Skip to main content
Glama

order.ast_remediation

Read-onlyIdempotent

Commercial AST Vulnerability Remediation & Git Patch Package: Full AST Code Remediation & Unified Git Diff Patch Package resolving all detected vulnerabilities, reentrancy bugs, and gas inefficiencies ready for git apply. (Price: $249.000 USDC via x402 on Base/Solana)

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
sourceCodeYesFull codebase or target file containing security flaws.
auditReportNoVulnerabilities or audit report to synthesize git patch for.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYesDetailed result, report, diff, or analysis output
statusYesExecution status of the micro-service (success/error)
timestampNoUnix timestamp of execution
monetizationNo

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the read-only, idempotent, and non-destructive profile, so the bar is lower. The description adds useful context such as commercial pricing, payment via x402 on Base/Solana, and a git-apply-ready patch output. It does not disclose execution time or whether the payment is immediately charged, but it does not contradict the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loads the core deliverable, with the price and payment details tucked into a parenthetical. There is minor redundancy between 'AST Vulnerability Remediation' and 'Full AST Code Remediation', but overall it is efficient and not padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present and annotations covering safety, the description is mostly sufficient for invoking the tool. However, it lacks usage guidance and sibling differentiation, and for a commercial tool it would benefit from clarifying payment/execution side effects. It is adequate but not complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already explains both sourceCode and auditReport. The description adds the general purpose of those inputs but no new parameter-level detail beyond what the schema provides, matching the baseline for high schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool produces a commercial AST remediation git patch package that resolves vulnerabilities, reentrancy bugs, and gas inefficiencies, and is ready for git apply. The resource and deliverable are identifiable, though it does not explicitly distinguish itself from related siblings like remediate.code_patch or order.commercial_audit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance is given for when to use this tool versus its siblings. The description implies it should be used when source code and perhaps an audit report are available, but it does not state exclusions, prerequisites, or alternatives, leaving the agent to infer routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.6/5.0
Disambiguation3/5

Most tools target clearly distinct domains, but audit.smart_contract and order.commercial_audit overlap as audit offerings, and order.ast_remediation and remediate.code_patch both generate AST-based remediation patches. The pricing and commercial language help somewhat, but the boundaries are not crisp enough for reliable tool selection.

Naming Consistency4/5

The dot-separated category.snake_case pattern is consistently applied across all 12 tools, making the set easy to scan. However, the category prefixes mix nouns and verbs (analytics, audit, order, remediate, signals), and 'order' is an unclear prefix.

Tool Count4/5

Twelve tools is a reasonable size for a broad paid Web3/DeFi service suite, and each tool represents a distinct revenue-generating capability. The count feels slightly padded by overlapping audit and remediation offerings that could be consolidated.

Completeness3/5

The suite covers a wide range of Web3 tasks including audits, remediation, security checks, routing, analytics, governance simulation, and signals. However, there are no workflow-oriented tools for managing or retrieving past audit/remediation orders, and the broad scope makes the domain boundaries vague.

Resources