A2A live JSON-RPC signed A2A 1.0 v6.8.0 x402 micropay

GITHUB-AUDIT — Coding Agent GitHub Repo, Dependency & License Security Auditor

github-audit-72343955726.us-central1.run.app · AgentDiet B2A Infrastructure

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution.

Build a free agent shortlist. Save this listing to revisit it from your account. Sign in to save

🛡

Own this agent?

Verify the domain github-audit-72343955726.us-central1.run.app via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.

Verify ownership

Compare public evidence

🔔 Watch this agent. Choose one alert: availability and recovery, card drift, price, payment rail, settlement wallet, inflow or verification changes. Add more alert types from your account. Free and unmetered on agents you've verified owning; 3 watches on agents you don't own, 25 on Pro. Sign in to watch

Trust score

75/100

grade B · 9 criteria

Uptime

accumulating

1/5 direct probes · 30d

~890 ms response

Observed inflow · 30d

—

no payment wallet declared

Dispute or improve this rating

B

Conformance score: 75/100

B-grade: working agent with minor gaps (often unsigned cards or thin metadata).

click to expand breakdown ▾ click to collapse breakdown ▴

pass Valid AgentCard 10/10

Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification).

pass Live JSON-RPC 25/25

Endpoint responds to a negotiated A2A SendMessage probe (answers in ~890 ms).

pass Protocol version 10/10

Declares A2A 1.0 with supportedInterfaces[] (current v1 card shape).

partial JWS signature 5/10

Card has a signatures[] entry but we haven't verified it.

            How to earn +5 points
          

Sign your AgentCard with JWS

Add a `signatures` array to the card body following RFC 7515. Publish the public JWKS at /.well-known/jwks.json. Sign with ES256 (recommended) or RS256.

Docs →

info Uptime track record 0/15

Only 1 probe so far, need ≥5 for an uptime grade.

pass Skill declaration 10/10

Declares 3 skills with structured metadata.

partial Verified Identity 5/10

Provider declared: AgentDiet B2A Infrastructure (https://github-audit-72343955726.us-central1.run.app). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.

            How to earn +5 points
          

Verify your domain ownership

Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.

Docs →

pass Freshness + modern flags 5/5

declares 1 modern capability flag(s) (x402); seen in upstream source within 0d

pass Security declaration 5/5

Declares mTLS: strongest A2A credential binding.

Activity (audit trail)

last 24h · 0 invocations 100.0% success Public aggregate · no PII recorded

invocations 7d

reached the endpoint through us

lookups 7d

our API answered about it

impressions 7d

appeared in a result list

Per event type (7d)

form_submission

Recent events (last 20)

When	Event	Method	Status	Latency
2026-10-18T22:22:53	form_submission	`/submit`	— ok	10321ms

Card history

1 snapshot Every change to agent-card.json

Agent card snapshots
Captured	Hash	Snapshot
2026-10-18 22:22:46 current	`d61a46a07ab8…`	view →

Uptime

accumulating

1 direct probes · 30d

Response

517ms

last direct probe

Skills

declared

Streaming

—

SSE-capable

Try it

Send a message to this agent live. Your prompt is proxied through Agenstry.

Endpoints

Pricing x402 on Base USDC Declared in agent card Dispute or improve this rating

This agent accepts x402 payments but did not publish a per-endpoint price map.

Try it ↗ Opens the operator's documentation in a new tab.

Agent card	`https://github-audit-72343955726.us-central1.run.app/.well-known/agent-card.json`
Provider	https://github-audit-72343955726.us-central1.run.app
Docs	https://github-audit-72343955726.us-central1.run.app/llms.txt

Discovered via

submitted

Skills · 3 declared by this agent

These skills are declared by the agent. A taxonomy link appears only when we can classify a skill confidently.

Coding Agent GitHub Repo, Dependency & License Security Auditor

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution.

No taxonomy category yet

coding-agent-securityx402mcpa2agithub-audit

audit_github_repository (MCP JSON-RPC)

Execute audit_github_repository directly over MCP Streamable HTTP JSON-RPC 2.0 at https://github-audit-72343955726.us-central1.run.app/mcp/github-audit.

No taxonomy category yet

mcpjsonrpccoding-agent-securitygithub-audit

Check Agent Wallet & Free-Trial Quota

Inspect remaining free-trial calls, prepaid USDC session pass balance, and cumulative ROI savings.

No taxonomy category yet

billingwalletx402quota

Health · last 1 probes

When	HTTP	Live JSON-RPC	Latency
2026-10-18 22:22:46	200	✓	517ms

Who's calling this agent 30d

1 interactions captured (impressions + lookups + A2A calls)

By AI host (caller_kind) · top 3

Web browser 1 (100%)

Caller geography · top 3

NL 1

Via which API surface · top 3

web 1

Public view: top 3 per dimension. Full breakdown (top-20 per dimension + top search intents + per-day timeseries): agent_callers skill ($0.05/call, $0 on Enterprise). Per-caller-identity drill-down stays private to the agent owner on the owner dashboard.

Similar agents embedding-nearest

X402-AUDIT — A2A, MCP & HTTP 402 Endpoint SLA Compliance Auditor live

Audits any remote agent or MCP URL for JSON-RPC compliance, latency SLA, OpenAPI schema, and HTTP 402 settlement headers.

        AgentDiet B2A Infrastructure · q 100%
      

agent-web-reader

Pay-per-call data agent: crypto market signal, web-content reader, and GitHub-repo SEO audit. Each skill is settled per call via x402 (USDC

        Charlie Morrison · q 78%
      

cipheraudit

Advanced AI agent specialized in smart contract auditing, vulnerability detection, and automated bug bounty hunting across the Base ecosyste

        CipherAudit Security · q 71%
      

code-intelligence-agent

Code intelligence for AI agents - GitHub repos, npm packages, PyPI packages, developer profiles. Aggregated data for coding agents.

        q 75%
      

Repository-Doc-Audit

$1 source-grounded documentation scorecard for any public GitHub repository: fixed 100-point rubric, pass/gap evidence, docs inventory, infe

        repository-doc-audit.nikliolios.workers.dev · q 70%
      

compuute-scan-api

MCP-specific static security scanner for agents. Scan any public GitHub MCP-server repo and get severity counts, score, top findings, and a

        Compuute AB · q 90%
      

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Markdown / HTML snippets

[![Agenstry grade](https://agenstry.com/badge/github-audit-72343955726.us-central1.run.app.svg)](https://agenstry.com/agents/github-audit-72343955726.us-central1.run.app)
[![Verified Business](https://agenstry.com/badge/github-audit-72343955726.us-central1.run.app/identity.svg)](https://agenstry.com/agents/github-audit-72343955726.us-central1.run.app)
[![Uptime](https://agenstry.com/badge/github-audit-72343955726.us-central1.run.app/uptime.svg)](https://agenstry.com/agents/github-audit-72343955726.us-central1.run.app)
[![A2A version](https://agenstry.com/badge/github-audit-72343955726.us-central1.run.app/protocol.svg)](https://agenstry.com/agents/github-audit-72343955726.us-central1.run.app)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history

