Skip to main content
Glama

remediate.code_patch

Read-onlyIdempotent

AST Code Patch & Vulnerability Remediation Generator: Generates ready-to-merge unified git diffs fixing security flaws, missing Schema.org tags, or performance bottlenecks. (Price: $1.495 USDC via x402 on Base/Solana)

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
issueYesSpecific security flaw, bug, or optimization to fix.
sourceYesSource code containing flaw or optimization target.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYesDetailed result, report, diff, or analysis output
statusYesExecution status of the micro-service (success/error)
timestampNoUnix timestamp of execution
monetizationNo

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish read-only, idempotent, and non-destructive behavior. The description adds valuable context beyond annotations by disclosing pricing ('$1.495 USDC via x402 on Base/Solana') and the output format ('unified git diffs'). No rate limits or failure modes are mentioned, but this is a minor gap given the annotation coverage.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences and front-loads the core function before adding the payment note. Every sentence provides unique information with no filler or repetition of the tool name.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the small parameter set, full schema coverage, and presence of an output schema, the description covers the essential invocation context: inputs, output form, and cost. The only mild gap is not naming a similar sibling, but this is more a differentiation issue than a completeness one.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, with both 'issue' and 'source' adequately described in the input schema. The description reinforces which issue types are relevant, but it adds little new detail about the 'source' parameter or input formatting. With full schema coverage, a baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific action ('Generates'), a concrete deliverable ('ready-to-merge unified git diffs'), and the classes of problems it addresses (security flaws, missing Schema.org tags, performance bottlenecks). This makes the tool's purpose immediately clear and differentiates it from generic audit or analysis siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly implies when to use it by listing concrete issue categories that trigger use, such as 'security flaws' and 'performance bottlenecks'. It does not explicitly state when not to use it or mention a sibling alternative such as order.ast_remediation, so it stops short of full exclusion guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.6/5.0
Disambiguation3/5

Most tools target clearly distinct domains, but audit.smart_contract and order.commercial_audit overlap as audit offerings, and order.ast_remediation and remediate.code_patch both generate AST-based remediation patches. The pricing and commercial language help somewhat, but the boundaries are not crisp enough for reliable tool selection.

Naming Consistency4/5

The dot-separated category.snake_case pattern is consistently applied across all 12 tools, making the set easy to scan. However, the category prefixes mix nouns and verbs (analytics, audit, order, remediate, signals), and 'order' is an unclear prefix.

Tool Count4/5

Twelve tools is a reasonable size for a broad paid Web3/DeFi service suite, and each tool represents a distinct revenue-generating capability. The count feels slightly padded by overlapping audit and remediation offerings that could be consolidated.

Completeness3/5

The suite covers a wide range of Web3 tasks including audits, remediation, security checks, routing, analytics, governance simulation, and signals. However, there are no workflow-oriented tools for managing or retrieving past audit/remediation orders, and the broad scope makes the domain boundaries vague.

Resources