{"id":515587,"recorded_at":"2026-10-27T16:55:16.339281Z","observed_at":"2026-10-27T16:55:16.339150Z","subject_kind":"endpoint","subject":"d48c7cae-1cf7-4f34-afbe-555f4eed5f16","kind":"mcp.tools","method":"probe.mcp/1","body":{"count":8,"tools":[{"description":"What AgentAvow is, which tool to use for what, how to read a verdict, and example scans. Call this for an overview or when getting started. No input, read-only.","inputSchema":{"properties":{},"type":"object"},"name":"about_agentavow"},{"description":"Check whether it is safe to interact with another agent by trust threshold. Thresholds: delegate 0.6, trade 0.5, collaborate 0.4, follow 0.1. Returns is_safe, risk_level, the score, and a recommendation. Read-only, no auth.","inputSchema":{"properties":{"interaction_type":{"enum":["delegate","trade","collaborate","follow"],"type":"string"},"target_entity_id":{"description":"UUID of a registered target entity (resolve one with lookup_identity).","maxLength":64,"type":"string"}},"required":["target_entity_id","interaction_type"],"type":"object"},"name":"check_interaction_safety"},{"description":"Get an embeddable AgentAvow trust badge (SVG) for an entity, with ready-to-paste Markdown and HTML. The badge auto-updates as the score changes. Read-only, no auth.","inputSchema":{"properties":{"entity_id":{"description":"UUID of a registered AgentAvow entity (resolve one with lookup_identity).","maxLength":64,"type":"string"}},"required":["entity_id"],"type":"object"},"name":"get_trust_badge"},{"description":"Look up an AgentAvow entity by W3C DID or display name. Returns the entity's id, name, type, trust score and tier. Read-only, no auth. Use to resolve an identity before checking its trust.","inputSchema":{"properties":{"query":{"description":"A did:web:... or a display name.","maxLength":200,"pattern":"^[\\w .:/@#+-]{1,200}$","type":"string"}},"required":["query"],"type":"object"},"name":"lookup_identity"},{"description":"Scan a live MCP server's tool definitions for tool-poisoning, prompt-injection, invisible-unicode, and manifest-execution risks before your agent connects to it. Returns one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, findings, and a signed attestation. Read-only; calls the agentavow.com public API.","inputSchema":{"properties":{"endpoint_url":{"description":"The MCP server's https:// URL.","maxLength":512,"type":"string"},"force":{"description":"Re-scan now instead of returning the cached verdict (results cache ~1h).","type":"boolean"}},"required":["endpoint_url"],"type":"object"},"name":"scan_mcp_server"},{"description":"Scan a published package (npm, PyPI, crates, Docker, or Hugging Face) with AgentAvow. Returns one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, an adoption score from real usage (downloads per week), findings with remediation, and a signed attestation. Also reports published advisories that affect the scanned version, the maintainer's deprecation notice, repo-vs-artifact drift (files shipped that aren't in the source), and AgentAvow's behavioral sandbox results when available. Scans the latest version unless `version` (or a pin in the name) names one. Read-only; calls agentavow.com.","inputSchema":{"properties":{"ecosystem":{"description":"Alias for registry.","type":"string"},"force":{"description":"Re-scan now instead of returning the cached verdict (results cache ~1h). Use after a new version ships.","type":"boolean"},"name":{"description":"Package name, e.g. 