ThirdKeyAI/SchemaPin
The SchemaPin protocol for cryptographically signing and verifying AI agent tool schemas to prevent supply-chain attacks.
Uses ECDSA P-256 signatures with DNS-anchored trust discovery via `.well-known/schemapin.json` (RFC 8615) and Trust-On-First-Use key pinning to prevent substitution attacks. Supports skill folder signing for AgentSkills and offline verification through trust bundles. Available as SDKs across Python, JavaScript, Go, and Rust with pluggable resolvers for flexible verification workflows.
Stars
13
Forks
6
Language
Python
License
MIT
Category
Last pushed
Mar 09, 2026
Commits (30d)
0
Get this data via API
curl "https://pt-edge.onrender.com/api/v1/quality/mcp/ThirdKeyAI/SchemaPin"
Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.
Higher-rated alternatives
awslabs/mcp-server-for-oscal
OSCAL tools for AI agents
VibeTensor/attestix
Attestix - Attestation Infrastructure for AI Agents. DID-based agent identity, W3C Verifiable...
agentralabs/agentic-identity
Cryptographic agent identity with Ed25519 anchors, signed action receipts, and scoped trust...
fiddlecube/compliant-llm
Build Secure and Compliant AI agents and MCP Servers. YC W23
agntcy/identity-service
AGNTCY Identity Service serves as the central hub for managing and verifying digital identities...