proof-of-commitment
Proof of Commitment
スターは嘘をつく。行動シグナルは嘘をつかない。
npmパッケージ、PyPIパッケージ、GitHubリポジトリを行動コミットメント(スター、README、ダウンロード数よりも偽造が困難なシグナル)に基づいてスコアリングするMCPサーバーおよびWebツールです。
サプライチェーンの問題
一般的なNode.jsプロジェクトに含まれる3つのパッケージが、現在非常に危険な状態にあります:
chalk — 週3億9900万ダウンロード、メンテナー1名
zod — 週1億3900万ダウンロード、メンテナー1名
axios — 週9600万ダウンロード、メンテナー1名(2026年4月1日に攻撃発生)
スターやREADMEの品質ではこれらは表面化しません。行動シグナルならそれが可能です。
Related MCP server: brandguard
今すぐ試す
ターミナル(インストール不要):
npx proof-of-commitment axios zod chalk
# or scan your own project:
npx proof-of-commitment --file package.json
# PyPI too:
npx proof-of-commitment --pypi litellm langchain requestsWebデモ(インストール不要): getcommit.dev/audit — パッケージを貼り付けるだけで、数秒でリスクスコアを確認できます。
MCPサーバー(インストール不要):
{
"mcpServers": {
"proof-of-commitment": {
"type": "streamable-http",
"url": "https://poc-backend.amdal-dev.workers.dev/mcp"
}
}
}Claude Desktop、Cursor、Windsurf、またはMCP互換のAIツールに追加してください。その後、以下のように質問します:
「私のpackage.jsonをサプライチェーンリスクについて監査して」 「axios、zod、chalk、lodashをスコアリングして。どれが最もリスクが高い?」 「vercel/aiは活発にメンテナンスされている?」
GitHub Action
CIパイプラインにサプライチェーン監査を追加します。package.jsonやrequirements.txtからパッケージを自動検出し、結果をPRコメントとして投稿し、GitHub Step Summaryに書き込み、オプションでCRITICALなパッケージがある場合に失敗させることができます。
# .github/workflows/supply-chain-audit.yml
name: Supply Chain Audit
on: [push, pull_request]
jobs:
audit:
runs-on: ubuntu-latest
permissions:
pull-requests: write # needed for PR comments
steps:
- uses: actions/checkout@v4
- uses: piiiico/proof-of-commitment@main
with:
fail-on-critical: false # set true to block merges
comment-on-pr: true # posts audit table directly on the PRcomment-on-pr: true(デフォルト)の場合、アクションは自動的に監査テーブルをプルリクエストのコメントとして投稿します。また、再実行時には同じコメントを更新するため、コメントスパムが発生しません。レビュアーはPRを離れることなくリスクテーブルを確認できます。
入力:
入力 | デフォルト | 説明 |
| (自動) | カンマ区切りのパッケージ名(設定されていない場合、 |
|
| CRITICALなパッケージが見つかった場合にワークフローを失敗させる |
|
| 自動検出時に監査する最大パッケージ数 |
|
| 監査結果をPRコメントとして投稿する( |
出力: has-critical、critical-count、audit-summary(Markdownテーブル、Step Summaryにも書き込まれます)。
PRコメント / Step Summary出力の例:
| Package | Risk | Score | Maintainers | Downloads/wk | Age |
|---------|-------------|-------|-------------|--------------|-------|
| chalk | 🔴 CRITICAL | 75 | 1 | 380M | 12.7y |
| zod | 🔴 CRITICAL | 83 | 1 | 133M | 6.1y |
| axios | 🔴 CRITICAL | 89 | 1 | 93M | 11.6y |READMEバッジ
あなたがメンテナンスしている、または依存しているパッケージにコミットメントスコアバッジを追加しましょう:
例:
パッケージ | バッジURL |
axios |
|
zod |
|
litellm |
|
色:🟢 健全 (75+) · 🟡 良好 (60–74) · 🟡 中程度 (40–59) · 🟠 高リスク (<40) · 🔴 CRITICAL (メンテナー1名 + 週1000万ダウンロード超)
バッジはCloudflareのエッジで5分間キャッシュされます。APIキーは不要です。
REST API
APIキー不要。インストール不要。
curl https://poc-backend.amdal-dev.workers.dev/api/audit \
-X POST \
-H "Content-Type: application/json" \
-d '{"packages": ["axios", "zod", "chalk", "lodash", "express"]}'{
"count": 5,
"results": [
{
"name": "chalk",
"ecosystem": "npm",
"score": 75,
"maintainers": 1,
"weeklyDownloads": 398397580,
"ageYears": 12.7,
"trend": "stable",
"riskFlags": ["CRITICAL"]
},
...
]
}7つのMCPツール
ツール | 説明 |
| 最大20個のnpm/PyPIパッケージに対するバッチリスク監査 |
| npmパッケージ単体の行動プロファイル |
| PyPIパッケージ単体の行動プロファイル |
| GitHubリポジトリのコミットメントスコア(存続期間、コミット頻度、コントリビューターの深さ) |
| ノルウェー企業登録簿 — 営業年数、従業員数、財務情報 |
| 同上(組織番号による検索) |
| ブラウザ拡張機能の行動データ(検証済みのユニーク訪問者数、リピート率) |
スコアの測定内容
各パッケージは0〜100でスコアリングされます:
存続期間 — パッケージはどれくらい存在しているか?放置されたパッケージは攻撃のために再アクティブ化されることがあります。
メンテナーの深さ — メンテナー1名 + 週数百万ダウンロード = LiteLLMが悪用された攻撃対象領域。
リリースの整合性 — 定期的なリリースは活発な監視のシグナルです。長い空白期間は脆弱性の蓄積を意味します。
ダウンロード傾向 — 成長中のパッケージはより多くの精査(および攻撃)を引き寄せます。安定しているものはプロファイルが低くなります。
リスクフラグ:
CRITICAL— メンテナー1名 + 週1000万ダウンロード超(LiteLLM/axiosの攻撃プロファイルと一致)HIGH— パッケージが1年未満 + 急速な採用WARN— 12ヶ月以上リリースなし
実際のデータポイント
chalk — score 75, 1 maintainer, 399M/week ⚑ CRITICAL
zod — score 83, 1 maintainer, 139M/week ⚑ CRITICAL
axios — score 89, 1 maintainer, 96M/week ⚑ CRITICAL (attacked Apr 1 2026)
lodash — score 88, 3 maintainers, 68M/week
express — score 91, 5 maintainers, 35M/week
litellm — score 74, 1 maintainer ⚑ CRITICAL (supply chain attack Mar 2026)なぜ行動シグナルなのか
LiteLLM攻撃(2026年3月)とaxios攻撃(2026年4月)は同じパターンをたどりました:認証情報の盗難 → 悪意のあるパッケージのプッシュ → 9700万台以上のマシンが露出。どちらのパッケージも、攻撃の前にこれらの指標によってCRITICALとスコアリングされていました。
宣言的なシグナル(スター、READMEの品質、CIバッジ)ではこのリスクを捉えられません。行動コミットメントなら捉えられます。
公式MCPレジストリに掲載
registry.modelcontextprotocol.io → io.github.piiiico/proof-of-commitmentスタック
レイヤー | テクノロジー |
バックエンド | Cloudflare Workers + D1 |
MCP | Model Context Protocol SDK |
データ | npm registry, PyPI, GitHub API, Brønnøysund (NO) |
ランディング | Astro + Cloudflare Pages |
より広範なビジョン
サプライチェーン監査は最初のツールに過ぎません。その根底にあるプリミティブはコミットメントグラフです。これは、あらゆるドメインにおいてコンテンツベースの信頼に取って代わる行動シグナルです。
コンテンツが簡単に偽造できる(レビュー、スター、README)場合、コミットメントがシグナルとなります。12年間で847回のリリースを行ってきたメンテナーは、2023年に一度だけ公開したメンテナーとは異なる種類のコミットメントを持っています。
同じ論理がWebサイト、企業、AIエージェントにも適用されます。2つのカードネットワークが独立してこのギャップを指摘しています。Mastercard Verifiable Intent §9.2は、行動的信頼を「カバーされていない」と明示しています。Visa TAPは、エージェントを識別しますが、それらを信頼すべきかどうかには答えていません。
Proof of Commitmentは、彼らが指摘している信頼のレイヤーです。
ローカルで実行
bun install
bun run dev:backend # local server with SQLite
bun run test:e2e # E2E test with mock World IDデプロイ:
bun run deploy # deploys to Cloudflare WorkersAvailable Tools
8 toolsaudit_dependenciesAInspect
Batch-score multiple npm or PyPI packages for supply chain risk. Takes a list of package names and returns a risk table sorted by commitment score (lowest = highest risk first).
