Server definition

Hash: sha256:27ed0b9a809d9cc553e2db6122cf172b077f1da61e9353fc4ae5e7e9f6053a7d
What it is: What a remote MCP server returned when asked what it offers: 1 tools

The blob, as servednamed by its sha256

{
  "instructions": null,
  "tools": [
    {
      "description": "Dependency Trust Oracle. Call this BEFORE writing any package into a manifest (package.json, requirements.txt, pyproject.toml, Cargo.toml, ...). It checks whether the package actually exists on its registry, cross-references OSV.dev for known CVEs, pulls the package's OpenSSF Scorecard via deps.dev, and runs a Levenshtein-distance typosquat/slopsquat check against a curated list of popular packages combined with the package's publish age. Returns a synthetic verdict: ALLOW (no issues found), WARN (proceed with caution — read the findings before installing), or BLOCK (do not install — likely a hallucinated package name, an active typosquat, or a known critical/high-severity vulnerability). Always call this before running an install command for a package you have not already verified in this session. First 5 calls per caller are free; after that this tool requires x402 payment (USDC on Base) and will return a payment-required error with the amount and address to pay.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "additionalProperties": false,
        "properties": {
          "ecosystem": {
            "description": "Package registry to check the name against.",
            "enum": [
              "npm",
              "pypi",
              "crates.io"
            ],
            "type": "string"
          },
          "name": {
            "description": "Exact package name as it would appear in the manifest (case-sensitive for npm scoped packages).",
            "maxLength": 214,
            "minLength": 1,
            "type": "string"
          },
          "version": {
            "description": "Optional exact version string to verify (e.g. \"4.17.21\"). Omit to check only the package name.",
            "maxLength": 100,
            "minLength": 1,
            "type": "string"
          }
        },
        "required": [
          "ecosystem",
          "name"
        ],
        "type": "object"
      },
      "name": "verify_package",
      "outputSchema": null
    }
  ]
}

Verify it yourself

curl -s https://api.teppi.xyz/v1/evidence/sha256:27ed0b9a809d9cc553e2db6122cf172b077f1da61e9353fc4ae5e7e9f6053a7d | sha256sum