{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T15:50:24.033Z","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server","markdownUrl":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server.md","server":{"slug":"attestedintelligence-aga-mcp-server","name":"io.github.attestedintelligence/aga-mcp-server","registryName":"io.github.attestedintelligence/aga-mcp-server","description":"Verifiable decision records for AI agents: signed receipts for calls to its own governed tools.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"attested-intelligence-aga-mcp-server","type":"npm","identifier":"@attested-intelligence/aga-mcp-server","withdrawn":false,"url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server","version":"3.6.2","transport":"stdio","scoredAt":"2026-11-05T07:23:14.640Z"},"score":{"total":85,"tier":"high trust","status":"scored","weekDelta":0,"history":[{"date":"2026-11-05","total":85},{"date":"2026-11-04","total":85},{"date":"2026-11-03","total":85},{"date":"2026-11-02","total":85},{"date":"2026-11-01","total":84},{"date":"2026-10-31","total":85},{"date":"2026-10-30","total":85},{"date":"2026-10-29","total":85},{"date":"2026-10-28","total":85},{"date":"2026-10-27","total":85},{"date":"2026-10-26","total":85},{"date":"2026-10-25","total":84},{"date":"2026-10-24","total":84},{"date":"2026-10-23","total":89},{"date":"2026-10-22","total":88},{"date":"2026-10-21","total":88},{"date":"2026-10-20","total":87},{"date":"2026-10-19","total":87},{"date":"2026-10-18","total":86},{"date":"2026-10-17","total":86},{"date":"2026-10-16","total":85},{"date":"2026-10-15","total":85},{"date":"2026-10-14","total":85},{"date":"2026-10-13","total":84},{"date":"2026-10-12","total":84},{"date":"2026-10-11","total":83},{"date":"2026-10-07","total":81},{"date":"2026-10-05","total":80},{"date":"2026-10-04","total":80},{"date":"2026-10-03","total":76}]},"categories":[{"name":"Supply Chain Security","score":80,"verdict":"fail","reasons":["No malware found by supply-chain analysis.","CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available.","No install/post-install scripts declared.","51 of 135 dependencies flagged as unhealthy (1 deprecated)."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.direct","args":{"package":"zod","version":"3.25.76","severity":"high"}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"135","unhealthy":"51","deprecated":"1"}}]},{"name":"Provenance & Transparency","score":100,"verdict":"pass","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to attestedintelligence/aga-mcp-server).","Clear OSI-approved license (MIT).","Actively maintained (last published 32 days ago).","Publishes a security disclosure policy (SECURITY.md)."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"attestedintelligence/aga-mcp-server"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"32"}},{"code":"disclosure.present","args":{}}]},{"name":"Schema Quality & AI Usability","score":66,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Tool/resource definitions use about 687 tokens (~45/item across 15 items; 15 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"45","items":"15","tools":"15","tokens":"687","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":100,"verdict":"pass","reasons":["No destabilizing schema changes in the last 30 days."],"codes":[{"code":"stability.stable","args":{}}]},{"name":"Tool Coverage","score":79,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","36% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"36"}}]},{"name":"Tool Safety","score":75,"verdict":"fail","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; \"revoke_artifact\" implies \"revoke\" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.","An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_undeclared","args":{"pct":"0","tool":"revoke_artifact","verb":"revoke","declared":"none","annotated":"0","destructive":"1"}},{"code":"toolsafety.manipulation_clean","args":{"units":"15","judged":"15"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"attested-intelligence-aga-mcp-server","type":"npm","identifier":"@attested-intelligence/aga-mcp-server","withdrawn":false,"score":85,"current":true,"url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server","markdownUrl":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@attested-intelligence/aga-mcp-server"},{"label":"Version","value":"3.6.2"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"get_server_info","title":null,"description":"Get AGA server info, public keys, and portal state.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":22},{"name":"get_portal_state","title":null,"description":"Get current portal state, loaded artifact info, and enforcement status.