SmitheryListed

Cipherwake — AI Coder Deploy Gate

Stops your AI coder from silently degrading your site's security. Cipherwake's Trust Diff runs after every deploy and blocks Claude / Cursor / Copilot from announcing "done" until you've reviewed any new third-party scripts (Polyfill.io-style), weakened security headers, certificate regressions, or protected pages that vanished. **Seven tools your AI agent can call:** - `cipherwake_before_deploy_check` — returns `ship_decision = pass | review | block` before announcing a change is ready - `cipherwake_preview_diff` — Vercel/Netlify preview vs production diff (third-party scripts, header regressions, cert/SPKI drift, soft-404s) - `cipherwake_scan_domain` — DBR grade + top findings for any HTTPS site, no signup - `cipherwake_check_site_guards` — runtime policy checks (source-map exposure, mixed content, protected paths, cookie flags, link integrity) - `cipherwake_create_guard_candidate` — suggest a new guard config to commit - `cipherwake_explain_finding` — plain-English explanation of any finding ID - `cipherwake_suggest_fix` — picks the highest-impact, customer-actionable fix Every response carries `required_user_summary` so the agent surfaces the result in its final reply instead of using Cipherwake silently. Free forever — no signup or API key required (same public API as `npx pqcheck <domain>`).

First seen 2 Oct 2026. Evidence as of 5 Oct 2026.