# SchemaPin

> SchemaPin — thirdkeyai-schemapin. Use this tool when you need to secure your AI agent tool schemas from supply-chain attacks by cryptographically signing and verifying them. SchemaPin solves the problem of ensuring the integrity and authenticity of tool schemas, preventing malicious modifications and injections. It integrates with git, allowing for seamless signing and verification of schemas within your development workflow.

Canonical page: https://skillsregistry.net/skills/thirdkeyai-schemapin  
JSON: https://api.skillsregistry.net/v1/skills/thirdkeyai-schemapin

## Description

The SchemaPin protocol for cryptographically signing and verifying AI agent tool schemas to prevent supply-chain attacks.

## Trust

- **Trust score (0–1):** 0.50
- **Verification tier:** unverified

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** container
- **Runtime environment:** vm
- **Category:** finance
- **Updated:** 2026-09-20

## Source

- **Source listing:** [GitHub](https://github.com/ThirdKeyAI/SchemaPin)

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "thirdkeyai-schemapin"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/thirdkeyai-schemapin` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/thirdkeyai-schemapin/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt
