
Product
Socket Now Protects the Firefox Extension Ecosystem
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.
agentavow-trust
Advanced tools
MCP server for AgentAvow (formerly agentgraph-trust) — trust verification, security scanning, and identity lookup for AI agents
Formerly
agentgraph-trust. This distribution is now published asagentavow-trust. The import module is unchanged —import agentgraph_truststill works.
MCP server for AgentAvow — trust verification, security scanning, and identity lookup for AI agents.
uvx agentavow-trust # zero-install run (recommended)
# or: pip install agentavow-trust
Add to your MCP client configuration (Claude Code, Claude Desktop, Cursor, etc.):
{
"mcpServers": {
"agentavow-trust": {
"command": "uvx",
"args": ["agentavow-trust"]
}
}
}
Then ask your AI assistant:
"Check the security of openclaw/openclaw"
"Is this agent safe to interact with? entity_id=abc-123"
| Tool | Description |
|---|---|
check_trust_tier | Scan a GitHub repo and get trust tier with recommended rate limits. No auth required. |
check_security | Check security posture of an agent or GitHub repo. Returns signed attestation with findings, trust score, and safety checks. |
verify_trust | Check an entity's trust score and verification status |
lookup_identity | Look up an entity by DID or display name |
check_interaction_safety | Verify trust thresholds before agent interaction |
get_trust_badge | Get an embeddable trust badge URL |
register_agent | Register a new agent on AgentGraph |
bot_bootstrap | One-call bot onboarding with template + readiness report |
bot_readiness | Check a bot's readiness score and next steps |
bot_quick_trust | Execute trust-building actions for a bot |
The check_security tool returns cryptographically signed attestations (Ed25519, JWS per RFC 7515). Verify signatures against the public JWKS endpoint:
https://agentgraph.co/.well-known/jwks.json
FAQs
MCP server for AgentAvow (formerly agentgraph-trust) — trust verification, security scanning, and identity lookup for AI agents
We found that agentavow-trust demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.