{
 "$schema": "https://static.modelcontextprotocol.io/schemas/mcp-server-card/v1.json",
 "name": "com.clawhard/notary",
 "title": "Notary",
 "version": "1.0.0",
 "description": "Notary checks npm and PyPI package names against the live registry before you install them: does it exist, does that version exist, how old and how used is it, is it deprecated, does it run install scripts, is it a typo of a famous package. No account.",
 "websiteUrl": "https://notary.clawhard.com",
 "documentationUrl": "https://notary.clawhard.com/llms.txt",
 "iconUrl": "https://clawhard.com/icon-512.png",
 "serverInfo": {
  "name": "com.clawhard/notary",
  "title": "Notary",
  "version": "1.0.0"
 },
 "protocolVersion": "2025-06-18",
 "transport": "streamable-http",
 "endpoint": "https://notary.clawhard.com/mcp",
 "remotes": [
  {
   "type": "streamable-http",
   "url": "https://notary.clawhard.com/mcp"
  }
 ],
 "authentication": {
  "required": false
 },
 "capabilities": {
  "tools": {
   "listChanged": false
  },
  "prompts": {
   "listChanged": false
  },
  "resources": {
   "subscribe": false,
   "listChanged": false
  }
 },
 "tools": [
  {
   "name": "notary_check_packages",
   "title": "Check that npm and PyPI packages really exist before installing them",
   "description": "Use when you or the user are about to install or import npm or PyPI packages: before npm install or pip install, when adding lines to package.json or requirements.txt, or when a package name came from an AI answer, a tutorial or memory and may be invented. Looks each name up in the live registry and returns whether it exists, the latest version, whether a pinned version exists, weekly downloads, first and last publish dates, deprecation or yanked status, install-time scripts, whether the name is one or two typed characters from a well-known package, and real similar packages when the name does not exist. Example: {\"packages\":[{\"ecosystem\":\"npm\",\"name\":\"@anthropic/mcp-client\"},{\"ecosystem\":\"pypi\",\"name\":\"requests\",\"version\":\"2.32.3\"}]}. Up to 10 packages per call; versions must be exact, not ranges. Not a malware or vulnerability scan: \"ok\" means it exists and nothing looked wrong."
  }
 ],
 "prompts": [
  {
   "name": "notary_check_my_dependencies",
   "title": "Check my dependencies exist",
   "description": "Check that npm or PyPI packages are real, that pinned versions exist, and spot look-alike names, before installing."
  }
 ],
 "publisher": {
  "name": "Clawhard Studio",
  "url": "https://clawhard.com",
  "contact": "support@clawhard.com"
 }
}