SchemaPin Verification Tool

Example Use Cases

• 1

  Verify the authenticity and integrity of tool schemas before use.

• 2

  Prevent MCP rug pull attacks by validating cryptographic signatures.

• 3

  Securely discover and pin public keys using DNS and TOFU mechanisms.

Description

SchemaPin enables tool developers to sign their schemas and skill folders using ECDSA P-256 keys, allowing AI agents to verify schema integrity and authenticity. It uses DNS-anchored trust and Trust-On-First-Use (TOFU) key pinning to protect against key substitution attacks. The tool supports public key discovery via .well-known endpoints and offers cross-language SDKs for Python, JavaScript, Go, and Rust, facilitating secure schema verification in various environments.