OpenSSF Scorecard
OpenSSF Scorecard repository security posture scores and check results.
Tools
| Name | Description |
|---|---|
get_project_scorecardGet the latest OpenSSF Scorecard API result for a repository such as github.com/ossf/scorecard. | Get the latest OpenSSF Scorecard API result for a repository such as github.com/ossf/scorecard. |
get_checkReturn one named check from the latest OpenSSF Scorecard API result. | Return one named check from the latest OpenSSF Scorecard API result. |
Quick Start
import { WeavzClient } from '@weavz-io/sdk'
const weavz = new WeavzClient({ apiKey: 'wvz_...' })
const result = await weavz.actions.execute('openssf-scorecard', 'get_project_scorecard', {
workspaceId: '550e8400-e29b-41d4-a716-446655440000',
integrationAlias: 'openssf-scorecard',
input: { /* ... */ },
})Related Integrations
Works well with
Frequently Asked Questions
How do I connect OpenSSF Scorecard to my app?
OpenSSF Scorecard does not require an external account connection. Install the SDK, add the integration to a workspace, then execute tools programmatically.
What tools does OpenSSF Scorecard support?
OpenSSF Scorecard supports 2 tools including Get Project Scorecard, Get Check.
Can I use OpenSSF Scorecard with AI agents?
Yes. Add OpenSSF Scorecard to an MCP server in Tool Mode or Code Mode. Code Mode provides 3 meta-tools with on-demand API discovery so agents can compose stateful workflows without loading every action schema up front.
How do I connect OpenSSF Scorecard to ChatGPT or Claude?
Open the Weavz connector setup, sign in, choose a workspace, and add OpenSSF Scorecard as an approved app. ChatGPT, Claude, and other remote MCP clients can then call the scoped OpenSSF Scorecard tools exposed by that workspace.
Does OpenSSF Scorecard work with Claude Code, Cursor, Codex, and local agents?
Yes. Remote and local MCP clients can connect to a Weavz MCP endpoint for the workspace. Local coding agents can also use the Weavz CLI to inspect apps, discover actions, run approved OpenSSF Scorecard work, and execute Code Mode workflows from a terminal.
What can I ask an AI agent to do with OpenSSF Scorecard?
OpenSSF Scorecard exposes 2 tools, including Get Project Scorecard, Get Check. Use Weavz to keep credentials scoped, require approval for sensitive work, and audit what the agent did.
Can OpenSSF Scorecard be used in stateful agent workflows?
Yes. Agents can combine OpenSSF Scorecard tools with Filesystem, State KV, Human Gates, input partials, and other workspace integrations while keeping execution scoped to the selected workspace or end user.
What authentication does OpenSSF Scorecard use?
OpenSSF Scorecard does not require external authentication.
How much does the OpenSSF Scorecard integration cost?
The OpenSSF Scorecard integration is included on all Weavz plans including the free tier with 20,000 actions per month. No credit card required.
Connect OpenSSF Scorecard in minutes
Get 20,000 free action executions every month. No credit card required.