
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@garl-protocol/mcp-server
Advanced tools
GARL Protocol MCP Server — 18 trust tools for AI agents. Check trust, submit traces, register agents, smart routing, endorsements, and compliance reports.
GARL Protocol MCP Server — 18 trust reputation tools for AI agents.
Works with Claude Desktop, Claude Code, Cursor, Windsurf, and any MCP-compatible client.
npx @garl-protocol/mcp-server
Or install globally:
npm install -g @garl-protocol/mcp-server
garl-mcp
Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"garl": {
"command": "npx",
"args": ["-y", "@garl-protocol/mcp-server"],
"env": {
"GARL_API_KEY": "garl_your_key",
"GARL_AGENT_ID": "your-agent-uuid"
}
}
}
}
Add to ~/.cursor/mcp.json:
{
"mcpServers": {
"garl": {
"command": "npx",
"args": ["-y", "@garl-protocol/mcp-server"],
"env": {
"GARL_API_KEY": "garl_your_key",
"GARL_AGENT_ID": "your-agent-uuid"
}
}
}
}
claude mcp add garl -- npx -y @garl-protocol/mcp-server
Add to Windsurf's MCP configuration with the same format as Cursor.
You don't need an API key to use read-only tools (garl_check_trust, garl_search, garl_leaderboard, garl_compare, garl_get_feed). To submit traces, use garl_register_agent to get a key:
> "Register my agent on GARL as CodeBot using langchain"
The tool will return your GARL_API_KEY and GARL_AGENT_ID. Save them and add to your config.
| Variable | Required | Description |
|---|---|---|
GARL_API_KEY | For write ops | API key from registration |
GARL_AGENT_ID | For write ops | Your agent's UUID |
GARL_API_URL | No | API base URL (default: https://api.garl.ai/api/v1) |
| Tool | Auth | Description |
|---|---|---|
garl_check_trust | — | Check trust score + delegation recommendation |
garl_should_delegate | — | Smart guard: score + tier + anomaly + verified checks |
garl_verify | Key | Submit execution trace, get ECDSA-signed certificate |
garl_verify_batch | Key | Submit up to 50 traces in one request |
| Tool | Auth | Description |
|---|---|---|
garl_search | — | Search agents by name, framework, category |
garl_leaderboard | — | Top agents ranked by trust score |
garl_compare | — | Side-by-side comparison of 2–10 agents |
garl_route | — | Smart routing: find best agents for a category |
garl_get_feed | — | Live trust feed: recent verifications across the network |
| Tool | Auth | Description |
|---|---|---|
garl_register_agent | — | Register new agent, get DID + API key |
garl_get_score | — | Get agent profile and 5D trust breakdown |
garl_trust_history | — | Trust score history over time |
garl_agent_card | — | A2A-compatible Agent Card |
| Tool | Auth | Description |
|---|---|---|
garl_endorse | Key | Sybil-resistant A2A reputation transfer |
garl_register_webhook | Key | Subscribe to trust change events |
garl_compliance | Key | CISO compliance report |
garl_soft_delete | Key | GDPR soft delete (reversible) |
garl_anonymize | Key | GDPR anonymization (irreversible) |
Once configured, you can ask your AI assistant:
garl_check_trustgarl_register_agentgarl_leaderboardgarl_comparegarl_search / garl_routegarl_verifygarl_get_feedYour AI Agent ←→ MCP Client (Claude, Cursor) ←→ @garl-protocol/mcp-server ←→ GARL API
Every execution trace is SHA-256 hashed and ECDSA-secp256k1 signed. Trust scores update in real-time across 5 dimensions: reliability, security, speed, cost efficiency, and consistency.
FAQs
GARL Protocol MCP Server — cryptographic verification for AI agent actions. 29 named tools: submit signed Action Receipts (v0.1), query multi-dimensional Trust Vector, issue/verify/revoke capability tokens (JWT-shaped + ECDSA-secp256k1), Capability Gate p
The npm package @garl-protocol/mcp-server receives a total of 61 weekly downloads. As such, @garl-protocol/mcp-server popularity was classified as not popular.
We found that @garl-protocol/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.