{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:28:42.777Z","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard","markdownUrl":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard.md","server":{"slug":"infraveilhq-agent-guard","name":"Infraveil Agent Guard","registryName":"io.github.infraveilhq/agent-guard","description":"Gate an AI agent's destructive actions behind human approval, with a tamper-evident log.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"dead","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"infraveil-guard","type":"pypi","identifier":"infraveil-guard","withdrawn":false,"url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard","version":"0.1.1","transport":"stdio","scoredAt":"2026-09-05T05:14:14.493Z"},"score":{"total":0,"tier":"low","status":"scored","weekDelta":-36,"history":[{"date":"2026-09-05","total":0},{"date":"2026-09-04","total":7},{"date":"2026-09-03","total":14},{"date":"2026-09-02","total":22},{"date":"2026-09-01","total":29},{"date":"2026-08-31","total":36},{"date":"2026-08-30","total":36},{"date":"2026-08-29","total":36},{"date":"2026-08-28","total":36},{"date":"2026-08-27","total":36},{"date":"2026-08-26","total":36},{"date":"2026-08-25","total":36},{"date":"2026-08-24","total":36},{"date":"2026-08-23","total":36},{"date":"2026-08-22","total":36},{"date":"2026-08-21","total":36},{"date":"2026-08-20","total":36},{"date":"2026-08-19","total":36},{"date":"2026-08-18","total":36},{"date":"2026-08-17","total":36},{"date":"2026-08-16","total":36},{"date":"2026-08-15","total":36},{"date":"2026-08-14","total":36},{"date":"2026-08-13","total":36},{"date":"2026-08-12","total":36},{"date":"2026-08-11","total":21},{"date":"2026-08-10","total":21},{"date":"2026-08-09","total":36},{"date":"2026-08-08","total":36},{"date":"2026-08-07","total":36}]},"categories":[{"name":"Supply Chain Security","score":50,"verdict":"unverified","reasons":["No malware found by supply-chain analysis.","Known CVEs could not be checked: we could not find this package in its registry.","Install-script risk not yet assessed.","Dependency health could not be checked: we could not find this package in its registry."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.inconclusive","args":{"reason":"root_not_published"}},{"code":"installscript.inconclusive","args":{"reason":"metadata_unavailable"}},{"code":"dephealth.inconclusive","args":{"reason":"root_not_published"}}]},{"name":"Provenance & Transparency","score":0,"verdict":"fail","reasons":["Repository check failed: the declared repository URL returned HTTP 404.","Provenance check failed: the registry has no such package, so there's no artefact to verify.","License check failed: the registry has no such package, so no license can be read.","Maintenance check failed: the registry has no such package, so there's no release history to read.","Security-disclosure policy not yet verified: we couldn't inspect the source repository."],"codes":[{"code":"provenance.repo_http_error","args":{"status":"404"}},{"code":"provenance.package_absent","args":{"reason":"package_absent"}},{"code":"license.package_absent","args":{"reason":"package_absent"}},{"code":"maintenance.package_absent","args":{"reason":"package_absent"}},{"code":"disclosure.repo_inconclusive","args":{"reason":"repo_not_visible"}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema quality not yet verified: our sandbox could not run this package, so we have no schema to assess."],"codes":[{"code":"schema.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: our sandbox could not run this package, so we have no schema to compare."],"codes":[{"code":"stability.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: our sandbox could not run this package, so we have no tool definitions to assess."],"codes":[{"code":"toolquality.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan."],"codes":[{"code":"toolsafety.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Protocol version not yet verified: our sandbox could not run this package, so we never saw its MCP handshake."],"codes":[{"code":"cap.sandbox_failed","args":{"reason":"not_attempted","status":"unsupported"}}]}],"inconclusive":["Known CVEs could not be checked: we could not find this package in its registry.","Install-script risk not yet assessed.","Dependency health could not be checked: we could not find this package in its registry.","Security-disclosure policy not yet verified: we couldn't inspect the source repository.","Schema quality not yet verified: our sandbox could not run this package, so we have no schema to assess.","Stability not yet verified: our sandbox could not run this package, so we have no schema to compare.","Tool coverage not yet verified: our sandbox could not run this package, so we have no tool definitions to assess.","Tool safety not yet verified: our sandbox could not run this package, so we have no tool text to scan.","Protocol version not yet verified: our sandbox could not run this package, so we never saw its MCP handshake."],"malware":[],"components":[{"slug":"infraveil-guard","type":"pypi","identifier":"infraveil-guard","withdrawn":false,"score":0,"current":true,"url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard","markdownUrl":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard.md"}],"facts":[{"label":"Registry","value":"pypi"},{"label":"Package","value":"infraveil-guard"},{"label":"Version","value":"0.1.1"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-09-05T05:14:14.