{
  "data": {
    "tool": {
      "category": "data-providers",
      "endpoint": "https://api.youraitools.co/pkgguard/mcp",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/youraitools-pkgguard.json",
      "kind": "mcp",
      "listed": "indexed",
      "liveUrl": "https://www.anchorterminal.com/api/v1/live/youraitools-pkgguard.json",
      "markdownUrl": "https://www.anchorterminal.com/tools/youraitools-pkgguard.md",
      "mcpTools": {
        "check": {
          "checker": "anchor-check/1.0",
          "totalTokens": 494,
          "counts": {
            "error": 0,
            "note": 1,
            "warn": 1
          },
          "findings": [
            {
              "rule": "TC13",
              "severity": "warn",
              "tool": "scan_dependencies",
              "message": "packages[] (object with no properties)",
              "fix": "Declare the properties (or additionalProperties with a schema) and the array's items."
            },
            {
              "rule": "TC24",
              "severity": "note",
              "message": "2 of 2 tools have no outputSchema",
              "fix": "Declare outputSchema for tools that return structured data, and return structuredContent that matches it."
            }
          ]
        },
        "checkedAt": "2026-10-30T00:50:37Z",
        "count": 2,
        "note": "answered without the initialize handshake",
        "schemaTokens": 494,
        "status": "ok",
        "tools": [
          {
            "name": "scan_dependencies",
            "title": "Scan a dependency manifest for vulnerable and malicious packages",
            "description": "Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabilities and confirmed-malicious packages. Returns per-package advisory ids (CVE/GHSA/MAL), severity, CVSS and fixed-in versions. Free tier: 30 calls/day per IP with full results, up to 100 packages; then $0.003 per scan (up to 500) in USDC over x402 (/v1/scan).",
            "inputSchema": {
              "properties": {
                "filename": {
                  "description": "Optional file name, helps type detection",
                  "type": "string"
                },
                "include_dev": {
                  "description": "Include devDependencies (default true)",
                  "type": "boolean"
                },
                "manifest": {
                  "description": "Manifest or lockfile contents (package.json, package-lock.json, requirements.txt, Pipfile.lock, poetry.lock, go.mod, Cargo.lock, composer.lock)",
                  "type": "string"
                },
                "packages": {
                  "description": "Alternative to manifest: [{ecosystem, name, version}], up to 500",
                  "items": {
                    "type": "object"
                  },
                  "type": "array"
                }
              },
              "type": "object"
            },
            "annotations": {
              "idempotentHint": true,
              "openWorldHint": true,
              "readOnlyHint": true
            }
          },
          {
            "name": "check_package",
            "title": "Is this package version vulnerable or malicious?",
            "description": "Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and malicious flags. Free tier: 30 calls/day per IP with full results, then $0.001 per call in USDC over x402 (/v1/package).",
            "inputSchema": {
              "properties": {
                "ecosystem": {
                  "description": "One of npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet, Pub, Hex (default npm)",
                  "type": "string"
                },
                "name": {
                  "description": "Package name, e.g. lodash",
                  "type": "string"
                },
                "version": {
                  "description": "Exact version, e.g. 4.17.15",
                  "type": "string"
                }
              },
              "required": [
                "name",
                "version"
              ],
              "type": "object"
            },
            "annotations": {
              "idempotentHint": true,
              "openWorldHint": true,
              "readOnlyHint": true
            }
          }
        ]
      },
      "name": "PkgGuard",
      "note": "Indexed from the official MCP registry: facts and our own checks, not reviewed, so no score, grade or rank.",
      "packages": [
        {
          "registryType": "npm",
          "identifier": "@agentgate-builder/pkgguard",
          "version": "0.1.1",
          "transport": "stdio"
        }
      ],