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":23},{"name":"init_chain","title":null,"description":"Initialize continuity chain with genesis event.","inputs":[{"name":"specification_hash","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":23},{"name":"attest_subject","title":null,"description":"Attest subject, generate sealed Policy Artifact. Auto-loads into portal.","inputs":[{"name":"behavioral_baseline","type":"object","required":false,"description":null},{"name":"evidence_items","type":"array","required":false,"description":null},{"name":"subject_content","type":"string","required":true,"description":"Content/bytes of the subject"},{"name":"subject_metadata","type":"object","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":62},{"name":"measure_integrity","title":null,"description":"Measure subject state, compare to sealed reference. Generates signed receipt for every measurement.","inputs":[{"name":"subject_content","type":"string","required":true,"description":"Current content of the subject"},{"name":"subject_metadata","type":"object","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":46},{"name":"revoke_artifact","title":null,"description":"Revoke an active policy artifact mid-session. Portal terminates on next measurement. (NCCoE Phase 3b)","inputs":[{"name":"reason","type":"string","required":true,"description":"Reason for revocation"},{"name":"sealed_hash","type":"string","required":true,"description":"Sealed hash of artifact to revoke"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":61},{"name":"verify_chain","title":null,"description":"Verify continuity chain integrity.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":13},{"name":"generate_evidence_bundle","title":null,"description":"Export the canonical SEP evidence bundle: signed PERMITTED/DENIED tool-call receipts + Merkle proofs + a mandatory signed checkpoint, for offline third-party verification (verify_bundle_offline, aga-verify, or aga-receipt-spec/verify/verify-sep.mjs). Pin gateway_public_key to prove provenance.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":74},{"name":"verify_bundle_offline","title":null,"description":"Verify a canonical SEP evidence bundle offline (full §6 algorithm: structural floor, receipt signatures, chain+ordering, leaf-recompute + Merkle bijection, signed checkpoint). Pass pinned_public_key to also prove provenance.","inputs":[{"name":"bundle","type":null,"required":false,"description":null},{"name":"pinned_public_key","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":68},{"name":"request_claim","title":null,"description":"Request disclosure of a claim. Auto-substitutes if denied.","inputs":[{"name":"claim_id","type":"string","required":true,"description":null},{"name":"mode","type":"string","required":false,"description":null},{"name":"requester_id","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":44},{"name":"list_claims","title":null,"description":"List available claims with sensitivity levels.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":16},{"name":"delegate_to_subagent","title":null,"description":"Derive a constrained policy artifact for a sub-agent. Scope can only diminish, never expand. (NCCoE constrained delegation)","inputs":[{"name":"delegation_purpose","type":"string","required":true,"description":"Purpose of the delegation"},{"name":"enforcement_triggers","type":"array","required":true,"description":"Subset of parent enforcement triggers"},{"name":"measurement_types","type":"array","required":true,"description":"Subset of parent measurement types"},{"name":"requested_ttl_seconds","type":"number","required":true,"description":"Requested TTL (will be clamped to parent remaining)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":99},{"name":"measure_behavior","title":null,"description":"Measure behavioral patterns (unauthorized tools, rate violations, forbidden sequences). DETECTIVE-ONLY by default: it records and PROVES drift but does not block. Pass enforce=true to also trip the portal into phantom quarantine on drift (opt-in; off by default). (NIST-2025-0035)","inputs":[{"name":"enforce","type":"boolean","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":79},{"name":"get_receipts","title":null,"description":"Get all signed receipts, optionally filtered by artifact.","inputs":[{"name":"artifact_hash","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":27},{"name":"get_chain_events","title":null,"description":"Get continuity chain events.","inputs":[{"name":"end_seq","type":"number","required":false,"description":null},{"name":"start_seq","type":"number","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":30}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T07:23:14.