@trustlists/mcp 0.1.0 → 0.2.0

package/NOTICE

@@ -1,7 +1,7 @@
-TrustLists Plugin
-Copyright 2026 TrustLists
+trustlists_ Plugin
+Copyright 2026 trustlists
 
-This product includes software developed by TrustLists
+This product includes software developed by trustlists
 (https://trustlists.org).
 
 Licensed under the Apache License, Version 2.0. See LICENSE for details.

package/README.md

@@ -1,16 +1,18 @@
 # @trustlists/mcp
 
-> MCP server that gives AI assistants access to the TrustLists vendor security registry.
+> MCP server that gives AI assistants access to the public trustlists directory.
 
-This is the npm-distributed MCP server that powers the [TrustLists plugin](https://github.com/trustlists/trustlists-plugin) for Cursor, Claude Code, and other Model Context Protocol clients.
+This npm package powers the [trustlists_ plugin](https://github.com/trustlists/trustlists-plugin)
+for Cursor, Claude Code, and other Model Context Protocol clients.
 
 ## Installation
 
-You don't install this package directly — it's spawned by your MCP-aware AI client.
+You don't install this package directly. It is spawned by your MCP-aware AI client.
 
 ### Cursor
 
-The TrustLists plugin handles installation. Or add manually to `~/.cursor/mcp.json`:
+The trustlists_ plugin handles installation. Or add it manually to
+`~/.cursor/mcp.json`:
 
 ```json
 {
@@ -42,12 +44,16 @@ Add to `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS)
 
 | Tool | Description |
 |------|-------------|
-| `trustlists_search` | Search 2,000+ trust centers by name or domain |
+| `trustlists_search` | Search thousands of trust centers by name or domain |
 | `trustlists_lookup` | Look up a single vendor by exact domain |
-| `trustlists_audit_dependencies` | Scan project manifests for vendor security posture |
+| `trustlists_browse` | Filter by platform, listed framework, or CSA STAR level |
+| `trustlists_audit_dependencies` | Map project manifests to public vendor trust centers |
 
 All tools are free. No authentication required.
 
+Directory labels show what a public record lists. They do not independently
+prove certification scope, validity, legal compliance, or security quality.
+
 ## Supported manifest formats (audit tool)
 
 - `package.json` (npm/yarn/pnpm)
@@ -63,5 +69,6 @@ Apache 2.0. See [LICENSE](LICENSE) and [NOTICE](NOTICE).
 
 ## Links
 
+- [MCP overview and setup](https://trustlists.org/mcp/)
 - [Plugin source](https://github.com/trustlists/trustlists-plugin)
-- [TrustLists Directory](https://trustlists.org)
+- [trustlists directory](https://trustlists.org)

package/dist/api/client.d.ts

@@ -1,18 +1,19 @@
 /**
- * TrustLists API client.
+ * Public trustlists registry client.
  *
- * Wraps calls to the public TrustLists APIs:
- *   - https://trustlists.org/api/trust-centers.json (registry)
- *   - https://app.trustlists.org/api/trustlists/lookup (single domain)
- *   - https://app.trustlists.org/api/trustlists/search (autocomplete)
+ * The MCP used to send lookup and search requests through app.trustlists.org.
+ * Both endpoints fetched the public directory again on the server. If Vercel's
+ * security checkpoint challenged that fetch, the app turned the 429 into a 500
+ * and both core MCP tools stopped working.
  *
- * No auth required for any of these. Future paid endpoints (ai-lookup,
- * soc2-analyze, request-access) will use Bearer auth tokens stored in
- * ~/.trustlists/auth.json.
+ * The registry is small enough to fetch once and query locally. We prefer the
+ * public site and fail over to the open GitHub data mirror, which removes the
+ * app server from the free lookup path and keeps the MCP useful when either
+ * public host has a transient problem.