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"package_absent","label":"Package not found","reason":null,"reasonLabel":null,"discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-07-27","recent":[{"id":"chg_01a06ffd-1f2e-7037-a2f1-4047c230c85e","kind":"score.total_changed","summary":"Trust score (7 → 15)","materiality":"functional","direction":"improvement","scoreDelta":8,"occurredOn":"2026-09-05","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a06ffd-1f2e-7037-a2f1-4047c230c85e"},{"id":"chg_01a06ad6-2244-76c3-9e44-ffbca85e89db","kind":"score.total_changed","summary":"Trust score (14 → 15)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-09-04","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a06ad6-2244-76c3-9e44-ffbca85e89db"},{"id":"chg_01a065af-b98a-7d4c-8624-a917220f5201","kind":"score.total_changed","summary":"Trust score (22 → 15)","materiality":"functional","direction":"regression","scoreDelta":-7,"occurredOn":"2026-09-03","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a065af-b98a-7d4c-8624-a917220f5201"},{"id":"chg_01a06088-fa55-78f8-8ba7-28d24edd88cf","kind":"score.total_changed","summary":"Trust score (29 → 15)","materiality":"functional","direction":"regression","scoreDelta":-14,"occurredOn":"2026-09-02","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a06088-fa55-78f8-8ba7-28d24edd88cf"},{"id":"chg_01a05b62-e976-7dd3-aa61-a68d72db535d","kind":"score.total_changed","summary":"Trust score (36 → 15)","materiality":"functional","direction":"regression","scoreDelta":-21,"occurredOn":"2026-09-01","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a05b62-e976-7dd3-aa61-a68d72db535d"},{"id":"chg_01a05672-908e-7a12-8dd0-203619c04020","kind":"check.unverifiable","summary":"Install scripts (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-08-31","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a05672-908e-7a12-8dd0-203619c04020"},{"id":"chg_01a05672-9090-7077-b8dd-5d9b2277df2a","kind":"installscript.hooks_changed","summary":"The code this package runs automatically changed (its declared build backend)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-08-31","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a05672-9090-7077-b8dd-5d9b2277df2a"},{"id":"chg_01a05672-9090-7633-aaa2-2f7a0674ed35","kind":"score.total_changed","summary":"Trust score (36 → 15)","materiality":"functional","direction":"regression","scoreDelta":-21,"occurredOn":"2026-08-31","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a05672-9090-7633-aaa2-2f7a0674ed35"},{"id":"chg_01a05115-8a9f-7dec-a0ab-07568bf33a45","kind":"check.verdict","summary":"Source repository (pass → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-08-30","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a05115-8a9f-7dec-a0ab-07568bf33a45"},{"id":"chg_01a05115-8aa1-736e-a495-f2bcf6a6c37c","kind":"check.unverifiable","summary":"Known CVEs (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-08-30","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a05115-8aa1-736e-a495-f2bcf6a6c37c"},{"id":"chg_01a05115-8aa1-7bec-aa6a-90eb4e1c6e6d","kind":"check.unverifiable","summary":"Security disclosure (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-08-30","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a05115-8aa1-7bec-aa6a-90eb4e1c6e6d"},{"id":"chg_01a05115-8aa2-73a6-9f74-2a2d5a5eec2f","kind":"check.unverifiable","summary":"Dependency health (0.99 → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-08-30","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a05115-8aa2-73a6-9f74-2a2d5a5eec2f"},{"id":"chg_01a05115-8aa2-7979-94c5-c5b3266fe2d9","kind":"score.total_changed","summary":"Trust score (36 → 20)","materiality":"functional","direction":"regression","scoreDelta":-16,"occurredOn":"2026-08-30","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a05115-8aa2-7979-94c5-c5b3266fe2d9"},{"id":"chg_01a03c7d-0392-7263-b927-b36624304cb6","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-08-26","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_01a03c7d-0392-7263-b927-b36624304cb6"},{"id":"chg_019ff472-8462-7d2d-a894-38e4c50f40a8","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-08-12","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_019ff472-8462-7d2d-a894-38e4c50f40a8"},{"id":"chg_019ff472-8463-7c59-8b29-5f5d0e5f6ea9","kind":"score.total_changed","summary":"Trust score (21 → 36)","materiality":"functional","direction":"improvement","scoreDelta":15,"occurredOn":"2026-08-12","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_019ff472-8463-7c59-8b29-5f5d0e5f6ea9"},{"id":"chg_019fef46-c9b8-7491-928f-da368988e833","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-08-11","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_019fef46-c9b8-7491-928f-da368988e833"},{"id":"chg_019fea21-ee39-750c-8233-dd2accd1f0b2","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-08-10","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_019fea21-ee39-750c-8233-dd2accd1f0b2"},{"id":"chg_019fea21-ee3b-71b9-80e8-5d6fdcba77a0","kind":"score.total_changed","summary":"Trust score (36 → 21)","materiality":"functional","direction":"regression","scoreDelta":-15,"occurredOn":"2026-08-10","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_019fea21-ee3b-71b9-80e8-5d6fdcba77a0"},{"id":"chg_019fd060-1055-7ef9-85fe-15e272d567d6","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-08-05","url":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard#chg-chg_019fd060-1055-7ef9-85fe-15e272d567d6"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard/changelog.json"},"links":{"html":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard","markdown":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard.md","changelogJson":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard/changelog.json","changelogRss":"https://verifymcp.io/servers/infraveilhq-agent-guard/infraveil-guard.xml","external":[{"label":"PyPI project","href":"https://pypi.org/project/infraveil-guard/"},{"label":"Socket report","href":"https://socket.dev/pypi/package/infraveil-guard"},{"label":"Website","href":"https://infraveil.com/"}]}}