SchemaPin
Active·★ 16·MIT·Updated 2026-05-28
★ Trending★ Security & Safety★ API Integration
The SchemaPin protocol for cryptographically signing and verifying AI agent tool schemas to prevent supply-chain attacks.
SchemaPin enables tool developers to sign schemas and skill folders with ECDSA P-256 keys, and AI agents to verify schema integrity. Public keys are discovered via .well-known/schemapin.json, and Trust-On-First-Use pinning prevents key substitution. It supports key revocation, trust bundles, and multiple languages (Python, JS, Go, Rust).
#agent#agents#ai#ai-agents#ai-tools#cryptography#cybersecurity#encryption
01
Features
01ECDSA P-256 + SHA-256 cryptographic signatures
02.well-known public key discovery (RFC 8615)
03Trust-On-First-Use (TOFU) key pinning
04Key revocation with signed documents and structured reasons
05Multi-language support (Python, JavaScript, Go, Rust)
02
Compatibility
Python
Python SDK
Verified via docs
JavaScript
JavaScript SDK
Verified via docs
Go
Go SDK
Verified via docs
Rust
Rust SDK
Verified via docs
03
Quick start
1
$ pip install schemapin
04
Use cases
↳Signing and verifying tool schemas for AI agents to prevent tampering
↳Protecting MCP servers from rug-pull attacks by pinning keys via TOFU
↳Offline or air-gapped verification using trust bundles
05
Alternatives
awesome-n8n-templates★ 22.6k
Supercharge your workflow automation with this curated collection of n8n templates! Instantly connect your favorite apps-like Gmail, Telegram, Google Drive, Slack, and more-with ready-to-use, AI-powered automations. Save time, boost productivity, and unlock the true potential of n8n in just a few clicks.
FastMCP★ 25.4k
The fast, Pythonic way to build MCP servers and clients. Designed by the Pydantic team for type safety and speed.
Auto-claude-code-research-in-sleep★ 11.0k
ARIS ⚔️ (Auto-Research-In-Sleep) — Claude Code skills for autonomous ML research: cross-model review loops, idea discovery, and experiment automation via Codex MCP
agents-best-practices★ 1.1k
Provider-neutral Agent Skill for Codex, Claude Code, and agentic harness design.
openagent★ 5.1k
⚡️AI Cloud OS: Open-source enterprise-level AI knowledge base and MCP (model-context-protocol)/A2A (agent-to-agent) management platform with admin UI, user management and Single-Sign-On⚡️, supports ChatGPT, Claude, Llama, Ollama, HuggingFace, etc., chat bot demo: https://ai.casibase.com, admin UI demo: https://ai-admin.casibase.com
Related searches
Comments
Log in to leave a comment
- CCorey LewisMay 18, 2026
Good for security-conscious teams who need verifiable tool integrity.
- JJustice BrownMar 22, 2026
Protocol-level security for a frequently overlooked attack surface.
- JJesse RiveraMar 8, 2026
Cryptographic signing and verification for AI agent tool schemas.
- RRebel DavisMar 1, 2026
Signed schemas prevent tampering with tool definitions in agent workflows.