← Assay Observatory

⚡ 4-Protocol A2A, Glama 6-Dim TDQS, x402 Bazaar & Stripe MPP Compiler

Assay Badge
Target: https://domain-osint-72343955726.us-central1.run.app
Source: Live MCP JSON-RPC (tools/list) | Tools Audited: 2 | Current Glama TDQS: 4.9/5.0 (98.0/100) → Compiled: 5.0/5.0 (100/100)
1. Glama 6-Dim TDQS: 4.9/5.0 → 5.0/5.0
2. A2A Agent Card: ● DETECTED
3. x402 v2 Bazaar: ● Ready in $9 Pack
4. Stripe MPP (-32042): ● Ready in $9 Pack

Embed Verified README Badge (Free): [![Assay MCP Security](https://assay-207908449630.us-central1.run.app/v1/badge.svg?target=https://domain-osint-72343955726.us-central1.run.app)](https://assay-207908449630.us-central1.run.app/?inspect=https://domain-osint-72343955726.us-central1.run.app)

Canonical SHA-256 Schema Lock: sha256:bf0337189164e.. → sha256:e86e3d51e2cbf..

1. Per-Tool Glama 2026 Rubric Breakdown (2 Tools)

MCP Tool NameCurrent TDQSDetected Glama Rubric Deductions (Behavior / Conciseness / Parameters / Usage / Schema)
recon_domain_osint4.9/5.0 (98)5.0/5.0 Glama Rubric Ready
get_agent_wallet_status4.9/5.0 (98)5.0/5.0 Glama Rubric Ready

2. 🔒 FREE LIVE PREVIEW (Tool 1 of 2 Compiled to 5.0/5.0 TDQS + A2A Skill #1)

{
  "tool_1_before": {
    "name": "recon_domain_osint",
    "description": "Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. WHEN TO USE: Call `recon_domain_osint` when your task requires deterministic `domain-osint` analysis for `domain`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `domain` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: recon_domain_osint(domain='example')",
    "inputSchema": {
      "type": "object",
      "properties": {
        "domain": {
          "minLength": 1,
          "maxLength": 99999,
          "type": "string",
          "description": "Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT."
        },
        "agent_id": {
          "minLength": 1,
          "maxLength": 256,
          "type": "string",
          "description": "Optional agent identifier or prepaid agd_pass_ session key. Omit during your 5 free trial calls to use an ID automatically derived from your client IP, or pass your agd_pass_ key after topping up."
        },
        "tx_hash": {
          "minLength": 10,
          "maxLength": 256,
          "type": "string",
          "description": "Optional on-chain Base Mainnet (0x...) or Solana SPL USDC transaction hash. Omit unless settling an individual call directly on-chain instead of using an agd_pass_ key in agent_id."
        }
      },
      "required": [
        "domain"
      ],
      "additionalProperties": false,
      "examples": [
        {
          "domain": "example"
        }
      ]
    },
    "annotations": {
      "title": "Recon domain osint",
      "readOnlyHint": true,
      "destructiveHint": false,
      "idempotentHint": true,
      "openWorldHint": true
    },
    "_meta": {
      "ui": {
        "resourceUri": "ui://agentdiet/v1/result",
        "visibility": [
          "model",
          "app"
        ]
      },
      "openai/outputTemplate": "ui://agentdiet/v1/result",
      "openai/widgetAccessible": true
    },
    "outputSchema": {
      "type": "object",
      "properties": {
        "status": {
          "type": "string",
          "description": "Execution status ('ok' or 'payment_required')."
        },
        "data": {
          "type": "object",
          "description": "Structured tool output payload."
        },
        "roi_proof": {
          "type": "object",
          "description": "Token compression and cost-savings verification metrics."
        }
      },
      "required": [
        "status"
      ]
    }
  },
  "tool_1_compiled_5_0_tdqs": {
    "name": "recon_domain_osint",
    "description": "Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. WHEN TO USE: Call `recon_domain_osint` when your task requires deterministic `domain-osint` analysis for `domain`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `domain` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: recon_domain_osint(domain='example'). WHEN TO USE: Call recon_domain_osint for this operation; for sibling workflows use get_agent_wallet_status. WHEN NOT TO USE: Do not call for unrelated mutations. PARAMETER INTERACTIONS: Pass domain, agent_id to scope execution; optional fields refine filtering when set and use safe defaults when omitted. Read-only and idempotent; failed calls do not mutate state.",
    "inputSchema": {
      "type": "object",
      "properties": {
        "domain": {
          "minLength": 1,
          "maxLength": 99999,
          "type": "string",
          "description": "Target domain name (e.g. anthropic.com, openai.com) for DNS, TLS certificate, and security header OSINT."
        },
        "agent_id": {
          "minLength": 1,
          "maxLength": 256,
          "type": "string",
          "description": "Optional agent identifier or prepaid agd_pass_ session key. Omit during your 5 free trial calls to use an ID automatically derived from your client IP, or pass your agd_pass_ key after topping up."
        },
        "tx_hash": {
          "minLength": 10,
          "maxLength": 256,
          "type": "string",
          "description": "Optional on-chain Base Mainnet (0x...) or Solana SPL USDC transaction hash. Omit unless settling an individual call directly on-chain instead of using an agd_pass_ key in agent_id."
        }
      },
      "required": [
        "domain"
      ],
      "additionalProperties": false,
      "examples": [
        {
          "domain": "example"
        }
      ]
    },
    "annotations": {
      "title": "Recon domain osint",
      "readOnlyHint": true,
      "destructiveHint": false,
      "idempotentHint": true,
      "openWorldHint": true
    },
    "_meta": {
      "ui": {
        "resourceUri": "ui://agentdiet/v1/result",
        "visibility": [
          "model",
          "app"
        ]
      },
      "openai/outputTemplate": "ui://agentdiet/v1/result",
      "openai/widgetAccessible": true
    },
    "outputSchema": {
      "type": "object",
      "properties": {
        "status": {
          "type": "string",
          "description": "Execution status ('ok' or 'payment_required')."
        },
        "data": {
          "type": "object",
          "description": "Structured tool output payload."
        },
        "roi_proof": {
          "type": "object",
          "description": "Token compression and cost-savings verification metrics."
        }
      },
      "required": [
        "status"
      ]
    },
    "title": "Recon Domain Osint"
  },
  "auto_generated_a2a_skill_1_preview": {
    "id": "recon-domain-osint",
    "name": "Recon Domain Osint",
    "description": "Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. WHEN TO USE: Call `recon_domain_osint` when your task requires deterministic `domain-osint` analysis for `domain`; use `get_",
    "tags": [
      "mcp",
      "a2a",
      "x402",
      "recon"
    ]
  },
  "signed_mcp_lock_preview": {
    "target": "https://domain-osint-72343955726.us-central1.run.app",
    "tools_hash": "sha256:e86e3d51e2cbf76231a1f8d154703eae91b1b1b8d3fd184e062e4a90ea1bd9a6",
    "tdqs": 5.0,
    "protocols": [
      "mcp-2025-03-26",
      "a2a-0.2.1",
      "x402-v2-bazaar",
      "stripe-mpp-32042"
    ],
    "signature": "asr_lock_6c79ca84f8a73b84162a6c202fa66466"
  },
  "locked_bundle_contents": "Unlock remaining 1 compiled 5.0/5.0 tools + full /.well-known/agent-card.json + /.well-known/mcp.json + Coinbase x402 Bazaar & Stripe MPP (-32042) monetization config below ($9)"
}
⚡ Or Get $2 Universal B2A Agent Pass (16 Live x402/MCP Nodes)