← Back to search

io.github.CSOAI-ORG/agent-handoff-certified-mcp

CSOAI-ORG streamable_http Scanned 17d ago

Verifiable agent-to-agent task handoff with signed provenance chain. Initiating agent signs the ...

MCP Registry ↗
B
76.5 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

initiate_handoff
annotations: none low

Initiating agent offers a task. Returns handoff_id + signed offer. The receiving agent must call accept_handoff within `expires_in_seconds` to complete the signed chain.

task str api_key str to_agent str tenant_id str from_agent str context_json str expires_in_seconds int
accept_handoff
annotations: none low

Receiving agent accepts + signs. Completes the chain.

api_key str handoff_id str accepting_agent_id str accepting_agent_ref str
verify_chain
annotations: none low

Re-verify the handoff signatures. Returns full trace + integrity status.

api_key str handoff_id str
list_handoffs
annotations: none low

List handoffs for a tenant, optionally filtered by status.

limit int api_key str tenant_id str status_filter str
sign_handoff_chain_attestation
annotations: none low

Emit a signed attestation of the handoff chain integrity for a window. Pro+.

email str api_key str tenant_id str window_end_utc str window_start_utc str

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 29

low
Tool 'initiate_handoff' has no annotations annotation_checker · 100%
low
Tool 'accept_handoff' has no annotations annotation_checker · 100%
low
Tool 'verify_chain' has no annotations annotation_checker · 100%
low
Tool 'list_handoffs' has no annotations annotation_checker · 100%
low
Tool 'sign_handoff_chain_attestation' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: initiate_handoff manifest_parser · 90%
info
Tool: accept_handoff manifest_parser · 90%
info
Tool: verify_chain manifest_parser · 90%
info
Tool: list_handoffs manifest_parser · 90%
info
Tool: sign_handoff_chain_attestation manifest_parser · 90%
info
Required env vars (6) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%