PkgGuard
Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker
| Endpoint | https://api.youraitools.co/pkgguard/mcp (streamable-http) |
|---|---|
| Registry version | 0.1.1 |
| Now | 2 tools · grade C (65) · pin ts_e2948657f669ec0bb73ea0064e22dceb · protocol 2025-06-18 |
| First / last listed | 2026-10-26 06:56 UTC / 2026-10-26 06:56 UTC |
| Grade over time | 2026-10-26: C (65), 2 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: scan_dependencies check_package
scan_dependencies | Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabilities and confirmed-malicious packages. Returns per-package advisory ids (CVE/GHSA/MAL), severity, CVSS and fixed-in versions. Free tier: 30 calls/day per IP with full results, up to 100 packages; then $0.003 per scan (up to 500) in USDC ov params: manifest, filename, packages, include_dev |
check_package | Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and malicious flags. Free tier: 30 calls/day per IP with full results, then $0.001 per call in USDC over x402 (/v1/package). params: ecosystem, name*, version* |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.