Command-line validator

agent-manifest reads a manifest document and checks it against the Agent Manifest v1.0 JSON Schema. It validates structure only.

Status

What it does not do

It does not score, rank, certify, or attest. It does not enforce anything at runtime. It does not write files. A manifest that validates is a well-formed declaration, not evidence that the declaring agent behaves as declared.

Install

npm install -g @agent-manifest/cli
npx @agent-manifest/cli validate ./manifest.json

The unscoped npm package agent-manifest and the @agentmanifest/* scope are unrelated third-party projects.

Commands

agent-manifest validate <file|url|-> [--schema <path-or-url>] [--json] [--no-color]

validate is the only command.

Exit codes

Machine-readable output

{"valid":true,"schema_version":"1.0","errors":[]}

valid is true, false or null, matching exit codes 0, 1 and 2.

Relationship to the specification

The CLI ships a byte-for-byte copy of spec/v1.0/schema.json and never fetches it at run time. The copy’s sha-256 is recorded in the repository and checked on every build. The CLI consumes the specification; it does not define it.

Release 0.1.0

Limits

Node.js 20 or later. Input is read as UTF-8. Network reads happen only for a reference given as a URL, and are bounded. No telemetry, no install-time script, no auto-update.

Reporting

Issues: https://github.com/agent-manifest/agent-manifest-cli/issues. Vulnerabilities: private reporting, see the repository’s security policy.