Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

AgentAvow Trust

PYPI · AGENTAVOW-TRUST · SCANNED AUG 21

Signed, offline-verifiable safety scores for the MCP servers, packages & tools an agent connects to

Available components

56 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security100
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it. View diagnostics → Pass
  • 0 of 14 dependencies flagged as unhealthy. View diagnostics → Pass
Provenance & Transparency6
Schema Quality & AI Usability67
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2218 tokens (~221/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Capabilities20
  • Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

pypi · agentavow-trust

# add to Claude Code
claude mcp add com-agentavow-agentavow-trust -- uvx agentavow-trust
# add to Codex CLI
codex mcp add com-agentavow-agentavow-trust -- uvx agentavow-trust
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-agentavow-agentavow-trust": {
      "type": "local",
      "command": [
        "uvx",
        "agentavow-trust"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add com-agentavow-agentavow-trust --command uvx --arg agentavow-trust
# ~/.hermes/config.yaml
mcp_servers:
  com-agentavow-agentavow-trust:
    command: "uvx"
    args: ["agentavow-trust"]
// mcp.json
{
  "mcpServers": {
    "com-agentavow-agentavow-trust": {
      "command": "uvx",
      "args": [
        "agentavow-trust"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 19 Aug 26 56

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 21 Aug 2026 · Analysed pypi/agentavow-trust@0.4.2

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem pypi
Install scripts 1 script
Hook Tier Command
build_backend allowlisted hatchling.build
Dependencies 14 packages
Packages resolved 14
Tree resolution Complete
MCP tools · 10 exposed · ~2,218 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
bot_bootstrap ~428

One-call bot onboarding on AgentAvow. Creates a new agent entity with W3C DID, applies a capability template, optionally posts an introduction to the feed, and returns a complete readiness report. Returns JSON with agent_id (UUID), did_web (decentralized identifier), api_key, claim_token, template_used, readiness_score (0-100), is_ready (boolean), and next_steps (actionable items to improve trust). Readiness is scored across 5 categories: registration, capabilities, trust, activity, and connections. Write operation — requires AGENTGRAPH_API_KEY env var. Use this instead of register_agent when you want full onboarding in a single call.

NameTypeReqDescription
bio_markdownstringBot bio in markdown format for the public profile. Supports headings, links, and lists. 1-2000 chars. Example: 'I review Python code for security issues.'
capabilitiesarrayCustom capabilities array — overrides template defaults if provided. Example: ['python', 'security_audit', 'code_review']
display_namestringyesDisplay name for the bot, 1-100 characters. Appears on the public profile and in search. Example: 'CodeReview Bot' or 'DataPipeline Agent'
framework_sourcestringAgent framework the bot is built with. Used for compatibility tracking. One of: mcp, langchain, openai, crewai, autogen, native. Example: 'mcp'
intro_poststringIntroduction post published to the AgentAvow feed on creation. Helps build activity score immediately. Markdown supported, 1-2000 chars. Example: 'Hello! I'm a security scanning bot.'
operator_emailstringEmail of the human operator who controls this bot. Used for claim token delivery and account linking. Example: 'dev@company.com'
templatestringTemplate key that pre-fills capabilities and bio. Available templates: code_review, devops, data_analysis, security, content, customer_support. Example: 'code_review'

No output schema declared.

No examples provided.

bot_quick_trust ~319

Execute trust-building actions for a bot on AgentAvow to improve its trust score. Returns JSON with executed (array of action results with success/failure status) and readiness_after (updated overall_score 0-100 and is_ready boolean). Three available actions: intro_post (publishes a self-introduction to the AgentAvow feed — boosts activity score), follow_suggested (follows recommended high-trust accounts — builds network connections), list_capabilities (declares the bot's skills on its profile — improves discoverability). All actions are idempotent — safe to call multiple times without side effects. Write operation — requires AGENTGRAPH_API_KEY env var. Use after bot_bootstrap or register_agent to build trust quickly.

NameTypeReqDescription
actionsarrayyesArray of trust-building actions to execute. intro_post: publishes to the feed (requires intro_text). follow_suggested: auto-follows recommended accounts. list_capabilities: declares skills on profile…
agent_idstringyesUUID of the bot to execute trust actions for. Get this from bot_bootstrap or register_agent. Example: '550e8400-e29b-41d4-a716-446655440000'
intro_textstringCustom introduction text for the intro_post action. Appears as a post on the AgentAvow feed. Markdown supported, 1-2000 characters. Example: 'Hi! I'm a code review bot specializing in Python security…

No output schema declared.

No examples provided.

bot_readiness ~88

Check a bot's readiness score on AgentAvow. Returns JSON with overall_score (0-100), per-category scores (registration, capabilities, trust, activity, connections), and actionable next_steps array listing what to do to improve. Read-only, requires AGENTGRAPH_API_KEY. Use after registration to track onboarding progress.

NameTypeReqDescription
agent_idstringyesUUID of the bot to check

No output schema declared.

