Opedd — Licensed Content for AI
NPM · OPEDD-MCP · 2 COMPONENTS · SCANNED AUG 3
Licensed, rights-cleared content for AI agents - verifiable license keys + EU AI Act attestation.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security87
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (108 of 109), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (108 of 109), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 1 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability63
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 1603 tokens (~200/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
- Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · opedd-mcp
claude mcp add com-opedd-opedd-mcp -- npx -y opedd-mcp
codex mcp add com-opedd-opedd-mcp -- npx -y opedd-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-opedd-opedd-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"opedd-mcp"
],
"enabled": true
}
}
} openclaw mcp add com-opedd-opedd-mcp --command npx --arg -y --arg opedd-mcp
mcp_servers:
com-opedd-opedd-mcp:
command: "npx"
args: ["-y", "opedd-mcp"] {
"mcpServers": {
"com-opedd-opedd-mcp": {
"command": "npx",
"args": [
"-y",
"opedd-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Aug 26 +43
- Provenance: unverified → fail ▼ security
- Malware scan: unverified → pass ▲ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Stability: unverified → 0.23 ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- Schema quality: unverified → good ▲ functional
- License: unverified → pass ▲ functional
- Licence: MIT functional
- 1 Aug 26 +18
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- MCP protocol: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- 31 Jul 26 −20
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
- 27 Jul 26 43
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 108 packages
108 packages in the resolved dependency tree · 108 deprecated · 32 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
browse_registry ~107
Browse the public Opedd license registry. Returns recently issued licenses and licensable content. Filter by publisher_id to explore all content from a specific publisher. Filter by article_id to see all licenses issued for a specific article.
| Name | Type | Req | Description |
|---|---|---|---|
| article_id | string | — | Filter results to a specific article (UUID) |
| limit | number | — | Number of results to return (default: 10, max: 50) |
| publisher_id | string | — | Filter results to a specific publisher (UUID) |
No output schema declared.
No examples provided.
detect_platform ~203
Detect the content platform behind a URL via POST /detect-platform (Phase 12 Wave 3 W3.1). Public no-auth lookup. Given a URL, identifies what platform powers it (Substack / Beehiiv / Ghost / Medium / Brevo / custom) and returns the suggested onboarding workflow. Hostname-detectable platforms (Substack subdomain, Beehiiv suffix, etc.) resolve in milliseconds; custom domains may take ~few seconds while the detector probes well-known platform endpoints in parallel. Returns: {platform, confidence, archive_method, forward_method, required_credentials, instructions}. The archive_method + forward_method fields are the two onboarding-workflow inputs Opedd's setup wizard reads (one for historical content backfill, one for new-content forward stream). instructions is human-readable operator copy explaining the inferred path.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Publisher URL to inspect (any well-formed URL works; hostname-match short-circuits the probe path). |
No output schema declared.
No examples provided.
lookup_content ~82
Look up a piece of content on the Opedd registry by URL. Returns the article title, publisher, available license types, and pricing (human republication price and AI training/inference price). Always call this first to check if content is licensable and what it costs.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | The canonical URL of the article or content to look up |
No output schema declared.
No examples provided.
publisher_directory ~209
Browse the public Opedd publisher catalog via GET /publisher-directory. Returns paginated publishers with article counts, pricing (per-article + annual + monthly-forward-feed), plan, and sample articles (RAG-extended metadata). **The primary discovery surface for AI labs to find Opedd-licensable publishers** — distinct from `browse_registry` (which lists issued LICENSES, not publishers). Filter by category (case-insensitive substring), min_articles, or verified status. Public no-auth — useful pre-purchase scoping before buyers commit to enterprise-license POST.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | — | Case-insensitive substring filter on publisher category (e.g. 'finance', 'AI'). |
| limit | number | — | Page size cap. |
| min_articles | number | — | Filter to publishers with at least this many licensable articles. |
| offset | number | — | Pagination offset. |
| verified | string | — | 'true' to show only verified publishers (default), 'false' for unverified. |
No output schema declared.
