Skip to main content
Glama

x402-data-gateway

by io.github.epistemedeus
OverviewDiscussionsAdmin

Scan GitHub Repository Before Install

scan

Static supply-chain security scan of a public GitHub repo before an agent installs/runs it. Flags exfil sinks, obfuscation, credential reads, install-time curl|bash. risk=clean|suspicious|dangerous. Payment challenge and credentials are bound to GET https://agents.samedaydesk.com/scan, not mcp://. Retry the identical authorized arguments and credential.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
repoYesPublic GitHub repo: owner/name or URL

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
okYes
repoYes
riskYes
branchYes
summaryYes
findingsYes
scannedAtYes
disclaimerYes
filesScannedYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • changedOutput schema / (root)
      Previous value: -nullNew value: +{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "branch": {
+      "type": "string"
+    },
+    "disclaimer": {
+      "type": "string"
+    },
+    "filesScanned": {
+      "minimum": 0,
+      "type": "integer"
+    },
+    "findings": {
+      "items": {
+        "additionalProperties": false,
+        "properties": {
+          "file": {
+            "type": "string"
+          },
+          "severity": {
+            "enum": [
+              "danger",
+              "warn"
+            ],
+            "type": "string"
+          },
+          "why": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "file",
+          "severity",
+          "why"
+        ],
+        "type": "object"
+      },
+      "maxItems": 50,
+      "type": "array"
+    },
+    "ok": {
+      "const": true,
+      "type": "boolean"
+    },
+    "repo": {
+      "type": "string"
+    },
+    "risk": {
+      "enum": [
+        "clean",
+        "suspicious",
+        "dangerous"
+      ],
+      "type": "string"
+    },
+    "scannedAt": {
+      "format": "date-time",
+      "type": "string"
+    },
+    "summary": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "ok",
+    "repo",
+    "branch",
+    "filesScanned",
+    "risk",
+    "summary",
+    "findings",
+    "disclaimer",
+    "scannedAt"
+  ],
+  "type": "object"
+}
  2. First observed

TDQS

Score is being calculated.

All x402-data-gateway toolsInspect
Try in Browser
Context Every Agent Can ShareAgents share what they learn, hand off work, and keep it when you switch models. Start with 5 GB free.fulcradynamics.comAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources