Server definition

Hash: sha256:a1897ab23339c390830a797f96419226ddec79b19da8babde81536b576806445
What it is: What a remote MCP server returned when asked what it offers: 3 tools

The blob, as servednamed by its sha256

{
  "instructions": "Security Intel: vulnerability intelligence for AI agents — CVE lookups (NVD), per-package known vulnerabilities and whole-manifest dependency audits (OSV). Call audit_dependencies with a package.json before trusting a project's dependency tree.",
  "tools": [
    {
      "description": "Audit a whole dependency manifest for known vulnerabilities in one call. Paste a package.json (as 'manifest'), or pass a 'dependencies' array of {name, version} objects. Returns per-package findings and a summary. Ecosystem defaults to npm.",
      "inputSchema": {
        "properties": {
          "dependencies": {
            "description": "[{name, version}] entries",
            "items": {
              "type": "object"
            },
            "type": "array"
          },
          "ecosystem": {
            "description": "Default npm",
            "type": "string"
          },
          "manifest": {
            "description": "Raw package.json contents",
            "type": "string"
          }
        },
        "required": [],
        "type": "object"
      },
      "name": "audit_dependencies",
      "outputSchema": null
    },
    {
      "description": "Look up a CVE by ID and get a compact summary: description, CVSS score & severity, vector, CWE weakness, publish date, and references. Source: NVD (NIST).",
      "inputSchema": {
        "properties": {
          "cve_id": {
            "description": "e.g. CVE-2021-44228",
            "type": "string"
          }
        },
        "required": [
          "cve_id"
        ],
        "type": "object"
      },
      "name": "cve_lookup",
      "outputSchema": null
    },
    {
      "description": "List known vulnerabilities for a software package (optionally a specific version) via OSV. Ecosystems: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex.",
      "inputSchema": {
        "properties": {
          "ecosystem": {
            "description": "Package registry to look in. One of: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex.",
            "type": "string"
          },
          "name": {
            "description": "Exact package name as published in that registry, e.g. lodash for npm, requests for pypi.",
            "type": "string"
          },
          "version": {
            "description": "Optional; if given, only vulns affecting that version are returned",
            "type": "string"
          }
        },
        "required": [
          "ecosystem",
          "name"
        ],
        "type": "object"
      },
      "name": "package_vulnerabilities",
      "outputSchema": null
    }
  ]
}

Verify it yourself

curl -s https://api.teppi.xyz/v1/evidence/sha256:a1897ab23339c390830a797f96419226ddec79b19da8babde81536b576806445 | sha256sum