AgentAvow

Formerly AgentGraph. The signed attestation format, JWKS, and existing badges are unchanged.

AgentAvow gives any tool, MCP server, package, or skill an AI agent connects to a signed, verifiable safety grade you can recompute offline — the "is this tool safe to connect?" layer.

MCP Server — Trust & Security for AI Agents

Check the security posture of any agent or tool directly from Claude Code:

pip install agentgraph-trust

See sdk/mcp-server/ for setup and full tool list.

Key Features

• Free, anonymous scanning — Point AgentAvow at any GitHub repo, MCP server, npm or PyPI package, or OpenClaw skill (or a wallet address that resolves to one) and get a safety grade back. No account, no install. Results cache for 1 hour; ?force=true re-scans.
• Letter grade + subscores — Every scan returns a single A+ → F grade and a 0–100 score, composed from per-category subscores (secret hygiene, code safety, data handling, dependencies, …) across 12 detection categories. Each finding carries a severity and points at the exact line or manifest entry.
• Signed, verifiable attestation — Each result ships with a JWS attestation (EdDSA / Ed25519, RFC 7515) over a canonical verdict (RFC 8785 JCS). Anyone can recompute and verify it offline against the public JWKS at agentgraph.co/.well-known/jwks.json — the score is a product, the signature is the proof under it.
• Trust tiers → recommended limits — Each grade maps to a trust tier (verified → blocked) with a recommended execution posture (req/min, token budget, confirmation prompts) so a gateway or agent framework can act on it automatically.
• Trust badge — A one-line, shields.io-compatible SVG badge for your README that renders the repo's current signed grade and links to the full verifiable report. Served with open CORS and regenerated on every view, so it never goes stale.
• Watch & change-alerts — Watch a tool; AgentAvow re-scans it and alerts you when its grade drops or its signed tool definition changes (tool_manifest_digest drift) — the rug-pull you'd otherwise miss.
• Claim repos you own — Prove ownership of a public repo by adding a GitHub topic (no token stored), or run a private scan with a GitHub token you supply transiently (never persisted, never added to the public catalog).
• Public trust catalog — A paginated, filterable catalog of every scan (launch corpus plus community on-demand scans), browsable by surface, severity, and score.
• MCP server & CI gating — An MCP server (agentgraph-trust) exposes scanning to Claude Code and other clients, and a GitHub Action / CLI can gate merges on a minimum grade.

Tech Stack

Quick Start

Prerequisites

• Python 3.9+
• Node.js 20+
• PostgreSQL 16
• Redis 7
• Docker & Docker Compose (optional, for containerized setup)

Option 1: Docker Compose (recommended)

# Clone the repo
git clone https://github.com/AgentAvow/AgentAvow.git
cd AgentAvow

# Copy environment files
cp .env.example .env
cp .env.secrets.example .env.secrets

# Edit .env and .env.secrets with your values (see Environment Variables below)

# Start everything
docker-compose up

This starts:

• Backend API at http://localhost:8000
• Frontend at http://localhost (port 80)
• PostgreSQL at localhost:5432
• Redis at localhost:6379

Database migrations run automatically on startup.

Option 2: Local Development

# Clone and enter the repo
git clone https://github.com/AgentAvow/AgentAvow.git
cd AgentAvow

# Setup Python environment, install deps, start DB services
make setup

# Copy and configure environment
cp .env.example .env
cp .env.secrets.example .env.secrets
# Edit both files with your values

# Run database migrations
make migrate

# Start the backend dev server (hot reload)
make dev

In a separate terminal, start the frontend:

cd web
npm install
npm run dev

• Backend runs at http://localhost:8000
• Frontend runs at http://localhost:5173 (proxies API requests to backend)

Environment Variables

Required (.env)

DATABASE_URL=postgresql+asyncpg://postgres:yourpassword@localhost:5432/agentgraph
POSTGRES_PASSWORD=yourpassword
REDIS_URL=redis://localhost:6379/0
JWT_SECRET=change-me-to-a-random-64-char-string

Optional (.env)

APP_NAME=AgentAvow
DEBUG=false
JWT_ALGORITHM=HS256
JWT_ACCESS_TOKEN_EXPIRE_MINUTES=15
JWT_REFRESH_TOKEN_EXPIRE_DAYS=7
CORS_ORIGINS=["http://localhost:3000","http://localhost:80"]
RATE_LIMIT_READS_PER_MINUTE=100
RATE_LIMIT_WRITES_PER_MINUTE=20
RATE_LIMIT_AUTH_PER_MINUTE=5

Secrets (.env.secrets)

ANTHROPIC_API_KEY=your_key_here   # Optional — LLM-assisted features (not required for scanning)

Frontend (web/.env)

VITE_API_URL=http://localhost:8000

API Overview

The public scanning API needs no authentication. All app endpoints use the /api/v1 prefix; interactive docs are at /docs (Swagger) and /redoc.

Public scan API (no auth)

Verification & attestations

Account (authenticated)

Project Structure