'chalk' (or 'org/model' for hf).","maxLength":214,"type":"string"},"registry":{"description":"Package registry: npm, pypi, crates, docker, or hf.","type":"string"},"surface":{"description":"Alias for registry.","type":"string"},"version":{"description":"Exact version to scan, e.g. '5.3.0'. Optional: the latest version by default. A pin in the name ('chalk@5.3.0', 'requests==2.32.5') works too.","maxLength":64,"type":"string"}},"required":["name"],"type":"object"},"name":"scan_package"},{"description":"Scan a public GitHub repository with AgentAvow and return whether it is safe for an agent to connect to: one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, an adoption score from real usage (stars), the findings behind it (with where and how to fix), and a signed, offline-verifiable attestation. Read-only, no account. Calls the AgentAvow public API at agentavow.com.","inputSchema":{"properties":{"force":{"description":"Re-scan now instead of returning the cached verdict (results cache ~1h). Use after the target has changed.","type":"boolean"},"owner":{"description":"Repo owner (optional if 'repo' is already 'owner/name').","maxLength":214,"type":"string"},"repo":{"description":"Repo as 'owner/name' (e.g. 'vercel/next.js'), or just the name when 'owner' is given separately.","maxLength":214,"type":"string"}},"required":["repo"],"type":"object"},"name":"scan_repo"},{"description":"Verify an AgentAvow entity's trust score. Returns trust_score (0-1), trust_score_pct (0-100), trust_tier, and whether it meets a minimum threshold. Read-only, no auth. Use before interacting with an unknown agent.","inputSchema":{"properties":{"entity_id":{"description":"UUID of a registered AgentAvow entity (resolve one with lookup_identity; unknown ids return guidance, not an error).","maxLength":64,"type":"string"},"min_trust":{"default":0.3,"description":"Min score, 0-1.","type":"number"}},"required":["entity_id"],"type":"object"},"name":"verify_trust"}]},"body_sha256":"c599a6efa1e91060b235c3b92311550df3f302b8af44239363c7199c0030ec94","prev_id":null,"leaf":"0xe44e217c661ce14b04682ef0f74fb0297678c42c75df9404f1979d6d1ca92c45","leaf_text":"{\"body\":\"c599a6efa1e91060b235c3b92311550df3f302b8af44239363c7199c0030ec94\",\"id\":515587,\"kind\":\"mcp.tools\",\"method\":\"probe.mcp/1\",\"observed_us\":1793120116339150,\"prev\":null,\"subject\":\"d48c7cae-1cf7-4f34-afbe-555f4eed5f16\",\"subject_kind\":\"endpoint\"}","day":{"day":"2026-10-27","leaves":273461,"root":"0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795","chained":"0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4","anchor_chain":"eip155:5042002","anchor_tx":"0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4","anchor_block":69414147},"proof":["0xe44e7b106eac6d07654c8731609ad50f6681643cc873910399aae8c44b06cef3","0xd741efd46a65661f8a2ce2fe42a61759a13ec505b2ae2eab4a3fb8b040effc2e","0xf5ab0fbf62adc12addb899d2f86fb3a795c7a1f6c9559360d8acbbb456dfe505","0x9b88f85460d03eccd1312d62d886e68acbaca8b836016470ff74d735e6c60e62","0x6ee33d056a639c6396690d795550b99c75ffca1b1e236fe065c29836570f3715","0x9c2624032aad70d96860813d05de9c32e0858f7e0b8dff8a427277d18273ae59","0xe46d8c330f25844044cb99d3868a15a22afa280c59646a3559f1fd6616e25b7e","0xac0f78cc7c4d14d1494f283400f4ef06eea3606a2b361262f713999e1777f655","0xdfc18a91dd4961bb645aebb9edc2ef667d6b1075eaac2c5f9baa2843d176ed24","0xf43ec63a3f9fa25173180abb7567056ab830871cfcea8062ffeb94b071fa8fa6","0x79b5848e3de58e55a9bc31f0b9fac7eaaa02831210ebc21da7db3a90dc579124","0xc1d2a56a84338ae3b69b3423e631069ac48cf802439f26d41941f651ac2c28a1","0xd98ea318b514153f74841c90aff18a807e61314ec99610bf3bdbb7219da01cbd","0xf72dee7a0c7534cb19ede4959b957b00c0a8285c36ad49dd2ce1c1092bf60d93","0x24e3e2bb8ee1e8d20756de35f0e0c4ec8eb1f193bd2cf3f077ee1f92f211c34d","0x8745bd887f5ce9f7a49558fd2b04cdcd97a05ea9f8a23f62d0e80cb13d328b0f","0xdf1105afdc109de3c09a98fc8a3864159ad964e6f49b635c105a27a1e1f14310","0x2bf8151e5f157dd183b9de6fa00469551932a7a6e3f33a694895000ac9061197","0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699"]}