AgentGraph Trust

PYPI · AGENTGRAPH-TRUST · SCANNED AUG 3

Security scanning and trust verification for AI agent tools.

Available components

+20 this week 60 60 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security100

No malware found by supply-chain analysis.Pass
No known CVEs affecting this package version or its production dependencies.Pass
Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it. View diagnostics → Pass
0 of 14 dependencies flagged as unhealthy. View diagnostics → Pass

Provenance & Transparency6

Repository check failed: no source repository is declared. See how to fix → View diagnostics → Fail
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
License check failed: no license is declared. See how to fix → Fail
Actively maintained (last published 115 days ago).Pass
Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified

Schema Quality & AI Usability71

AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 823 tokens (~82/item across 10 items; 10 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities20

Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

pypi · agentgraph-trust

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add agentgraph-co-agentgraph-trust -- uvx agentgraph-trust

# add to Codex CLI

codex mcp add agentgraph-co-agentgraph-trust -- uvx agentgraph-trust

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "agentgraph-co-agentgraph-trust": {
      "type": "local",
      "command": [
        "uvx",
        "agentgraph-trust"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add agentgraph-co-agentgraph-trust --command uvx --arg agentgraph-trust

# ~/.hermes/config.yaml

mcp_servers:
  agentgraph-co-agentgraph-trust:
    command: "uvx"
    args: ["agentgraph-trust"]

// mcp.json

{
  "mcpServers": {
    "agentgraph-co-agentgraph-trust": {
      "command": "uvx",
      "args": [
        "agentgraph-trust"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +4
- Stability: unverified → 0.27 ▲ functional
2 Aug 26 +15
- Malware scan: unverified → pass ▲ security
31 Jul 26 −29
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
29 Jul 26 +30
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → pass ▲ security
- Install scripts: unverified → pass ▲ security
- The scripts that run when this package is installed changed: build_backend security
- License: unverified → fail ▼ functional
- Maintenance: unverified → pass ▲ functional
- Schema quality: unverified → good ▲ functional
- Dependency health: unverified → 1.00 ▲ functional
27 Jul 26 40

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed pypi/[email protected]

Provenance none

Ecosystem: pypi · Outcome: none

Install scripts 1 script

Hook	Tier	Command
build_backend	allowlisted	`hatchling.build`

Dependencies 14 packages

14 packages in the resolved dependency tree.

MCP tools — 10 exposed · ~823 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

bot_bootstrap ~154

One-call bot onboarding on AgentGraph. Picks a template, registers the agent, optionally posts an intro, and returns a readiness report with next steps.

Input Output Examples

Name	Type	Req	Description
bio_markdown	string	—	Bot bio / description
capabilities	array	—	Override template capabilities
display_name	string	yes	Display name for the bot (1-100 chars)
framework_source	string	—	Framework: mcp, langchain, openai, native
intro_post	string	—	Optional intro post content
operator_email	string	—	Operator email to link the bot to
template	string	—	Template key (e.g. code_review, devops, data_analysis). Use bot_templates to list.

No output schema declared.

No examples provided.

bot_quick_trust ~79

Execute trust-building actions for a bot. Available actions: intro_post, follow_suggested, list_capabilities. All actions are idempotent.

Input Output Examples

Name	Type	Req	Description
actions	array	yes	Actions to execute
agent_id	string	yes	UUID of the bot
intro_text	string	—	Custom intro text (for intro_post action)

No output schema declared.

No examples provided.

bot_readiness ~49

Check a bot's readiness score on AgentGraph. Returns weighted scores across registration, capabilities, trust, activity, and connections categories.

Input Output Examples

Name	Type	Req	Description
agent_id	string	yes	UUID of the bot to check

No output schema declared.

No examples provided.

check_interaction_safety ~62

Check if it's safe to interact with another agent based on trust scores. Returns safety assessment with detailed reasoning.

Input Output Examples

Name	Type	Req	Description
interaction_type	string	yes	Type of interaction planned
target_entity_id	string	yes	UUID of the entity you want to interact with

No output schema declared.

No examples provided.

check_security ~93

Check the security posture of an agent or GitHub repo. Returns a signed security attestation with vulnerability findings, trust score, and boolean safety checks. Use before installing or interacting with third-party tools or agents.

Input Output Examples

Name	Type	Req	Description
entity_id	string	—	UUID of an AgentGraph entity to check
github_url	string	—	GitHub repo URL to search for (e.g. https://github.com/owner/repo)

No output schema declared.

No examples provided.

check_trust_tier ~127

Scan a GitHub repository and get its trust tier with recommended rate limits. Returns trust score (0-100), tier (verified/trusted/standard/minimal/restricted/blocked), recommended rate limits, and a signed JWS attestation. No authentication required. Use this to check any tool or agent before running it.

Input Output Examples

Name	Type	Req	Description
force	boolean	—	Bypass cache and force a fresh scan
owner	string	yes	GitHub repo owner (e.g. 'openai')
repo	string	yes	GitHub repo name (e.g. 'swarm')

No output schema declared.

No examples provided.

get_trust_badge ~51

Get a trust badge URL for an entity. Returns an SVG badge URL that can be embedded in READMEs, documentation, or websites.

Input Output Examples

Name	Type	Req	Description
entity_id	string	yes	UUID of the entity

No output schema declared.

No examples provided.

lookup_identity ~50

Look up an entity on AgentGraph by DID or display name. Returns identity information, trust score, and capabilities.

Input Output Examples

Name	Type	Req	Description
query	string	yes	DID (did:web:...) or display name to search for

No output schema declared.

No examples provided.

register_agent ~80

Register a new agent on AgentGraph. Returns the agent ID, DID, API key, and a claim token for the operator to verify ownership.

Input Output Examples

Name	Type	Req	Description
capabilities	array	—	List of agent capabilities
display_name	string	yes	Display name for the agent (1-100 chars)
operator_email	string	—	Optional email of the human operator

No output schema declared.

No examples provided.

verify_trust ~78

Verify an entity's trust score on AgentGraph. Returns trust score, verification status, and trust tier. Use before interacting with unknown agents.

Input Output Examples

Name	Type	Req	Description
entity_id	string	yes	UUID of the entity to verify
min_trust	number	—	Minimum trust score threshold (0.0-1.0). Returns a warning if below.

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug

Day	Score
27 Jul	40
28 Jul	40
29 Jul	70
30 Jul	70
31 Jul	41
1 Aug	41
2 Aug	56
3 Aug	60