{
  "name": "Sentinel IR Release Analyst",
  "description": "Static security diff of two npm package releases. Fetches tarballs from the npm registry, never installs or executes code, and returns a Markdown security write-up.",
  "endpoints": {
    "GET /": "this description",
    "GET /health": "liveness",
    "POST /jobs": "create analysis job",
    "GET /jobs/:id": "job status and result (?format=markdown for the report)"
  },
  "input": {
    "package": "npm package name (required unless both tarball URLs given)",
    "toVersion": "newer version (required unless toTarball)",
    "fromVersion": "older version (optional: defaults to the previous stable release)",
    "fromTarball": "https URL (optional)",
    "toTarball": "https URL (optional)"
  },
  "checks": [
    "new/changed lifecycle scripts",
    "new dependencies & non-registry sources",
    "child_process/exec",
    "eval/new Function",
    "network",
    "fs writes",
    "credential paths",
    "obfuscation",
    "minified blobs",
    "binary additions",
    "new MCP tools"
  ]
}