FabTally Guard
Server Details
Verify before you act: deps-check, x402-preflight, json-repair & url-read for agents.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- zvmzaretsky/fabtally-guard-mcp
- GitHub Stars
- 0
- Server Listing
- FabTally Guard
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.5/5 across 4 of 4 tools scored.
Each tool targets a clearly distinct function: package vetting, JSON repair, URL fetching, and x402 endpoint verification. There is no overlap in intent or output, making selection unambiguous.
All tool names follow a consistent snake_case object_action pattern (deps_check, json_repair, url_read, x402_preflight). This maintains uniformity and predictability across the set.
With exactly four tools, the server is well-scoped and every tool earns its place. There is no bloat or trivial filler, and the count falls squarely within the ideal 3-15 range.
Each tool is functionally complete for its individual purpose, but the set lacks batch operations or a way to manage/retrieve prior checks. These are minor gaps that agents can work around with scripting or external state.
Available Tools
4 toolsdeps_checkVet a dependency before install (paid $0.003)AInspect
PAID $0.003 (x402, USDC on Base). Vet a software package BEFORE installing it. Returns existence, latest-vs-requested, deprecation/yank markers, known CVEs from OSV.dev, typosquat similarity to popular names, SPDX license, and age/download signals with a plain-English risk verdict. Args: ecosystem (npm|pypi|crates), name, version (optional). Without payment returns the x402 challenge; pass x_payment to settle.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Package name, e.g. 'lodash', 'requests', 'serde'. | |
| version | No | Specific version to check for CVEs (optional; defaults to latest). | |
| ecosystem | Yes | Package ecosystem: npm | pypi | crates. | |
| x_payment | No | x402 payment payload (base64) for this PAID check. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Even though no annotations are provided, the description discloses key behavioral details: payment requirement, return contents, and the 402 challenge flow. It doesn't mention error conditions or rate limits, but the core behavior is well covered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but well-structured with a clear payment notice, a purpose statement, a return-value list, and argument summary. Every sentence contributes useful information, though it could be slightly more compact.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description enumerates the exact return fields and the payment challenge behavior, making it complete for agent decision-making. It covers the tool's complexity well.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers all parameters (100%). The description adds meaningful context for x_payment by explaining the payment/settlement flow and clarifying that version is optional, which goes beyond the schema's basic descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Vet a software package BEFORE installing it' and lists the specific signals returned (existence, CVEs, license, etc.). It distinguishes itself from sibling tools (json_repair, url_read, x402_preflight) which have entirely different functions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explains when to use (before installing) and provides the payment usage flow ('Without payment returns the x402 challenge; pass x_payment to settle'). It doesn't explicitly mention alternatives, but sibling tools are unrelated, so no exclusion is needed.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
json_repairRepair near-miss LLM JSON to a schema (paid $0.002)AInspect
PAID $0.002 (x402, USDC on Base). Coerce near-miss LLM JSON to a JSON-Schema-conformant object: strip code fences/prose, fix trailing commas/quotes/unquoted keys, normalise Python literals, balance brackets, then coerce types, apply defaults, and drop extraneous keys. Returns the repaired object OR precise per-field errors. Args: json (the raw string), schema (a JSON Schema object). Without payment returns the x402 challenge.
