{"name":"software.altweb/altweb-context","slug":"altweb-context","title":"ALTWEB Context Loader","description":"Loads signed ALTWEB context capsules — refuses unsigned, tampered, or untrusted by default.","url":"https://mcp.market/server/altweb-context","rating":null,"grade":"B","score":83,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":28,"stars":0,"forks":1,"downloads_week":116,"last_push_at":"2026-10-13T17:19:35.000Z","license":"AGPL-3.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/danielsoimu/altweb","website":"https://altweb.software/mcp-loader/","version":"1.1.2","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"altweb-context","version":"1.1.2","transport":{"type":"stdio"},"environmentVariables":[{"description":"Override the local trust file of allowed signer public keys (default: ~/.altweb/trusted-keys.json). A missing or empty trust file refuses every capsule.","name":"ALTWEB_TRUST_FILE"}]}],"tools":[{"name":"list_trusted_keys","description":"Show the signers currently allowed by the local trust file.","write_action":false,"price_micros":0,"input_schema":null},{"name":"load_capsule","description":"Verify an ALTWEB capsule and, only if its signature is valid AND the signer fingerprint is trusted, return its markdown content. Refuses unsigned, tampered, and untrusted capsules.","write_action":false,"price_micros":0,"input_schema":null},{"name":"verify_capsule","description":"Provenance report for an ALTWEB capsule (signed? verified? trusted? encrypted?) without returning its content.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":83,"grade":"B","scanned_at":"2026-11-01T13:28:38.034Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-11-01T13:28:38.008Z","components":{"code":{"score":20,"max":25,"notes":["8 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 19 days ago"]},"identity":{"score":7,"max":10,"notes":["namespace and repository owner differ","GitHub account older than a year","website matches verified namespace"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/altweb-context.mjs: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"altweb-context","version":"1.1.2","found":true,"license":"AGPL-3.0-or-later","hasInstallScripts":false,"dependencyCount":1,"publishedAt":"2026-10-13T17:06:51.366Z","repositoryUrl":"git+https://github.com/danielsoimu/altweb.git","weeklyDownloads":116}],"repo":{"found":true,"owner":"danielsoimu","repo":"altweb","archived":false,"pushedAt":"2026-10-13T17:19:35Z","stars":0,"forks":1,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/69718349?v=4","ownerCreatedAt":"2020-08-15T11:55:57Z","license":"AGPL-3.0"},"icon":{"url":"https://altweb.software/favicon.svg","source":"registry"},"presence":{"stars":0,"forks":1,"downloadsWeek":116,"license":"AGPL-3.0","lastPushAt":"2026-10-13T17:19:35.000Z","score":28}}}},"grade_history":[],"reviews":[]}