ThirdKeyAI/SchemaPin
The SchemaPin protocol for cryptographically signing and verifying AI agent tool schemas to prevent supply-chain attacks.
This project helps AI tool developers cryptographically sign their AI agent tool schemas and skill folders. It takes the tool's schema or skill folder as input and produces a signed artifact that AI agents can verify. This is used by developers building and deploying AI agents and their associated tools, ensuring the integrity and authenticity of the tools.
Use this if you are developing AI agent tools and need to guarantee to AI agents that your tool's schema or skills haven't been tampered with or replaced by malicious actors.
Not ideal if you are a non-developer end-user of AI agents and are not involved in the development or deployment of the agents' underlying tools.
Stars
13
Forks
6
Language
Python
License
MIT
Category
Last pushed
Mar 09, 2026
Commits (30d)
0
Get this data via API
curl "https://pt-edge.onrender.com/api/v1/quality/mcp/ThirdKeyAI/SchemaPin"
Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.
Higher-rated alternatives
awslabs/mcp-server-for-oscal
OSCAL tools for AI agents
fiddlecube/compliant-llm
Build Secure and Compliant AI agents and MCP Servers. YC W23
VibeTensor/attestix
Attestix - Attestation Infrastructure for AI Agents. DID-based agent identity, W3C Verifiable...
agntcy/identity-service
AGNTCY Identity Service serves as the central hub for managing and verifying digital identities...
tomjwxf/verify-mcp
MCP server for offline verification of signed artifacts (receipts, manifests, bundles). MIT...