{"slug":"2026-09-10-capability-spotlight-security-scanning","title":"Spotlight on Security Scanning Capability","dataAsOf":"2026-09-10T00:29:28.643Z","model":"openai/gpt-4o-mini","mentions":["agent-ready-mcp","ai-shumi-mcp","proof-of-commitment","depscope-mcp","archimedes-market-mcp","attest-mcp","pipeworx-mcp-market-spread","aishield-security-scanner"],"facts":{"kind":"capability_spotlight","site":{"url":"https://wellknown.network","name":"Wellknown","apiUrl":"https://wellknown.network/api/v1","mcpUrl":"https://wellknown.network/mcp","searchUrl":"https://wellknown.network/search"},"review":{"approved":true,"problems":[]},"dataAsOf":"2026-09-10T00:29:28.643Z","glossary":{"A2A":"Agent2Agent protocol: an open protocol for agents to discover each other through an Agent Card at /.well-known/agent-card.json and exchange tasks over JSON-RPC.","ARD":"Agentic Resource Discovery: a draft open standard (v0.9, May 2026) under which a domain lists its agentic resources in /.well-known/ard.json and registries answer POST /search.","MCP":"Model Context Protocol: an open protocol that lets AI applications connect to tools and data through servers that expose tools, resources and prompts.","live":"Observed status meaning the latest check succeeded within the last 24 hours.","claim":"The process by which a publisher proves control of a record's domain or repository so the record shows a verified owner.","unknown":"Observed status meaning there is nothing to check or no check has run yet.","declared":"Metadata that a source (registry, package, Agent Card, publisher) stated about a record. Attributed, not verified.","observed":"What Wellknown measured itself by checking an endpoint: status, latency, reliability.","Wellknown":"This site: a live index of AI agents, MCP servers and tools that separates what publishers declare from what Wellknown observes.","Agent Card":"The JSON document an A2A agent publishes at /.well-known/agent-card.json describing its name, skills, endpoint URL and security schemes.","MCP server":"A program that speaks the Model Context Protocol and exposes tools to an AI application, either as a local package (npm, PyPI) or as a remote HTTP endpoint.","unavailable":"Observed status meaning two or more consecutive checks failed and none succeeded in 7 days.","MCP registry":"The official Model Context Protocol registry at registry.modelcontextprotocol.io, where publishers list servers with a server.json document.","recently observed":"Observed status meaning a check succeeded within 7 days but the latest check failed or is older than 24 hours."},"capability":{"url":"https://wellknown.network/capabilities/security.scanning","live":59,"name":"Security Scanning","slug":"security.scanning","domain":"Security","aliases":["security scanning","scanner","nmap","pentest","penetration","vulnerability scan","snyk","semgrep"],"records":280,"description":"Scan systems and dependencies for weaknesses."},"topRecords":[{"kind":"mcp_server","name":"Agent Ready","handle":"agent-ready-mcp","status":"live","summary":"Scan any URL for AI agent readability — Vercel Spec, llmstxt.org, and agent-protocol manifests.","downloads":140,"protocols":["mcp"]},{"kind":"mcp_server","name":"mcp","handle":"ai-shumi-mcp","status":"live","summary":"Crypto market intelligence: prices, funding rates, narratives, regime, and delta-neutral research.","downloads":127,"protocols":["mcp"]},{"kind":"mcp_server","name":"Commit — Supply Chain Risk Scoring","handle":"proof-of-commitment","status":"live","summary":"Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.","downloads":106,"protocols":["mcp"]},{"kind":"mcp_server","name":"DepScope","handle":"depscope-mcp","status":"live","summary":"Package intelligence MCP for AI agents — 22 tools, 19 ecosystems, AGPL SDK, free.","downloads":82,"protocols":["mcp"]},{"kind":"mcp_server","name":"mcp-archimedes","handle":"archimedes-market-mcp","status":"live","summary":"Discover verified deep-tech engineering bounties from any AI agent.","downloads":65,"protocols":["mcp"]},{"kind":"mcp_server","name":"Attest","handle":"attest-mcp","status":"live","summary":"Scan agent payment endpoints (x402, AP2, L402, MPP, 402) for a trust grade A-F before paying.","downloads":43,"protocols":["mcp"]},{"kind":"mcp_server","name":"Market Spread","handle":"pipeworx-mcp-market-spread","status":"live","summary":"market-spread MCP — cross-venue prediction-market landscape scanner.","downloads":16,"protocols":["mcp"]},{"kind":"agent","name":"AIShield Security Scanner","handle":"aishield-security-scanner","status":"live","summary":"Open-source, local-first AI Agent security scanner and trust authority - the neutral trust layer and content-security plane of the 2026 Internet of Agents. In the agent pathway (MCP vertical, A2A horizontal, AGNTCY/OASF discovery, Agentic Gateway control plane), AGNTCY verifies who issued an agent …","downloads":null,"protocols":["a2a"]}],"strippedLinks":[],"exampleQueries":["https://wellknown.network/api/v1/search?capability=security.scanning&status=live","https://wellknown.network/api/v1/resolve  {\"need\": \"security scanning\", \"requireLive\": true}"]}}