/**
 * MCP Manifest Audit Scanner
 *
 * Parses MCP server manifests (server.json, mcp.json) and flags security issues:
 * - Missing destructiveHint on write/delete tools
 * - Missing readOnlyHint on read-only tools
 * - Missing inputSchema (allows arbitrary input)
 * - Unbounded allowedOrigins (wildcard *)
 * - Missing tool descriptions
 * - Excessive or undeclared permissions
 *
 * @module scanners/agent/manifest-audit
 */
import type { Severity } from "../../certification/types.js";
import type { AgentScannerResult, MCPManifest, ManifestAuditCheck } from "./types.js";
/**
 * Run manifest audit on an MCP manifest
 */
export declare function runManifestAudit(manifest: MCPManifest, options?: {
    /** Skip specific checks */
    skipChecks?: ManifestAuditCheck[];
    /** Only run specific checks */
    onlyChecks?: ManifestAuditCheck[];
}): Promise<AgentScannerResult>;
/**
 * Check if manifest audit is available (always true - no external deps)
 */
export declare function checkManifestAuditAvailable(): Promise<{
    scanner: "manifest-audit";
    available: boolean;
    version: string;
}>;
/**
 * Get summary statistics from audit findings
 */
export declare function getAuditSummary(result: AgentScannerResult): {
    totalFindings: number;
    byCheck: Record<ManifestAuditCheck, number>;
    bySeverity: Record<Severity, number>;
    toolsAudited: number;
    passRate: number;
};
//# sourceMappingURL=manifest-audit.d.ts.map