{"name":"io.github.Weavatrix/weavatrix-online","slug":"weavatrix-weavatrix-online","title":null,"description":"Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.","url":"https://mcp.market/server/weavatrix-weavatrix-online","rating":null,"grade":"B","score":77,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":26,"stars":1,"forks":0,"downloads_week":87,"last_push_at":"2026-08-24T15:12:12.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/Weavatrix/weavatrix-online","website":"https://weavatrix.com","version":"0.3.4","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"weavatrix-online","version":"0.3.4","runtimeHint":"npx","transport":{"type":"stdio"},"packageArguments":[{"description":"Absolute path to the initial local Git repository","isRequired":true,"type":"positional","valueHint":"repoRoot"}],"environmentVariables":[{"description":"Cloud or compatible self-hosted sync endpoint","isRequired":true,"format":"string","name":"WEAVATRIX_SYNC_URL"},{"description":"Scoped bearer token for the selected endpoint","isRequired":true,"format":"string","isSecret":true,"name":"WEAVATRIX_SYNC_TOKEN"},{"description":"Optional explicit endpoint capability document URL; defaults to /api/v1/capabilities on the sync origin with legacy /api/health fallback","format":"string","name":"WEAVATRIX_CAPABILITIES_URL"},{"description":"Optional explicit architecture-contract URL","format":"string","name":"WEAVATRIX_ARCHITECTURE_URL"},{"description":"Core semantic precision: lsp (default) or off","format":"string","name":"WEAVATRIX_PRECISION"},{"description":"Optional local advisory-cache file override","format":"string","name":"WEAVATRIX_ADVISORY_STORE"}]}],"tools":[{"name":"online_status","description":"NETWORK / explicit Online profile: discover the configured Cloud or Enterprise endpoint capabilities without sending repository evidence.","write_action":false,"price_micros":0,"input_schema":null},{"name":"preview_sync","description":"LOCAL CONSENT PREVIEW: serialize the exact bounded source-free payload and return a short-lived confirmation token. No network request is made.","write_action":false,"price_micros":0,"input_schema":null},{"name":"pull_architecture_contract","description":"NETWORK / explicit Online profile: fetch the owner-approved target architecture for the active opaque repository UUID, validate it through core and cache it locally.","write_action":false,"price_micros":0,"input_schema":null},{"name":"refresh_advisories","description":"NETWORK / explicit Online profile: inventory exact npm/PyPI/Go/Maven/Gradle/Cargo versions, query OSV, validate returned records in Online-owned code, and refresh Online's local advisory cache.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_dependency_malware","description":"LOCAL / explicit Online profile: bounded static heuristic review of installed dependency code. Returns review evidence and completeness only; never claims execution, credential exposure, or package compromise.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_dependency_vulnerabilities","description":"LOCAL / explicit Online profile: match the current exact dependency inventory against the validated Online advisory cache. Missing, stale, partial, or inventory-mismatched cache state never produces a clean zero.","write_action":false,"price_micros":0,"input_schema":null},{"name":"sync_graph","description":"NETWORK / explicit Online profile: upload only the exact source-free payload approved through preview_sync; dry_run:false and the matching short-lived token are required.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":77,"grade":"B","scanned_at":"2026-10-31T17:29:58.917Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-31T17:29:58.873Z","components":{"code":{"score":25,"max":25,"notes":["32 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":12,"max":15,"notes":["last push 68 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"weavatrix-online","version":"0.3.4","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":1,"publishedAt":"2026-08-24T13:45:16.624Z","repositoryUrl":"git+https://github.com/Weavatrix/weavatrix-online.git","weeklyDownloads":87}],"repo":{"found":true,"owner":"Weavatrix","repo":"weavatrix-online","archived":false,"pushedAt":"2026-08-24T15:12:12Z","stars":1,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/320516023?v=4","ownerCreatedAt":"2026-08-24T10:06:27Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/320516023?v=4&s=128","source":"registry","width":128,"height":128},"presence":{"stars":1,"forks":0,"downloadsWeek":87,"license":"MIT","lastPushAt":"2026-08-24T15:12:12.000Z","score":26}}}},"grade_history":[],"reviews":[]}