← Back to search

xaip-sdk

xkumakichi Scanned 11d ago

Chain-agnostic trust protocol for AI agents. Register, Attest, Query, Settle.

npm ↗
B
75.8 / 100

Versions

0.6.0latest
Jul 9, 2026
0.5.0
May 27, 2026
0.4.0
Apr 14, 2026
0.2.0
Apr 12, 2026
0.1.0
Mar 28, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 22

translate
annotations: none low

Translate text to English

fail boolean text string
agent-query
annotations: none low

xaip_list_servers
annotations: none low

List all MCP servers that have trust scores. Shows trust level, execution count, and verdict for each server.

xaip_check_trust
annotations: none low

Check the trust score of an MCP server. Returns trust level, execution count, and risk flags.

slug string
xaip_select
annotations: none low

Select the most trustworthy MCP server for a task from a list of candidates. Automatically excludes unscored servers.

task string
xaip_report
annotations: none low

Report the result of an MCP tool execution. Contributes to the trust score of the server. Each report is Ed25519-signed.

tool string result string server string success boolean latencyMs number
xaip_connect
annotations: none low

Connect to an XRPL network (testnet, devnet, or mainnet)

xaip_create_test_wallet
annotations: none low

Create a funded wallet on XRPL testnet/devnet (for development). Returns wallet address and seed.

xaip_register_agent
annotations: none low

Register a new AI agent identity (DID) on XRPL. This is how an AI agent is

seed string agentCardUri string
xaip_resolve_agent
annotations: none low

Resolve an agent

address string
xaip_issue_credential
annotations: none low

Issue a credential to an agent (capability proof, endorsement, etc.)

uri string issuerSeed string credentialType string subjectAddress string
xaip_accept_credential
annotations: none low

Accept a credential that was issued to your agent

agentSeed string issuerAddress string credentialType string
xaip_create_escrow
annotations: none low

Create an escrow payment for an agent-to-agent job. Locks XRP until the job is done.

amountXRP number clientSeed string workerAddress string jobDescription string
xaip_finish_escrow
annotations: none low

Release escrow payment to the worker after job completion

escrowOwner string finisherSeed string escrowSequence number
xaip_get_reputation
annotations: none low

Get an agent

address string
xaip_get_account
annotations: none low

Get account information for an XRPL address (balance, sequence, etc.)

address string
xaip-mcp-server
annotations: none low

tool_a
annotations: none low

A

tool_b
annotations: none low

B

s
annotations: none low

xaip_identity
annotations: none low

Get this agent

xaip_query
annotations: none low

Query trust score for this agent. Returns verdict (yes/caution/no/unknown), trust score, and per-capability breakdown.

Permissions 4

network medium
Server uses network capabilities via: fetch(), urllib
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, os, path
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 65

low
Tool 'translate' has no annotations annotation_checker · 100%
low
Tool 'agent-query' has no annotations annotation_checker · 100%
low
Tool 'xaip_list_servers' has no annotations annotation_checker · 100%
low
Tool 'xaip_check_trust' has no annotations annotation_checker · 100%
low
Tool 'xaip_select' has no annotations annotation_checker · 100%
low
Tool 'xaip_report' has no annotations annotation_checker · 100%
low
Tool 'xaip_connect' has no annotations annotation_checker · 100%
low
Tool 'xaip_create_test_wallet' has no annotations annotation_checker · 100%
low
Tool 'xaip_register_agent' has no annotations annotation_checker · 100%
low
Tool 'xaip_resolve_agent' has no annotations annotation_checker · 100%
low
Tool 'xaip_issue_credential' has no annotations annotation_checker · 100%
low
Tool 'xaip_accept_credential' has no annotations annotation_checker · 100%
low
Tool 'xaip_create_escrow' has no annotations annotation_checker · 100%
low
Tool 'xaip_finish_escrow' has no annotations annotation_checker · 100%
low
Tool 'xaip_get_reputation' has no annotations annotation_checker · 100%
low
Tool 'xaip_get_account' has no annotations annotation_checker · 100%
low
Tool 'xaip-mcp-server' has no annotations annotation_checker · 100%
low
Tool 'tool_a' has no annotations annotation_checker · 100%
low
Tool 'tool_b' has no annotations annotation_checker · 100%
low
Tool 's' has no annotations annotation_checker · 100%
low
Tool 'xaip_identity' has no annotations annotation_checker · 100%
low
Tool 'xaip_query' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Hex string literal (>50 chars) in xkumakichi-xaip-protocol-287d776/mcp-server-trust/test/receipt.test.mjs:12 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in xkumakichi-xaip-protocol-287d776/mcp-server-trust/test/receipt.test.mjs:13 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in xkumakichi-xaip-protocol-287d776/mcp-server-trust/test/receipt.test.mjs:14 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in xkumakichi-xaip-protocol-287d776/clients/langchain/tests/internals.test.js:48 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in xkumakichi-xaip-protocol-287d776/clients/langchain/tests/internals.test.js:54 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in xkumakichi-xaip-protocol-287d776/clients/openai/tests/internals.test.js:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in xkumakichi-xaip-protocol-287d776/clients/openai/tests/internals.test.js:46 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in xkumakichi-xaip-protocol-287d776/sdk/tests/identity.test.ts:323 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in xkumakichi-xaip-protocol-287d776/sdk/tests/identity.test.ts:329 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: translate manifest_parser · 70%
info
Tool: agent-query manifest_parser · 75%
info
Tool: xaip_list_servers manifest_parser · 70%
info
Tool: xaip_check_trust manifest_parser · 70%
info
Tool: xaip_select manifest_parser · 70%
info
Tool: xaip_report manifest_parser · 70%
info
Tool: xaip_connect manifest_parser · 70%
info
Tool: xaip_create_test_wallet manifest_parser · 70%
info
Tool: xaip_register_agent manifest_parser · 70%
info
Tool: xaip_resolve_agent manifest_parser · 70%
info
Tool: xaip_issue_credential manifest_parser · 70%
info
Tool: xaip_accept_credential manifest_parser · 70%
info
Tool: xaip_create_escrow manifest_parser · 70%
info
Tool: xaip_finish_escrow manifest_parser · 70%
info
Tool: xaip_get_reputation manifest_parser · 70%
info
Tool: xaip_get_account manifest_parser · 70%
info
Tool: xaip-mcp-server manifest_parser · 75%
info
Tool: tool_a manifest_parser · 70%
info
Tool: tool_b manifest_parser · 70%
info
Tool: s manifest_parser · 75%
info
Tool: xaip_identity manifest_parser · 70%
info
Tool: xaip_query manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (20) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 575 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%