Offense MCP

{
  "type": "object",
  "required": [
    "files"
  ],
  "properties": {
    "files": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "path",
          "content"
        ],
        "properties": {
          "path": {
            "type": "string",
            "maxLength": 240,
            "description": "Unique relative lockfile path."
          },
          "content": {
            "anyOf": [
              {
                "type": "string",
                "maxLength": 2000000
              },
              {
                "type": "object"
              }
            ],
            "description": "Sanitized lockfile document; use the installed Offense helper to prepare it."
          }
        },
        "additionalProperties": false
      },
      "maxItems": 20,
      "minItems": 1,
      "description": "Locally sanitized npm v2/v3 or pnpm v6/v9 lockfile metadata. The server cannot read local paths. Do not send source, credentials or registry URLs."
    },
    "planning": {
      "type": "object",
      "required": [
        "metadataFingerprint",
        "pendingTargetIds"
      ],
      "properties": {
        "pendingTargetIds": {
          "type": "array",
          "items": {
            "type": "string",
            "pattern": "^[a-f0-9]{64}$"
          },
          "maxItems": 5000,
          "minItems": 1,
          "uniqueItems": true
        },
        "metadataFingerprint": {
          "type": "string",
          "pattern": "^[a-f0-9]{64}$"
        }
      },
      "description": "Use remediation.planning.next unchanged with the same sanitized files to continue planning. This checks only selected planning targets; retain and merge the original full advisory report.",
      "additionalProperties": false
    },
    "planLimit": {
      "type": "integer",
      "default": 3,
      "maximum": 10,
      "minimum": 0,
      "description": "Maximum affected package/version pairs to plan in this response, highest severity first. Zero scans only. Follow remediation.planning.next for remaining targets; omitted or failed paths remain explicit blockers."
    }
  },
  "additionalProperties": false
}

{
  "type": "object",
  "required": [
    "schemaVersion",
    "capability",
    "status",
    "findings",
    "coverage",
    "remediation",
    "summary",
    "providers"
  ],
  "properties": {
    "status": {
      "enum": [
        "complete",
        "partial"
      ]
    },
    "summary": {
      "type": "object"
    },
    "coverage": {
      "type": "object"
    },
    "findings": {
      "type": "array",
      "items": {
        "type": "object"
      }
    },
    "providers": {
      "type": "array",
      "items": {
        "type": "object"
      }
    },
    "capability": {
      "const": "audit_dependencies"
    },
    "remediation": {
      "type": "object"
    },
    "schemaVersion": {
      "const": "offense.audit.v1"
    }
  }
}

{
  "readOnlyHint": true,
  "openWorldHint": true,
  "idempotentHint": true,
  "destructiveHint": false
}