← Assay Observatory

⚡ 4-Protocol A2A, Glama 6-Dim TDQS, x402 Bazaar & Stripe MPP Compiler

Assay Badge
Target: https://agent-work-api.agentwork-market.workers.dev
Source: Live MCP JSON-RPC (tools/list) | Tools Audited: 10 | Current Glama TDQS: 1.65/5.0 (32.9/100) → Compiled: 5.0/5.0 (100/100)
1. Glama 6-Dim TDQS: 1.65/5.0 → 5.0/5.0
2. A2A Agent Card: ○ MISSING (Auto-Generated in $9 Pack)
3. x402 v2 Bazaar: ● Ready in $9 Pack
4. Stripe MPP (-32042): ● Ready in $9 Pack

Embed Verified README Badge (Free): [![Assay MCP Security](https://assay-207908449630.us-central1.run.app/v1/badge.svg?target=https://agent-work-api.agentwork-market.workers.dev)](https://assay-207908449630.us-central1.run.app/?inspect=https://agent-work-api.agentwork-market.workers.dev)

Canonical SHA-256 Schema Lock: sha256:c15b4322ab341.. → sha256:e549e734f094f..

1. Per-Tool Glama 2026 Rubric Breakdown (10 Tools)

MCP Tool NameCurrent TDQSDetected Glama Rubric Deductions (Behavior / Conciseness / Parameters / Usage / Schema)
resolve_blocker1.25/5.0 (25)Missing outputSchema (Completeness -1), Unbounded inputSchema: additionalProperties!=false, Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints
get_blocker_resolution3.05/5.0 (61)Missing outputSchema (Completeness -1), Unbounded inputSchema: additionalProperties!=false, Missing MCP annotations.title / safety hints
select_blocker_offer2.4/5.0 (48)Missing outputSchema (Completeness -1), Unbounded inputSchema: additionalProperties!=false, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints
report_blocker_outcome1.75/5.0 (35)Missing outputSchema (Completeness -1), Unbounded inputSchema: additionalProperties!=false, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints
request_outcome_execution1.25/5.0 (25)Missing outputSchema (Completeness -1), Unbounded inputSchema: additionalProperties!=false, Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints
get_outcome_execution1.25/5.0 (25)Missing outputSchema (Completeness -1), Unbounded inputSchema: additionalProperties!=false, Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints
search_work1.25/5.0 (25)Missing outputSchema (Completeness -1), Unbounded inputSchema: additionalProperties!=false, Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints
get_opportunity1.25/5.0 (25)Missing outputSchema (Completeness -1), Unbounded inputSchema: additionalProperties!=false, Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints
search_services1.25/5.0 (25)Missing outputSchema (Completeness -1), Unbounded inputSchema: additionalProperties!=false, Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints
buyer_capabilities1.75/5.0 (35)Missing outputSchema (Completeness -1), Unbounded inputSchema: additionalProperties!=false, Usage Guidelines 3/5: no sibling routing, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints

2. 🔒 FREE LIVE PREVIEW (Tool 1 of 10 Compiled to 5.0/5.0 TDQS + A2A Skill #1)

{
  "tool_1_before": {
    "name": "resolve_blocker",
    "description": "Submit one real task your agent cannot finish. AgentWork immediately returns a private request ID and token before running supply discovery. Call get_blocker_resolution with those credentials to run or read privacy-safe discovery and obtain a current complete route or an honest no_credible_route. Save the token: it is returned only once. Discovery cannot invoke, procure, pay, post, or expose private context.",
    "inputSchema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "properties": {
        "request": {
          "type": "string",
          "minLength": 20,
          "maxLength": 2000,
          "description": "What the agent is trying to complete and what is blocking it."
        },
        "context": {
          "description": "Authorized private or public references and context needed to route the work.",
          "maxItems": 10,
          "type": "array",
          "items": {
            "type": "string",
            "minLength": 3,
            "maxLength": 1000
          }
        },
        "authority": {
          "description": "Actions AgentWork may take and actions that still require approval.",
          "type": "string",
          "minLength": 10,
          "maxLength": 1000
        },
        "max_budget": {
          "type": "integer",
          "minimum": 0,
          "maximum": 50000
        },
        "deadline": {
          "type": "string",
          "pattern": "^\\d{4}-\\d{2}-\\d{2}$"
        },
        "preference": {
          "type": "string",
          "enum": [
            "route",
            "execute",
            "auto"
          ]
        },
        "escalation": {
          "description": "Structured agent-reported unfinished work requiring an explicit owner confirmation before any commercial offer.",
          "type": "object",
          "properties": {
            "expected_artifact": {
              "type": "string",
              "minLength": 20,
              "maxLength": 1000
            },
            "attempted_artifacts": {
              "minItems": 1,
              "maxItems": 10,
              "type": "array",
              "items": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "label": {
                        "type": "string",
                        "minLength": 3,
                        "maxLength": 100
                      },
                      "sha256": {
                        "type": "string",
                        "pattern": "^[a-f0-9]{64}$"
                      }
                    },
                    "required": [
                      "label",
                      "sha256"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "label": {
                        "type": "string",
                        "minLength": 3,
                        "maxLength": 100
                      },
                      "public_url": {
                        "type": "string",
                        "maxLength": 2048,
                        "pattern": "^https:\\/\\/(?![^/?#]*@)(?!(?:localhost|[^/?#]*\\.(?:local|internal|test)|\\d{1,3}(?:\\.\\d{1,3}){3})(?::\\d{1,5})?(?:\\/|$))(?=[A-Za-z0-9.-]*\\.[A-Za-z0-9.-]+(?::\\d{1,5})?(?:\\/|$))[A-Za-z0-9.-]+(?::\\d{1,5})?(?:\\/[^?#]*)?$"
                      }
                    },
                    "required": [
                      "label",
                      "public_url"
                    ],
                    "additionalProperties": false
                  }
                ]
              }
            },
            "owner_feedback": {
              "type": "string",
              "minLength": 20,
              "maxLength": 1000
            },
            "unresolved": {
              "type": "boolean",
              "const": true
            },
            "attempt_count": {
              "type": "integer",
              "minimum": 1,
              "maximum": 1000
            },
            "elapsed_minutes": {
              "type": "integer",
              "minimum": 1,
              "maximum": 525600
            },
            "done_when": {
              "minItems": 1,
              "maxItems": 10,
              "type": "array",
              "items": {
                "type": "string",
                "minLength": 20,
                "maxLength": 500
              }
            },
            "material_constraints": {
              "maxItems": 10,
              "type": "array",
              "items": {
                "type": "string",
                "minLength": 3,
                "maxLength": 500
              }
            },
            "allowed_input_labels": {
              "maxItems": 12,
              "type": "array",
              "items": {
                "type": "string",
                "minLength": 3,
                "maxLength": 100
              }
            },
            "requested_authority": {
              "maxItems": 4,
              "type": "array",
              "items": {
                "type": "string",
                "enum": [
                  "read_public_data",
                  "use_owner_supplied_inputs",
                  "contact_supplier",
                  "procure_execution"
                ]
              }
            }
          },
          "required": [
            "expected_artifact",
            "attempted_artifacts",
            "owner_feedback",
            "unresolved",
            "attempt_count",
            "elapsed_minutes",
            "done_when",
            "material_constraints",
            "allowed_input_labels",
            "requested_authority"
          ],
          "additionalProperties": false
        }
      },
      "required": [
        "request"
      ]
    }
  },
  "tool_1_compiled_5_0_tdqs": {
    "name": "resolve_blocker",
    "description": "Submit one real task your agent cannot finish. AgentWork immediately returns a private request ID and token before running supply discovery. Call get_blocker_resolution with those credentials to run or read privacy-safe discovery and obtain a current complete route or an honest no_credible_route. Save the token: it is returned only once. Discovery cannot invoke, procure, pay, post, or expose private context. WHEN TO USE: Call resolve_blocker for this operation; for sibling workflows use get_blocker_resolution, select_blocker_offer, report_blocker_outcome. WHEN NOT TO USE: Do not call for unrelated mutations. PARAMETER INTERACTIONS: Pass request, context to scope execution; optional fields refine filtering when set and use safe defaults when omitted. Read-only and idempotent; failed calls do not mutate state.",
    "inputSchema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "properties": {
        "request": {
          "type": "string",
          "minLength": 20,
          "maxLength": 2000,
          "description": "What the agent is trying to complete and what is blocking it."
        },
        "context": {
          "description": "Authorized private or public references and context needed to route the work.",
          "maxItems": 10,
          "type": "array",
          "items": {
            "type": "string",
            "minLength": 3,
            "maxLength": 1000
          }
        },
        "authority": {
          "description": "Actions AgentWork may take and actions that still require approval.",
          "type": "string",
          "minLength": 10,
          "maxLength": 1000
        },
        "max_budget": {
          "type": "integer",
          "minimum": 0,
          "maximum": 50000
        },
        "deadline": {
          "type": "string",
          "pattern": "^\\d{4}-\\d{2}-\\d{2}$",
          "minLength": 1,
          "maxLength": 2048,
          "description": "Target deadline value for resolve_blocker."
        },
        "preference": {
          "type": "string",
          "enum": [
            "route",
            "execute",
            "auto"
          ],
          "minLength": 1,
          "maxLength": 2048,
          "description": "Target preference value for resolve_blocker."
        },
        "escalation": {
          "description": "Structured agent-reported unfinished work requiring an explicit owner confirmation before any commercial offer.",
          "type": "object",
          "properties": {
            "expected_artifact": {
              "type": "string",
              "minLength": 20,
              "maxLength": 1000
            },
            "attempted_artifacts": {
              "minItems": 1,
              "maxItems": 10,
              "type": "array",
              "items": {
                "anyOf": [
                  {
                    "type": "object",
                    "properties": {
                      "label": {
                        "type": "string",
                        "minLength": 3,
                        "maxLength": 100
                      },
                      "sha256": {
                        "type": "string",
                        "pattern": "^[a-f0-9]{64}$"
                      }
                    },
                    "required": [
                      "label",
                      "sha256"
                    ],
                    "additionalProperties": false
                  },
                  {
                    "type": "object",
                    "properties": {
                      "label": {
                        "type": "string",
                        "minLength": 3,
                        "maxLength": 100
                      },
                      "public_url": {
                        "type": "string",
                        "maxLength": 2048,
                        "pattern": "^https:\\/\\/(?![^/?#]*@)(?!(?:localhost|[^/?#]*\\.(?:local|internal|test)|\\d{1,3}(?:\\.\\d{1,3}){3})(?::\\d{1,5})?(?:\\/|$))(?=[A-Za-z0-9.-]*\\.[A-Za-z0-9.-]+(?::\\d{1,5})?(?:\\/|$))[A-Za-z0-9.-]+(?::\\d{1,5})?(?:\\/[^?#]*)?$"
                      }
                    },
                    "required": [
                      "label",
                      "public_url"
                    ],
                    "additionalProperties": false
                  }
                ]
              }
            },
            "owner_feedback": {
              "type": "string",
              "minLength": 20,
              "maxLength": 1000
            },
            "unresolved": {
              "type": "boolean",
              "const": true
            },
            "attempt_count": {
              "type": "integer",
              "minimum": 1,
              "maximum": 1000
            },
            "elapsed_minutes": {
              "type": "integer",
              "minimum": 1,
              "maximum": 525600
            },
            "done_when": {
              "minItems": 1,
              "maxItems": 10,
              "type": "array",
              "items": {
                "type": "string",
                "minLength": 20,
                "maxLength": 500
              }
            },
            "material_constraints": {
              "maxItems": 10,
              "type": "array",
              "items": {
                "type": "string",
                "minLength": 3,
                "maxLength": 500
              }
            },
            "allowed_input_labels": {
              "maxItems": 12,
              "type": "array",
              "items": {
                "type": "string",
                "minLength": 3,
                "maxLength": 100
              }
            },
            "requested_authority": {
              "maxItems": 4,
              "type": "array",
              "items": {
                "type": "string",
                "enum": [
                  "read_public_data",
                  "use_owner_supplied_inputs",
                  "contact_supplier",
                  "procure_execution"
                ]
              }
            }
          },
          "required": [
            "expected_artifact",
            "attempted_artifacts",
            "owner_feedback",
            "unresolved",
            "attempt_count",
            "elapsed_minutes",
            "done_when",
            "material_constraints",
            "allowed_input_labels",
            "requested_authority"
          ],
          "additionalProperties": false
        }
      },
      "required": [
        "request"
      ],
      "additionalProperties": false
    },
    "title": "Resolve Blocker",
    "annotations": {
      "title": "Resolve Blocker",
      "readOnlyHint": true,
      "destructiveHint": false,
      "idempotentHint": true,
      "openWorldHint": true
    },
    "outputSchema": {
      "type": "object",
      "properties": {
        "status": {
          "type": "string",
          "description": "Execution status."
        },
        "data": {
          "type": "object",
          "description": "Structured tool result."
        }
      },
      "required": [
        "status",
        "data"
      ]
    }
  },
  "auto_generated_a2a_skill_1_preview": {
    "id": "resolve-blocker",
    "name": "Resolve Blocker",
    "description": "Submit one real task your agent cannot finish. AgentWork immediately returns a private request ID and token before running supply discovery. Call get_blocker_resolution with those credentials to run or read privacy-safe ",
    "tags": [
      "mcp",
      "a2a",
      "x402",
      "resolve"
    ]
  },
  "signed_mcp_lock_preview": {
    "target": "https://agent-work-api.agentwork-market.workers.dev",
    "tools_hash": "sha256:e549e734f094fadc0811c58ece39c9c9378d0023673c7818d25fcee933ff2758",
    "tdqs": 5.0,
    "protocols": [
      "mcp-2025-03-26",
      "a2a-0.2.1",
      "x402-v2-bazaar",
      "stripe-mpp-32042"
    ],
    "signature": "asr_lock_27d8a85b89e0a204079cdd8df16cd7a1"
  },
  "locked_bundle_contents": "Unlock remaining 9 compiled 5.0/5.0 tools + full /.well-known/agent-card.json + /.well-known/mcp.json + Coinbase x402 Bazaar & Stripe MPP (-32042) monetization config below ($9)"
}
⚡ Or Get $2 Universal B2A Agent Pass (16 Live x402/MCP Nodes)