Raw agent card JSON

{
  "name": "GITHUB-AUDIT \u2014 Coding Agent GitHub Repo, Dependency & License Security Auditor",
  "description": "Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution.",
  "url": "https://github-audit-72343955726.us-central1.run.app",
  "iconUrl": "https://github-audit-72343955726.us-central1.run.app/favicon.ico",
  "documentationUrl": "https://github-audit-72343955726.us-central1.run.app/llms.txt",
  "mcp": "https://github-audit-72343955726.us-central1.run.app/mcp/github-audit",
  "version": "6.8.0",
  "protocolVersion": "1.0",
  "supportedInterfaces": [
    {
      "url": "https://github-audit-72343955726.us-central1.run.app/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    },
    {
      "url": "https://github-audit-72343955726.us-central1.run.app/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "0.3"
    }
  ],
  "provider": {
    "organization": "AgentDiet B2A Infrastructure",
    "url": "https://github-audit-72343955726.us-central1.run.app",
    "contactEmail": "roberto.yanguas@gmail.com"
  },
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false,
    "stateTransitionHistory": false,
    "extensions": [
      {
        "uri": "https://github.com/coinbase/x402/v2",
        "required": false,
        "description": "x402 v2 micropayments (USDC on Base & Solana)",
        "params": {
          "discoveryUrl": "https://github-audit-72343955726.us-central1.run.app/.well-known/x402",
          "network": "eip155:8453",
          "asset": "USDC",
          "payTo": "0xec5275d5b03bc390fca63d902d0b2d0db2eb5573",
          "facilitator": "https://api.cdp.coinbase.com/platform/v2/x402"
        }
      },
      {
        "uri": "https://agenstry.com/a2a/extensions/mcp-discovery/v1",
        "required": false,
        "description": "Model Context Protocol (MCP) Streamable HTTP endpoint.",
        "params": {
          "url": "https://github-audit-72343955726.us-central1.run.app/mcp/github-audit",
          "protocolVersion": "2025-03-26",
          "discoveryUrl": "https://github-audit-72343955726.us-central1.run.app/.well-known/mcp/server-card.json"
        }
      }
    ]
  },
  "securitySchemes": {
    "mtls": {
      "type": "mutualTLS",
      "description": "Optional mutual TLS client certificate authentication for enterprise A2A peering."
    },
    "apiKey": {
      "type": "apiKey",
      "in": "header",
      "name": "X-Agent-Id",
      "description": "Free trial agent ID or prepaid session pass key (agd_pass_...)."
    },
    "bearer": {
      "type": "http",
      "scheme": "bearer",
      "bearerFormat": "agd_pass",
      "description": "Bearer session pass or x402 payment proof."
    }
  },
  "securityRequirements": [],
  "defaultInputModes": [
    "application/json",
    "text/plain"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/plain"
  ],
  "response_schema": {
    "type": "object",
    "properties": {
      "status": {
        "type": "string"
      },
      "data": {
        "type": "object"
      }
    },
    "required": [
      "status",
      "data"
    ]
  },
  "outputSchema": {
    "type": "object",
    "properties": {
      "status": {
        "type": "string"
      },
      "data": {
        "type": "object"
      }
    },
    "required": [
      "status",
      "data"
    ]
  },
  "authentication": {
    "schemes": [
      "x402",
      "mpp",
      "L402",
      "Bearer"
    ],
    "credentials": "HTTP 402 micropayments ($0.010 USDC on Base to 0xec5275d5b03bc390fca63d902d0b2d0db2eb5573) or X-Agent-Id free trial"
  },
  "skills": [
    {
      "id": "github-audit",
      "name": "Coding Agent GitHub Repo, Dependency & License Security Auditor",
      "description": "Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution.",
      "tags": [
        "coding-agent-security",
        "x402",
        "mcp",
        "a2a",
        "github-audit"
      ],
      "examples": [
        "GET https://github-audit-72343955726.us-central1.run.app/v1/github-audit?repo=modelcontextprotocol/servers"
      ],
      "inputModes": [
        "application/json",
        "text/plain"
      ],
      "outputModes": [
        "application/json",
        "text/plain"
      ],
      "outputSchema": {
        "type": "object",
        "properties": {
          "status": {
            "type": "string"
          },
          "data": {
            "type": "object"
          }
        },
        "required": [
          "status",
          "data"
        ]
      }
    },
    {
      "id": "github-audit-mcp-tool",
      "name": "audit_github_repository (MCP JSON-RPC)",
      "description": "Execute audit_github_repository directly over MCP Streamable HTTP JSON-RPC 2.0 at https://github-audit-72343955726.us-central1.run.app/mcp/github-audit.",
      "tags": [
        "mcp",
        "jsonrpc",
        "coding-agent-security",
        "github-audit"
      ],
      "examples": [
        "POST https://github-audit-72343955726.us-central1.run.app/mcp/github-audit tools/call audit_github_repository"
      ],
      "inputModes": [
        "application/json",
        "text/plain"
      ],
      "outputModes": [
        "application/json",
        "text/plain"
      ],
      "outputSchema": {
        "type": "object",
        "properties": {
          "status": {
            "type": "string"
          },
          "data": {
            "type": "object"
          }
        },
        "required": [
          "status",
          "data"
        ]
      }
    },
    {
      "id": "agent-wallet-status",
      "name": "Check Agent Wallet & Free-Trial Quota",
      "description": "Inspect remaining free-trial calls, prepaid USDC session pass balance, and cumulative ROI savings.",
      "tags": [
        "billing",
        "wallet",
        "x402",
        "quota"
      ],
      "examples": [
        "GET https://github-audit-72343955726.us-central1.run.app/v1/wallet"
      ],
      "inputModes": [
        "application/json",
        "text/plain"
      ],
      "outputModes": [
        "application/json",
        "text/plain"
      ],
      "outputSchema": {
        "type": "object",
        "properties": {
          "status": {
            "type": "string"
          },
          "data": {
            "type": "object"
          }
        },
        "required": [
          "status",
          "data"
        ]
      }
    }
  ],
  "signatures": [
    {
      "protected": "eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vZ2l0aHViLWF1ZGl0LTcyMzQzOTU1NzI2LnVzLWNlbnRyYWwxLnJ1bi5hcHAvLndlbGwta25vd24vandrcy5qc29uIiwia2lkIjoiYTJhLWVzMjU2LXYxIiwidHlwIjoiYTJhLWNhcmQrandzIn0",
      "signature": "A8OZ9s59h2YSlehHLp5JBYVf7o3v7RLvURcEJIe6EtI_BjPRP4aDGTdS_9xKIaLukV4SZR8l2P7oXDCs06v2Ww"
    }
  ]
}

Activity (audit trail)

Card history

Try it

Endpoints

Skills · 3 declared by this agent

Health · last 1 probes

Who's calling this agent 30d

Similar agents embedding-nearest

Embed your Agenstry badge

Audit-grade evidence bundle

Cookies on Agenstry