← Assay Observatory

⚡ 4-Protocol A2A, Glama 6-Dim TDQS, x402 Bazaar & Stripe MPP Compiler

Assay Badge
Target: https://github-audit-72343955726.us-central1.run.app
Source: Live MCP JSON-RPC (tools/list) | Tools Audited: 2 | Current Glama TDQS: 4.9/5.0 (98.0/100) → Compiled: 5.0/5.0 (100/100)
1. Glama 6-Dim TDQS: 4.9/5.0 → 5.0/5.0
2. A2A Agent Card: ● DETECTED
3. x402 v2 Bazaar: ● Ready in $9 Pack
4. Stripe MPP (-32042): ● Ready in $9 Pack

Embed Verified README Badge (Free): [![Assay MCP Security](https://assay-207908449630.us-central1.run.app/v1/badge.svg?target=https://github-audit-72343955726.us-central1.run.app)](https://assay-207908449630.us-central1.run.app/?inspect=https://github-audit-72343955726.us-central1.run.app)

Canonical SHA-256 Schema Lock: sha256:916f4912e932b.. → sha256:778b48b73de2b..

1. Per-Tool Glama 2026 Rubric Breakdown (2 Tools)

MCP Tool NameCurrent TDQSDetected Glama Rubric Deductions (Behavior / Conciseness / Parameters / Usage / Schema)
audit_github_repository4.9/5.0 (98)5.0/5.0 Glama Rubric Ready
get_agent_wallet_status4.9/5.0 (98)5.0/5.0 Glama Rubric Ready

2. 🔒 FREE LIVE PREVIEW (Tool 1 of 2 Compiled to 5.0/5.0 TDQS + A2A Skill #1)

{
  "tool_1_before": {
    "name": "audit_github_repository",
    "description": "Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. WHEN TO USE: Call `audit_github_repository` when your task requires deterministic `github-audit` analysis for `repo`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `repo` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: audit_github_repository(repo='example')",
    "inputSchema": {
      "type": "object",
      "properties": {
        "repo": {
          "minLength": 1,
          "maxLength": 99999,
          "type": "string",
          "description": "GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)."
        },
        "agent_id": {
          "minLength": 1,
          "maxLength": 256,
          "type": "string",
          "description": "Optional agent identifier or prepaid agd_pass_ session key. Omit during your 5 free trial calls to use an ID automatically derived from your client IP, or pass your agd_pass_ key after topping up."
        },
        "tx_hash": {
          "minLength": 10,
          "maxLength": 256,
          "type": "string",
          "description": "Optional on-chain Base Mainnet (0x...) or Solana SPL USDC transaction hash. Omit unless settling an individual call directly on-chain instead of using an agd_pass_ key in agent_id."
        }
      },
      "required": [
        "repo"
      ],
      "additionalProperties": false,
      "examples": [
        {
          "repo": "example"
        }
      ]
    },
    "annotations": {
      "title": "Audit github repository",
      "readOnlyHint": true,
      "destructiveHint": false,
      "idempotentHint": true,
      "openWorldHint": true
    },
    "_meta": {
      "ui": {
        "resourceUri": "ui://agentdiet/v1/result",
        "visibility": [
          "model",
          "app"
        ]
      },
      "openai/outputTemplate": "ui://agentdiet/v1/result",
      "openai/widgetAccessible": true
    },
    "outputSchema": {
      "type": "object",
      "properties": {
        "status": {
          "type": "string",
          "description": "Execution status ('ok' or 'payment_required')."
        },
        "data": {
          "type": "object",
          "description": "Structured tool output payload."
        },
        "roi_proof": {
          "type": "object",
          "description": "Token compression and cost-savings verification metrics."
        }
      },
      "required": [
        "status"
      ]
    }
  },
  "tool_1_compiled_5_0_tdqs": {
    "name": "audit_github_repository",
    "description": "Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. WHEN TO USE: Call `audit_github_repository` when your task requires deterministic `github-audit` analysis for `repo`; use `get_agent_wallet_status` to check your remaining free trial quota or prepaid balance. WHEN NOT TO USE: Do not use for unrelated domains or binary media. PARAMETER INTERACTIONS: Pass the target `repo` as a non-empty string; omit `agent_id` and `tx_hash` during your 5 free trial calls, or supply `agent_id` (`agd_pass_...`) / `tx_hash` for paid execution. Read-only and idempotent; results are cached for 1 hour (<5ms cache hit). $0.01 per call. Pricing: the first 5 calls per agent_id are free and failed calls are never charged. After 5 calls, the tool returns a payment-required quote (not a fatal error) with a $2 Stripe top-up link and Base/Solana USDC addresses; complete payment, then retry with your agd_pass_ key in agent_id or pass tx_hash. Example: audit_github_repository(repo='example'). WHEN TO USE: Call audit_github_repository for this operation; for sibling workflows use get_agent_wallet_status. WHEN NOT TO USE: Do not call for unrelated mutations. PARAMETER INTERACTIONS: Pass repo, agent_id to scope execution; optional fields refine filtering when set and use safe defaults when omitted. Read-only and idempotent; failed calls do not mutate state.",
    "inputSchema": {
      "type": "object",
      "properties": {
        "repo": {
          "minLength": 1,
          "maxLength": 99999,
          "type": "string",
          "description": "GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)."
        },
        "agent_id": {
          "minLength": 1,
          "maxLength": 256,
          "type": "string",
          "description": "Optional agent identifier or prepaid agd_pass_ session key. Omit during your 5 free trial calls to use an ID automatically derived from your client IP, or pass your agd_pass_ key after topping up."
        },
        "tx_hash": {
          "minLength": 10,
          "maxLength": 256,
          "type": "string",
          "description": "Optional on-chain Base Mainnet (0x...) or Solana SPL USDC transaction hash. Omit unless settling an individual call directly on-chain instead of using an agd_pass_ key in agent_id."
        }
      },
      "required": [
        "repo"
      ],
      "additionalProperties": false,
      "examples": [
        {
          "repo": "example"
        }
      ]
    },
    "annotations": {
      "title": "Audit github repository",
      "readOnlyHint": true,
      "destructiveHint": false,
      "idempotentHint": true,
      "openWorldHint": true
    },
    "_meta": {
      "ui": {
        "resourceUri": "ui://agentdiet/v1/result",
        "visibility": [
          "model",
          "app"
        ]
      },
      "openai/outputTemplate": "ui://agentdiet/v1/result",
      "openai/widgetAccessible": true
    },
    "outputSchema": {
      "type": "object",
      "properties": {
        "status": {
          "type": "string",
          "description": "Execution status ('ok' or 'payment_required')."
        },
        "data": {
          "type": "object",
          "description": "Structured tool output payload."
        },
        "roi_proof": {
          "type": "object",
          "description": "Token compression and cost-savings verification metrics."
        }
      },
      "required": [
        "status"
      ]
    },
    "title": "Audit Github Repository"
  },
  "auto_generated_a2a_skill_1_preview": {
    "id": "audit-github-repository",
    "name": "Audit Github Repository",
    "description": "Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. WHEN TO USE: Call `audit_github_repository` when your task requires deterministic `git",
    "tags": [
      "mcp",
      "a2a",
      "x402",
      "audit"
    ]
  },
  "signed_mcp_lock_preview": {
    "target": "https://github-audit-72343955726.us-central1.run.app",
    "tools_hash": "sha256:778b48b73de2bd78ac654a7ad147638d38665226be92c1571a58e22f02da36e2",
    "tdqs": 5.0,
    "protocols": [
      "mcp-2025-03-26",
      "a2a-0.2.1",
      "x402-v2-bazaar",
      "stripe-mpp-32042"
    ],
    "signature": "asr_lock_67f072a2625846da1fac649ba18a1195"
  },
  "locked_bundle_contents": "Unlock remaining 1 compiled 5.0/5.0 tools + full /.well-known/agent-card.json + /.well-known/mcp.json + Coinbase x402 Bazaar & Stripe MPP (-32042) monetization config below ($9)"
}
⚡ Or Get $2 Universal B2A Agent Pass (16 Live x402/MCP Nodes)