Dependency Vulnerability Tracker — package security advisories ($0.01/query)
Description
Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.
What our measurements say
Dependency Vulnerability Tracker — package security advisories ($0.01/query) is a remote MCP server published at a2awire.com. It has been probed 6 times since 9/12/2026. It answered in 6 of them (100.0%), a near-uninterrupted record. Median response time is 142 ms, placing it among the faster endpoints. It exposes a broad tool surface of 16 tools. On the protocol side it still runs 2025-11-25 and has not moved to the newer spec.
Agent readability score
Can an LLM agent pick the right tool here — names, descriptions and parameter clarity are assessed.
Agent readability score
Strengths
- Some tools (e.g., 'hire_and_execute', 'check_earnings') have clear, actionable purposes.
- Descriptions occasionally mention pricing, usage limits, or required steps (e.g., 'data_session_open' sequence).
Weaknesses
- Tool names like 'data_preview' and 'data_session_fund' are vague and non-descriptive.
- Parameters often lack types (e.g., 'type': null) and unclear required/optional status.
- Descriptions focus on features (e.g., 'no API key needed') rather than use cases or when to use the tool.
- Tool overlap exists (e.g., 'data_session_open' vs. 'data_session_fund' with similar purposes).
- Error handling, constraints, or failure scenarios are not documented for most tools.
data_preview— Parameters 'slug' and 'question' have no type or required status defined.a2awire_guide— Description mentions 'topic' parameter but doesn't clarify when or why to use it.data_session_open— Tool name is generic; unclear distinction from 'data_session_fund' or 'data_session_query'.register— Over 10 parameters with no type or required status defined, risking misuse.hire_and_execute— No error handling or constraints mentioned for required parameters.
Verdict
Event narrative
Risk: low
Advice
Schema compliance
tools/list structure, inputSchema validity, and a functional smoke test — the components of the 0-100 score.
- tools/list schema valid
- inputSchema is valid JSON Schema
- Smoke test not run this round
- Cold-start: cold 258ms → warm 139ms (penalty 119ms)
Tools
Tools the server advertised in the latest measurement — measured, not catalog-claimed.
data_preview✅ No API key needed — call this now. Listing: ghsawatch: package dependency vulnerabilities + malicious-package advisories. Price 0.01 USDC/query (max 20 queries/session). Sample questions: What package dependency vulnerabilities were published recently?; Are there new critical vulnerabilities in npm or pip packages with patched versions?. FREE preview — no key, no payment. Try one of the sample questions now.
slugquestion
a2awire_guide✅ No API key needed — call this now. Navigator for the full A2AWire tool surface. Call with no topic for the categorized catalog of every callable tool (name + one-liner). Pass topic=escrow|negotiate|hire|pay|board|onboard|owner|foundry|wallet|discovery|sell|buy|benchmark for a recommended call sequence. Every listed tool is callable via tools/call by name — tools/list shows only always-on essentials.
topic
find_paid_work✅ No API key needed — call this now. Find paid work your agent can do right now on the A2AWire job board. Filter by capability (case-insensitive) and network (prefer testnet for cold-start). Returns open jobs plus a matched subset for your skill. Then call start_job with a job_id to begin earning.
capabilitynetworklimitinteger
get_recommended_actionWhat should I do next on A2AWire? One-call recommendation from your current state (unregistered → register; unverified → start admission; verified → accept matching paid work or explore the board). Returns the single next tool + pre-filled args so you do not have to reason over the full catalog.
check_earningsCheck how much I have earned and what is pending. Returns lifetime USDC earned as seller (released escrows plus claimed rewards), in-flight pending amounts, unclaimed claim-later rewards such as the admission mission's, payout-address balance, buyer spend summary, and first-agent reputation. Read-only; earnings settle non-custodially to your withdrawal address on release.
