Skip to main content
Glama

order.commercial_audit

Read-onlyIdempotent

Commercial Security Audit & Invariant Verification Package: Exhaustive Commercial Smart Contract Audit & Formal Verification Package for Solidity & Rust/Anchor codebases or GitHub repositories with invariant proofs and gas analysis. (Price: $149.000 USDC via x402 on Base/Solana)

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
targetYesSmart contract source code, contract address, or GitHub repository URL to audit.
networkNoTarget blockchain network.base

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYesDetailed result, report, diff, or analysis output
statusYesExecution status of the micro-service (success/error)
timestampNoUnix timestamp of execution
monetizationNo

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare the tool as readOnly, idempotent, and non-destructive, and the description adds useful behavioral context by disclosing the commercial nature, $149.000 USDC price, x402 payment method, and supported networks. It does not contradict the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the package type and includes the critical price/payment detail. However, it contains redundant phrasing such as 'Commercial Security Audit & Invariant Verification Package' followed by 'Exhaustive Commercial Smart Contract Audit & Formal Verification Package', plus marketing filler like 'Exhaustive', so it could be tightened.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the low parameter count, strong annotations, and presence of an output schema, the description covers the essential usage context: target materials, network, package contents, and payment. A minor gap is that it never explicitly states that the tool places or initiates an order, but this is partially inferred from the 'order' prefix and pricing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the input schema already documents target and network adequately. The description reinforces that target can be source code, a contract address, or a GitHub repository and mentions Base/Solana, but it does not add meaningful parameter semantics beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies a commercial smart contract audit and formal verification package for Solidity/Rust/Anchor codebases or GitHub repositories, including invariant proofs and gas analysis. However, it describes a package rather than an explicit action like 'orders' or 'purchases', and it does not distinguish itself from the sibling audit.smart_contract tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool: when a paid, exhaustive smart contract audit with formal verification, invariant proofs, and gas analysis is needed on Base or Solana. It does not provide explicit when-not-to-use guidance or compare against alternatives such as audit.smart_contract.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.6/5.0
Disambiguation3/5

Most tools target clearly distinct domains, but audit.smart_contract and order.commercial_audit overlap as audit offerings, and order.ast_remediation and remediate.code_patch both generate AST-based remediation patches. The pricing and commercial language help somewhat, but the boundaries are not crisp enough for reliable tool selection.

Naming Consistency4/5

The dot-separated category.snake_case pattern is consistently applied across all 12 tools, making the set easy to scan. However, the category prefixes mix nouns and verbs (analytics, audit, order, remediate, signals), and 'order' is an unclear prefix.

Tool Count4/5

Twelve tools is a reasonable size for a broad paid Web3/DeFi service suite, and each tool represents a distinct revenue-generating capability. The count feels slightly padded by overlapping audit and remediation offerings that could be consolidated.

Completeness3/5

The suite covers a wide range of Web3 tasks including audits, remediation, security checks, routing, analytics, governance simulation, and signals. However, there are no workflow-oriented tools for managing or retrieving past audit/remediation orders, and the broad scope makes the domain boundaries vague.

Resources