  */
 export declare const TRUSTLISTS_REGISTRY_URL = "https://trustlists.org/api/trust-centers.json";
-export declare const TRUSTLISTS_LOOKUP_URL = "https://app.trustlists.org/api/trustlists/lookup";
-export declare const TRUSTLISTS_SEARCH_URL = "https://app.trustlists.org/api/trustlists/search";
+export declare const TRUSTLISTS_REGISTRY_FALLBACK_URL = "https://raw.githubusercontent.com/trustlists/trustlists-data/main/data/trust-centers.json";
+export declare const TRUSTLISTS_DIRECTORY_URL = "https://trustlists.org";
 export interface RegistryEntry {
     name: string;
     website: string;
@@ -34,35 +35,55 @@ export interface LookupResult {
     name?: string;
     trustCenter?: string;
     website?: string;
+    entry?: RegistryEntry;
 }
 export interface SearchResult {
-    source: 'trustlists' | 'brandfetch';
+    source: 'trustlists';
     name: string;
     domain: string | null;
     website: string | null;
     trustCenter?: string;
     logo?: string | null;
     certifications?: string[];
-    qualityScore?: number;
-    claimed?: boolean;
-    verified?: boolean;
+    platform?: string;
+    csaStarLevel?: number;
+    lastVerified?: string;
+    directoryUrl?: string;
+}
+export interface RegistryInfo {
+    source: 'trustlists.org' | 'github';
+    sourceUrl: string;
+    total: number;
+    generated?: string;
+    version?: string;
+    fetchedAt: string;
+}
+interface RegistrySnapshot {
+    entries: RegistryEntry[];
+    info: RegistryInfo;
 }
 /**
- * Fetch the full TrustLists registry. Cached for 10 minutes per process.
+ * Fetch the full trustlists registry. Cached for 10 minutes per process.
+ * Concurrent cache misses share one refresh request.
  */
+export declare function getRegistrySnapshot(): Promise<RegistrySnapshot>;
 export declare function getRegistry(): Promise<RegistryEntry[]>;
 /**
- * Look up a single vendor by exact domain. Uses the lookup endpoint which
- * is cheaper than fetching the full registry.
+ * Look up a single vendor by exact domain against the local registry snapshot.
  */
 export declare function lookupByDomain(domain: string): Promise<LookupResult>;
 /**
- * Autocomplete search across registry + Brandfetch. Used for fuzzy name lookups.
+ * Search the public registry by company name or website domain.
  */
 export declare function searchVendors(query: string): Promise<SearchResult[]>;
+export declare function searchRegistry(registry: RegistryEntry[], query: string): SearchResult[];
+export declare function formatSearchResult(entry: RegistryEntry, domain?: string): SearchResult;
+export declare function companyDirectoryUrl(name: string): string;
+export declare function resetRegistryCacheForTests(): void;
 /**
  * Normalize an arbitrary user input into a bare hostname like 'stripe.com'.
  * Handles full URLs, www prefixes, trailing paths, and casing.
  */
 export declare function normalizeDomain(input: string | undefined | null): string;
+export {};
 //# sourceMappingURL=client.d.ts.map

package/dist/api/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,eAAO,MAAM,uBAAuB,kDAAkD,CAAC;AACvF,eAAO,MAAM,qBAAqB,qDAAqD,CAAC;AACxF,eAAO,MAAM,qBAAqB,qDAAqD,CAAC;AAExF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,GAAG,YAAY,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAuCD;;GAEG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAS5D;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAc1E;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAgB1E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAcxE"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,eAAO,MAAM,uBAAuB,kDAAkD,CAAC;AACvF,eAAO,MAAM,gCAAgC,8FACgD,CAAC;AAC9F,eAAO,MAAM,wBAAwB,2BAA2B,CAAC;AAEjE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,gBAAgB,GAAG,QAAQ,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAWD,UAAU,gBAAgB;IACxB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,IAAI,EAAE,YAAY,CAAC;CACpB;AAmFD;;;GAGG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAYrE;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAE5D;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAe1E;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAI1E;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,aAAa,EAAE,EACzB,KAAK,EAAE,MAAM,GACZ,YAAY,EAAE,CAkChB;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,aAAa,EACpB,MAAM,SAAiC,GACtC,YAAY,CAad;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQxD;AAED,wBAAgB,0BAA0B,IAAI,IAAI,CAGjD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAcxE"}

package/dist/api/client.js

@@ -1,97 +1,193 @@
 /**
- * TrustLists API client.