Risk flags:
CRITICAL: single npm publisher + >10M weekly downloads (publish-access concentration risk)
HIGH: new package (<1yr) + high downloads (unproven, rapid adoption = supply chain risk)
WARN: no release in 12+ months (potential abandonware)
Perfect for auditing a full package.json or requirements.txt — paste your dependency list and get a prioritized risk report.
Examples: score all deps in a project, compare two similar packages, identify abandonware before it becomes a CVE.
| Name | Required | Description | Default |
|---|---|---|---|
| packages | Yes | List of package names to score. Up to 20 at once. Examples: ["langchain", "litellm", "openai", "axios"] or ["@anthropic-ai/sdk", "zod", "express"] | |
| ecosystem | No | Package ecosystem. "auto" defaults to npm. Force "pypi" for Python packages. | auto |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description fully explains the risk flag criteria (CRITICAL, HIGH, WARN), sorting by commitment score, and batch size constraints (up to 20 packages). It lacks explicit read-only safety confirmation but is otherwise transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with a summary, risk definitions, and examples. It is concise and front-loaded, though slightly verbose in the examples section.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (2 params, no output schema), the description fully explains input, output format, risk logic, and usage scenarios. No gaps remain.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds no new parameter semantics beyond what the schema provides, but the schema is clear.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description specifies the verb 'batch-score', the resource 'multiple npm or PyPI packages', and the outcome 'supply chain risk' with a risk table. It clearly distinguishes from sibling tools that perform single-package lookups.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit use cases like auditing package.json or requirements.txt, and examples of applications. However, it does not explicitly state when not to use this tool, though the batch nature implies it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
lookup_businessBInspect
Search for a Norwegian business and get its commitment profile from public data (Brønnøysund Register Centre). Returns real commitment signals that can't be faked:
Temporal commitment: how long the business has operated
Financial commitment: revenue, profitability, equity health
Operational commitment: employee count, active status
Overall commitment score (0-100)
Data source: Norwegian government registers (Brreg). No user-contributed data needed — immediate trust verification for any Norwegian business.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Business name to search for (e.g. 'Peppes Pizza', 'Equinor') | |
| maxResults | No | Maximum number of results to return (default: 3) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It explains the data source (Brreg) and the categories of commitment signals, but lacks details on edge cases (e.g., business not found, rate limits, required permissions).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single paragraph with front-loaded purpose. It is concise but includes some marketing language ('can't be faked') that slightly reduces efficiency. Overall, it is well-structured for quick scanning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, so the description must explain return values. It lists the commitment categories, which is helpful, but omits details on output format, error handling, pagination, and data freshness. It is moderately complete but not fully sufficient for all agent needs.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with clear parameter descriptions. The description does not add substantial semantic value beyond the schema; it mentions the query parameter implicitly but does not enrich the meaning of 'maxResults' or provide additional constraints.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool searches for a Norwegian business and returns its commitment profile from public data. It specifies the verb 'search' and the resource 'Norwegian business', but does not explicitly distinguish from the sibling tool 'lookup_business_by_org'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for verifying Norwegian businesses via government registers and lists the return data. However, it does not provide explicit guidance on when to use this tool versus alternatives like 'lookup_business_by_org' or when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
lookup_business_by_orgAInspect
Look up a specific Norwegian business by organization number and get its commitment profile from public data (Brønnøysund Register Centre). Returns real commitment signals: longevity, financial health, operational activity, and overall commitment score.
| Name | Required | Description | Default |
|---|---|---|---|
| orgNumber | Yes | Norwegian organization number (9 digits, e.g. '984388659') |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It explicitly states the tool performs a lookup from public data (Brønnøysund Register Centre), implying read-only and non-destructive behavior. This is sufficient for transparency, though it does not detail any caveats like rate limits or data freshness.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that efficiently conveys purpose, input, and output. It is front-loaded and contains no redundant information, earning its place. However, it could be slightly more structured (e.g., separate sentence for output details).
