← Assay Observatory

⚡ 4-Protocol A2A, Glama 6-Dim TDQS, x402 Bazaar & Stripe MPP Compiler

Assay Badge
Target: https://aiagentscity.com
Source: Live MCP JSON-RPC (tools/list) | Tools Audited: 18 | Current Glama TDQS: 3.3/5.0 (66.1/100) → Compiled: 5.0/5.0 (100/100)
1. Glama 6-Dim TDQS: 3.3/5.0 → 5.0/5.0
2. A2A Agent Card: ● DETECTED
3. x402 v2 Bazaar: ● Ready in $9 Pack
4. Stripe MPP (-32042): ● Ready in $9 Pack

Embed Verified README Badge (Free): [![Assay MCP Security](https://assay-207908449630.us-central1.run.app/v1/badge.svg?target=https://aiagentscity.com)](https://assay-207908449630.us-central1.run.app/?inspect=https://aiagentscity.com)

Canonical SHA-256 Schema Lock: sha256:bd0e618ca9f54.. → sha256:d123603b5d2b5..

1. Per-Tool Glama 2026 Rubric Breakdown (18 Tools)

MCP Tool NameCurrent TDQSDetected Glama Rubric Deductions (Behavior / Conciseness / Parameters / Usage / Schema)
ledger_rotate_secret3.7/5.0 (74)Missing outputSchema (Completeness -1), Conciseness 4/5: inline return fields duplicate outputSchema
ledger_revoke_secret3.7/5.0 (74)Missing outputSchema (Completeness -1), Conciseness 4/5: inline return fields duplicate outputSchema
ledger_track3.7/5.0 (74)Missing outputSchema (Completeness -1), Behavior 3/5: no side-effect/quota disclosure
ledger_set_budget4.35/5.0 (87)Missing outputSchema (Completeness -1)
ledger_report3.7/5.0 (74)Missing outputSchema (Completeness -1), Behavior 3/5: no side-effect/quota disclosure
ledger_proxy_attach3.05/5.0 (61)Missing outputSchema (Completeness -1), Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure
ledger_alerts3.7/5.0 (74)Missing outputSchema (Completeness -1), Behavior 3/5: no side-effect/quota disclosure
ledger_wait_events3.7/5.0 (74)Missing outputSchema (Completeness -1), Behavior 3/5: no side-effect/quota disclosure
ledger_check_spend3.05/5.0 (61)Missing outputSchema (Completeness -1), Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose
ledger_request_approval3.7/5.0 (74)Missing outputSchema (Completeness -1), Behavior 3/5: no side-effect/quota disclosure
ledger_approvals2.4/5.0 (48)Missing outputSchema (Completeness -1), Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure
ledger_approval_decide2.4/5.0 (48)Missing outputSchema (Completeness -1), Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure
ledger_price4.35/5.0 (87)Missing outputSchema (Completeness -1)
ledger_start4.35/5.0 (87)Missing outputSchema (Completeness -1)
ledger_api_docs3.7/5.0 (74)Missing outputSchema (Completeness -1), Parameters 3/5: no cross-param interaction prose
ledger_examples2.4/5.0 (48)Missing outputSchema (Completeness -1), Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure
skills_list_tool1.75/5.0 (35)Missing outputSchema (Completeness -1), Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints
read_skill1.75/5.0 (35)Missing outputSchema (Completeness -1), Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints

2. 🔒 FREE LIVE PREVIEW (Tool 1 of 18 Compiled to 5.0/5.0 TDQS + A2A Skill #1)

