{
  "service": "agent-guard",
  "description": "Verify-before-act safety suite for AI coding agents: check packages, lockfiles, and skill/plugin manifests before installing.",
  "tools": {
    "check_package": "GET /check?name=<pkg>&ecosystem=<npm|pypi> — does a package exist + slopsquat/typosquat risk",
    "verify_lockfile": "POST /check-lockfile {lockfile_content, format} — scan a whole lockfile (direct+transitive)",
    "score_manifest": "POST /score-manifest {manifest_type, manifest_content} — poison/backdoor/scope-overreach score 0-100"
  },
  "mcp": "stdio MCP server exposes the same three tools (check_package, verify_lockfile, score_manifest)",
  "free": true,
  "version": "0.2.0"
}