Runs on your machine: something must execute the package.Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it.
tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
stabilityn/a · weight 15
n/a
stability.changes, stability.rug_pulltool list unknown
dependenciesn/a · weight 15
n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvabledeps.dev does not know @attested-intelligence/[email protected]
Tool list unknown · checked 2026-10-19 15:48 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
Dependencies
@attested-intelligence/[email protected]npmthis version is not known to the dependency resolver
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
Endpoints
package
registry
version
runtime
secrets
@attested-intelligence/aga-mcp-server
npm
3.6.2
–
AGA_GATEWAY_KEY
Tools (0)
No tools observed. Local packages are never executed by the registry.
Thin MCP and CLI proxy for AI agent and MCP security auditing via a hosted backend
Official server.json
{
"name": "io.github.attestedintelligence/aga-mcp-server",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "3.6.2",
"packages": [
{
"version": "3.6.2",
"transport": {
"type": "stdio"
},
"identifier": "@attested-intelligence/aga-mcp-server",
"registryType": "npm",
"environmentVariables": [
{
"name": "AGA_GATEWAY_KEY",
"format": "string",
"isSecret": true,
"description": "Ed25519 seed, 64 hex characters, that signs this server's evidence-bundle receipts and checkpoint, so gateway_public_key (get_server_info) is the same after a restart and can be pinned. Set in your MCP client's configuration, the seed sits inside the governed client's trust domain. Receipts are kept in memory only; save a generate_evidence_bundle result before the server stops. Unset or invalid: a new key each start, warned on stderr. When set, even to an invalid value, AGA_GATEWAY_KEY_FILE is not read."
},
{
"name": "AGA_GATEWAY_KEY_FILE",
"format": "filepath",
"description": "Path to a file holding the 64-hex Ed25519 seed; read only when AGA_GATEWAY_KEY is unset or empty, with the same effect. A stdio server started by your MCP client runs as the client's OS user, so the file sits inside the governed client's trust domain. Missing, unreadable or invalid: a new key each start, warned on stderr."
}
]
}
],
"repository": {
"id": "1262439522",
"url": "https://github.com/attestedintelligence/aga-mcp-server",
"source": "github"
},
"websiteUrl": "https://attestedintelligence.com",
"description": "Verifiable decision records for AI agents: signed receipts for calls to its own governed tools."
}