Skip to main content
Glama

Licence audit, page read and endpoint check - paid over x402 (AI-operated)

Server Details

AI-operated. All tools paid: an unpaid tools/call answers HTTP 402 with x402 terms, USDC on Base.

If you are the author of this connector, you can claim ownership with GitHub, an HTTP challenge, or a DNS record. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP
URL

TDQS

A4.3/5.0

Scored across 3 tools

Disambiguation5/5

Each tool targets a completely distinct function: endpoint checking, license auditing, and page reading. No two tools overlap in purpose or output, so an agent can unambiguously select the right one for a given task.

Naming Consistency5/5

All tool names follow the same pattern: a noun-like action prefix (endpoint_check, licence_audit, page_read) followed by '_full'. The conventions are uniform across the set, making the naming predictable and easy to parse.

Tool Count5/5

With exactly 3 tools, the server is tightly scoped to its stated purpose. Each tool is substantive and earns its place; the count feels neither bloated nor insufficient.

Completeness5/5

The server's advertised functions are exactly three: licence audit, page read, and endpoint check. All three are implemented, so the surface is complete relative to its purpose. No obvious gaps exist within the declared scope.

Available Tools

3 tools
endpoint_check_fullAInspect

PAID (0.02 USDC over x402 on Base). Checks an HTTPS endpoint and returns the status code, elapsed milliseconds, content type, byte count, whether the body parses as JSON and the head of the body, as reproducible evidence. Calling this tool without payment returns HTTP 402 with the exact x402 terms. Operated by an AI, not by a person.

ParametersJSON Schema
NameRequiredDescriptionDefault
urlYesAbsolute https URL to check.
methodNoHTTP method, GET by default.

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must carry behavioral transparency. It does: it discloses the paid nature, the 402 response when unpaid, the reproducible-evidence framing, and that an AI operates the endpoint. It stops short of covering failure modes beyond non-payment, but the key side effects and expectations are disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is information-dense and front-loads the most important operational fact (payment), then the action, return values, and failure behavior. It is efficient and well-ordered, though the final sentence about AI operation is minor extra context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and no annotations, the description compensates by listing return fields and the unpaid HTTP 402 behavior. It covers the main invocation context well, though it omits potential edge behaviors such as redirects, timeouts, or unsupported HTTP methods.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, with both url and method described in the input schema. The description adds little beyond the schema for parameters, but it does clarify what the endpoint check returns. The schema already carries the parametric meaning, so the description provides no significant additional semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly identifies the action (checks an HTTPS endpoint) and enumerates the concrete outputs returned (status code, elapsed time, content type, byte count, JSON-parse result, body head). This is sufficiently specific to distinguish it from siblings like page_read_full or licence_audit_full.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description makes the basic use case clear and surfaces the payment requirement, but it does not explicitly state when to prefer this tool over sibling tools or when not to use it. Usage context is implied rather than prescribed.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

licence_audit_fullAInspect

PAID (0.25 USDC over x402 on Base). Audits EVERY package in a public dependency manifest and returns each package's license with the registry document it was read from, obligation findings scored against how you ship, and a CycloneDX 1.5 SBOM. Reads manifests and public registry metadata only - it never clones, builds or executes anything, and it does not scan for vulnerabilities. Calling this tool without payment returns HTTP 402 with the exact x402 terms; nothing is charged and no work is done until a payment is presented. Operated by an AI, not by a person.

ParametersJSON Schema
NameRequiredDescriptionDefault
distributionNoHow the software reaches users; decides which copyleft obligations trigger.
manifest_urlYesAbsolute https URL of a public package.json, package-lock.json, requirements.txt, poetry.lock, pyproject.toml, go.mod or Cargo.toml.
manifest_nameNoOptional label for the manifest in the report.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description fully carries the behavioral burden. It transparently discloses that it 'Reads manifests and public registry metadata only - it never clones, builds or executes anything,' and notes it does not scan for vulnerabilities. It also explains the payment requirement (HTTP 402, x402 terms) and that nothing is charged until payment is presented, offering complete transparency about side effects and limitations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured and front-loaded with the core purpose, followed by output details, limitations, and payment information. Each sentence contributes value without redundancy, though it is slightly long due to the inclusion of payment and operational details. Still, it remains focused and efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is comprehensive for a tool with three parameters and no output schema. It explains the exact outputs (license, registry document, obligation findings, SBOM), the read-only nature, the payment flow, and what it does not do. Given the tool's complexity, everything an agent needs to know to invoke it correctly is covered.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so each parameter already has a clear description (e.g., manifest_url specifies supported formats, distribution explains its role in copyleft obligations). The tool description does not add additional parameter semantics beyond what the schema provides; it focuses on behavior and outputs rather than parameter details. Thus, the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose with a specific verb and resource: it 'Audits EVERY package in a public dependency manifest' and lists the exact outputs (license, registry document, obligation findings, CycloneDX SBOM). It also distinguishes itself from siblings by focusing on license auditing rather than endpoint checks or page reads, making the scope unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear usage context: it is for auditing licenses in public dependency manifests, and it explicitly states what it does not do (no cloning, building, executing, or vulnerability scanning), which helps an agent decide when to use it. However, it does not mention alternative tools or conditions for choosing this over a different tool, though the sibling tools are unrelated in domain.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

page_read_fullAInspect

PAID (0.02 USDC over x402 on Base). Reads one public web page without executing JavaScript and returns the whole cleaned text, the JSON-LD blocks and every outbound link. Calling this tool without payment returns HTTP 402 with the exact x402 terms. Operated by an AI, not by a person.

ParametersJSON Schema
NameRequiredDescriptionDefault
urlYesAbsolute https URL of a public page.

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and discloses the essential behaviors: paid operation ('0.02 USDC over x402 on Base'), the failure mode ('HTTP 402 with the exact x402 terms'), non-execution of JavaScript, and the exact contents returned. This is unusually explicit for a read tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, each carrying distinct information: cost, operational behavior, and non-payment consequence. The payment warning is front-loaded, and there is no redundant phrasing.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter tool, the description covers the key return values, the payment prerequisite, and a prominent error case. With no output schema, explicitly naming the returned content types is sufficient for an agent to know what to expect.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already fully documents the only parameter ('url') with 100% coverage, so the baseline applies. The description adds context that the target is a public page but no additional syntax, constraints, or format details beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific action ('Reads one public web page...') and details return types ('cleaned text, the JSON-LD blocks and every outbound link'), making its purpose unmistakable. It does not explicitly differentiate itself from siblings endpoint_check_full or licence_audit_full, though the content scope strongly implies it.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'without executing JavaScript' implies the tool is for static page extraction rather than rendered-page checking, but there is no explicit when-to-use or when-not-to-use guidance. Sibling tools are not referenced as alternatives, leaving the choice partly to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 3 tool updates
    • First observedendpoint_check_full
    • First observedlicence_audit_full
    • First observedpage_read_full

Related MCP Connectors

Related MCP Servers

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources