{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_m6ztgbb6es3b","handle":"mcp-vulnerabilities","url":"https://wellknown.network/agents/mcp-vulnerabilities","links":{"self":"https://wellknown.network/agents/mcp-vulnerabilities/record.json","html":"https://wellknown.network/agents/mcp-vulnerabilities","markdown":"https://wellknown.network/agents/mcp-vulnerabilities/record.md","api":"https://wellknown.network/api/v1/agents/mcp-vulnerabilities","status":"https://wellknown.network/api/v1/agents/mcp-vulnerabilities/status","claim":"https://wellknown.network/agents/mcp-vulnerabilities/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-vulnerabilities/claim.json","badge":"https://wellknown.network/agents/mcp-vulnerabilities/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-vulnerabilities/history","tools":"https://wellknown.network/api/v1/agents/mcp-vulnerabilities/tools"},"ard":{"identifier":"urn:air::server:mcp-vulnerabilities","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-vulnerabilities","summary":"Open-Source OSV-Compliant Model Context Protocol (MCP) Vulnerability Advisory Database","description":"# Open-Source MCP Vulnerability Advisory Database\n\n[![Daily MCP Vulnerability Ingestion & Sync](https://github.com/JMartynov/mcp-vulnerabilities/actions/workflows/daily_sync.yml/badge.svg)](https://github.com/JMartynov/mcp-vulnerabilities/actions/workflows/daily_sync.yml)\n[![Advisories Count](https://img.shields.io/badge/advisories-500%2B-red.svg)](data/vulnerabilities)\n[![OSV Schema 1.6.0](https://img.shields.io/badge/schema-OSV%201.6.0-blue.svg)](https://ossf.github.io/osv-schema/)\n[![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)\n[![Security Explorer](https://img.shields.io/badge/Security_Explorer-Live_Portal-38bdf8?style=flat-square&logo=googlechrome)](https://jmartynov.github.io/mcp-vulnerabilities/)\n[![Release Updates](https://img.shields.io/badge/Release_Updates-Live_Feed-10b981?style=flat-square&logo=rss)](https://jmartynov.github.io/mcp-vulnerabilities/updates.html)\n\nAn open-source, automated **Open Source Vulnerability (OSV 1.6)** compliant security advisory database specifically curated for the **Model Context Protocol (MCP)** ecosystem.\n\n## Sources\n- **CVE List v5**: Official CVE JSON 5.0 records.\n- **GitHub Security Advisories (GHSA)**: Live GraphQL/REST security alerts.\n- **OSV.dev**: Unified open-source vulnerability database.\n- **National Vulnerability Database (NVD)**: CVE 2.0 vulnerability metrics and CVSS scores.\n\n## Snapshot Downloads & Mirrors\n\nYou can download pre-compiled vulnerability database snapshots, OSV buckets, and air-gapped enterprise bundles directly from our latest GitHub Release.\n\nDownload the latest consolidated JSON snapshot:\n```bash\ncurl -sL https://github.com/JMartynov/mcp-vulnerabilities/releases/latest/download/vulnerabilities.json.gz -o vulnerabilities.json.gz\n```\n\nVerify integrity using the provided SHA-256 checksums:\n```bash\ncurl -sL https://github.com/JMartynov/mcp-vulnerabilities/releases/latest/download/SHA256SUMS.txt -o SHA256SUMS.txt\nsha256sum -c SHA256SUMS.txt --ignore-missing\n```\n\n## Fa…","publisher":null,"homepage":null,"repository":null,"version":"1.0.10","license":null,"protocols":["mcp"],"tags":["mcp"],"pricing":null,"endpoints":[{"url":"pypi:mcp-vulnerabilities","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","summary":"pypi","version":"pypi","description":"pypi"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"derived"},{"slug":"data.news","name":"News & Feeds","confidence":0.722,"provenance":"derived"}],"categories":["code","data"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-vulnerabilities","registry":"pypi","observedAt":"2026-10-24T17:29:24.909Z","publishedAt":"2026-10-24T07:47:20.675132Z","latestVersion":"1.0.10"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-vulnerabilities","url":"https://pypi.org/project/mcp-vulnerabilities/","firstSeenAt":"2026-10-12T14:25:14.689Z","fetchedAt":"2026-10-24T17:28:20.707Z","normalizedAt":"2026-10-24T17:28:20.707Z"}]},"firstSeenAt":"2026-10-12T14:25:14.689Z","updatedAt":"2026-10-24T17:29:24.909Z"}