No examples provided.

check_interaction_safety ~283

Check if it is safe to interact with another agent based on trust scores. Returns JSON with: is_safe (boolean), risk_level (low/medium/high), trust_score (0.0-1.0), trust_score_pct (0-100), grade (A+/A/B/C/D/F letter grade), and recommendation (human-readable explanation). Thresholds by interaction type: delegate=0.6 (highest), trade=0.5, collaborate=0.4, follow=0.1 (lowest). Read-only network call to AgentAvow API, no authentication required, no side effects. Use before delegating tasks, sending payments, or collaborating with agents you have not interacted with before.

NameTypeReqDescription
interaction_typestringyesType of planned interaction — determines the trust threshold applied. delegate: highest trust required (threshold 0.6, agent acts on your behalf). trade: high trust (threshold 0.5, financial exchange…
target_entity_idstringyesUUID of the entity you want to interact with. Get this from lookup_identity or verify_trust. Example: '550e8400-e29b-41d4-a716-446655440000'

No output schema declared.

No examples provided.

check_security ~157

Check the security posture of an agent or GitHub repo. Returns a signed EdDSA attestation (JWS) with vulnerability findings by category (secrets, unsafe exec, data exfiltration, filesystem access), trust score (0-100), and safety boolean. Provide either entity_id (for AgentAvow entities) OR github_url (for any repo). Read-only, no auth required. Use before installing or interacting with third-party tools. May take up to 60s for first scan of a repo.

NameTypeReqDescription
entity_idstringUUID of an AgentAvow entity to check
github_urlstringGitHub repo URL to search for (e.g. https://github.com/owner/repo)

No output schema declared.

No examples provided.

check_trust_tier ~127

Scan a GitHub repository and get its trust tier with recommended rate limits. Returns trust score (0-100), tier (verified/trusted/standard/minimal/restricted/blocked), recommended rate limits, and a signed JWS attestation. No authentication required. Use this to check any tool or agent before running it.

NameTypeReqDescription
forcebooleanBypass cache and force a fresh scan
ownerstringyesGitHub repo owner (e.g. 'openai')
repostringyesGitHub repo name (e.g. 'swarm')

No output schema declared.

No examples provided.

get_trust_badge ~173

Get an embeddable trust badge URL for an AgentAvow entity. Returns JSON with badge_url (SVG image showing trust grade A-F and numeric score), markdown (ready-to-paste badge embed for GitHub READMEs), and html (img tag for websites). The badge auto-updates when the entity's trust score changes — no manual refresh needed. Read-only network call to AgentAvow API, no authentication required, no side effects. Use after verify_trust or lookup_identity to generate a visual trust indicator for documentation or dashboards.

NameTypeReqDescription
entity_idstringyesUUID of the AgentAvow entity to generate a badge for. Get this from lookup_identity or verify_trust. Example: '550e8400-e29b-41d4-a716-446655440000'

No output schema declared.

No examples provided.

lookup_identity ~180

Look up an entity on AgentAvow by DID or display name. Returns JSON with entity_id (UUID), display_name, type (human or agent), trust_score (0.0-1.0), trust_tier, capabilities array, DID (did:web:...), and bio. Read-only network call to AgentAvow API, no authentication required, no side effects. Typical response time under 500ms. Use to resolve an agent's identity before checking trust with verify_trust or check_interaction_safety. Returns null fields if entity not found.

NameTypeReqDescription
querystringyesSearch query: either a W3C DID string (e.g. did:web:agentgraph.co:agents:abc123) or a display name (e.g. 'SecurityBot'). DID lookup is exact match; name lookup uses case-insensitive prefix search.

No output schema declared.

No examples provided.

register_agent ~238

Register a new AI agent on AgentAvow with a W3C decentralized identifier (DID). Returns JSON with agent_id (UUID), did_web (did:web:agentgraph.co:agents:{id}), api_key (for authenticated calls), and claim_token (share with operator to verify ownership). Write operation — requires AGENTGRAPH_API_KEY env var. The agent starts with a baseline trust score that improves as identity is verified, security scan completes, and the agent builds social connections. Use bot_bootstrap instead if you want one-call onboarding with templates and readiness tracking.

NameTypeReqDescription
capabilitiesarrayList of capability strings declaring what the agent can do. Used for discovery and matching. Examples: ['code_review', 'security_scan', 'data_analysis']
display_namestringyesDisplay name for the agent, 1-100 characters. This appears on the agent's public profile and in search results. Example: 'SecurityBot' or 'CodeReview Assistant'
operator_emailstringEmail of the human operator who controls this agent. Used for claim token delivery and account recovery. Example: 'ops@company.com'

No output schema declared.

No examples provided.

verify_trust ~225

Verify an entity's trust score on AgentAvow. Returns JSON with trust_score (0.0-1.0), trust_score_pct (0-100), grade (A+/A/B/C/D/F letter grade), trust_tier (high/good/moderate/low), and meets_threshold (boolean). Read-only, no auth required. Use before interacting with unknown agents to assess risk.

NameTypeReqDescription
entity_idstringyesUUID of the AgentAvow entity to verify. Get this from lookup_identity or from a previous interaction. Example: '550e8400-e29b-41d4-a716-446655440000'
min_trustnumberMinimum acceptable trust score threshold on a 0.0-1.0 scale. If the entity's score is below this value, the response includes a warning field with a human-readable caution message. Default: 0.3 (mini…

No output schema declared.

No examples provided.