Server definition

Hash: sha256:af74c4aeddc0275eb735d61de9acdd9289f309ede50ae663c08d46dd0c789a08
What it is: What a remote MCP server returned when asked what it offers: 1 tools

The blob, as servednamed by its sha256

{
  "instructions": "check_packages is paid per call over x402: the first attempt answers HTTP 402 with the price (v1 in the body, v2 in the PAYMENT-REQUIRED header); retry with X-PAYMENT (v1) or PAYMENT-SIGNATURE (v2). Invalid input, and any call OSV could not fully answer, is not charged. A package with no known vulnerabilities is a charged answer: that is the result.",
  "tools": [
    {
      "description": "Look up the known vulnerabilities affecting exact package versions in the public OSV database (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, Packagist, Pub, Hex), 1 to 50 packages per call. Per package: every OSV advisory for that version with its id, CVE/GHSA aliases, summary, severity (database label, CVSS vectors, v3 base scores), the versions that fix it or \"no fix published\", published/modified dates and a link. Plus a summary: packages checked, packages vulnerable, total advisories and the highest severity. Evidence, not advice: absence from OSV does not prove safety.",
      "inputSchema": {
        "properties": {
          "packages": {
            "items": {
              "properties": {
                "ecosystem": {
                  "description": "OSV's ecosystem name, case-sensitive.",
                  "enum": [
                    "npm",
                    "PyPI",
                    "Go",
                    "Maven",
                    "crates.io",
                    "RubyGems",
                    "NuGet",
                    "Packagist",
                    "Pub",
                    "Hex"
                  ],
                  "type": "string"
                },
                "name": {
                  "description": "As the ecosystem names it: lodash, requests, github.com/gin-gonic/gin, org.apache.logging.log4j:log4j-core.",
                  "maxLength": 214,
                  "minLength": 1,
                  "type": "string"
                },
                "version": {
                  "description": "The exact version, not a range.",
                  "maxLength": 128,
                  "minLength": 1,
                  "type": "string"
                }
              },
              "required": [
                "ecosystem",
                "name",
                "version"
              ],
              "type": "object"
            },
            "maxItems": 50,
            "minItems": 1,
            "type": "array"
          }
        },
        "required": [
          "packages"
        ],
        "type": "object"
      },
      "name": "check_packages",
      "outputSchema": null
    }
  ]
}

Verify it yourself

curl -s https://api.teppi.xyz/v1/evidence/sha256:af74c4aeddc0275eb735d61de9acdd9289f309ede50ae663c08d46dd0c789a08 | sha256sum