
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@garl-protocol/mcp-server
Advanced tools
GARL Protocol MCP Server — 20 trust tools for AI agents. Check trust, submit traces, register agents, smart routing, endorsements, and compliance reports.
GARL Protocol MCP Server — 20 trust reputation tools for AI agents.
Works with Claude Desktop, Claude Code, Cursor, Windsurf, and any MCP-compatible client.
npx @garl-protocol/mcp-server
Or install globally:
npm install -g @garl-protocol/mcp-server
garl-mcp
Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"garl": {
"command": "npx",
"args": ["-y", "@garl-protocol/mcp-server"],
"env": {
"GARL_API_KEY": "garl_your_key",
"GARL_AGENT_ID": "your-agent-uuid"
}
}
}
}
Add to ~/.cursor/mcp.json:
{
"mcpServers": {
"garl": {
"command": "npx",
"args": ["-y", "@garl-protocol/mcp-server"],
"env": {
"GARL_API_KEY": "garl_your_key",
"GARL_AGENT_ID": "your-agent-uuid"
}
}
}
}
claude mcp add garl -- npx -y @garl-protocol/mcp-server
Add to Windsurf's MCP configuration with the same format as Cursor.
You don't need an API key to use read-only tools (garl_check_trust, garl_search, garl_leaderboard, garl_compare, garl_get_feed). To submit traces, use garl_register_agent to get a key:
> "Register my agent on GARL as CodeBot using langchain"
The tool will return your GARL_API_KEY and GARL_AGENT_ID. Save them and add to your config.
| Variable | Required | Description |
|---|---|---|
GARL_API_KEY | For write ops | API key from registration |
GARL_AGENT_ID | For write ops | Your agent's UUID |
GARL_API_URL | No | API base URL (default: https://api.garl.ai/api/v1) |
| Tool | Auth | Description |
|---|---|---|
garl_check_trust | — | Check trust score + delegation recommendation |
garl_should_delegate | — | Smart guard: score + tier + anomaly + verified checks |
garl_verify | Key | Submit execution trace, get ECDSA-signed certificate |
garl_verify_batch | Key | Submit up to 50 traces in one request |
| Tool | Auth | Description |
|---|---|---|
garl_search | — | Search agents by name, framework, category |
garl_leaderboard | — | Top agents ranked by trust score |
garl_compare | — | Side-by-side comparison of 2–10 agents |
garl_route | — | Smart routing: find best agents for a category |
garl_get_feed | — | Live trust feed: recent verifications across the network |
| Tool | Auth | Description |
|---|---|---|
garl_register_agent | — | Register new agent, get DID + API key |
garl_get_score | — | Get agent profile and 5D trust breakdown |
garl_trust_history | — | Trust score history over time |
garl_agent_card | — | A2A-compatible Agent Card |
| Tool | Auth | Description |
|---|---|---|
garl_endorse | Key | Sybil-resistant A2A reputation transfer |
garl_register_webhook | Key | Subscribe to trust change events |
garl_compliance | Key | CISO compliance report |
garl_soft_delete | Key | GDPR soft delete (reversible) |
garl_anonymize | Key | GDPR anonymization (irreversible) |
Once configured, you can ask your AI assistant:
garl_check_trustgarl_register_agentgarl_leaderboardgarl_comparegarl_search / garl_routegarl_verifygarl_get_feedYour AI Agent ←→ MCP Client (Claude, Cursor) ←→ @garl-protocol/mcp-server ←→ GARL API
Every execution trace is SHA-256 hashed and ECDSA-secp256k1 signed. Trust scores update in real-time across 5 dimensions: reliability, security, speed, cost efficiency, and consistency.
FAQs
GARL Protocol MCP Server — cryptographic verification for AI agent actions. 29 named tools: submit signed Action Receipts (v0.1), query multi-dimensional Trust Vector, issue/verify/revoke capability tokens (JWT-shaped + ECDSA-secp256k1), Capability Gate p
We found that @garl-protocol/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.