{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_5kuyet2wnhtt","handle":"pkgguard","url":"https://wellknown.network/agents/pkgguard","links":{"self":"https://wellknown.network/agents/pkgguard/record.json","html":"https://wellknown.network/agents/pkgguard","markdown":"https://wellknown.network/agents/pkgguard/record.md","api":"https://wellknown.network/api/v1/agents/pkgguard","status":"https://wellknown.network/api/v1/agents/pkgguard/status","claim":"https://wellknown.network/agents/pkgguard/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/pkgguard/claim.json","badge":"https://wellknown.network/agents/pkgguard/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/pkgguard/history","tools":"https://wellknown.network/api/v1/agents/pkgguard/tools"},"ard":{"identifier":"urn:air:api.youraitools.co:server:pkgguard","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"PkgGuard","summary":"Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker","description":"Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker","publisher":{"name":"co.youraitools","url":null},"homepage":"https://youraitools.co","repository":"https://agentgate-source.pages.dev/x402-pkgguard/","version":"0.1.1","license":"MIT","protocols":["mcp"],"tags":["vulnerability-scanner","dependency-check","npm-audit","security-audit","cve","osv","malicious-packages","supply-chain-security","sca","package-lock","requirements-txt","mcp","mcp-server","ai-agents","x402"],"pricing":null,"endpoints":[{"url":"https://api.youraitools.co/pkgguard/mcp","type":"mcp_streamable_http","auth":null,"probeable":true},{"url":"npm:@agentgate-builder/pkgguard","type":"package_npm","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-10-22T02:10:14.576537Z","npmKeywords":["vulnerability-scanner","dependency-check","npm-audit","security-audit","cve","osv","malicious-packages","supply-chain-security","sca","package-lock","requirements-txt","mcp","mcp-server","ai-agents","x402"],"publishedAt":"2026-10-22T02:10:14.576537Z","registryName":"co.youraitools/pkgguard"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","license":"npm","repoUrl":"npm","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","homepageUrl":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"declared"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"derived"},{"slug":"security.scanning","name":"Security Scanning","confidence":0.656,"provenance":"derived"}],"categories":["code","dev","security"],"language":"en"},"observed":{"status":"live","statusReason":"Responded 7h ago.","lastOkAt":"2026-11-05T17:26:03.857Z","lastProbedAt":"2026-11-05T17:26:03.857Z","statusComputedAt":"2026-11-05T17:29:42.311Z","reliability30d":{"probes":38,"successRate":1,"p50Ms":222,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":38,"ok":38,"authBoundaryOk":0,"serviceOk":38,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-11-05T17:26:03.857Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":343,"error":null,"detail":{"tools":[{"name":"scan_dependencies","description":"Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabil"},{"name":"check_package","description":"Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and ma"}],"toolCount":2,"toolsHash":"29cfc3c509eabfb3d07f2e8e46dfcfe77251d7011c68e919366d78bc1719981f","serverName":"pkgguard","capabilities":["tools"],"serverVersion":"0.1.1","protocolVersion":"2025-06-18"}},{"at":"2026-11-05T08:26:27.559Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":284,"error":null,"detail":{"tools":[{"name":"scan_dependencies","description":"Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabil"},{"name":"check_package","description":"Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and ma"}],"toolCount":2,"toolsHash":"29cfc3c509eabfb3d07f2e8e46dfcfe77251d7011c68e919366d78bc1719981f","serverName":"pkgguard","capabilities":["tools"],"serverVersion":"0.1.1","protocolVersion":"2025-06-18"}},{"at":"2026-11-05T00:25:59.673Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":257,"error":null,"detail":{"tools":[{"name":"scan_dependencies","description":"Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabil"},{"name":"check_package","description":"Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and ma"}],"toolCount":2,"toolsHash":"29cfc3c509eabfb3d07f2e8e46dfcfe77251d7011c68e919366d78bc1719981f","serverName":"pkgguard","capabilities":["tools"],"serverVersion":"0.1.1","protocolVersion":"2025-06-18"}},{"at":"2026-11-04T16:22:56.934Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":220,"error":null,"detail":{"tools":[{"name":"scan_dependencies","description":"Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabil"},{"name":"check_package","description":"Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and ma"}],"toolCount":2,"toolsHash":"29cfc3c509eabfb3d07f2e8e46dfcfe77251d7011c68e919366d78bc1719981f","serverName":"pkgguard","capabilities":["tools"],"serverVersion":"0.1.1","protocolVersion":"2025-06-18"}},{"at":"2026-11-04T07:26:59.764Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":185,"error":null,"detail":{"tools":[{"name":"scan_dependencies","description":"Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabil"},{"name":"check_package","description":"Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and