Embed an AgentScore badge
A live SVG badge that shows the current AgentScore for any MCP package on npm. Drop it in a README, on a dossier, in a blog post, anywhere that renders images. The badge auto-refreshes every hour from the live scan record.
Copy a snippet
[](https://agentscores.xyz/report/fa-mcp-sdk)<a href="https://agentscores.xyz/report/fa-mcp-sdk"><img src="https://agentscores.xyz/api/scan/badge?npm=fa-mcp-sdk" alt="AgentScore" /></a>https://agentscores.xyz/api/scan/badge?npm=fa-mcp-sdkWhat the badge shows
The right side of the badge displays the current score on a 0-100 scale and the risk label (clean, elevated, high risk, critical). The badge is rendered server-side from the same scan data that powers the report page. If we have no scan for the package, the badge falls back to a neutral state.
Caching: the badge endpoint serves with a one-hour public cache header, so embeds will pick up score and risk changes within an hour of the underlying scan being updated. There is no JavaScript and no tracking pixel; just an SVG response.
Linking back: every snippet links the badge to the corresponding /report/<package> page so readers can inspect findings, capability surface, and the public correction loop.
Want machine-readable data instead of a badge?
Hit /api/report/fa-mcp-sdk for the full JSON dossier. Filtered RSS lives at /security/advisories/rss.xml?package=fa-mcp-sdk.