{"specVersion":"1.0","host":{"displayName":"Hefes Scan","identifier":"did:web:scan.hefes.net","description":"Authorised external security scanning, with a verifiable badge for sites that pass."},"entries":[{"identifier":"urn:air:scan.hefes.net:server:hefes-scan","displayName":"Hefes Scan MCP server","type":"application/mcp-server-card+json","url":"https://scan.hefes.net/.well-known/mcp/server-card.json","description":"Scan a domain the account holder controls, check a smart contract, read the findings, and fetch the badge for a site that passes. Requires a token the account holder approves in a browser.","representativeQueries":["scan my website for security problems","is my site leaking an API key or a .env file","get a security badge for my site","re-scan my site to confirm I fixed the findings","check a smart contract before I trust it"]},{"identifier":"urn:air:scan.hefes.net:skill:hefes-scan","displayName":"Hefes Scan agent skill","type":"text/markdown","url":"https://scan.hefes.net/.well-known/agent-skills/hefes-scan/SKILL.md","description":"How an agent uses the MCP server end to end: connect, scan a site, check a contract, fetch the badge.","representativeQueries":["teach my agent to security-scan my website","install a skill for website security scanning"]},{"identifier":"urn:air:scan.hefes.net:docs:llms","displayName":"Service description for assistants","type":"text/plain","url":"https://scan.hefes.net/llms.txt","description":"What this service does, what it refuses to do, and how an assistant connects to it.","representativeQueries":["what does Hefes Scan do","how do I connect an AI assistant to Hefes Scan"]}]}