JhiNResH/maiat-protocol

v0.3.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 3mo AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Introduced a zero‑dependency TypeScript SDK for trust scoring and an Outcome Reporting API.

Full changelog

🚀 What's New

maiat-sdk on npm

npm install maiat-sdk — zero-dependency TypeScript SDK for trust scoring.

agentTrust() / tokenCheck() / trustSwap() / isTrusted() / isTokenSafe()
clientId telemetry — tracks which agents use Maiat
reportOutcome() — feedback loop for oracle training data
npmjs.com/package/maiat-sdk

MCP Server (#26)

Claude, GPT, and any MCP-compatible AI can now query Maiat trust scores directly.
Tools: trust_score, token_safety, protocol_rating, batch_score, explain_score

MaiatPassport SBT (#38, #39)

Soulbound ERC-721 contract for on-chain agent identity. Includes reviewable agents API and swap trust-gate dogfooding.

Outcome Reporting API (#43)

POST /api/v1/outcome — closes the feedback loop. SDK users report what happened after a trust check (success/failure/scam), creating ground-truth training data for the oracle.

Security Hardening (#22)

Migrated all 10 API routes from in-memory rate limiting to Upstash Redis
Fixed Gemini API key duplication across 4 files
Rate limits now persist across Vercel cold starts

Infrastructure

ESLint flat config added (#40)
Demo bot for automated usage metrics
Daily indexer cron (02:00 UTC) computing behavioral trust scores
Cleaned ~25 stale branches
pnpm lockfile sync for Vercel builds (#42)

📊 Current Stats

2,292 agents indexed with behavioral trust scores
3 live ACP offerings (token_check, agent_trust, trust_swap)
MCP server + SDK + REST API — three ways to integrate
Base Sepolia contracts: TrustScoreOracle + TrustGateHook (Uniswap v4)

Full Changelog: https://github.com/JhiNResH/maiat-protocol/compare/v0.2.0...v0.3.0

Security Fixes

Fixed Gemini API key duplication across four files

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track JhiNResH/maiat-protocol

Get notified when new releases ship.

About JhiNResH/maiat-protocol

Trust infrastructure for the agent economy. 4 tools: agent trust scores (18K+ agents indexed)

All releases →