← Back to search

io.github.CSOAI-ORG/meok-aaif-agent-card-mcp

CSOAI-ORG streamable_http Scanned 16d ago

MEOK AAIF Agent Card MCP — Linux Foundation AAIF agent identity bridge. Issues + verifies +

B
88.9 / 100

Versions

1.0.2latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

issue_agent_card
annotations: none low

Issue an AAIF Agent Card. Args: agent_did: W3C DID of the agent. name: Human-readable agent name. description: One-paragraph description. capabilities: List of capability strings (see list_capability_taxonomy()). endpoints: List of {transport, url, auth} dicts. version: Semver. publisher: Organisation publishing this agent. trust_attestations: Optional list of signed certs (compliance, audit, etc.). license_spdx: SPDX license identifier. signing_key_id: DID key fragment for the agent's signing key. Returns: {card, signature, well_known_url}

name str version str agent_did str endpoints string publisher string description str capabilities string license_spdx str signing_key_id string trust_attestations string
publish_card
annotations: none low

Generate the HTTP server config needed to publish a card at /.well-known/agent-card. Args: card: A card from issue_agent_card(). target_url: The base URL of your agent (e.g. https://my-agent.example). Returns: {target_url, payload, http_headers, vercel_config_snippet, nginx_snippet}

card dict target_url str
verify_card
annotations: none low

Verify an AAIF Agent Card — schema + signature + DID match. Args: card: Card to verify. expected_did: Optional expected agent_did. Returns: {valid, schema_ok, signature_ok, issues}

card dict expected_did string
bridge_a2a_to_aaif
annotations: none low

Convert an A2A agent-card (Google A2A spec) to an AAIF Agent Card. Args: a2a_card: A2A agent-card dict. Returns: AAIF Agent Card.

a2a_card dict
bridge_oasf_to_aaif
annotations: none low

Convert an OASF manifest (Cisco AGNTCY) to an AAIF Agent Card. Args: oasf_manifest: OASF manifest dict. Returns: AAIF Agent Card.

oasf_manifest dict
list_capability_taxonomy
annotations: none low

Return the AAIF capability taxonomy.

sign_card_chain
annotations: none low

HMAC-sign a card for verifiable publication.

card_id str

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 23

low
Tool 'issue_agent_card' has no annotations annotation_checker · 100%
low
Tool 'publish_card' has no annotations annotation_checker · 100%
low
Tool 'verify_card' has no annotations annotation_checker · 100%
low
Tool 'bridge_a2a_to_aaif' has no annotations annotation_checker · 100%
low
Tool 'bridge_oasf_to_aaif' has no annotations annotation_checker · 100%
low
Tool 'list_capability_taxonomy' has no annotations annotation_checker · 100%
low
Tool 'sign_card_chain' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: issue_agent_card manifest_parser · 90%
info
Tool: publish_card manifest_parser · 90%
info
Tool: verify_card manifest_parser · 90%
info
Tool: bridge_a2a_to_aaif manifest_parser · 90%
info
Tool: bridge_oasf_to_aaif manifest_parser · 90%
info
Tool: list_capability_taxonomy manifest_parser · 90%
info
Tool: sign_card_chain manifest_parser · 90%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%