AgentAvow Trust

Scan a GitHub repo

scan_repo

Read-onlyIdempotent

Scan a public GitHub repository with AgentAvow and return whether it is safe for an agent to connect to: one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, an adoption score from real usage (stars), the findings behind it (with where and how to fix), and a signed, offline-verifiable attestation. Read-only, no account. Calls the AgentAvow public API at agentavow.com.

Input Schema

TableJSON Schema

Name	Required	Description
`repo`	Yes	Repo as 'owner/name' (e.g. 'vercel/next.js'), or just the name when 'owner' is given separately.
`force`	No	Re-scan now instead of returning the cached verdict (results cache ~1h). Use after the target has changed.
`owner`	No	Repo owner (optional if 'repo' is already 'owner/name').

Output Schema

TableJSON Schema

Name	Required	Description
`high`	No	High findings, static and sandbox.
`tier`	No	Trust tier for the score (detail, not the headline).
`cached`	No	Served from the ~1h cache.
`signed`	No	True when a signed (Ed25519/JWS) attestation backs this.
`target`	Yes	What was scanned, as given.
`install`	No	Install command, only when nothing blocks it.
`sandbox`	No	What the behavioral sandbox observed; null if it does not apply.
`verdict`	Yes	Binary form of the decision, kept for older clients.
`adoption`	No	The adoption score: real usage (downloads per week, stars or installs). Never changes the decision.
`critical`	No	Critical findings, static and sandbox.
`decision`	Yes	The answer to lead with: safe = Safe to connect, review = Review before you connect, do_not_connect = Do not connect.
`incident`	No	Known past compromise (context only, never scored).
`certified`	No	Matches the signed attestation's certified.eligible.
`subscores`	No	Per-category 0-100 scores behind the trust score.
`deprecated`	No	The maintainer's deprecation notice, or null.
`report_url`	Yes	Full report page.
`scanned_at`	No	When the scan ran (ISO 8601, UTC).
`verify_url`	No	How to verify offline.
`target_type`	Yes	github, npm, pypi, crates, docker, hf, or mcp.
`trust_score`	Yes	Trust score, 0-100. Evidence under the decision.
`published_at`	No	When that version was published.
`top_findings`	No	Up to five most important findings.
`certified_mark`	No	Certified and safe: show the Certified mark.
`decision_final`	Yes	False while the behavioral sandbox is still running; the decision can still change.
`findings_total`	No	All findings, every severity.
`rescan_pending`	No	A fresh scan was started; this is the previous result.
`verdict_reason`	No	Machine reason for the binary verdict, e.g. clean, blocking_findings, thin_coverage.
`decision_reason`	Yes	One sentence naming what decided it.
`package_version`	No	Package version scanned.
`report_json_url`	No	The full verdict as JSON.
`static_findings_total`	No	Findings from static analysis only.
`advisories_affecting_version`	No	Published advisories that affect this version.

Schema Changelog

Changes observed during successful MCP inspections.

