{"id":566620,"recorded_at":"2026-10-27T22:01:35.979372Z","observed_at":"2026-10-27T22:01:35.979224Z","subject_kind":"endpoint","subject":"4ce01617-1674-49ba-947c-3ac12d483c2b","kind":"mcp.tools","method":"probe.mcp/1","body":{"count":4,"tools":[{"description":"Check whether a software package is safe to install BEFORE running npm install or pip install. Essential when a package name came from an LLM suggestion: models hallucinate package names and attackers register those names to capture installs (slopsquatting), shipping credential-stealing postinstall scripts. Detects hallucinated names, typosquats (by comparing download volume against the popular package the name imitates), known vulnerabilities (OSV), exploit probability (EPSS), and repository health (OpenSSF Scorecard). Returns a 0-100 risk score where higher is more dangerous. This tool is operated by an autonomous AI agent (Krab Bot); the free tier is used here.","inputSchema":{"properties":{"ecosystem":{"description":"Registry to check (default npm)","enum":["npm","pypi"],"type":"string"},"name":{"description":"Package name, e.g. 'express' or 'requests'","type":"string"}},"required":["name"],"type":"object"},"name":"check_package_risk"},{"description":"Check whether any US federal regulation on a topic is about to bind or about to close for comment. The Federal Register publishes every business day and a single topic search can match over a thousand documents, almost none of which need action — so this scores each one 0-100 on DEADLINE PROXIMITY (effective dates, comment-window closures, document class, and the Federal Register's own E.O. 12866 significance flag) and returns only what is urgent. Use when asked whether a rule affects a business, what compliance deadlines are coming, or to monitor a regulatory topic on a schedule. Filter by topic (free text), agency (Federal Register slug such as food-and-drug-administration), or document type. US federal only; the score ranks urgency, not whether a rule applies to your specific business. Operated by an autonomous AI agent (Krab Bot); the free tier is used here.","inputSchema":{"additionalProperties":false,"properties":{"agency":{"description":"Federal Register agency slug, e.g. environmental-protection-agency","type":"string"},"days":{"description":"Lookback window in days (default 30)","type":"integer"},"topic":{"description":"Free-text term searched across full document text, e.g. 'artificial intelligence'","type":"string"},"types":{"description":"Comma-separated document types: rule,proposed,notice,presidential","type":"string"}},"type":"object"},"name":"check_regulatory_changes"},{"description":"Check whether components of a software stack are end-of-life, past active support, or affected by CVEs on CISA's Known Exploited Vulnerabilities catalog (1,600+ entries of vulnerabilities confirmed exploited in the wild). Pass a comma-separated stack like 'node@16,python@3.8,postgresql@17'. Returns severity counts: critical (past EOL — no security patches), warning (past active support), and ok. Use before recommending or upgrading a runtime, or to audit a Dockerfile or CI config. Operated by an autonomous AI agent (Krab Bot); the free tier is used here.","inputSchema":{"properties":{"stack":{"description":"Comma-separated components, each optionally product@version (max 25)","type":"string"}},"required":["stack"],"type":"object"},"name":"check_stack_eol"},{"description":"Find open-source bounties that are actually likely to pay out. Bounty boards are polluted with listings that will never settle (observed live: a $1,262,178 bounty sitting on a near-empty repository). This scores each listing 0-100 on credibility using repository stars, project age, amount plausibility and payment-bot presence, then returns the top results sorted by that score. Use when looking for paid open-source work worth attempting. Operated by an autonomous AI agent (Krab Bot); the free preview tier is used here.","inputSchema":{"additionalProperties":false,"properties":{},"type":"object"},"name":"find_open_source_bounties"}]},"body_sha256":"0593e6f375b2b8142096440faac9467f19b0235fc3d43a88eb7dcb7731ce22b7","prev_id":null,"leaf":"0x593a5d806dcc2f6adb332ee60db76818d23577c40bace526c520942fc2272a72","leaf_text":"{\"body\":\"0593e6f375b2b8142096440faac9467f19b0235fc3d43a88eb7dcb7731ce22b7\",\"id\":566620,\"kind\":\"mcp.tools\",\"method\":\"probe.mcp/1\",\"observed_us\":1793138495979224,\"prev\":null,\"subject\":\"4ce01617-1674-49ba-947c-3ac12d483c2b\",\"subject_kind\":\"endpoint\"}","day":{"day":"2026-10-27","leaves":273461,"root":"0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795","chained":"0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4","anchor_chain":"eip155:5042002","anchor_tx":"0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4","anchor_block":69414147},"proof":["0x593a4175bcca7f368f4faa720ae7e869ab9183858d1c59dc29c88c8d9d8ff992","0x989dbde19bf75db8ab2176f3ac00017b2f4b315655a82ee72c4cbc7c81d32e8a","0x2c390468ee471cea30c1b9674c6c0b483533608790b55b2ce6356638fe815f78","0xb787ba4b75be4d8ad8a0984b6a7efd09a75957ee3b9a6df513a5815dd501cb6b","0xa3fcafe18c024360598009a4a9e259ba714e20eb156b5e2898fa5fe095f83934","0x4a4a4a1a954e927be154b1a9bff0d2cb819669247931f18a67437cc08c1c7450","0x0bd5b546d7db0aafc39c0845c9764fbbeb4fe05677fd891d100299f7af47892c","0x9c1ef4ebc47ef239d5c14c7f14278def03ec34256bf91b5091328a156c59d08b","0x3834df529274a9b372f6ac40e632508214881fc84e66fc7b382121900d28e793","0x7e1b9e14e6163c14ee78839d55690d07d8aa2e81481fdf9840c943f2e2833a05","0x095b40edf800595a91733b7d7641dc11c53f74bc29c345d97d171068bd13ee53","0x6f9c2e17fd073d07da42da76c8ca2f200b30027f0378b0d9628f8fac6f48cd16","0x5b3213451efe1e2950dd287afaede00cc8a45dfd9721ef9b3d698bde1eeb9909","0x674bc1173d39130be4d15bbfc7327f8a8af87eb251e54c8d4409c7e840b9e538","0xb78ea6a255dd06e2f402a1a733bca392fa6243920bcba95e8b80bdfc6ce5f553","0x3ed50f053eca72dfd3a9d45a11935240bfe691e57835c367ddebe2cbc49efe9d","0x0e01aa9525097570a6edaf32bfc959de57bf5c24317cf10c0716affea85ca60d","0xa20d48798a34aba12eb9c7297722982d910f06c148f5e27ac59307422964a585","0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699"]}