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple lookup tool with one parameter and no output schema, the description adequately explains the input and the expected return values (four signals). It is complete enough for an agent to understand what results to expect, though adding a brief note on the format of the returned data would improve completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema covers 100% of parameters (orgNumber) with description. The tool description adds context about what the parameter is used for (Norwegian organization number) and example format, but essentially repeats schema info. Baseline 3 is appropriate as schema already does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (lookup), the resource (Norwegian business by organization number), and the output (commitment profile with specific signals: longevity, financial health, operational activity, overall commitment score). It distinguishes itself from sibling tools like lookup_github_repo or lookup_npm_package by focusing on Norwegian businesses.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use this tool (when needing commitment profile for a Norwegian business), but it does not explicitly state when not to use it or provide direct comparison to sibling tools such as lookup_business or query_commitment. Usage context is clear but lacks explicit alternatives or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
lookup_github_repoAInspect
Get a behavioral commitment profile for any public GitHub repository. Returns real signals: how long the project has existed, recent commit frequency, contributor community size, release cadence, and social proof. These are behavioral commitments — harder to fake than README claims.
Useful for: vetting open-source dependencies, evaluating AI tools/frameworks, assessing vendor reliability. Examples: "vercel/next.js", "facebook/react", "https://github.com/piiiico/proof-of-commitment"
| Name | Required | Description | Default |
|---|---|---|---|
| repo | Yes | GitHub repository in "owner/repo" format or full URL. Example: "vercel/next.js" |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It states the tool is read-only ('Get' and 'Returns'), works only with public repos, and describes the nature of the returned signals (behavioral commitments). It does not mention rate limits or authentication, but the read-only nature is clear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with a first paragraph explaining functionality and a second paragraph for use cases and examples. It is concise without redundant words, but could be slightly tighter.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the low complexity (one parameter, no nested objects), the description fully covers what the tool does, what it returns, and when to use it. No output schema is present, but the listed signals provide adequate expectations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with the 'repo' parameter's description already explaining the format and providing an example. The tool description repeats the example without adding new meaning beyond the schema, so baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it gets a 'behavioral commitment profile' for any public GitHub repository and lists the returned signals. It distinguishes itself from sibling tools which cover different domains (business, npm, Go modules, etc.).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly lists use cases: 'vetting open-source dependencies, evaluating AI tools/frameworks, assessing vendor reliability.' It provides examples but does not specify when not to use or mention alternatives. Since siblings cover other package types, the context is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
lookup_go_moduleAInspect
Get a behavioral commitment profile for any Go module on proxy.golang.org. Takes a full module path (e.g., "github.com/gin-gonic/gin", "golang.org/x/net", "k8s.io/client-go", "gopkg.in/yaml.v3") and returns real signals: module age, version count, publish cadence, GitHub contributors (the closest equivalent to "publishers" since Go has no centralized publisher concept — git push access is the publish equivalent), GitHub stars, OpenSSF Scorecard score.
The Go ecosystem has no centralized download counter, so this profile is GitHub-primary — the linked source repository's activity, contributor count, and Scorecard carry more weight than for npm/PyPI/Cargo. Stars are used as the popularity proxy.
Useful for: vetting Go dependencies before adding to go.mod, identifying abandonware, supply chain risk assessment. Examples: "github.com/gin-gonic/gin", "golang.org/x/crypto", "github.com/spf13/cobra", "k8s.io/api"
| Name | Required | Description | Default |
|---|---|---|---|
| module | Yes | Full Go module path. Must include the host. Examples: "github.com/gin-gonic/gin", "golang.org/x/net", "k8s.io/client-go", "gopkg.in/yaml.v3". Case-sensitive. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description fully discloses behavior: input constraints, return signals, and ecosystem nuances (no download counter, GitHub-primary). No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well-structured with separate paragraphs for output, ecosystem notes, and usage; not overly verbose. A bit lengthy but justified by the need to explain Go ecosystem specifics.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite lacking output schema, the description enumerates all returned signals and addresses potential ambiguities (e.g., publisher vs contributor). The single parameter is fully documented.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers 100% of the single parameter, and the description adds value with examples, case-sensitivity mention, and context about module paths. Exceeds baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it obtains a 'behavioral commitment profile' for a Go module, listing specific signals (age, versions, etc.). It distinguishes from sibling tools which target different ecosystems or actions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit usage scenarios are given ('vetting Go dependencies, abandonware identification, supply chain risk') with concrete examples. Lacks exclusion criteria but is sufficient for correct invocation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
lookup_npm_packageAInspect
Get a behavioral commitment profile for any npm package. Returns real signals: package age, download volume and trend (growing/stable/declining), release consistency, npm publisher count, GitHub contributor count, and linked GitHub activity.