No examples provided.
purchase_enterprise_license ~322
Purchase a bulk enterprise license covering multiple publishers (Phase 10). Returns a Stripe client_secret for payment completion + the enterprise_license_id. After payment, an ent_* access key is emailed to buyer_email. Scopes: 'custom' (pass-through publisher_ids), 'platform_wide' (auto-resolve all opted-in publishers), 'filtered' (Phase 10 filter_rules). License tiers: 'rag' (= ai_retrieval), 'training' (= ai_training, flat-fee not metered), 'inference' (= ai_retrieval), 'full_ai' (writes both retrieval + training records).
| Name | Type | Req | Description |
|---|---|---|---|
| billing_type | string | — | Billing cadence (default: annual) |
| buyer_email | string | yes | Email to deliver the access key after payment |
| buyer_org | string | yes | Buyer organization name (for billing + audit ledger) |
| buyer_webhook_url | string | — | Optional HMAC-signed webhook for content.published events on covered publishers |
| duration_months | number | — | License duration in months (default: 12) |
| filter_rules | object | — | Required when scope='filtered'. See Phase 10 docs for shape: excluded_publisher_ids / direct_license_carveouts / categories / max_price_per_event. |
| license_tier | string | — | License tier (default: rag) |
| publisher_ids | array | yes | Array of publisher UUIDs. Required for scope='custom'; ignored for platform_wide/filtered (resolved server-side). |
| scope | string | — | Coverage scope (default: custom) |
No output schema declared.
No examples provided.
purchase_license ~279
Purchase a content license from the Opedd protocol using a Stripe payment method. Returns a license key (format: OP-XXXX-XXXX) and a certificate URL. The buyer receives a Handshake Email with their license key. Set OPEDD_BUYER_EMAIL and OPEDD_PAYMENT_METHOD_ID env vars to avoid passing them on every call. License types: 'human' = republication rights, 'ai' = training dataset rights, 'ai_inference' = inference/RAG rights.
| Name | Type | Req | Description |
|---|---|---|---|
| article_id | string | — | Opedd article UUID (use this OR article_url) |
| article_url | string | — | URL of the article to license (use this OR article_id) |
| buyer_email | string | — | Email address for the license. Falls back to OPEDD_BUYER_EMAIL env var. |
| buyer_name | string | — | Full name of the buyer (for the license record and certificate) |
| buyer_organization | string | — | Organization or company name (for enterprise/editorial licenses) |
| intended_use | string | — | Intended use of the licensed content |
| license_type | string | yes | human = republication/editorial rights, ai = training dataset rights, ai_inference = inference/RAG rights |
| payment_method_id | string | — | Stripe payment method ID (pm_...). Falls back to OPEDD_PAYMENT_METHOD_ID env var. |
No output schema declared.
No examples provided.
rsl_get ~322
Fetch a publisher's RSL Standard manifest via GET /rsl-manifest (Phase 12 Wave 1 W1.1). Public no-auth endpoint — discovery surface for AI agents/crawlers wanting to know what's licensable from a publisher BEFORE going through the buyer-account signup flow. Returns the 4 canonical license types (ai_retrieval, ai_training, human_per_article, human_full_archive) the publisher has opted into, plus the EU CDSM Article 4(3) opt-out posture (`tdm_reservation`). Set `jsonld: true` to request the JSON-LD shape with embedded HMAC-SHA256 signed receipt over the CDSM Article 4(3) reservation state + `tdm:reservationSignedAt` timestamp — regulators can post-hoc verify the reservation was the claimed value at the claimed time. Default `jsonld: false` returns the raw RSL Standard JSON manifest. Per INVARIANTS.md W1.6: this is the PUBLISHER-side CDSM Article 4(3) declaration surface. It is NOT an EU AI Act Article 53 attestation (which is buyer-side, JWT-auth, via article_53_attestation tool).
| Name | Type | Req | Description |
|---|---|---|---|
| jsonld | boolean | — | If true, request JSON-LD shape (Accept: application/ld+json) with embedded HMAC-SHA256 signed receipt. Default false returns raw RSL Standard JSON shape. |
| publisher_id | string | yes | UUID of the publisher whose RSL manifest to fetch. Publisher must be verified. |
No output schema declared.
No examples provided.
verify_license ~79
Verify the authenticity of an Opedd license key. Returns license details including: article title, publisher, license type, issue date, amount paid, buyer info, and blockchain proof status. Use this to confirm a license is valid before using licensed content.
| Name | Type | Req | Description |
|---|---|---|---|
| license_key | string | yes | The license key to verify (format: OP-XXXX-XXXX) |
No output schema declared.
No examples provided.