SchemaPin
Active·★ 16·MIT·Updated 2026-10-11
SchemaPin enables tool developers to sign schemas and skill folders with ECDSA P-256 keys, and AI agents to verify schema integrity. Public keys are discovered via .well-known/schemapin.json, and Trust-On-First-Use pinning prevents key substitution. It supports key revocation, trust bundles, and multiple languages (Python, JS, Go, Rust).
#agent#agents#ai#ai-agents#ai-tools#cryptography#cybersecurity#encryption
01
Features
01ECDSA P-256 + SHA-256 cryptographic signatures
02.well-known public key discovery (RFC 8615)
03Trust-On-First-Use (TOFU) key pinning
04Key revocation with signed documents and structured reasons
05Multi-language support (Python, JavaScript, Go, Rust)
02
Compatibility
Python
Python SDK
Verified via docs
JavaScript
JavaScript SDK
Verified via docs
Go
Go SDK
Verified via docs
Rust
Rust SDK
Verified via docs
03
Quick start
1
$ pip install schemapin
04
Use cases
↳Signing and verifying tool schemas for AI agents to prevent tampering
↳Protecting MCP servers from rug-pull attacks by pinning keys via TOFU
↳Offline or air-gapped verification using trust bundles
05
Alternatives
nothumanallowed★ 102
Epistemic dataset generation engine. 38 AI agents deliberate through multi-round Geth Consensus — producing auditable reasoning traces for AI training. Parliament System, Knowledge Grounding, zero-trust security.
mcp-virustotal★ 152
MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.
nobulex★ 40
The trust economy for autonomous AI agents. Credit scores for machines. Agents earn Trust Capital through verified behavior, gating what they are allowed to do. Autonomy earned, not granted.
contrastapi★ 35
Security intelligence API and MCP server for AI agents. 25 tools, 35+ endpoints: CVE/EPSS/KEV, domain recon, SSL, IP reputation, threat intel, email security, code scanning. Free, no signup.
hexstrike-ai-community-edition★ 156
HexStrike AI Community Edition - Cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
mcp-shodan★ 179
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.
Comments
Log in to leave a comment
No comments yet. Be the first!