Skip to content
OpenSmartRoute
Agentv1.0.3

sigstore-cosign-mcp

Sigstore cosign + rekor transparency log verification for signed container images + git tags + b...

by CSOAI-ORG(0) 0 installs
Free
Sign in to install

Free account. Installing gives you the manifest plus copy-paste snippets.

See reviews

About

A2A agent card imported from CSOAI-ORG/sigstore-cosign-mcp (.well-known/agent.json). Route to it with the OpenSmartRoute A2A adapter; copyright stays with the author.

sigstore-cosign-mcp

Sigstore cosign + rekor transparency log verification for signed container images + git tags + b...

Skills

  • Verify Image Signature - verify_image_signature via sigstore-cosign-mcp
  • Query Rekor Log - query_rekor_log via sigstore-cosign-mcp
  • Verify Attestation - verify_attestation via sigstore-cosign-mcp
  • Check Keyless Identity - check_keyless_identity via sigstore-cosign-mcp
  • List Trusted Certs - list_trusted_certs via sigstore-cosign-mcp

Capabilities

none declared

Endpoint: https://proofof.ai/scorecard/sigstore-cosign-mcp.html

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml
targets:
  - https://api.opensmartroute.ai/api/v1/registry/csoai-org-sigstore-cosign-mcp-sigstore-cosign-mcp/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

csoai-org-sigstore-cosign-mcp-sigstore-cosign-mcp.ocm.jsonjson
{
  "ocm": "1",
  "id": "csoai-org-sigstore-cosign-mcp-sigstore-cosign-mcp",
  "kind": "agent",
  "name": "sigstore-cosign-mcp",
  "description": "Sigstore cosign + rekor transparency log verification for signed container images + git tags + b...",
  "publisher": "CSOAI-ORG",
  "version": "1.0.3",
  "capabilities": {
    "domains": [
      "coding"
    ],
    "tags": [
      "a2a",
      "agent-card",
      "mcp",
      "compliance",
      "github-a2a"
    ],
    "languages": [
      "en"
    ],
    "supports_tools": true
  },
  "quality_prior": 0.6,
  "examples": [
    "Sigstore cosign + rekor transparency log verification for signed container images + git tags + b..."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github-a2a",
      "repository": "https://github.com/CSOAI-ORG/sigstore-cosign-mcp",
      "path": ".well-known/agent.json",
      "ref": "9ba03a24cdc3e937571a4e3695e66261c3392d8b",
      "url": "https://github.com/CSOAI-ORG/sigstore-cosign-mcp/blob/9ba03a24cdc3e937571a4e3695e66261c3392d8b/.well-known/agent.json",
      "key": "CSOAI-ORG/sigstore-cosign-mcp/.well-known/agent.json"
    }
  },
  "endpoints": [
    {
      "protocol": "a2a",
      "url": "https://proofof.ai/scorecard/sigstore-cosign-mcp.html"
    }
  ]
}

Fetch it by URL: GET /api/v1/registry/csoai-org-sigstore-cosign-mcp-sigstore-cosign-mcp/manifest?version=1.0.3

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.