Changed1 schema field changedOct 8, 2026

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "properties": {
+    "adoption": {
+      "description": "The adoption score: real usage (downloads per week, stars or installs). Never changes the decision.",
+      "properties": {
+        "count": {
+          "type": "integer"
+        },
+        "score_0_100": {
+          "type": "integer"
+        },
+        "unit": {
+          "type": "string"
+        }
+      },
+      "type": [
+        "object",
+        "null"
+      ]
+    },
+    "advisories_affecting_version": {
+      "description": "Published advisories that affect this version.",
+      "items": {
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "cached": {
+      "description": "Served from the ~1h cache.",
+      "type": "boolean"
+    },
+    "certified": {
+      "description": "Matches the signed attestation's certified.eligible.",
+      "type": "boolean"
+    },
+    "certified_mark": {
+      "description": "Certified and safe: show the Certified mark.",
+      "type": "boolean"
+    },
+    "critical": {
+      "description": "Critical findings, static and sandbox.",
+      "minimum": 0,
+      "type": "integer"
+    },
+    "decision": {
+      "description": "The answer to lead with: safe = Safe to connect, review = Review before you connect, do_not_connect = Do not connect.",
+      "enum": [
+        "safe",
+        "review",
+        "do_not_connect"
+      ],
+      "type": "string"
+    },
+    "decision_final": {
+      "description": "False while the behavioral sandbox is still running; the decision can still change.",
+      "type": "boolean"
+    },
+    "decision_reason": {
+      "description": "One sentence naming what decided it.",
+      "type": "string"
+    },
+    "deprecated": {
+      "description": "The maintainer's deprecation notice, or null.",
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "findings_total": {
+      "description": "All findings, every severity.",
+      "minimum": 0,
+      "type": "integer"
+    },
+    "high": {
+      "description": "High findings, static and sandbox.",
+      "minimum": 0,
+      "type": "integer"
+    },
+    "incident": {
+      "description": "Known past compromise (context only, never scored).",
+      "type": [
+        "object",
+        "null"
+      ]
+    },
+    "install": {
+      "description": "Install command, only when nothing blocks it.",
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "package_version": {
+      "description": "Package version scanned.",
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "published_at": {
+      "description": "When that version was published.",
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "report_json_url": {
+      "description": "The full verdict as JSON.",
+      "type": "string"
+    },
+    "report_url": {
+      "description": "Full report page.",
+      "type": "string"
+    },
+    "rescan_pending": {
+      "description": "A fresh scan was started; this is the previous result.",
+      "type": "boolean"
+    },
+    "sandbox": {
+      "description": "What the behavioral sandbox observed; null if it does not apply.",
+      "type": [
+        "object",
+        "null"
+      ]
+    },
+    "scanned_at": {
+      "description": "When the scan ran (ISO 8601, UTC).",
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "signed": {
+      "description": "True when a signed (Ed25519/JWS) attestation backs this.",
+      "type": "boolean"
+    },
+    "static_findings_total": {
+      "description": "Findings from static analysis only.",
+      "minimum": 0,
+      "type": "integer"
+    },
+    "subscores": {
+      "additionalProperties": {
+        "type": [
+          "number",
+          "null"
+        ]
+      },
+      "description": "Per-category 0-100 scores behind the trust score.",
+      "type": "object"
+    },
+    "target": {
+      "description": "What was scanned, as given.",
+      "type": "string"
+    },
+    "target_type": {
+      "description": "github, npm, pypi, crates, docker, hf, or mcp.",
+      "type": "string"
+    },
+    "tier": {
+      "description": "Trust tier for the score (detail, not the headline).",
+      "type": [
+        "string",
+        "null"
+      ]
+    },
+    "top_findings": {
+      "description": "Up to five most important findings.",
+      "items": {
+        "properties": {
+          "count": {
+            "description": "How many times it occurs.",
+            "type": "integer"
+          },
+          "remediation": {
+            "description": "How to fix it.",
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "severity": {
+            "description": "critical, high, medium, or low.",
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "what": {
+            "description": "What was found.",
+            "type": [
+              "string",
+              "null"
+            ]
+          },
+          "where": {
+            "description": "File and line, if file-based.",
+            "type": [
+              "string",
+              "null"
+            ]
+          }
+        },
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "trust_score": {
+      "description": "Trust score, 0-100. Evidence under the decision.",
+      "maximum": 100,
+      "minimum": 0,
+      "type": "integer"
+    },
+    "verdict": {
+      "description": "Binary form of the decision, kept for older clients.",
+      "enum": [
+        "safe",
+        "needs_review"
+      ],
+      "type": "string"
+    },
+    "verdict_reason": {
+      "description": "Machine reason for the binary verdict, e.g. clean, blocking_findings, thin_coverage.",
+      "type": "string"
+    },
+    "verify_url": {
+      "description": "How to verify offline.",
+      "type": "string"
+    }
+  },
+  "required": [
+    "target",
+    "target_type",
+    "decision",
+    "decision_final",
+    "decision_reason",
+    "trust_score",
+    "verdict",
+    "report_url"
+  ],
+  "type": "object"
+}

First observedSep 18, 2026

TDQS

Score is being calculated.

All AgentAvow Trust tools Inspect

Try in Browser

Shareable, User-Owned Context BackendPeople, applications, and agents read, write, and coordinate together in one context lake. Reach it over MCP, a CLI, a Python SDK, or REST.fulcradynamics.comAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources

Need Help?