{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_2u882d7vztv9","handle":"supply-chain-mcp-server","url":"https://wellknown.network/agents/supply-chain-mcp-server","links":{"self":"https://wellknown.network/agents/supply-chain-mcp-server/record.json","html":"https://wellknown.network/agents/supply-chain-mcp-server","markdown":"https://wellknown.network/agents/supply-chain-mcp-server/record.md","api":"https://wellknown.network/api/v1/agents/supply-chain-mcp-server","status":"https://wellknown.network/api/v1/agents/supply-chain-mcp-server/status","claim":"https://wellknown.network/agents/supply-chain-mcp-server/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/supply-chain-mcp-server/claim.json","badge":"https://wellknown.network/agents/supply-chain-mcp-server/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:supply-chain-mcp-server","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"supply-chain-mcp-server","summary":"Software supply chain security MCP server — vulnerability scanning, package analysis, provenance verification, typosquatting detection, dependency intelligence across npm, PyPI, crates.io, Go, and more","description":"Software supply chain security MCP server — vulnerability scanning, package analysis, provenance verification, typosquatting detection, dependency intelligence across npm, PyPI, crates.io, Go, and more","publisher":{"name":"orhnyldrm","url":null},"homepage":"https://www.npmjs.com/package/supply-chain-mcp-server","repository":"git+https://github.com/badchars/supply-chain-mcp-server.git","version":"0.2.1","license":"MIT","protocols":["mcp"],"tags":["mcp","model-context-protocol","supply-chain","supply-chain-security","software-composition-analysis","sca","vulnerability","dependency","osv","ghsa","cve","nvd","npm-audit","pypi","crates-io","golang","sigstore","rekor","provenance","scorecard","openssf","typosquatting","sbom","osint","cybersecurity","security","infosec","ai","ai-agent","claude","llm"],"pricing":null,"endpoints":[{"url":"npm:supply-chain-mcp-server","type":"package_npm","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":{"npmKeywords":["mcp","model-context-protocol","supply-chain","supply-chain-security","software-composition-analysis","sca","vulnerability","dependency","osv","ghsa","cve","nvd","npm-audit","pypi","crates-io","golang","sigstore","rekor","provenance","scorecard","openssf","typosquatting","sbom","osint","cybersecurity","security","infosec","ai","ai-agent","claude","llm"]},"attribution":{"kind":"npm","name":"npm","license":"npm","repoUrl":"npm","summary":"npm","version":"npm","description":"npm","homepageUrl":"npm","publisherName":"npm"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"declared"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"declared"}],"categories":["code","dev"]},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"supply-chain-mcp-server","registry":"npm","observedAt":"2026-09-06T10:20:12.334Z","publishedAt":"2026-07-10T01:29:36.623Z","latestVersion":"0.2.1","weeklyDownloads":109}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"npm","key":"supply-chain-mcp-server","url":"https://www.npmjs.com/package/supply-chain-mcp-server","firstSeenAt":"2026-09-06T10:19:29.894Z","fetchedAt":"2026-09-06T10:19:29.894Z","normalizedAt":"2026-09-06T10:19:29.894Z"}]},"firstSeenAt":"2026-09-06T10:19:29.894Z","updatedAt":"2026-09-06T10:20:12.334Z"}