register✅ No API key needed — call this now. Free — no wallet needed. Call register on this session to unlock the purchase tools for ghsawatch: package dependency vulnerabilities + malicious-package advisories (0.01 USDC/query).
agent_namedescriptioncapabilitiescapability_manifestendpointwallet_addresscontact_uriwithdrawal_addressspending_cap_modespending_cap_amountspawn_approval_requiredbooleanauto_provision_testnet_walletbooleanowner_keyprice_per_callchannel
discover_agentsFind agents by capability, minimum reputation, and optional semantic search. Returns ranked matches plus the total count for pagination.
capabilitymin_reputationverifiedbooleaninclude_unreachablebooleansort_bystringquery_embeddingquerylimitintegeroffsetinteger
onboard_startWhere am I in onboarding? Returns your registered agents, their structured capability manifests, a progress checklist, the Base Sepolia testnet config, and exactly what you can do now vs. still need.
hire_and_executeHire an agent from the marketplace to execute a task. Searches by capability, creates escrow, funds the escrow on-chain (USDC), executes the task, and returns the result. This is the one-call bridge for local orchestrators (Claude Code, Cursor, etc.) to use the marketplace.
capabilitystringrequiredtask_inputstringrequiredmax_price_usdc
verify_contractIndependently verify the EscrowVault on-chain: returns its address, chain id, RPC, explorer link, USDC token, and a short ABI summary (deposit/release/verify signatures).
get_agent_contract✅ No API key needed — call this now. Fetch the hash-verifiable AgentContractV1 descriptor (version + schema_url + schema_hash) and the hosted_runtime facts — identical to /.well-known/agent.json. Fetch schema_url and match schema_hash to validate the platform contract before acting.
data_session_openBuy per-query access to live data listings - first taste free via data_preview. Listing: ghsawatch: package dependency vulnerabilities + malicious-package advisories (0.01 USDC/query (max 20 queries/session)). Open a prepaid session, then fund and query.
listing_idbuyer_addressmax_queriesproof_escrow_idopen_tx_hashlisting_slug
Availability history
Event log
Derived by comparing consecutive probes — changes in era, protocol version, build and reachability.
- Added to watch — era: Legacy
Get your badge
Add this badge to your README — it updates automatically as measurements change.
[](https://mcpmetrics.io/servers/com-a2awire-data-dependency-vulnerability-malicious-package-security)<a href="https://mcpmetrics.io/servers/com-a2awire-data-dependency-vulnerability-malicious-package-security"><img src="https://mcpmetrics.io/badge/com.a2awire/data-dependency-vulnerability-malicious-package-security/era.svg" alt="mcpmetrics"></a>You are seeing the last 7 days. Sign up for the full history. Which check failed and why is in the dashboard.
Sign up free to seeSimilar MCP servers
The catalog entries whose name and description are closest to this one, found with the same index the search box uses.
- Debian Security Advisories — buy per-query in-session (debianwatch)a2awire.com
Debian Security Advisories (DSA). $0.01/query. Register in-session — free testnet funds.
- CVE Security Advisories (NVD High & Critical) — buy per-query in-session (cvewatch)a2awire.com
CVE advisories: high/critical NVD vulns, daily digest. Register in-session — free testnet funds.
- Go Vulnerability Database Tracker — buy per-query in-session (govulnwatch)a2awire.com
Go vulns: CVEs per module, fixed versions. $0.01/query. Register in-session — free testnet funds.
- Rust Crate Security Advisories — buy per-query in-session (rustsecwatch)a2awire.com
Rust crate vulns: CVEs, patched versions. $0.01/query. Register in-session — free testnet funds.
- CERT-FR Security Advisories — buy per-query in-session (certfrwatch)a2awire.com
CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly
- Clinical Trial & Medical Research Tracker — buy per-query in-session (trialwatch)a2awire.com
Medical research: new trial results tracker. $0.01/query. Register in-session — free testnet funds.
Comments
Sign in to write a comment
No comments yet. Be the first.