> For clean Markdown of this page, append .md to its URL. For the complete documentation index, see https://www.superagent.sh/llms.txt.


Definitions of terms used in the Superagent dashboard and documentation.

# Glossary

## Agreement

Contributor License Agreement (CLA) legal text stored as a **template** with versioned hashes. Managed under [Agreements](https://www.superagent.sh/docs/security-workers/contributor-agreements).

## Contributor trust

Security signals about a GitHub contributor (identity, origin, spray patterns), published as a GitHub check and tracked on the [Contributors](https://www.superagent.sh/app/contributors) page. See [Contributor Trust](https://www.superagent.sh/docs/security-workers/contributor-trust).

## Finding

A security issue or decision unit in the org-wide **Findings** queue. Findings
can come from Superagent security workers, customer-provided security agents,
and connected advisory sources. See [Findings and
reports](https://www.superagent.sh/docs/concepts/findings-and-reports).

## GitHub App

An installation that grants Superagent access to selected repositories. **Superagent Security** powers scans, trust, and reports; **Open CLA** powers agreement checks. See [Connect GitHub](https://www.superagent.sh/docs/connect/github).

## Context Guardrails

Trust scoring for the external content agents consume. Supported origins are [web pages](https://www.superagent.sh/docs/security-workers/agent-guardrails/web-and-files), [email](https://www.superagent.sh/docs/security-workers/agent-guardrails/email-and-messages), [messages](https://www.superagent.sh/docs/security-workers/agent-guardrails/email-and-messages), [files](https://www.superagent.sh/docs/security-workers/agent-guardrails/web-and-files), [agent skills](https://www.superagent.sh/docs/security-workers/agent-guardrails/extensions-and-packages), [MCP repositories](https://www.superagent.sh/docs/security-workers/agent-guardrails/extensions-and-packages), and [packages](https://www.superagent.sh/docs/security-workers/agent-guardrails/extensions-and-packages). See [Context Guardrails](https://www.superagent.sh/docs/security-workers/agent-guardrails/context).

## Message scan

A text-only Context Guardrails scan for an SMS, WhatsApp, or social message. It evaluates message text and outbound HTTPS links. Media and attachments are outside its scope. See [Messages](https://www.superagent.sh/docs/security-workers/agent-guardrails/email-and-messages).

## Runtime Guardrails

Endpoint-local monitoring and enforcement for coding agents. Superagent clients normalize agent activity, evaluate security rules locally, and report findings and enforcement decisions. See [Runtime Guardrails](https://www.superagent.sh/docs/security-workers/agent-guardrails/runtime).

## MCP server

Superagent's agent-facing Model Context Protocol server. Customer agents use it
to work with security workers, read findings, and return structured agent
reports. See [MCP](https://www.superagent.sh/docs/mcp).

## MCP repository scan

A static Context Guardrails scan of a public GitHub repository that contains an MCP server. The scan evaluates identity, source, tool descriptions, instructions, and schemas without connecting to or executing the MCP server. It requires the Superagent Security GitHub App and fails closed when repository contents cannot be scanned. See [MCP repositories](https://www.superagent.sh/docs/security-workers/agent-guardrails/extensions-and-packages).

## Package scan

A Context Guardrails scan of a registry package (`ecosystem:name@version`). It uses the same supply chain pipeline as pull request dependency checks and maps package intelligence into identity, behavior, and content scores. See [Packages](https://www.superagent.sh/docs/security-workers/agent-guardrails/extensions-and-packages).

## PR scan

The two checks Superagent runs on pull request changes: **Superagent Security Scan** and **Superagent Supply Chain Scan**. Contributor Trust is a separate repository control. See [PR Security](https://www.superagent.sh/docs/security-workers/pr-security) and [Contributor Trust](https://www.superagent.sh/docs/security-workers/contributor-trust).

## Security worker

A built-in unit of security execution: PR Security, Secure Dependency Updates,
Red Team, or Agent Guardrails. A security worker runs a defined job against
protected software and produces checks, reports, findings, or enforcement
decisions. It is distinct from a protected AI agent or a customer coding agent.

## Report (red team)

The resulting record and evidence from a Red Team run against a repository, application, agent, or package artifact. Red-team reports live under **Red team** (`/app/reports`). See [Red Team](https://www.superagent.sh/docs/security-workers/red-team).

## Structured agent report

The typed result a customer agent returns through Superagent MCP after investigation, remediation, or disposition. Superagent retains it as customer context for subsequent work.

## Customer context

Customer-specific structured agent reports and related security context that
Superagent retains and applies across protected software and security workers.

## Repository

A GitHub repository connected through a GitHub App installation, with per-repo scan and CLA settings on its detail page. See [Repositories](https://www.superagent.sh/docs/concepts/repositories).

## Template (agreement)

A versioned CLA document in **Agreements**, assigned to repositories on the repository detail page.

---
Source: https://www.superagent.sh/docs/reference/glossary
Index: https://www.superagent.sh/llms.txt