Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"fx-audit-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# fx-audit-mcp MCP tools for Firefox security auditing. Provides async Python tools and a FastMCP server for running testcases in Firefox and SpiderMonkey, building Firefox and NSS with ASAN, and querying Bugzilla — all with structured Pydantic return types suitable for use with LLM agent frameworks. ## Tools | Tool | Description | |------|-------------| | `browser_evaluator` | Run a multi-file testcase in ASAN Firefox via grizzly replay, detect crashes | | `package_testcase` | Bundle a testcase directory with prefs and env into a grizzly TestCase | | `js_shell_evaluator` | Run a JS testcase in the SpiderMonkey shell, detect crashes and sanitizer output | | `nss_gtest_evaluator` | Run an NSS GTest and report any ASan crash | | `build_firefox` | Build Firefox via `mach build` with a specified MOZCONFIG | | `build_nss` | Build NSS with ASAN via `security/nss/build.sh` | | `search_bugs` | Search Bugzilla using raw REST query parameters | | `get_bugs` | Fetch bugs by ID in bulk | | `get_bug_comments` | Fetch all comments for a single bug | | `get_bug_attachments` | Fetch attachments for a bug | ## Installation ```bash pip install fx-audit-mcp ``` Requires Python 3.12+. ## Usage ### As Python functions The execution tools (browser, JS shell, NSS gtest, Firefox/NSS build) are async functions with structured Pydantic return types. The Bugzilla tools are only available via the MCP server (see below). ```python import asyncio from pathlib import Path from fx_audit_mcp import browser_evaluator, js_shell_evaluator async def main(): result = await browser_evaluator( # Maps the name each file takes in the testcase to its path on disk, # so testcases may span several files and include binary assets. # Use forward slashes for subdirectories ("sub/frame.html"). file_paths={ "test.html": Path("/repro/test.html"), "boom.js": Path("/repro/boom.js"), "font.woff2": Path("/repro/font.woff2"), }, …
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.