SchemaPin FAQs

Question 1

What are the key features of SchemaPin?

Accepted Answer

SchemaPin features ECDSA P-256 signatures, Trust-On-First-Use (TOFU) key pinning, cross-language support (Python and JavaScript), RFC 8615 compliance for key discovery, and comprehensive security testing.

Question 2

What is SchemaPin?

Accepted Answer

SchemaPin is a cryptographic protocol that ensures the integrity and authenticity of AI agent tool schemas, preventing supply-chain attacks by allowing you to cryptographically sign and verify schemas.

Question 3

How does SchemaPin use key pinning?

Accepted Answer

SchemaPin uses Trust-On-First-Use (TOFU) key pinning.  The public key is stored (pinned) upon the first successful verification of a tool schema. Subsequent verifications will use the pinned key, raising an alert if the key has changed.

Question 4

How does SchemaPin prevent MCP Rug Pull attacks?

Accepted Answer

SchemaPin enables developers to sign their tool schemas and allows clients to verify that the schemas have not been maliciously altered after being approved, ensuring only authentic tools are used.

Question 5

Is SchemaPin easy to integrate into my AI agent project?

Accepted Answer

Yes, SchemaPin provides high-level APIs for both developers and clients, making integration straightforward in both Python and JavaScript environments. Examples are available in the repository.

SchemaPin

SchemaPin

Key Features

Use Cases

Key Features

Use Cases