Supply chain attacks target packages with low publisher depth (few people with npm publish access). Behavioral signals reveal what download counts hide.
Useful for: vetting dependencies, identifying abandonware, due diligence on open-source packages. Examples: "langchain", "@anthropic-ai/sdk", "express", "litellm"
| Name | Required | Description | Default |
|---|---|---|---|
| package | Yes | npm package name. Examples: "langchain", "@anthropic-ai/sdk", "express". Scoped packages need the @ prefix. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden. It discloses the nature of the tool (read-only, returns signals) and mentions supply chain attack relevance, publisher depth, and behavioral signals. It does not describe rate limits or API dependencies, but for a simple lookup tool, the transparency is sufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise: 4 sentences plus bullet-point use cases and examples. It front-loads the purpose, details outputs, then provides context and examples. Every sentence is informative and earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given one parameter and no output schema, the description explains the return values (signals list) and usage scenarios. It covers input semantics well, though lacks potential notes on data freshness or API limitations. Overall, it is adequately complete for a straightforward tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter 'package' has a schema description covering 100%. The description adds value by specifying scoped packages need '@' prefix and giving examples, which aids correct input. This exceeds the baseline of 3 for full schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as retrieving a 'behavioral commitment profile' for npm packages, listing specific signals (package age, download volume, trend, etc.). It distinguishes from siblings like lookup_pypi_package and lookup_github_repo by focusing on npm packages, making the purpose precise and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states use cases ('vetting dependencies, identifying abandonware, due diligence') and provides examples. It does not mention when not to use it or name alternative tools, but the context signals and sibling list imply differentiation. The guidance is strong but lacks explicit exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
lookup_pypi_packageAInspect
Get a behavioral commitment profile for any PyPI (Python) package. Returns real signals: package age, download volume and trend, release consistency, publisher/owner count, and linked GitHub activity.
Supply chain attacks target Python packages — LiteLLM (97M downloads/mo) was compromised via stolen PyPI token in March 2026. Behavioral signals reveal what star counts hide.
Useful for: vetting Python dependencies, identifying abandonware, supply chain risk due diligence. Examples: "langchain", "litellm", "openai", "anthropic", "requests", "fastapi", "pydantic"
| Name | Required | Description | Default |
|---|---|---|---|
| package | Yes | PyPI package name. Examples: "langchain", "openai", "requests", "fastapi". Case-insensitive. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It does disclose the return content (signals) and implies a read-only lookup, but it does not mention rate limits, authentication, errors, or side effects. The supply-chain anecdote adds context but isn't a behavioral disclosure, so the transparency is adequate but not detailed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with purpose, but the second paragraph about the LiteLLM incident is somewhat tangential to tool selection or invocation. It adds context but is not essential and could become stale. The structure is clear, but the length could be reduced without losing core guidance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple single-parameter lookup tool, the description covers the essential context: what it does, what data it returns, and when to use it. The absence of an output schema is mitigated by the description listing the returned signals. It doesn't explain auth or pagination, but these are less critical for a straightforward package lookup.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the schema already describes the 'package' parameter with examples and case-insensitivity. The description reinforces this by listing example package names, but adds no new parameter-level semantics beyond what the schema provides. Baseline 3 applies because the schema carries the load.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a clear, specific verb+resource combination: 'Get a behavioral commitment profile for any PyPI (Python) package.' It lists exactly what signals are returned (age, downloads, release consistency, etc.), and the PyPI scope differentiates it from sibling tools like lookup_npm_package or lookup_go_module.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit use cases: 'vetting Python dependencies, identifying abandonware, supply chain risk due diligence.' The package name examples further clarify when to use this tool. However, it doesn't explicitly mention when not to use it (e.g., if you need an audit or GitHub-specific analysis), so it lacks exclusion statements.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
