":null,"authorizationServer":null,"conformance":{"dpop":false,"rfc8414":false,"rfc9728":false,"pkceS256":false,"clientIdMetadataDocument":false,"dynamicClientRegistration":false}},"tls":{"observedAt":"2026-10-16T02:29:10.039Z","protocol":"TLSv1.3","chainValid":true,"chainError":null,"hostMatches":true,"subject":"salesup.workers.dev","issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validFrom":"2026-10-09T14:49:43.000Z","validTo":"2027-01-07T15:47:29.000Z","daysToExpiry":75,"sanCount":2,"fingerprint256":"22:9E:33:E4:AE:C4:B1:12:7D:77:BB:A8:32:DC:A2:A6:C0:5E:EB:A1:06:44:4E:13:00:17:1E:9B:7F:83:45:9C"}}]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"io.github.yc-droid/depscout","url":"https://registry.modelcontextprotocol.io/v0/servers/io.github.yc-droid%2Fdepscout","firstSeenAt":"2026-10-08T16:20:55.976Z","fetchedAt":"2026-10-20T18:23:16.458Z","normalizedAt":"2026-10-20T18:23:16.458Z"}]},"firstSeenAt":"2026-10-08T16:20:55.976Z","updatedAt":"2026-10-24T05:33:26.834Z"}