{"ok":true,"name":"score_cli","description":"Run a fresh container audit for a CLI when no cached scorecard exists. Provide ONE of: slug, binary, install, github_url (same validator as get_scorecard). On registry or R2-cache hit, returns isError: false with next_tool: get_scorecard — cache state is data, not failure. On cache miss, runs a metered container audit gated by MCP_AUDIT_LIMITER (5 per 60-second burst) AND a KV-backed per-hour window (5 audits per 60 minutes per IP — the plan ceiling that the CF binding alone cannot express). No ","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"slug":{"type":"string","description":"Registry slug, e.g. \"ripgrep\"."},"binary":{"type":"string","description":"CLI binary name."},"install":{"type":"string","description":"Full install command, e.g. \"brew install ripgrep\"."},"github_url":{"type":"string","description":"GitHub URL (https://github.com/owner/repo)."},"bypass_cache":{"type":"boolean","description":"Release-smoke escape hatch: when true AND the operator has bound MCP_CACHE_BYPASS_ALLOWED=\"true\" (staging env only), skip the R2 read tier so the live container DO path is always exercised. Silently ignored when the env binding is absent (prod). Rate limiters still apply."}}},"serverUrl":"https://anc.dev/mcp","transport":"http","handshake":"ok","host":"anc.dev","score":36,"grade":"D","auth":"none","lastScannedAt":"2026-10-30T13:10:53.106Z","stale":false,"permalink":"https://agentboardai.app/mcp/anc.dev/score_cli","page":"https://agentboardai.app/site/anc.dev"}