← Assay Observatory

⚡ 4-Protocol A2A, Glama 6-Dim TDQS, x402 Bazaar & Stripe MPP Compiler

1. Per-Tool Glama 2026 Rubric Breakdown (7 Tools)

2. 🔒 FREE LIVE PREVIEW (Tool 1 of 7 Compiled to 5.0/5.0 TDQS + A2A Skill #1)

{
  "tool_1_before": {
    "name": "scan_code",
    "description": "Use before shipping or executing agent-generated code. Deterministic AST scan for Python, JavaScript and TypeScript with 65 rules (36 Python, 29 JS/TS) covering injection, hardcoded secrets, wallet key exfiltration, SSRF, infinite x402 payment loops and unsimulated Solana transactions. Returns findings with severity, deterministic patches, unified diffs and an execution verdict (PASS, WARN, BLOCK). Pay per call: 0.10 Base USDC or 0.0007 SOL over x402, no signup or API key.",
    "inputSchema": {
      "type": "object",
      "properties": {
        "source_code": {
          "type": "string",
          "description": "Source code to scan (Python or JS/TS)"
        },
        "language": {
          "type": "string",
          "enum": [
            "python",
            "javascript",
            "typescript",
            "tsx"
          ],
          "default": "python",
          "description": "Source code programming language"
        },
        "auto_remediate": {
          "type": "boolean",
          "default": true,
          "description": "Whether to generate deterministic patches and unified diffs"
        },
        "payment_tx": {
          "type": "string",
          "description": "Optional x402 payment transaction proof: Base EVM tx hash (0x...) transferring USDC to 0xb295E606F38C363b476FC546c27226B5fBcAAEFA, or Solana tx signature transferring SOL/USDC."
        },
        "session_token": {
          "type": "string",
          "description": "Optional prepaid session voucher token (scanpay_sess_...) for 0ms instant execution."
        }
      },
      "required": [
        "source_code"
      ]
    }
  },
  "tool_1_compiled_5_0_tdqs": {
    "name": "scan_code",
    "description": "Use before shipping or executing agent-generated code. Deterministic AST scan for Python, JavaScript and TypeScript with 65 rules (36 Python, 29 JS/TS) covering injection, hardcoded secrets, wallet key exfiltration, SSRF, infinite x402 payment loops and unsimulated Solana transactions. Returns findings with severity, deterministic patches, unified diffs and an execution verdict (PASS, WARN, BLOCK). Pay per call: 0.10 Base USDC or 0.0007 SOL over x402, no signup or API key. WHEN TO USE: Call scan_code for this operation; for sibling workflows use scan_quick, simulate_tx, audit_token. WHEN NOT TO USE: Do not call for unrelated mutations. PARAMETER INTERACTIONS: Pass source_code, language to scope execution; optional fields refine filtering when set and use safe defaults when omitted. Read-only and idempotent; failed calls do not mutate state.",
    "inputSchema": {
      "type": "object",
      "properties": {
        "source_code": {
          "type": "string",
          "description": "Source code to scan (Python or JS/TS)",
          "minLength": 1,
          "maxLength": 2048
        },
        "language": {
          "type": "string",
          "enum": [
            "python",
            "javascript",
            "typescript",
            "tsx"
          ],
          "default": "python",
          "description": "Source code programming language",
          "minLength": 1,
          "maxLength": 2048
        },
        "auto_remediate": {
          "type": "boolean",
          "default": true,
          "description": "Whether to generate deterministic patches and unified diffs"
        },
        "payment_tx": {
          "type": "string",
          "description": "Optional x402 payment transaction proof: Base EVM tx hash (0x...) transferring USDC to 0xb295E606F38C363b476FC546c27226B5fBcAAEFA, or Solana tx signature transferring SOL/USDC.",
          "minLength": 1,
          "maxLength": 2048
        },
        "session_token": {
          "type": "string",
          "description": "Optional prepaid session voucher token (scanpay_sess_...) for 0ms instant execution.",
          "minLength": 1,
          "maxLength": 2048
        }
      },
      "required": [
        "source_code"
      ],
      "additionalProperties": false
    },
    "title": "Scan Code",
    "annotations": {
      "title": "Scan Code",
      "readOnlyHint": true,
      "destructiveHint": false,
      "idempotentHint": true,
      "openWorldHint": true
    },
    "outputSchema": {
      "type": "object",
      "properties": {
        "status": {
          "type": "string",
          "description": "Execution status."
        },
        "data": {
          "type": "object",
          "description": "Structured tool result."
        }
      },
      "required": [
        "status",
        "data"
      ]
    }
  },
  "auto_generated_a2a_skill_1_preview": {
    "id": "scan-code",
    "name": "Scan Code",
    "description": "Use before shipping or executing agent-generated code. Deterministic AST scan for Python, JavaScript and TypeScript with 65 rules (36 Python, 29 JS/TS) covering injection, hardcoded secrets, wallet key exfiltration, SSRF",
    "tags": [
      "mcp",
      "a2a",
      "x402",
      "scan"
    ]
  },
  "signed_mcp_lock_preview": {
    "target": "https://scanpay-ob3w.onrender.com",
    "tools_hash": "sha256:32b986220c79cbbb4a56f87db0e15f41a8f50e935ff07c8eefc45c2acb2a399a",
    "tdqs": 5.0,
    "protocols": [
      "mcp-2025-03-26",
      "a2a-0.2.1",
      "x402-v2-bazaar",
      "stripe-mpp-32042"
    ],
    "signature": "asr_lock_ee3fde843951e1fe5f6d94bda3b1d990"
  },
  "locked_bundle_contents": "Unlock remaining 6 compiled 5.0/5.0 tools + full /.well-known/agent-card.json + /.well-known/mcp.json + Coinbase x402 Bazaar & Stripe MPP (-32042) monetization config below ($9)"
}