{
  "tool_1_before": {
    "_meta": {
      "fastmcp": {
        "tags": []
      }
    },
    "annotations": {
      "destructiveHint": true,
      "idempotentHint": false,
      "readOnlyHint": false,
      "title": "Rotate Agent Secret"
    },
    "description": "Mint a NEW agent_secret for an agent_id your workspace already owns, invalidating the old one.\n\nUse this to RECOVER an agent whose secret was lost: the previous credential\nstops working immediately. Requires the workspace_key that owns agent_id \u2014\nan agent's own agent_secret cannot rotate itself, because a leaked agent\ncredential must not be able to lock its real owner out. Unlike ledger_track\nthis never claims a new agent_id: an unknown id returns agent_not_claimed.\n\nThe new secret is returned ONCE. Store it before you drop the response.\n\nReturns {\"agent_id\", \"agent_secret\", \"_note\"}, or {\"error\", \"error_code\"}.",
    "inputSchema": {
      "properties": {
        "agent_id": {
          "type": "string"
        },
        "workspace_key": {
          "type": "string"
        }
      },
      "required": [
        "agent_id",
        "workspace_key"
      ],
      "type": "object",
      "additionalProperties": false
    },
    "name": "ledger_rotate_secret",
    "outputSchema": {
      "type": "object",
      "additionalProperties": true
    },
    "title": "Rotate Agent Secret"
  },
  "tool_1_compiled_5_0_tdqs": {
    "_meta": {
      "fastmcp": {
        "tags": []
      }
    },
    "annotations": {
      "title": "Rotate Agent Secret",
      "readOnlyHint": false,
      "destructiveHint": true,
      "idempotentHint": false,
      "openWorldHint": true
    },
    "description": "Mint a NEW agent_secret for an agent_id your workspace already owns, invalidating the old one.\n\nUse this to RECOVER an agent whose secret was lost: the previous credential\nstops working immediately. Requires the workspace_key that owns agent_id \u2014\nan agent's own agent_secret cannot rotate itself, because a leaked agent\ncredential must not be able to lock its real owner out. Unlike ledger_track\nthis never claims a new agent_id: an unknown id returns agent_not_claimed.\n\nThe new secret is returned ONCE. Store it before you drop the response.\n\n, or {\"error\", \"error_code\"}. WHEN TO USE: Call ledger_rotate_secret for this operation; for sibling workflows use ledger_revoke_secret, ledger_track, ledger_set_budget. WHEN NOT TO USE: Do not call for unrelated mutations. PARAMETER INTERACTIONS: Pass agent_id, workspace_key to scope execution; optional fields refine filtering when set and use safe defaults when omitted. Read-only and idempotent; failed calls do not mutate state.",
    "inputSchema": {
      "properties": {
        "agent_id": {
          "type": "string",
          "minLength": 1,
          "maxLength": 2048,
          "description": "Target agent_id value for ledger_rotate_secret."
        },
        "workspace_key": {
          "type": "string",
          "minLength": 1,
          "maxLength": 2048,
          "description": "Target workspace_key value for ledger_rotate_secret."
        }
      },
      "required": [
        "agent_id",
        "workspace_key"
      ],
      "type": "object",
      "additionalProperties": false
    },
    "name": "ledger_rotate_secret",
    "outputSchema": {
      "type": "object",
      "additionalProperties": true
    },
    "title": "Ledger Rotate Secret"
  },
  "auto_generated_a2a_skill_1_preview": {
    "id": "ledger-rotate-secret",
    "name": "Ledger Rotate Secret",
    "description": "Mint a NEW agent_secret for an agent_id your workspace already owns, invalidating the old one.\n\nUse this to RECOVER an agent whose secret was lost: the previous credential\nstops working immediately. Requires the workspac",
    "tags": [
      "mcp",
      "a2a",
      "x402",
      "ledger"
    ]
  },
  "signed_mcp_lock_preview": {
    "target": "https://aiagentscity.com",
    "tools_hash": "sha256:d123603b5d2b55be20d6c8ae300bce5925749d05ae61198428cb5bed539a3d1c",
    "tdqs": 5.0,
    "protocols": [
      "mcp-2025-03-26",
      "a2a-0.2.1",
      "x402-v2-bazaar",
      "stripe-mpp-32042"
    ],
    "signature": "asr_lock_48b1c97817b9da5cd7b66fa20969e1b7"
  },
  "locked_bundle_contents": "Unlock remaining 17 compiled 5.0/5.0 tools + full /.well-known/agent-card.json + /.well-known/mcp.json + Coinbase x402 Bazaar & Stripe MPP (-32042) monetization config below ($9)"
}
⚡ Or Get $2 Universal B2A Agent Pass (16 Live x402/MCP Nodes)