      "pageJsonUrl": "https://www.anchorterminal.com/tools/youraitools-pkgguard.json",
      "popularity": {
        "npmWeekly": 580
      },
      "registryName": "co.youraitools/pkgguard",
      "remotes": [
        {
          "type": "streamable-http",
          "url": "https://api.youraitools.co/pkgguard/mcp"
        }
      ],
      "repository": "",
      "reviewed": false,
      "slug": "youraitools-pkgguard",
      "source": "the official MCP registry",
      "sourceUrl": "https://registry.modelcontextprotocol.io/v0.1/servers?search=co.youraitools/pkgguard",
      "summary": "Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker",
      "updatedAt": "2026-10-22T02:10:14Z",
      "url": "https://www.anchorterminal.com/tools/youraitools-pkgguard",
      "vendor": "youraitools.co",
      "vendorUrl": "https://youraitools.co",
      "version": "0.1.1",
      "websiteUrl": "https://youraitools.co",
      "where": "both",
      "why": [
        "vendor"
      ]
    }
  },
  "kind": "anchor.page",
  "links": {
    "api": "https://www.anchorterminal.com/api/v1/index.json",
    "html": "https://www.anchorterminal.com/tools/youraitools-pkgguard",
    "json": "https://www.anchorterminal.com/tools/youraitools-pkgguard.json",
    "llms": "https://www.anchorterminal.com/llms.txt",
    "markdown": "https://www.anchorterminal.com/tools/youraitools-pkgguard.md",
    "mcp": "https://www.anchorterminal.com/mcp",
    "slim": "https://www.anchorterminal.com/tools/youraitools-pkgguard.min.md"
  },
  "markdown": "# PkgGuard\n\n\u003e Indexed, not reviewed: facts from the official MCP registry and our own checks. No score, grade or rank, and not in the rankings until the panel reviews it. How the index works: https://www.anchorterminal.com/indexed/\n\n- Kind: MCP server, by youraitools.co (https://youraitools.co)\n- Category: Data providers (https://www.anchorterminal.com/categories/data-providers.md)\n- Listed because: It's published in the registry under youraitools.co, a namespace the registry only gives to whoever proves they control that domain.\n- What the official MCP registry says: Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker\n\n## Facts\n\n- MCP registry: `co.youraitools/pkgguard` 0.1.1\n- Endpoint: https://api.youraitools.co/pkgguard/mcp (streamable HTTP)\n- Package: npm `@agentgate-builder/pkgguard` (stdio)\n- Website: https://youraitools.co\n- npm downloads a week: 580\n- Registry entry updated: 2026-10-22\n\n## Tools\n\n- Tools it lists (2, about 494 tokens of context, `tools/list` without credentials, checked 2026-10-30 00:50 UTC):\n  - `scan_dependencies` (read-only): Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known…\n  - `check_package` (read-only): Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and…\n- How its tools read to an agent (0 errors, 1 warning, 1 note, about 494 tokens; rules at https://www.anchorterminal.com/check.md; not part of the score):\n  - warn TC13 scan_dependencies: packages[] (object with no properties)\n  - note TC24 server: 2 of 2 tools have no outputSchema\n\n- Create a video and download its frames: https://www.anchorterminal.com/assets/listing-video/index.html?listing=youraitools-pkgguard\n- JSON: https://www.anchorterminal.com/api/v1/tools/youraitools-pkgguard.json\n- Being indexed says nothing about quality, and nobody can pay for it. Ask for a review: https://www.anchorterminal.com/builders/#claiming\n",
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-10-30",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.7",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "page": {
    "breadcrumbs": [
      {
        "name": "Home",
        "url": "https://www.anchorterminal.com/"
      },
      {
        "name": "Terminal",
        "url": "https://www.anchorterminal.com/tools/"
      },
      {
        "name": "Indexed",
        "url": "https://www.anchorterminal.com/indexed/"
      },
      {
        "name": "PkgGuard",
        "url": ""
      }
    ],
    "description": "PkgGuard, an MCP server by youraitools.co, listed from the official MCP registry. Indexed, not reviewed: facts and our own checks, no score or ranking. Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker",
    "facts": [
      "not reviewed",
      "not ranked",
      "facts only"
    ],
    "h1": "PkgGuard",
    "image": "https://www.anchorterminal.com/assets/og/indexed.png",
    "path": "/tools/youraitools-pkgguard",
    "published": "",
    "section": "indexed",
    "title": "PkgGuard: MCP server, indexed from the official MCP registry",
    "toc": null,
    "updated": "2026-10-30",
    "url": "https://www.anchorterminal.com/tools/youraitools-pkgguard"
  },
  "tokens": {
    "markdown": 700,
    "slim": 630
  },
  "version": 1
}