ma"}],"toolCount":2,"toolsHash":"29cfc3c509eabfb3d07f2e8e46dfcfe77251d7011c68e919366d78bc1719981f","serverName":"pkgguard","capabilities":["tools"],"serverVersion":"0.1.1","protocolVersion":"2025-06-18"}},{"at":"2026-11-03T23:27:14.020Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":318,"error":null,"detail":{"tools":[{"name":"scan_dependencies","description":"Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabil"},{"name":"check_package","description":"Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and ma"}],"toolCount":2,"toolsHash":"29cfc3c509eabfb3d07f2e8e46dfcfe77251d7011c68e919366d78bc1719981f","serverName":"pkgguard","capabilities":["tools"],"serverVersion":"0.1.1","protocolVersion":"2025-06-18"}},{"at":"2026-11-03T15:24:53.236Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":437,"error":null,"detail":{"tools":[{"name":"scan_dependencies","description":"Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabil"},{"name":"check_package","description":"Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and ma"}],"toolCount":2,"toolsHash":"29cfc3c509eabfb3d07f2e8e46dfcfe77251d7011c68e919366d78bc1719981f","serverName":"pkgguard","capabilities":["tools"],"serverVersion":"0.1.1","protocolVersion":"2025-06-18"}},{"at":"2026-11-03T07:30:30.763Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":315,"error":null,"detail":{"tools":[{"name":"scan_dependencies","description":"Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabil"},{"name":"check_package","description":"Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and ma"}],"toolCount":2,"toolsHash":"29cfc3c509eabfb3d07f2e8e46dfcfe77251d7011c68e919366d78bc1719981f","serverName":"pkgguard","capabilities":["tools"],"serverVersion":"0.1.1","protocolVersion":"2025-06-18"}},{"at":"2026-11-02T23:31:05.825Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":300,"error":null,"detail":{"tools":[{"name":"scan_dependencies","description":"Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabil"},{"name":"check_package","description":"Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and ma"}],"toolCount":2,"toolsHash":"29cfc3c509eabfb3d07f2e8e46dfcfe77251d7011c68e919366d78bc1719981f","serverName":"pkgguard","capabilities":["tools"],"serverVersion":"0.1.1","protocolVersion":"2025-06-18"}},{"at":"2026-11-02T15:27:57.126Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":108,"error":null,"detail":{"tools":[{"name":"scan_dependencies","description":"Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabil"},{"name":"check_package","description":"Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and ma"}],"toolCount":2,"toolsHash":"29cfc3c509eabfb3d07f2e8e46dfcfe77251d7011c68e919366d78bc1719981f","serverName":"pkgguard","capabilities":["tools"],"serverVersion":"0.1.1","protocolVersion":"2025-06-18"}}],"tools":[{"name":"scan_dependencies","description":"Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabil"},{"name":"check_package","description":"Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and ma"}],"package":{"name":"@agentgate-builder/pkgguard","registry":"npm","observedAt":"2026-11-05T17:31:14.582Z","publishedAt":"2026-10-22T02:06:12.304Z","latestVersion":"0.1.1","weeklyDownloads":559},"toolSurface":{"id":"ts_pas4vhg9j23d","endpointId":"ep_c664eavsd9d7","hash":"29cfc3c509eabfb3d07f2e8e46dfcfe77251d7011c68e919366d78bc1719981f","toolCount":2,"serverName":"pkgguard","serverVersion":"0.1.1","protocolVersion":"2025-06-18","firstSeenAt":"2026-10-25T00:29:22.871Z","lastSeenAt":"2026-11-05T17:26:03.853Z","observations":38,"toolNames":["scan_dependencies","check_package"],"distinctSurfaces":1},"endpointFacts":[{"id":"ep_c664eavsd9d7","url":"https://api.youraitools.co/pkgguard/mcp","type":"mcp_streamable_http","factsCheckedAt":"2026-11-03T15:24:53.246Z","auth":{"observedAt":"2026-11-03T15:24:53.300Z","authRequired":false,"scheme":null,"resourceMetadata":null,"authorizationServer":null,"conformance":{"dpop":false,"rfc8414":false,"rfc9728":false,"pkceS256":false,"clientIdMetadataDocument":false,"dynamicClientRegistration":false}},"tls":{"observedAt":"2026-11-03T15:24:53.314Z","protocol":"TLSv1.3","chainValid":true,"chainError":null,"hostMatches":true,"subject":"api.youraitools.co","issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validFrom":"2026-10-21T22:25:53.000Z","validTo":"2027-01-19T23:25:50.000Z","daysToExpiry":74,"sanCount":1,"fingerprint256":"EB:43:3D:C1:49:45:5A:43:21:4A:BA:03:80:B4:3C:F9:D8:5B:FB:D9:84:32:77:E8:DE:A6:CB:8C:60:F1:69:0F"}}]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"co.youraitools/pkgguard","url":"https://registry.modelcontextprotocol.io/v0/servers/co.youraitools%2Fpkgguard","firstSeenAt":"2026-10-24T23:21:50.855Z","fetchedAt":"2026-11-04T15:22:36.480Z","normalizedAt":"2026-11-04T15:22:36.480Z"},{"source":"npm","key":"@agentgate-builder/pkgguard","url":"https://www.npmjs.com/package/@agentgate-builder/pkgguard","firstSeenAt":"2026-10-29T20:18:43.371Z","fetchedAt":"2026-11-04T02:21:02.759Z","normalizedAt":"2026-11-04T02:21:02.759Z"}]},"firstSeenAt":"2026-10-24T23:21:50.855Z","updatedAt":"2026-11-05T17:31:14.582Z"}