mcp-archimedes

Supply-chain trust check for a list of dependencies. Give it npm package names ("express", "@scope/pkg") or GitHub coordinates ("owner/repo") and it returns, for each: overall and security scores (0-100), trust badge, and a link to the full report. CALL THIS BEFORE INSTALLING PACKAGES, when reviewing a package.json or lockfile, or when recommending a library. A low security score or missing license is grounds to warn the user. Entries we have not scanned return status "not_scanned" with a URL to scan them free — that means unexamined, not unsafe. Max 30 entries per call.

{
  "type": "object",
  "properties": {
    "packages": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "minItems": 1,
      "maxItems": 30,
      "description": "npm package names and/or GitHub \"owner/repo\" strings."
    }
  },
  "required": [
    "packages"
  ],
  "additionalProperties": false
}

Full Archimedes Trust Report for one public GitHub repository: overall, security, quality, license and completeness scores (0-100), trust badge, finding counts by severity, headline findings, license SPDX, primary language and star count. Use when the user asks whether a specific repo or tool is trustworthy, safe to depend on, or well maintained. Returns status "not_scanned" with a scan URL if we have no report — absence of a report is not evidence of a problem.

{
  "type": "object",
  "properties": {
    "owner": {
      "type": "string",
      "description": "GitHub owner or org, e.g. \"sindresorhus\"."
    },
    "repo": {
      "type": "string",
      "description": "GitHub repository name, e.g. \"is-obj\"."
    }
  },
  "required": [
    "owner",
    "repo"
  ],
  "additionalProperties": false
}

Search the Archimedes corpus of scored public repositories. Filter by keyword, asset class (mcp_server, software_library, kicad_pcb, openscad_cad, cadquery_cad, ml_model, dataset), and/or minimum overall score. Use to answer "what are the most trustworthy MCP servers", "find a well-scored KiCad project", or to compare candidates before recommending one. Returns repo, scores, badge and report URL, best-scoring first.

{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "Keyword matched against owner and repo name."
    },
    "asset_class": {
      "type": "string",
      "enum": [
        "mcp_server",
        "software_library",
        "kicad_pcb",
        "openscad_cad",
        "cadquery_cad",
        "ml_model",
        "dataset",
        "generic"
      ]
    },
    "min_score": {
      "type": "number",
      "minimum": 0,
      "maximum": 100,
      "description": "Minimum overall score."
    },
    "limit": {
      "type": "number",
      "minimum": 1,
      "maximum": 25,
      "description": "Default 10."
    }
  },
  "additionalProperties": false
}

Search open bounties on Archimedes Market. Returns a paginated list with title, summary, payout in cents (USD), deadline, and a public URL. Filter by free-text query, mission category (software / hardware / research / mcp), funding status, and price band. Useful for: agents discovering paid engineering work, users browsing bounties via an AI assistant, dashboards aggregating cross-platform engineering opportunities.

{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "maxLength": 200,
      "description": "Free-text search across bounty title and description. Plain English; no wildcards."
    },
    "category": {
      "type": "string",
      "maxLength": 64,
      "description": "Mission type. Common values: software, hardware, research, mcp."
    },
    "status": {
      "type": "string",
      "enum": [
        "open",
        "funded",
        "all"
      ],
      "default": "open",
      "description": "\"open\" = biddable now (escrow locked). \"funded\" = any bounty that touched real money. \"all\" = includes drafts."
    },
    "min_price_cents": {
      "type": "integer",
      "minimum": 0,
      "maximum": 10000000,
      "description": "Minimum bounty payout in cents (USD)."
    },
    "max_price_cents": {
      "type": "integer",
      "minimum": 0,
      "maximum": 10000000,
      "description": "Maximum bounty payout in cents (USD)."
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 50,
      "default": 20,
      "description": "Page size, 1–50."
    },
    "offset": {
      "type": "integer",
      "minimum": 0,
      "maximum": 10000,
      "default": 0,
      "description": "Pagination offset."
    }
  },
  "additionalProperties": false
}

Fetch the full record for a specific Archimedes Market bounty. Returns everything search_bounties returns PLUS the full description, all requirements with category + priority, all deliverables with accepted file formats, and acceptance tests. Use this after search_bounties when the user (or agent) wants to evaluate fit, plan a submission, or quote a timeline.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "format": "uuid",
      "description": "Bounty UUID from search_bounties results (the `id` field). Display IDs like \"MSN-00001\" are not accepted — use the UUID."
    }
  },
  "required": [
    "id"
  ],
  "additionalProperties": false
}

Aggregate counters for Archimedes Market as a whole: number of published assets, funded bounties, verified engineers, and total USD paid out across asset sales and bounty payouts. Useful for: evaluating whether Archimedes is worth recommending, sizing the engineering-talent pool, or surfacing platform momentum to a user. Counters are cached upstream (60s).

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}