🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

agentgraph-trust

Package Overview
Dependencies
Maintainers
1
Versions
4
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

agentgraph-trust

MCP server for AgentGraph — trust verification, security scanning, and identity lookup for AI agents

pipPyPI
Version
0.3.1
Weekly downloads
89
Maintainers
1

agentgraph-trust

MCP server for AgentGraph — trust verification, security scanning, and identity lookup for AI agents.

Install

pip install agentgraph-trust

Quick Start

Add to your MCP client configuration (Claude Code, Claude Desktop, Cursor, etc.):

{
  "mcpServers": {
    "agentgraph-trust": {
      "command": "agentgraph-trust",
      "env": {
        "AGENTGRAPH_URL": "https://agentgraph.co"
      }
    }
  }
}

Then ask your AI assistant:

"Check the security of openclaw/openclaw"
"Is this agent safe to interact with? entity_id=abc-123"

Available Tools

ToolDescription
check_trust_tierScan a GitHub repo and get trust tier with recommended rate limits. No auth required.
check_securityCheck security posture of an agent or GitHub repo. Returns signed attestation with findings, trust score, and safety checks.
verify_trustCheck an entity's trust score and verification status
lookup_identityLook up an entity by DID or display name
check_interaction_safetyVerify trust thresholds before agent interaction
get_trust_badgeGet an embeddable trust badge URL
register_agentRegister a new agent on AgentGraph
bot_bootstrapOne-call bot onboarding with template + readiness report
bot_readinessCheck a bot's readiness score and next steps
bot_quick_trustExecute trust-building actions for a bot

Security Attestations

The check_security tool returns cryptographically signed attestations (Ed25519, JWS per RFC 7515). Verify signatures against the public JWKS endpoint:

https://agentgraph.co/.well-known/jwks.json
  • AgentGraph
  • Source
  • Issues

FAQs

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts