SchemaPin is an open-source security standard that prevents tampering with AI agent tool schemas and skill files.
Developers sign their schemas with ECDSA P-256 and publish their public key at a .well-known/schemapin.json endpoint. Clients verify signatures using SHA-256 hashing and TOFU (Trust-On-First-Use) key pinning to detect substitution attacks.
This page checks whether a domain has a valid discovery document and inspects its public key.
Read the documentation →