{"name":"io.github.s0fractal/warrant","slug":"s0fractal-warrant","title":"Warrant","description":"Record an agent's decisions with reasons anyone can re-execute offline — verify recomputes them.","url":"https://mcp.market/server/s0fractal-warrant","rating":null,"grade":"B","score":75,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":34,"stars":5,"forks":0,"downloads_week":40,"last_push_at":"2026-09-23T03:21:31.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/s0fractal/warrant","website":"https://github.com/s0fractal/warrant/tree/master/integrations/mcp-server","version":"0.9.0","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"warrant-verify","version":"0.9.0","transport":{"type":"stdio"},"environmentVariables":[{"description":"Absolute path to the warrant store this server files into and verifies. Defaults to .warrants relative to the server process's working directory, which an MCP host does not guarantee.","name":"WARRANT_STORE"},{"description":"Ed25519 signing key. If unset, one is generated next to the store on the first filing and the result says so; any process that can read it can sign as this actor.","isSecret":true,"name":"WARRANT_KEY"},{"description":"Actor id written into filed warrants. Defaults to mcp-client@<hostname>.","name":"WARRANT_ACTOR"}]}],"tools":[],"scan":{"score":75,"grade":"B","scanned_at":"2026-09-24T12:01:54.889Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-24T12:01:54.974Z","components":{"code":{"score":20,"max":25,"notes":["8 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"warrant_verify-0.9.0/impl/sigma_glyph.py: …ash(h, atp, store, limits=None): \"\"\"eval(term_hash, atp) -> (result_term, atp_spe…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"warrant-verify","version":"0.9.0","found":true,"weeklyDownloads":40,"license":"MIT","dependencyCount":1,"publishedAt":"2026-08-01T20:32:32.670459Z","repositoryUrl":"https://github.com/s0fractal/warrant"}],"repo":{"found":true,"owner":"s0fractal","repo":"warrant","archived":false,"pushedAt":"2026-09-23T03:21:31Z","stars":5,"forks":0,"openIssues":4,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/194916542?v=4","ownerCreatedAt":"2025-01-14T10:51:19Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/194916542?v=4&s=128","source":"github"},"presence":{"stars":5,"forks":0,"downloadsWeek":40,"license":"MIT","lastPushAt":"2026-09-23T03:21:31.000Z","score":34}}}},"grade_history":[],"reviews":[]}