| Name | Required | Description | Default |
|---|---|---|---|
| json | Yes | The raw, possibly-malformed JSON text to repair. | |
| schema | Yes | A JSON Schema (draft 2020-12) object the result must conform to. | |
| x_payment | No | x402 payment payload (base64) for this PAID check. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full disclosure. It details the transformation steps (strip fences, fix syntax, normalize literals, balance brackets), the output behavior ('repaired object OR precise per-field errors'), and the payment gate ('Without payment returns the x402 challenge'). This is comprehensive for a stateless JSON-processing tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and well-structured, with payment info front-loaded, followed by a compact list of processing steps and return behavior. Every sentence adds value and there is no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema, the description states the return format ('repaired object OR precise per-field errors'). It covers the tool's full workflow (parsing, repairing, validating, payment gating) and parameter roles, making it sufficiently complete for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides full descriptions for all three parameters (100% coverage), so the description adds little beyond restating that 'json' is a raw string and 'schema' is a JSON Schema object. It does add context around payment behavior via 'Without payment returns the x402 challenge', which relates to the x_payment parameter, but no new parameter-level semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Coerce near-miss LLM JSON to a JSON-Schema-conformant object' and enumerates specific actions (strip code fences/prose, fix trailing commas, etc.). It distinguishes itself from siblings (deps_check, url_read, x402_preflight) by focusing on JSON repair with schema validation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context: it is for repairing near-miss LLM JSON against a schema, and it explains the payment requirement ('PAID $0.002', 'Without payment returns the x402 challenge'). It does not explicitly name alternatives or exclusion criteria, but the purpose is specific enough to guide selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
url_readPublic url -> clean Markdown + token count (paid $0.004)AInspect
PAID $0.004 (x402, USDC on Base). Fetch a PUBLIC url and return clean Markdown + a token estimate for RAG ingestion — readability extraction, boilerplate stripped. Respects robots.txt, public pages only, no login/paywall bypass, nothing stored. Args: url. Without payment returns the x402 challenge; pass x_payment to settle.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | The public web page URL to fetch and convert to Markdown. | |
| x_payment | No | x402 payment payload (base64) for this PAID check. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden and excels: it discloses the payment cost and mechanism, robots.txt compliance, public-only constraint, no login/paywall bypass, nothing stored, and the 402 challenge flow. This goes well beyond basic expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is information-dense but not overly long. It front-loads the critical paid warning and packs multiple behavioral constraints into a few sentences. Slight redundancy ('Args: url') could be removed, but overall it is efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is moderately complex (paid, x402, two params, no output schema), but the description covers the payment challenge flow, content return (Markdown + token estimate), restrictions, and privacy. It is complete enough for an agent to invoke correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description repeats 'Args: url' but does not add meaningful extra semantics beyond what the schema already provides. The x_payment behavior is described, but the schema also explains it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb+resource: 'Fetch a PUBLIC url and return clean Markdown + a token estimate.' It clearly defines the tool's purpose and differentiates it from sibling tools like deps_check and json_repair by focusing on URL-to-Markdown conversion.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use this tool: 'for RAG ingestion' and explicitly restricts to 'public pages only, no login/paywall bypass.' It also explains the payment flow, which is a key usage prerequisite, though it does not explicitly compare against alternative tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
x402_preflightVerify an x402 endpoint before paying (paid $0.002)AInspect
PAID $0.002 (x402, USDC on Base). Verify another x402 endpoint BEFORE paying it: does an unpaid call return a valid x402 v2 402 challenge? do the quoted amount/asset/network/payTo match the site's /.well-known/x402? is TLS valid, host reachable, openapi present? Returns pass/fail + per-check reasons + the parsed price you would pay. Args: url. Without payment returns the x402 challenge; pass x_payment to settle.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | The x402 endpoint URL to verify, e.g. https://example.com/v1/thing. | |
| x_payment | No | x402 payment payload (base64) for this PAID check. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and does so thoroughly. It explicitly discloses the $0.002 cost, the checks performed, the return format (pass/fail, reasons, parsed price), and the distinct behavior with and without x_payment. No destructive or hidden side effects are omitted.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact yet dense, using three sentences to cover payment, purpose, checks, returns, and parameters. It front-loads the paid nature and starts with a clear action verb. Every sentence contributes essential information without fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of the tool and the lack of an output schema, the description covers most necessary context: purpose, usage flow, return values, and payment. It does not mention error handling or edge cases like network timeouts, but the included details are sufficient for typical use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds meaningful behavior context for x_payment, explaining that omitting it yields a challenge and supplying it settles the call. This elevates the score above baseline, though the url parameter is already well-described in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool verifies an x402 endpoint before payment, with specific checks enumerated (challenge validity, price match, TLS, host reachability, OpenAPI presence). It distinguishes itself from siblings like url_read by focusing on x402-specific verification rather than generic URL reading.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly indicates when to use the tool: 'Verify another x402 endpoint BEFORE paying it.' It also explains the two usage modes: omit x_payment to get a challenge, or pass x_payment to settle. However, it does not explicitly name alternatives or state when not to use it, so it falls short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- AlicenseCqualityBmaintenanceA fail-closed preflight, approval, evidence, and verification runtime for agents, preventing unsupported output from being treated as verified completion.Last updated3MIT
- AlicenseAqualityAmaintenanceSafety checks an agent runs before it acts — flags malicious packages, destructive shell commands, secret leaks, and web-backend holes before execution.Last updated8MIT
- AlicenseAqualityBmaintenanceVerify-before-act safety tools for AI coding agents, providing MCP tools to check packages, lockfiles, manifests, and CI workflows for supply chain risks.Last updated419MIT
- FlicenseAqualityCmaintenanceEnables LLM-driven agents to autonomously detect, diagnose, repair, verify, and prevent software and hardware failures on local and remote systems. Includes built-in safety checks and automatic rollbacks.Last updated15
Your Connectors
Sign in to create a connector for this server.