DEPENDENCY EVIDENCE

Know what changed before you depend on it.

For teams using external agents and MCP servers: inspect evidence, watch changes, record what you accepted.

Check a client configuration locally · Agency pilot

com.gotincan/tincan

Runtime observation: 2026-11-11T05:27:21.383217+00:00 · State: live

Watches availability, tools and schemas, auth access, endpoints and lifecycle notices. Only complete schemas are compared. OAuth scope and consent-screen changes are not measured.

Agent and MCP watches share your plan's budget. Manage watches.

Current recorded evidence

{
  "auth": "anonymous",
  "availability": "live",
  "endpoint": "https://app.gotincan.com/mcp",
  "legal_identity": null,
  "lifecycle": null,
  "observed_at": "2026-11-11T05:27:21.383217+00:00",
  "registry_status": null,
  "subject": {
    "id": "com.gotincan/tincan",
    "kind": "mcp"
  },
  "tools": {
    "names": [
      "a2a_enable",
      "a2a_task_update",
      "a2a_tasks",
      "account_security",
      "account_security_update",
      "agent_metadata_update",
      "agent_profile_update",
      "agents_list",
      "attachment_upload",
      "channel_create",
      "channels_list",
      "contact_remove",
      "contact_room_start",
      "contact_save",
      "contacts_list",
      "contacts_recommend",
      "context_get",
      "data_export",
      "events_wait",
      "invite_create",
      "join_request_decide",
      "join_requests_list",
      "message_send",
      "messages_search",
      "page_create",
      "page_get",
      "page_history",
      "page_update",
      "pages_list",
      "request_create",
      "request_followup",
      "request_get",
      "request_retry",
      "request_update",
      "requests_list",
      "room_archive",
      "room_bootstrap",
      "room_create",
      "room_join",
      "room_join_status",
      "room_member_update",
      "room_members",
      "room_restore",
      "rooms_list",
      "semantic_policy_update",
      "semantic_status",
      "sharing_setting_get",
      "sharing_setting_request",
      "sharing_setting_request_status",
      "suggestion_get",
      "suggestion_resolve",
      "suggestions_list",
      "task_context_list",
      "task_context_update",
      "tincan_mark_read",
      "tincan_mentions_search",
      "tincan_open",
      "tincan_settings_read",
      "tincan_settings_update",
      "tincan_snapshot",
      "workspace_claim",
      "workspace_info"
    ],
    "names_truncated": false,
    "sha256": "2a24156c294ba5d2963ec60f60d76893218021eca0b39c6d0e2b902d0d1f0b5f"
  },
  "tools_complete": true,
  "tools_observed_at": "2026-11-11T05:27:21.383217+00:00",
  "version": null
}

Pin and review

Keep an accepted snapshot in agents.lock.json. CI returns allow, review or block with reasons.

Gaps default to review. A lock records your acceptance, not a supplier attestation.

API reference

Test an explicit task

Verified domain owners can publish up to five exact-match sandbox fixtures and opt in to a test run. Results include latency, output hashes and regressions.

POST /api/v1/dependencies/task-checks?domain=… while signed in. See the integration guide.

Inspect proof coverage

Domain control, a declared business identifier and a name-matched company record are separate evidence.

Current coverage and measurement date · Verify your domain

Optional SealKeeper evidence

Verify issuer signatures, subject and freshness from the public key document. Task evidence stays separate from Agenstry measurements.

A valid SEAL does not establish domain ownership, legal identity, key possession or execution permission.

Credential verification API · Issuer documentation

Smithery endpoint migration · Agent monitoring · Methodology