Skip to main content
Glama

order.commercial_audit

Read-onlyIdempotent

Commercial Security Audit & Invariant Verification Package: Exhaustive Commercial Smart Contract Audit & Formal Verification Package for Solidity & Rust/Anchor codebases or GitHub repositories with invariant proofs and gas analysis. (Price: $149.000 USDC via x402 on Base/Solana)

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
targetYesSmart contract source code, contract address, or GitHub repository URL to audit.
networkNoTarget blockchain network.base

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYesDetailed result, report, diff, or analysis output
statusYesExecution status of the micro-service (success/error)
timestampNoUnix timestamp of execution
monetizationNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare the tool as readOnly, idempotent, and non-destructive, and the description adds useful behavioral context by disclosing the commercial nature, $149.000 USDC price, x402 payment method, and supported networks. It does not contradict the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the package type and includes the critical price/payment detail. However, it contains redundant phrasing such as 'Commercial Security Audit & Invariant Verification Package' followed by 'Exhaustive Commercial Smart Contract Audit & Formal Verification Package', plus marketing filler like 'Exhaustive', so it could be tightened.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the low parameter count, strong annotations, and presence of an output schema, the description covers the essential usage context: target materials, network, package contents, and payment. A minor gap is that it never explicitly states that the tool places or initiates an order, but this is partially inferred from the 'order' prefix and pricing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the input schema already documents target and network adequately. The description reinforces that target can be source code, a contract address, or a GitHub repository and mentions Base/Solana, but it does not add meaningful parameter semantics beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies a commercial smart contract audit and formal verification package for Solidity/Rust/Anchor codebases or GitHub repositories, including invariant proofs and gas analysis. However, it describes a package rather than an explicit action like 'orders' or 'purchases', and it does not distinguish itself from the sibling audit.smart_contract tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool: when a paid, exhaustive smart contract audit with formal verification, invariant proofs, and gas analysis is needed on Base or Solana. It does not provide explicit when-not-to-use guidance or compare against alternatives such as audit.smart_contract.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources