{"id":507374,"name":"hiro","description":"Hiro is a security platform for AI-written code. It exposes two authenticated MCP servers at api.hirosecure.com: the Architect (embeds in Claude Code / Cursor / Copilot to review diffs, answer security questions, and check dependencies against OSV) and the Agents server (programmatic control over scans, investigations, remediations, and plan approvals across AWS, GitHub, Okta, CrowdStrike, Supabase, Vercel, Datadog, Drata, Wiz, and more).","card_url":"https://hirosecure.com/.well-known/agent-card.json","endpoint":"https://api.hirosecure.com/mcp/architect","protocol_version":"0.3.0","first_seen":"2026-10-29T15:20:28.449724+00:00","last_verified":"2026-10-29T15:20:28.449724+00:00","card":{"url":"https://hirosecure.com","name":"hiro","skills":[{"id":"hiro-overview","name":"Hiro overview","tags":["overview","mcp","security","claude-code"],"examples":["What does Hiro do?","Which MCP tools does Hiro expose?","How do I connect Hiro to Claude Code?","Does Hiro support SOC 2 evidence collection?"],"description":"Explain what Hiro does, which integrations and MCP tools it exposes, and how to connect it to Claude Code, Cursor, or Copilot."},{"id":"hiro-contact","name":"Contact Hiro","tags":["contact","demo","sales"],"examples":["How do I book a Hiro demo?","Who do I email at Hiro?"],"description":"Hand off to the Hiro team for a demo or evaluation."}],"$schema":"https://a2a-protocol.org/schemas/agent-card/0.2.0/schema.json","version":"1.0.0","provider":{"url":"https://hirosecure.com","organization":"Hiro"},"description":"Hiro is a security platform for AI-written code. It exposes two authenticated MCP servers at api.hirosecure.com: the Architect (embeds in Claude Code / Cursor / Copilot to review diffs, answer security questions, and check dependencies against OSV) and the Agents server (programmatic control over scans, investigations, remediations, and plan approvals across AWS, GitHub, Okta, CrowdStrike, Supabase, Vercel, Datadog, Drata, Wiz, and more).","capabilities":{"streaming":false,"pushNotifications":false,"stateTransitionHistory":false},"defaultInputModes":["text/plain"],"defaultOutputModes":["text/plain","text/markdown"],"supportedInterfaces":[{"url":"https://api.hirosecure.com/mcp/architect","transport":"HTTP+JSON","description":"MCP Streamable HTTP — Hiro Security Architect tools (code review, security Q&A, dependency checks, org memory)."},{"url":"https://api.hirosecure.com/mcp/agents","transport":"HTTP+JSON","description":"MCP Streamable HTTP — Hiro Security Agents programmatic control plane (chat, task management, plan approval)."}]},"status":"verified","publisher_domain":"hirosecure.com","signature_status":"unsigned","signature_detail":"No card signature supplied","signature_key_url":null,"signature_checked_at":"2026-10-29T15:20:28.449724+00:00","domain_claimed_at":null,"domain_proof_checked_at":null,"source_name":"Publisher Agent Card","source_url":"https://hirosecure.com/.well-known/agent-card.json","last_check":{"checked_at":"2026-10-29T15:20:28.449724+00:00","success":true,"http_status":200,"detail":"Agent Card validated"},"also_published_at":[],"history_urls":["https://hirosecure.com/.well-known/agent-card.json"],"skills":[{"skill_id":"hiro-contact","name":"Contact Hiro","description":"Hand off to the Hiro team for a demo or evaluation.","tags":["contact","demo","sales"],"quality_warning":false},{"skill_id":"hiro-overview","name":"Hiro overview","description":"Explain what Hiro does, which integrations and MCP tools it exposes, and how to connect it to Claude Code, Cursor, or Copilot.","tags":["overview","mcp","security","claude-code"],"quality_warning":false}],"quality_flags":[],"check_history":{"checks":1,"passed":1},"recent_checks":[{"card_url":"https://hirosecure.com/.well-known/agent-card.json","checked_at":"2026-10-29T15:20:28.449724+00:00","success":true,"http_status":200,"detail":"Agent Card validated"}],"endpoint_tls_check":{"checked_at":"2026-10-29T15:20:28.449724+00:00","success":true,"detail":"Valid TLS connection to advertised endpoint host; no A2A request sent"},"protocol_check":{"checked_at":"2026-10-29T15:20:28.449724+00:00","endpoint":"https://api.hirosecure.com/mcp/architect","protocol_binding":"HTTP+JSON","protocol_version":"0.3.0","state":"auth_required","http_status":401,"detail":"Endpoint requires authentication; A2A response not confirmed","request_diagnostics":{"requests":[{"path":"/mcp/architect/v1/tasks/localmark-probe-ba73eb3b-f8da-47b2-8c5a-23f2011899d7","allow":[],"method":"GET","status":401,"version_header":"0.3","protocol_method":null,"redirect_followed":false}],"capture_version":1}},"declared_primary_endpoint":"https://api.hirosecure.com/mcp/architect","selected_connection_interface":{"url":"https://api.hirosecure.com/mcp/architect","protocolBinding":"HTTP+JSON","protocolVersion":"0.3.0"},"protocol_interface_checks":[{"endpoint":"https://api.hirosecure.com/mcp/architect","protocol_binding":"HTTP+JSON","protocol_version":"0.3.0","selected":true,"state":"auth_required","checked_at":"2026-10-29T15:20:28.449724+00:00","http_status":401,"detail":"Endpoint requires authentication; A2A response not confirmed","binding_recorded":true},{"endpoint":"https://api.hirosecure.com/mcp/agents","protocol_binding":"HTTP+JSON","protocol_version":"0.3.0","selected":false,"state":"auth_required","checked_at":"2026-10-29T15:20:28.449724+00:00","http_status":401,"detail":"Endpoint requires authentication; A2A response not confirmed","binding_recorded":true},{"endpoint":"https://hirosecure.com","protocol_binding":"JSONRPC","protocol_version":"0.3.0","selected":false,"state":"unconfirmed","checked_at":"2026-10-29T15:20:28.449724+00:00","http_status":404,"detail":"Advertised JSON-RPC endpoint returned HTTP 404 without a matching A2A response. Publish a JSON-RPC service URL supporting POST tasks/get (0.3) or GetTask (1.0); a website or ordinary resource URL is not sufficient","binding_recorded":true}],"connection_selection_note":"The selected connection uses an address advertised in the publisher card. Read-only observations do not establish task quality or safety.","x402_price_check":null,"events":[],"relationships":[],"verification":{"agent_card_url":"https://hirosecure.com/.well-known/agent-card.json","last_successful_card_check":"2026-10-29T15:20:28.449724+00:00","latest_card_check":{"checked_at":"2026-10-29T15:20:28.449724+00:00","success":true,"http_status":200,"detail":"Agent Card validated"},"signature_status":"unsigned","signature_checked_at":"2026-10-29T15:20:28.449724+00:00","task_endpoint_tested":true,"task_execution_tested":false,"endpoint_tls_checked_at":"2026-10-29T15:20:28.449724+00:00","endpoint_tls_reachable":true,"protocol_check_state":"auth_required","protocol_checked_at":"2026-10-29T15:20:28.449724+00:00","provider_identity_verified":false,"domain_claimed_at":null,"domain_proof_checked_at":null},"synthetic_capability_tests":{"agent_id":507374,"status":"not_tested","reason_code":"not_yet_tested","consent_status":"not_confirmed","latest_observation_status":null,"last_checked_at":null,"fixture_version":"1","reference_demonstration":false,"scope":"A publisher-authorized synthetic test of a dedicated free test endpoint. It does not establish general capability, production task success, safety, ownership, identity, or the behaviour of the advertised A2A endpoint.","methodology_url":"https://localmark.ai/capability-tests","history":[]},"repair_links":{"agent_repair_url":"https://localmark.ai/agents/507374/repair","publisher_report_url":"https://localmark.ai/publishers/hirosecure.com/repair","diagnostics_json_url":"https://localmark.ai/publishers/hirosecure.com/repair/diagnostics.json","diagnostics_csv_url":"https://localmark.ai/publishers/hirosecure.com/repair/diagnostics.csv"},"_localmark":{"contribution":{"optional":true,"directory_access":"free","operator_authorization_required":true,"affects_rankings":false,"message":"LocalMark is free. Optional contributions help fund ongoing checks.","support_url":"https://localmark.ai/support","metadata_url":"https://localmark.ai/api/v1/support/contributions"}}}