+ * Public trustlists registry client.
  *
- * Wraps calls to the public TrustLists APIs:
- *   - https://trustlists.org/api/trust-centers.json (registry)
- *   - https://app.trustlists.org/api/trustlists/lookup (single domain)
- *   - https://app.trustlists.org/api/trustlists/search (autocomplete)
+ * The MCP used to send lookup and search requests through app.trustlists.org.
+ * Both endpoints fetched the public directory again on the server. If Vercel's
+ * security checkpoint challenged that fetch, the app turned the 429 into a 500
+ * and both core MCP tools stopped working.
  *
- * No auth required for any of these. Future paid endpoints (ai-lookup,
- * soc2-analyze, request-access) will use Bearer auth tokens stored in
- * ~/.trustlists/auth.json.
+ * The registry is small enough to fetch once and query locally. We prefer the
+ * public site and fail over to the open GitHub data mirror, which removes the
+ * app server from the free lookup path and keeps the MCP useful when either
+ * public host has a transient problem.
  */
-const PLUGIN_VERSION = '0.1.0';
-const USER_AGENT = `TrustListsMCP/${PLUGIN_VERSION}`;
-const SOURCE_HEADER_VALUE = 'cursor-plugin';
+const PLUGIN_VERSION = '0.2.0';
+const USER_AGENT = `trustlists-mcp/${PLUGIN_VERSION}`;
+const SOURCE_HEADER_VALUE = 'mcp';
+const FETCH_TIMEOUT_MS = 15_000;
 export const TRUSTLISTS_REGISTRY_URL = 'https://trustlists.org/api/trust-centers.json';
-export const TRUSTLISTS_LOOKUP_URL = 'https://app.trustlists.org/api/trustlists/lookup';
-export const TRUSTLISTS_SEARCH_URL = 'https://app.trustlists.org/api/trustlists/search';
+export const TRUSTLISTS_REGISTRY_FALLBACK_URL = 'https://raw.githubusercontent.com/trustlists/trustlists-data/main/data/trust-centers.json';
+export const TRUSTLISTS_DIRECTORY_URL = 'https://trustlists.org';
 const REGISTRY_CACHE_TTL_MS = 10 * 60 * 1000;
 let registryCache = null;
-const LOOKUP_CACHE_TTL_MS = 5 * 60 * 1000;
-const lookupCache = new Map();
-const SEARCH_CACHE_TTL_MS = 5 * 60 * 1000;
-const searchCache = new Map();
+let registryRefresh = null;
 function defaultHeaders() {
     return {
         'User-Agent': USER_AGENT,
-        'X-TrustLists-Source': SOURCE_HEADER_VALUE,
-        'X-TrustLists-Version': PLUGIN_VERSION,
+        'X-Trustlists-Source': SOURCE_HEADER_VALUE,
+        'X-Trustlists-Version': PLUGIN_VERSION,
         Accept: 'application/json',
     };
 }
 async function fetchJson(url, init) {
-    const response = await fetch(url, {
-        ...init,
-        headers: {
-            ...defaultHeaders(),
-            ...(init?.headers || {}),
-        },
-    });
-    if (!response.ok) {
-        throw new Error(`TrustLists API error ${response.status} for ${url}`);
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+    try {
+        const response = await fetch(url, {
+            ...init,
+            signal: controller.signal,
+            headers: {
+                ...defaultHeaders(),
+                ...(init?.headers || {}),
+            },
+        });
+        if (!response.ok) {
+            const mitigated = response.headers.get('x-vercel-mitigated');
+            const detail = mitigated ? ` (${mitigated})` : '';
+            throw new Error(`trustlists data request returned ${response.status}${detail}`);
+        }
+        return (await response.json());
+    }
+    finally {
+        clearTimeout(timeout);
     }
-    return (await response.json());
+}
+async function refreshRegistrySnapshot() {
+    const sources = [
+        { source: 'trustlists.org', url: TRUSTLISTS_REGISTRY_URL },
+        { source: 'github', url: TRUSTLISTS_REGISTRY_FALLBACK_URL },
+    ];
+    const failures = [];
+    for (const candidate of sources) {
+        try {
+            const json = await fetchJson(candidate.url);
+            const entries = Array.isArray(json?.data) ? json.data : [];
+            if (entries.length === 0) {
+                throw new Error('registry was empty');
+            }
+            const snapshot = {
+                entries,
+                info: {
+                    source: candidate.source,
+                    sourceUrl: candidate.url,
+                    total: Number(json?.meta?.total) || entries.length,
+                    generated: json?.meta?.generated,
+                    version: json?.meta?.version,
+                    fetchedAt: new Date().toISOString(),
+                },
+            };
+            registryCache = {
+                value: snapshot,
+                expiresAt: Date.now() + REGISTRY_CACHE_TTL_MS,
+            };
+            return snapshot;
+        }
+        catch (error) {
+            failures.push(`${candidate.source}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    throw new Error(`Could not load the public trustlists registry. ${failures.join('; ')}`);
 }
 /**
- * Fetch the full TrustLists registry. Cached for 10 minutes per process.
+ * Fetch the full trustlists registry. Cached for 10 minutes per process.
+ * Concurrent cache misses share one refresh request.
  */
-export async function getRegistry() {
-    const now = Date.now();
-    if (registryCache && registryCache.expiresAt > now) {
+export async function getRegistrySnapshot() {
+    if (registryCache && registryCache.expiresAt > Date.now()) {
         return registryCache.value;
     }
-    const json = await fetchJson(TRUSTLISTS_REGISTRY_URL);
-    const data = Array.isArray(json?.data) ? json.data : [];
-    registryCache = { value: data, expiresAt: now + REGISTRY_CACHE_TTL_MS };
-    return data;
+    if (!registryRefresh) {
+        registryRefresh = refreshRegistrySnapshot().finally(() => {
+            registryRefresh = null;
+        });
+    }
+    return registryRefresh;
+}
+export async function getRegistry() {
+    return (await getRegistrySnapshot()).entries;
 }
 /**
- * Look up a single vendor by exact domain. Uses the lookup endpoint which
- * is cheaper than fetching the full registry.
+ * Look up a single vendor by exact domain against the local registry snapshot.
  */
 export async function lookupByDomain(domain) {
     const normalized = normalizeDomain(domain);
     if (!normalized)
         return { found: false };
-    const now = Date.now();
-    const cached = lookupCache.get(normalized);
-    if (cached && cached.expiresAt > now) {
-        return cached.value;
-    }
-    const url = `${TRUSTLISTS_LOOKUP_URL}?domain=${encodeURIComponent(normalized)}`;
-    const result = await fetchJson(url);
-    lookupCache.set(normalized, { value: result, expiresAt: now + LOOKUP_CACHE_TTL_MS });
-    return result;
+    const registry = await getRegistry();
+    const entry = registry.find((candidate) => normalizeDomain(candidate.website) === normalized);
+    if (!entry)
+        return { found: false };
+    return {
+        found: true,
+        name: entry.name,
+        trustCenter: entry.trustCenter,
+        website: entry.website,
+        entry,
+    };
 }
 /**
- * Autocomplete search across registry + Brandfetch. Used for fuzzy name lookups.
+ * Search the public registry by company name or website domain.
  */
 export async function searchVendors(query) {
     const trimmed = (query || '').trim();
     if (trimmed.length < 2)
         return [];
-    const cacheKey = trimmed.toLowerCase();
-    const now = Date.now();
-    const cached = searchCache.get(cacheKey);
-    if (cached && cached.expiresAt > now) {
-        return cached.value;
-    }
-    const url = `${TRUSTLISTS_SEARCH_URL}?q=${encodeURIComponent(trimmed)}`;
-    const json = await fetchJson(url);
-    const results = Array.isArray(json?.results) ? json.results : [];
-    searchCache.set(cacheKey, { value: results, expiresAt: now + SEARCH_CACHE_TTL_MS });
-    return results;
+    return searchRegistry(await getRegistry(), trimmed);
+}
+export function searchRegistry(registry, query) {
+    const normalizedQuery = query.toLowerCase().trim();
+    if (normalizedQuery.length < 2)
+        return [];
+    return registry
+        .map((entry) => {
+        const name = String(entry.name || '').toLowerCase();
+        const domain = normalizeDomain(entry.website);
+        if (!name.includes(normalizedQuery) && !domain.includes(normalizedQuery)) {
+            return null;
+        }
+        let score = 10;
+        if (name === normalizedQuery || domain === normalizedQuery)
+            score = 200;
+        else if (name.startsWith(normalizedQuery) || domain.startsWith(normalizedQuery)) {
+            score = 100;
+        }
+        else if (name.includes(` ${normalizedQuery}`)
+            || name.split(/[\s-]/).includes(normalizedQuery)) {
+            score = 50;
+        }
+        score -= Math.abs(name.length - normalizedQuery.length) * 0.5;
+        return { entry, domain, score };
+    })
+        .filter((candidate) => candidate !== null)
+        .sort((a, b) => b.score - a.score || a.entry.name.localeCompare(b.entry.name))
+        .map(({ entry, domain }) => formatSearchResult(entry, domain));
+}
+export function formatSearchResult(entry, domain = normalizeDomain(entry.website)) {
+    return {
+        source: 'trustlists',
+        name: entry.name,
+        domain: domain || null,
+        website: entry.website || null,
+        trustCenter: entry.trustCenter,
+        certifications: entry.certifications || [],
+        platform: entry.platform,
+        csaStarLevel: entry.csaStar?.level,
+        lastVerified: entry.lastVerified,
+        directoryUrl: companyDirectoryUrl(entry.name),
+    };
+}
+export function companyDirectoryUrl(name) {
+    const slug = String(name || '')
+        .toLowerCase()
+        .replace(/[^a-z0-9\s-]/g, '')
+        .replace(/\s+/g, '-')
+        .replace(/-+/g, '-')
+        .replace(/^-|-$/g, '');
+    return `${TRUSTLISTS_DIRECTORY_URL}/company/${slug}/`;
+}
+export function resetRegistryCacheForTests() {
+    registryCache = null;
+    registryRefresh = null;
 }
 /**
  * Normalize an arbitrary user input into a bare hostname like 'stripe.com'.

package/dist/api/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,UAAU,GAAG,iBAAiB,cAAc,EAAE,CAAC;AACrD,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAE5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,+CAA+C,CAAC;AACvF,MAAM,CAAC,MAAM,qBAAqB,GAAG,kDAAkD,CAAC;AACxF,MAAM,CAAC,MAAM,qBAAqB,GAAG,kDAAkD,CAAC;AA4CxF,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7C,IAAI,aAAa,GAAuC,IAAI,CAAC;AAE7D,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoC,CAAC;AAEhE,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsC,CAAC;AAElE,SAAS,cAAc;IACrB,OAAO;QACL,YAAY,EAAE,UAAU;QACxB,qBAAqB,EAAE,mBAAmB;QAC1C,sBAAsB,EAAE,cAAc;QACtC,MAAM,EAAE,kBAAkB;KAC3B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAI,GAAW,EAAE,IAAkB;IACzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,GAAG,IAAI;QACP,OAAO,EAAE;YACP,GAAG,cAAc,EAAE;YACnB,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;SACzB;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,aAAa,IAAI,aAAa,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QACnD,OAAO,aAAa,CAAC,KAAK,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,SAAS,CAA4B,uBAAuB,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,aAAa,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,qBAAqB,EAAE,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAEzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,qBAAqB,WAAW,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;IAChF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAe,GAAG,CAAC,CAAC;IAClD,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,mBAAmB,EAAE,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa;IAC/C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,qBAAqB,MAAM,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxE,MAAM,IAAI,GAAG,MAAM,SAAS,CAA8B,GAAG,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,GAAG,mBAAmB,EAAE,CAAC,CAAC;IACpF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAgC;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;QACrE,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG;aACP,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;aAC5B,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;aACtB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACb,WAAW,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,UAAU,GAAG,kBAAkB,cAAc,EAAE,CAAC;AACtD,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,MAAM,CAAC,MAAM,uBAAuB,GAAG,+CAA+C,CAAC;AACvF,MAAM,CAAC,MAAM,gCAAgC,GAC3C,2FAA2F,CAAC;AAC9F,MAAM,CAAC,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AAqEjE,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7C,IAAI,aAAa,GAAwC,IAAI,CAAC;AAC9D,IAAI,eAAe,GAAqC,IAAI,CAAC;AAE7D,SAAS,cAAc;IACrB,OAAO;QACL,YAAY,EAAE,UAAU;QACxB,qBAAqB,EAAE,mBAAmB;QAC1C,sBAAsB,EAAE,cAAc;QACtC,MAAM,EAAE,kBAAkB;KAC3B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAI,GAAW,EAAE,IAAkB;IACzD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,GAAG,IAAI;YACP,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE;gBACP,GAAG,cAAc,EAAE;gBACnB,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;aACzB;SACF,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB;IACpC,MAAM,OAAO,GAAG;QACd,EAAE,MAAM,EAAE,gBAAyB,EAAE,GAAG,EAAE,uBAAuB,EAAE;QACnE,EAAE,MAAM,EAAE,QAAiB,EAAE,GAAG,EAAE,gCAAgC,EAAE;KACrE,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAkB,SAAS,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,QAAQ,GAAqB;gBACjC,OAAO;gBACP,IAAI,EAAE;oBACJ,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,SAAS,EAAE,SAAS,CAAC,GAAG;oBACxB,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM;oBAClD,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS;oBAChC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO;oBAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC;aACF,CAAC;YACF,aAAa,GAAG;gBACd,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB;aAC9C,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CACX,GAAG,SAAS,CAAC,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,aAAa,IAAI,aAAa,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC1D,OAAO,aAAa,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,eAAe,GAAG,uBAAuB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACvD,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,OAAO,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CACzB,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,UAAU,CACjE,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACpC,OAAO;QACL,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa;IAC/C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,cAAc,CAAC,MAAM,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAAyB,EACzB,KAAa;IAEb,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAE1C,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,IAAI,IAAI,KAAK,eAAe,IAAI,MAAM,KAAK,eAAe;YAAE,KAAK,GAAG,GAAG,CAAC;aACnE,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChF,KAAK,GAAG,GAAG,CAAC;QACd,CAAC;aAAM,IACL,IAAI,CAAC,QAAQ,CAAC,IAAI,eAAe,EAAE,CAAC;eACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,EAChD,CAAC;YACD,KAAK,GAAG,EAAE,CAAC;QACb,CAAC;QACD,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;QAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC,CAAC;SACD,MAAM,CACL,CAAC,SAAS,EAIR,EAAE,CAAC,SAAS,KAAK,IAAI,CACxB;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC7E,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAoB,EACpB,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;IAEvC,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,MAAM,IAAI,IAAI;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;QAC1C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK;QAClC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SAC5B,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzB,OAAO,GAAG,wBAAwB,YAAY,IAAI,GAAG,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,aAAa,GAAG,IAAI,CAAC;IACrB,eAAe,GAAG,IAAI,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAgC;IAC9D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;QACrE,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG;aACP,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;aAC5B,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;aACtB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACb,WAAW,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
 /**
- * TrustLists MCP server entry point.
+ * trustlists MCP server entry point.
  *
  * Spawned by Cursor / Claude Code via `npx -y @trustlists/mcp`.
  * Speaks JSON-RPC over stdio per the Model Context Protocol spec.
  *
- * v0.1.0 ships three free tools:
+ * v0.2.0 ships four free tools:
  *   - trustlists_search
  *   - trustlists_lookup
+ *   - trustlists_browse
  *   - trustlists_audit_dependencies
  *
  * No auth required for any of these. Future paid endpoints (ai-lookup,

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;GAcG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;GAeG"}

package/dist/index.js

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
 /**
- * TrustLists MCP server entry point.
+ * trustlists MCP server entry point.
  *
  * Spawned by Cursor / Claude Code via `npx -y @trustlists/mcp`.
  * Speaks JSON-RPC over stdio per the Model Context Protocol spec.
  *
- * v0.1.0 ships three free tools:
+ * v0.2.0 ships four free tools:
  *   - trustlists_search
  *   - trustlists_lookup
+ *   - trustlists_browse
  *   - trustlists_audit_dependencies
  *
  * No auth required for any of these. Future paid endpoints (ai-lookup,
@@ -19,9 +20,10 @@ import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
 import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
 import { runSearch, searchInputSchema, searchToolDefinition } from './tools/search.js';
 import { runLookup, lookupInputSchema, lookupToolDefinition } from './tools/lookup.js';
+import { runBrowse, browseInputSchema, browseToolDefinition } from './tools/browse.js';
 import { runAudit, auditInputSchema, auditToolDefinition, } from './tools/audit-dependencies.js';
 const SERVER_NAME = 'trustlists';
-const SERVER_VERSION = '0.1.0';
+const SERVER_VERSION = '0.2.0';
 const server = new Server({
     name: SERVER_NAME,
     version: SERVER_VERSION,
@@ -31,7 +33,12 @@ const server = new Server({
     },
 });
 server.setRequestHandler(ListToolsRequestSchema, async () => ({
-    tools: [searchToolDefinition, lookupToolDefinition, auditToolDefinition],
+    tools: [
+        searchToolDefinition,
+        lookupToolDefinition,
+        browseToolDefinition,
+        auditToolDefinition,
+    ],
 }));
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
     const { name, arguments: args } = request.params;
@@ -51,6 +58,13 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                     content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
                 };
             }
+            case 'trustlists_browse': {
+                const input = browseInputSchema.parse(args ?? {});
+                const result = await runBrowse(input);
+                return {
+                    content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
+                };
+            }
             case 'trustlists_audit_dependencies': {
                 const input = auditInputSchema.parse(args ?? {});
                 const result = await runAudit(input);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,WAAW,GAAG,YAAY,CAAC;AACjC,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;IACE,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,cAAc;CACxB,EACD;IACE,YAAY,EAAE;QACZ,KAAK,EAAE,EAAE;KACV;CACF,CACF,CAAC;AAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,mBAAmB,CAAC;CACzE,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAEjD,IAAI,CAAC;QACH,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;gBACtC,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;iBACnE,CAAC;YACJ,CAAC;YAED,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;gBACtC,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;iBACnE,CAAC;YACJ,CAAC;YAED,KAAK,+BAA+B,CAAC,CAAC,CAAC;gBACrC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACrC,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;iBACnE,CAAC;YACJ,CAAC;YAED;gBACE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;oBAC1D,OAAO,EAAE,IAAI;iBACd,CAAC;QACN,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,YAAY,OAAO,EAAE,EAAE,CAAC;YACpE,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,8EAA8E;IAC9E,OAAO,CAAC,KAAK,CAAC,qBAAqB,cAAc,mBAAmB,CAAC,CAAC;AACxE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,WAAW,GAAG,YAAY,CAAC;AACjC,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;IACE,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,cAAc;CACxB,EACD;IACE,YAAY,EAAE;QACZ,KAAK,EAAE,EAAE;KACV;CACF,CACF,CAAC;AAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE;QACL,oBAAoB;QACpB,oBAAoB;QACpB,oBAAoB;QACpB,mBAAmB;KACpB;CACF,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAEjD,IAAI,CAAC;QACH,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;gBACtC,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;iBACnE,CAAC;YACJ,CAAC;YAED,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;gBACtC,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;iBACnE,CAAC;YACJ,CAAC;YAED,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;gBACtC,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;iBACnE,CAAC;YACJ,CAAC;YAED,KAAK,+BAA+B,CAAC,CAAC,CAAC;gBACrC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACrC,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;iBACnE,CAAC;YACJ,CAAC;YAED;gBACE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;oBAC1D,OAAO,EAAE,IAAI;iBACd,CAAC;QACN,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,YAAY,OAAO,EAAE,EAAE,CAAC;YACpE,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,8EAA8E;IAC9E,OAAO,CAAC,KAAK,CAAC,qBAAqB,cAAc,mBAAmB,CAAC,CAAC;AACxE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/tools/audit-dependencies.d.ts

@@ -1,5 +1,5 @@
 /**
- * trustlists_audit_dependencies — scan a project's dependency manifests and
+ * trustlists_audit_dependencies: scan a project's dependency manifests and
  * map each dependency to its vendor's trust center.
  *
  * Supports:
@@ -10,8 +10,8 @@
  *   - Gemfile (Ruby)
  *   - composer.json (PHP)
  *
- * Returns a structured audit so the host AI (Cursor/Claude) can produce a
- * risk report without us shipping our own scoring logic.
+ * Returns a structured inventory so the host AI (Cursor/Claude) can describe
+ * public security-documentation visibility without inventing a risk score.
  */
 import { z } from 'zod';
 export declare const auditInputSchema: z.ZodObject<{
@@ -52,7 +52,7 @@ export interface AuditToolResult {
 export declare function runAudit(input: AuditInput): Promise<AuditToolResult>;
 export declare const auditToolDefinition: {
     readonly name: "trustlists_audit_dependencies";
-    readonly description: "Scan a project's dependency manifests (package.json, requirements.txt, go.mod, Cargo.toml, Gemfile, composer.json, pyproject.toml, Pipfile) and map each dependency to its vendor's trust center in the TrustLists registry. Returns structured data for the AI to produce a supply chain risk report. Use when reviewing third-party packages or doing a security audit.";
+    readonly description: "Scan a project's dependency manifests (package.json, requirements.txt, go.mod, Cargo.toml, Gemfile, composer.json, pyproject.toml, Pipfile) and map likely vendors to public trust center records. Returns documentation-visibility data, not a security score. Use when inventorying third-party services or preparing vendor review.";
     readonly inputSchema: {
         readonly type: "object";
         readonly properties: {

package/dist/tools/audit-dependencies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-dependencies.d.ts","sourceRoot":"","sources":["../../src/tools/audit-dependencies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,gBAAgB;;;;;;;;;EAG3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAS1D,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,GAAG,KAAK,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAmE1E;AAyaD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;CAmBtB,CAAC"}
+{"version":3,"file":"audit-dependencies.d.ts","sourceRoot":"","sources":["../../src/tools/audit-dependencies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,gBAAgB;;;;;;;;;EAG3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAS1D,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,GAAG,KAAK,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAsE1E;AAyaD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;CAmBtB,CAAC"}