{
  "protocolVersion": "0.3.0",
  "name": "protectwith.ai Security Advisor",
  "description": "A security-aware AI agent that answers AI-security questions from a cited, verified knowledge base, maps threats and controls to OWASP / NIST / MITRE IDs, and generates compliance checklists. Backed by the protectwith.ai knowledge base and standards-mapped runtime guardrail.",
  "url": "https://agent.protectwith.ai",
  "preferredTransport": "JSONRPC",
  "supportedInterfaces": [
    {
      "url": "https://agent.protectwith.ai",
      "transport": "JSONRPC",
      "protocol": "JSONRPC"
    }
  ],
  "additionalInterfaces": [
    {
      "url": "https://agent.protectwith.ai",
      "transport": "JSONRPC"
    }
  ],
  "version": "1.0.0",
  "documentationUrl": "https://protectwith.ai/auth.md",
  "provider": {
    "organization": "protectwith.ai",
    "url": "https://protectwith.ai"
  },
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "stateTransitionHistory": false
  },
  "defaultInputModes": [
    "text/plain",
    "application/json"
  ],
  "defaultOutputModes": [
    "text/plain",
    "application/json"
  ],
  "securitySchemes": {
    "cloudflareAccess": {
      "type": "http",
      "scheme": "bearer",
      "description": "Cloudflare Access service token (CF-Access-Client-Id / CF-Access-Client-Secret, or a bearer JWT)."
    }
  },
  "security": [
    {
      "cloudflareAccess": []
    }
  ],
  "skills": [
    {
      "id": "security-advisory",
      "name": "AI security advisory",
      "description": "Answer AI-security questions from cited, verified standards — OWASP LLM Top 10, OWASP Agentic, NIST AI RMF, MITRE ATLAS, ISO 42001, and the EU AI Act.",
      "tags": [
        "ai-security",
        "owasp",
        "nist",
        "mitre",
        "advisory"
      ],
      "examples": [
        "Review the security of a Cloudflare Worker that calls an LLM and list the applicable controls.",
        "What are the OWASP LLM Top 10 risks for a RAG application?"
      ]
    },
    {
      "id": "threat-mapping",
      "name": "Threat-to-control mapping",
      "description": "Map a threat, weakness, or control to standardized IDs across OWASP, MITRE ATLAS/ATT&CK, and NIST AI RMF, with mitigating controls.",
      "tags": [
        "threat-modeling",
        "standards-mapping",
        "controls"
      ],
      "examples": [
        "Map prompt injection (LLM01) to NIST AI RMF and MITRE ATLAS.",
        "Which controls mitigate MCP tool poisoning?"
      ]
    },
    {
      "id": "compliance-checklist",
      "name": "Compliance checklist generation",
      "description": "Generate a prioritized, standards-mapped security checklist for an AI system or deployment.",
      "tags": [
        "compliance",
        "checklist",
        "iso-42001",
        "eu-ai-act"
      ],
      "examples": [
        "Generate an ISO 42001 readiness checklist for an LLM chatbot.",
        "Build a pre-launch security checklist for an autonomous agent."
      ]
    }
  ]
}