query_commitmentAInspect
Query verified behavioral commitment data for a domain. Returns aggregated signals: unique verified visitors, repeat visit rate, and average time spent. These prove real human engagement — harder to fake than reviews or content.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | The domain to query (e.g. 'example.com'). Will be normalized to lowercase without protocol or path. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
There are no annotations, so the description carries the full burden. It discloses that the data is 'verified' and returns 'aggregated signals,' which adds meaningful context beyond a simple read operation. However, it does not mention operational details such as whether the data is cached, potential rate limits, or errors on unknown domains. Some context is provided, but not exhaustive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences: the first states the action, the second lists the return values, and the third explains its value proposition. Every sentence earns its place without redundancy. It is front-loaded with the core purpose and remains concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple with one parameter and no output schema. The description sufficiently explains what the tool returns and why it is useful, covering the return values in enough detail. However, because there is no output schema, it could benefit from a brief note on output format or error behavior, which is a minor gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema coverage, the input schema already documents the 'domain' parameter thoroughly, including normalization. The description adds no extra meaning about parameters, so the baseline of 3 applies. It neither enhances nor detracts from the schema's clarity.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Query verified behavioral commitment data for a domain.' It lists specific outputs (unique verified visitors, repeat visit rate, average time spent), which distinguishes it from sibling lookup tools that focus on business, packages, or repositories. The verb and resource are specific, making its purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use this tool: when you need to prove real human engagement, as it says the data is 'harder to fake than reviews or content.' However, it does not explicitly state exclusions or compare directly to alternatives like 'use this instead of lookup_business.' Thus it has clear context but lacks explicit when-not guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
v1.8.0- Added
lookup_go_module
7 tool updates
v0.1.0- First observed
audit_dependencies - First observed
lookup_business - First observed
lookup_business_by_org - First observed
lookup_github_repo - First observed
lookup_npm_package - First observed
lookup_pypi_package - First observed
query_commitment
TDQS
Scored across 8 tools
Each tool targets a distinct entity type (business, GitHub repo, Go module, npm package, PyPI package, domain) or a distinct operation (batch audit). No two tools have overlapping purposes; even the two business lookup tools are differentiated by search method (name vs. org number).
Most tools use 'lookup_' prefix, but 'audit_dependencies' and 'query_commitment' break the pattern. Additionally, 'lookup_business' and 'lookup_business_by_org' have differing suffixes, though still consistent. The mix of verbs (lookup, audit, query) is a minor inconsistency.
With 8 tools, the server covers the essential entity types (business, GitHub, Go, npm, PyPI, domain) plus a batch audit function, without unnecessary bloat. This count is well-scoped for the domain of commitment verification across multiple ecosystems.
The tool set covers the main package ecosystems (npm, PyPI, Go) and GitHub repos, but lacks other popular ecosystems like Ruby gems or Cargo crates. Businesses are limited to Norway only. A minor gap given the stated focus on 'commitment profiles' for common supply chain vectors.
Maintenance
Related MCP Connectors
Audit GitHub repos for malicious and supply-chain code before you depend on them.
Dependency risk + calibrated, publicly scored forecasts on OSS packages. Docs: anteproof.com/docs
Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…
Live trust signals for domains & packages: age, registrar, typosquat resemblance.
Related MCP Servers
- AlicenseAqualityAmaintenanceDependency intelligence for AI agents. CVE scanning, health checks, upgrade planning.9109 npm2Apache 2.0
- FlicenseNot gradedqualityCmaintenanceScans npm, PyPI, and GitHub for typosquatting and brand impersonation, risk-scores findings, and drafts takedown notices.-
- AlicenseAqualityDmaintenanceDependency security & health auditing for AI agents with no account or API key required.22MIT

EVIDIQ Lineageofficial
AlicenseNot gradedqualityBmaintenanceDeterministic supply-chain provenance, SBOM/AI-BOM generation, and dependency risk analysis for npm and PyPI packages, with 14 security rules and verifiable reports.1MIT