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[{"id":"GHSA-mrhx-c7xc-m3w5","cve":"CVE-2023-54404","severity":"high","fixAvailable":true}],"vulnerabilitiesTotal":1,"dependencies":{"nodes":135,"partial":false,"deprecated":1,"stale":50,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-09-26","recent":[{"id":"chg_01a19b24-8564-7634-aee1-94aa8199f842","kind":"check.verdict","summary":"Stability (0.97 → pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a19b24-8564-7634-aee1-94aa8199f842"},{"id":"chg_01a19b24-8565-7c4f-964f-e6f66b8a9a2e","kind":"score.total_changed","summary":"Trust score (84 → 85)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a19b24-8565-7c4f-964f-e6f66b8a9a2e"},{"id":"chg_01a195ff-4e03-79b5-b07f-6a297379633e","kind":"check.verdict","summary":"Stability (pass → 0.97)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a195ff-4e03-79b5-b07f-6a297379633e"},{"id":"chg_01a195ff-4e04-751c-8dc2-4adc107508a0","kind":"score.total_changed","summary":"Trust score (85 → 84)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a195ff-4e04-751c-8dc2-4adc107508a0"},{"id":"chg_01a1771a-2769-7bc3-a2e3-4934a6325780","kind":"check.verdict","summary":"Stability (0.97 → pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a1771a-2769-7bc3-a2e3-4934a6325780"},{"id":"chg_01a1771a-276b-730e-a79a-37800dd5b023","kind":"score.total_changed","summary":"Trust score (84 → 85)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a1771a-276b-730e-a79a-37800dd5b023"},{"id":"chg_01a16ccc-4a49-7707-9b25-8b89c87437e7","kind":"advisory.identified","summary":"CVE-2023-54404 affects this package (high)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a16ccc-4a49-7707-9b25-8b89c87437e7"},{"id":"chg_01a16ccc-4a4a-7486-98ae-79912a4bd4a9","kind":"check.verdict","summary":"Known CVEs (pass → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a16ccc-4a4a-7486-98ae-79912a4bd4a9"},{"id":"chg_01a16ccc-4a4a-7a32-9bee-cc3c3a32475e","kind":"score.total_changed","summary":"Trust score (89 → 84)","materiality":"functional","direction":"regression","scoreDelta":-5,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a16ccc-4a4a-7a32-9bee-cc3c3a32475e"},{"id":"chg_01a167a5-2916-722c-bd2d-44c0e0bf0762","kind":"score.total_changed","summary":"Trust score (88 → 89)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a167a5-2916-722c-bd2d-44c0e0bf0762"},{"id":"chg_01a15d57-63a7-7576-9f58-d8b7cf25e1cb","kind":"score.total_changed","summary":"Trust score (87 → 88)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a15d57-63a7-7576-9f58-d8b7cf25e1cb"},{"id":"chg_01a15309-96ef-7687-8d09-0866c2b3ff5e","kind":"score.total_changed","summary":"Trust score (86 → 87)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a15309-96ef-7687-8d09-0866c2b3ff5e"},{"id":"chg_01a148bc-369a-7bc5-9b80-94cb4b0e9740","kind":"score.total_changed","summary":"Trust score (85 → 86)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a148bc-369a-7bc5-9b80-94cb4b0e9740"},{"id":"chg_01a1394b-4bc4-7acc-a5ce-7c18b2b6b0ab","kind":"score.total_changed","summary":"Trust score (84 → 85)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a1394b-4bc4-7acc-a5ce-7c18b2b6b0ab"},{"id":"chg_01a1317f-c507-749f-a909-3a2519018edd","kind":"check.reverified","summary":"Security disclosure (unverified → pass)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-12","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a1317f-c507-749f-a909-3a2519018edd"},{"id":"chg_01a1317f-c509-7919-84c8-89ee171d61d5","kind":"score.total_changed","summary":"Trust score (83 → 84)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-12","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a1317f-c509-7919-84c8-89ee171d61d5"},{"id":"chg_01a12cfd-c247-797a-9a8f-5dcd75d36363","kind":"check.unverifiable","summary":"Security disclosure (pass → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-11","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a12cfd-c247-797a-9a8f-5dcd75d36363"},{"id":"chg_01a12cfd-c248-7651-9205-cf7b661bfdf4","kind":"score.total_changed","summary":"Trust score (81 → 83)","materiality":"functional","direction":"improvement","scoreDelta":2,"occurredOn":"2026-10-11","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a12cfd-c248-7651-9205-cf7b661bfdf4"},{"id":"chg_01a11414-fe8e-7d4d-afec-46e12ea1a783","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-07","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a11414-fe8e-7d4d-afec-46e12ea1a783"},{"id":"chg_01a105b8-2976-7844-89a3-aa06017449b0","kind":"check.reverified","summary":"Stability (unverified → 0.27)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-04","url":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server#chg-chg_01a105b8-2976-7844-89a3-aa06017449b0"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server/changelog.json"},"links":{"html":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server","markdown":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server.md","changelogJson":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server/changelog.json","changelogRss":"https://verifymcp.io/servers/attestedintelligence-aga-mcp-server/attested-intelligence-aga-mcp-server.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@attested-intelligence/aga-mcp-server"},{"label":"Socket report","href":"https://socket.dev/npm/package/@attested-intelligence/aga-mcp-server"},{"label":"Repository","href":"https://github.com/attestedintelligence/aga-mcp-server"},{"label":"Website","href":"https://attestedintelligence.com/"}]}}