Documentation
ECZ-ID MCP & Agent Check finds committed Model Context Protocol and agent configurations, catches package, version, endpoint and proof-reference mismatches, and posts deterministic findings directly to pull requests.
Supported files
| Path | Parsed as |
|---|---|
/.vscode/mcp.json, /mcp.json | JSONC (root only) |
**/server.json | JSON — MCP registry server manifest |
**/package.json | JSON — association metadata only |
/ecz-agent.json, /.well-known/ecz-agent.json, **/ecz-agent.json | JSON — legacy agent manifest (neutral compatibility guidance only) |
What the check does
Deterministic checks only: configuration observed and parsed, package pinning, package/version agreement, repository-reference agreement, remote endpoint changes, operator reference format, and optional public Resolver evidence posture. Two independent lanes: configuration posture and public accountability evidence. The absence of ECZ-ID evidence never causes a failing result, and no payment can change a result.
Check conclusions
| Conclusion | Used when |
|---|---|
success | Deterministic checks completed; no objective configuration mismatch |
neutral | Nothing in scope, unsupported schema, limits reached, Resolver outage, unverified committed reference, or internal error |
action_required | Malformed supported configuration or an objective package, version, repository, endpoint or reference mismatch |
failure is never used.
Limits
Max file size 256 KiB · max tree entries 20,000 · max analyzed assets 50 ·
max package.json files 500 · max path depth 20. Exceeding a limit yields a truthful
partial result, never a failing one.
Legacy agent-manifest compatibility
The MCP App recognises the older nested schema only to provide neutral compatibility guidance. It does not treat that shape as current Agent Trust canon.
{
"schema_version": "1",
"agent": { "name": "your-agent" },
"operator": { "ecz_id": "…", "resolver_url": "https://…" },
"subject": { "repository": "https://github.com/owner/repo" }
}For the canonical semver manifest and Agent Trust validation, use ECZ-ID Agent Trust documentation.
What the App never does
It never executes repository code, commands, scripts or binaries; never retains raw source; never requests write access to your code; and never requires payment to reveal findings.