{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_ch8yuk82hqww","handle":"sms-florin-mcp-ssrf-scan","url":"https://wellknown.network/agents/sms-florin-mcp-ssrf-scan","links":{"self":"https://wellknown.network/agents/sms-florin-mcp-ssrf-scan/record.json","html":"https://wellknown.network/agents/sms-florin-mcp-ssrf-scan","markdown":"https://wellknown.network/agents/sms-florin-mcp-ssrf-scan/record.md","api":"https://wellknown.network/api/v1/agents/sms-florin-mcp-ssrf-scan","status":"https://wellknown.network/api/v1/agents/sms-florin-mcp-ssrf-scan/status","claim":"https://wellknown.network/agents/sms-florin-mcp-ssrf-scan/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/sms-florin-mcp-ssrf-scan/claim.json","badge":"https://wellknown.network/agents/sms-florin-mcp-ssrf-scan/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/sms-florin-mcp-ssrf-scan/history","tools":"https://wellknown.network/api/v1/agents/sms-florin-mcp-ssrf-scan/tools"},"ard":{"identifier":"urn:air::server:sms-florin-mcp-ssrf-scan","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"@sms-florin/mcp-ssrf-scan","summary":"A static scanner for MCP servers that catches the exact bug class behind most real MCP SSRF reports: a tool handler making an outbound request to a caller-controlled URL with no host validation.","description":"A static scanner for MCP servers that catches the exact bug class behind most real MCP SSRF reports: a tool handler making an outbound request to a caller-controlled URL with no host validation.","publisher":{"name":"sms-florin","url":null},"homepage":"https://gitlab.com/florin-builds/mcp-ssrf-scan#readme","repository":null,"version":"0.5.0","license":"MIT","protocols":["mcp"],"tags":["mcp","model-context-protocol","security","ssrf","static-analysis","ai-agents","scanner"],"pricing":null,"endpoints":[{"url":"npm:@sms-florin/mcp-ssrf-scan","type":"package_npm","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":{"npmKeywords":["mcp","model-context-protocol","security","ssrf","static-analysis","ai-agents","scanner"]},"attribution":{"kind":"npm","name":"npm","license":"npm","repoUrl":"npm","summary":"npm","version":"npm","description":"npm","homepageUrl":"npm","publisherName":"npm"}},"derived":{"capabilities":[{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"declared"},{"slug":"code.security-review","name":"Security Review","confidence":0.75,"provenance":"derived"},{"slug":"communication.sms-voice","name":"SMS & Voice","confidence":0.646,"provenance":"derived"}],"categories":["code","communication","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"@sms-florin/mcp-ssrf-scan","registry":"npm","observedAt":"2026-11-04T12:17:47.779Z","publishedAt":"2026-10-22T14:51:17.274Z","latestVersion":"0.5.0","weeklyDownloads":241},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"npm","key":"@sms-florin/mcp-ssrf-scan","url":"https://www.npmjs.com/package/@sms-florin/mcp-ssrf-scan","firstSeenAt":"2026-11-04T12:17:18.355Z","fetchedAt":"2026-11-04T12:17:18.355Z","normalizedAt":"2026-11-04T12:17:18.355Z"}]},"firstSeenAt":"2026-11-04T12:17:18.355Z","updatedAt":"2026-11-04T12:17:47.779Z"}