{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-16T13:36:43.315Z", "record_id": "VXI-EXT-TOOL-TRUST-SOCKET-01-v1", "record_kind": "external_reference", "title": "Socket MCP: Package scores and query authority", "system": "Socket MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Does a Socket MCP dependency score establish that my application is safe to deploy?", "near_questions": [ "Does Socket MCP test my running application?", "Which package ecosystem and version were submitted?", "Does the hosted endpoint require OAuth?", "What scope does a local Socket token need?", "Can a batch omit transitive dependencies?", "Does a score guarantee there is no vulnerability?", "Do client rules enforce a deployment block?", "Was the lockfile actually included in the review?", "Is the server revision pinned?", "Can local and hosted authentication differ?", "Which package metadata reaches the provider?", "Can I preserve the score-interpretation boundary?" ], "supported_claims": [ { "claim": "The documented connector retrieves package security and quality information. Hosted access uses OAuth; the local deployment requires a token with packages:list. A score concerns the supplied dependency identity, not an independently tested application. Client rules can request checks but do not establish that every dependency was checked or a deployment was blocked.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "The documented connector retrieves package security and quality information. Hosted access uses OAuth; the local deployment requires a token with packages:list. A score concerns the supplied dependency identity, not an independently tested application. Client rules can request checks but do not establish that every dependency was checked or a deployment was blocked.", "related_record_ids": [], "source_review": { "source_type": "official_external_documentation", "source_title": "Socket MCP guide", "source_url": "https://docs.socket.dev/docs/guide-to-socket-mcp", "checked_on": "2026-10-16", "candidate_record_id": "VXI-EXT-TOOL-TRUST-SOCKET-01-v1", "candidate_record_sha256": "6141207ebad9db4ace48986d3e1a58d35c0b83513600cb50ac2af31648aeb115", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "The documented connector retrieves package security and quality information. Hosted access uses OAuth; the local deployment requires a token with packages:list. A score concerns the supplied dependency identity, not an independently tested application. Client rules can request checks but do not establish that every dependency was checked or a deployment was blocked.", "required_buyer_context": "Package coordinates, dependency input coverage, deployment mode, credential grants and client rules.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Socket MCP", "variant": "Dated publisher documentation; buyer deployment unverified" }, "review_status": "documentation_review_only", "checked_on": "2026-10-16", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Socket publishes the MCP integration and operates its hosted endpoint.", "source_ids": [ "socket", "socket-local" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Retrieve dependency scores and package information.", "source_ids": [ "socket", "socket-local" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Package metadata for requested dependency identities.", "source_ids": [ "socket", "socket-local" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "The reviewed scoring surface does not document package-management mutations.", "source_ids": [ "socket", "socket-local" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "Hosted OAuth or a local Socket API token.", "source_ids": [ "socket", "socket-local" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "The local guide requires packages:list; actual token grants remain unverified.", "source_ids": [ "socket", "socket-local" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Requested package identities and results cross the service/client boundary.", "source_ids": [ "socket", "socket-local" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Wrong versions, incomplete dependency input or ignored client rules can leave the decision unsupported.", "source_ids": [ "socket", "socket-local" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Installed server revision, dependency completeness and buyer application behaviour are unknown.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Require exact package coordinates and separate application evidence for a deployment decision.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "socket", "url": "https://docs.socket.dev/docs/guide-to-socket-mcp", "final_url": "https://docs.socket.dev/docs/guide-to-socket-mcp", "title": "Socket MCP guide", "checked_on": "2026-10-16", "sha256": "19908caec0dff63eac0f806c387d6ac29dca1ca4b02c5e704b66eb1245e93c6e", "bytes": 287656 }, { "source_id": "socket-local", "url": "https://docs.socket.dev/docs/local-socket-mcp", "final_url": "https://docs.socket.dev/docs/local-socket-mcp", "title": "Local Socket MCP permissions", "checked_on": "2026-10-16", "sha256": "96f5770c7d5ba6e95c43136c476e73ae0751dc24d55a9bd005763bd811e3f6ee", "bytes": 277398 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Save a source-bound interpretation of dependency scores for a purchase or integration review.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Scoring tools, authentication and package coverage." }, "change_history": [ { "version": 1, "date": "2026-10-16", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#socket-mcp-package-score-not-deployment-assessment", "machine_readable_record": "/varexis-index/records/socket-mcp-package-score-not-deployment-assessment.json" }