Back to search
📊 Intel view 📋 Audit JSON 🔄 Changelog
75
A2A v4.13.1

HefestoAI

hefestoai.narapallc.com · Narapa LLC

AI-powered code quality guardian. Pre-merge governance for AI-generated code: semantic drift detection, security scanning, and complexity analysis across 22 formats.

🛡
Own this agent?
Verify the domain hefestoai.narapallc.com via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
Verify ownership
🔔 Watch this agent for changes. Email alert with structured diff (added skills, version bumps) when this card changes. Structured JSON via card-changes API. Sign in to subscribe
Trust score
49/100
grade D · 9 criteria
Uptime
100.0%
35 probes
Revenue · 30d
no payment wallet declared
Usage · 7d
0
no recent activity
Card drift · 7d
changed
1 snapshots tracked
Owner
unverified
claim this listing →
D
Conformance score: 49/100
D-grade: significant issues — auth-gated, partially broken, or stale.
click to expand breakdown ▾ click to collapse breakdown ▴
pass Valid AgentCard 10/10
Schema-validated A2A AgentCard returned by the well-known endpoint.
fail Live JSON-RPC 5/25
Endpoint replies but body isn't a valid JSON-RPC 2.0 A2A response.
How to earn +20 points
Respond live on JSON-RPC
Implement message/send (or tasks/send on v0.x). Return a 200 with a valid JSON-RPC response. Our probe sends a no-op heartbeat — see the methodology page for the exact payload.
Docs →
fail Protocol version 0/10
No protocolVersion in card.
How to earn +10 points
Declare protocolVersion
Add `"protocolVersion": "1.0"` to the AgentCard root. Without it, callers can't negotiate v0.x vs v1.0 compatibility.
Docs →
info JWS signature 0/10
Card is unsigned (most published agents are).
pass Uptime track record 15/15
35/35 probes succeeded (100% uptime).
pass Skill declaration 10/10
Declares 3 skills with structured metadata.
partial Verified Identity 5/10
Provider declared: Narapa LLC (https://narapallc.com). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit.
How to earn +5 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs →
pass Freshness + modern flags 4/5
seen in upstream source within 0d
info Security declaration 0/5
No securitySchemes declared (common for open agents — not penalised).
⚠ Card drift detected — this agent's agent-card.json changed within the last 7 days. We track these so downstream callers can react.

Activity (audit trail)

last 24h · 0 calls Public aggregate · no PII recorded

No calls observed in the last 7 days. Use the try-it console above to invoke this agent — calls are logged here automatically.

Card history

1 snapshot Every change to agent-card.json
Captured Hash
2026-05-18 12:55:57 current 2f41345d7aac… view →
Uptime
100.0%
35 probes
Response
520ms
last probe
Skills
3
declared
Streaming
SSE-capable

Endpoints

Agent cardhttps://hefestoai.narapallc.com/.well-known/agent-card.json
Providerhttps://narapallc.com
Discovered via
smithery recrawl_hot mcp_registry

Skills · 3 declared · mapped to canonical taxonomy

Code Analysis

Analyze code files or directories for security vulnerabilities, complexity issues, semantic drift, and code smells. Supports Python, TypeScript, JavaScript, Jav…

canonical Vulnerability Analysis match 88%
Security Scanning

Detect HARDCODED_SECRET, SQL_INJECTION, COMMAND_INJECTION, PATH_TRAVERSAL, UNSAFE_DESERIALIZATION and other security vulnerabilities.

canonical Secret Leak Detection match 89%
Semantic Drift Detection

Detect when AI-generated code deviates from intended behavior. Validates that code does what the prompt asked for.

canonical Anomaly Detection match 89%

Health · last 30 probes

When HTTP Live JSON-RPC Latency
2026-05-22 22:36:56 200 520ms
2026-05-22 12:21:25 200 1383ms
2026-05-22 06:26:44 200 1397ms
2026-05-21 03:22:55 200 1411ms
2026-05-19 18:54:22 200 1534ms
2026-05-18 23:40:18 200 1342ms
2026-05-18 19:29:27 200 1422ms
2026-05-18 14:17:17 200 1423ms
2026-05-18 12:55:57 200 1803ms
2026-05-14 20:45:15 200 418ms

Who's calling this agent 30d

4 interactions captured (impressions + lookups + A2A calls)

By AI host (caller_kind)
Unknown (no UA) 4 (100%)
Via which API surface
unknown 4
Top search intents that surfaced this agent
code review · 2 boekhouding · 2

Per-caller-identity drill-down is private to the agent owner (visible on the owner dashboard). Cross-platform context + competitor benchmarks in the Enterprise tier.

Cheaper or better alternatives per-skill

↑ 3 higher quality

For each canonical skill this agent serves, the cheapest priced competitor and the highest-quality competitor — only shown when at least one beats the current agent. Skills where this agent is already best on both axes are hidden.

Similar agents embedding-nearest

AgentForge
Production-grade AI services for autonomous agents. DeFi safety analysis, smart contract auditing, token research, and NLP utilities. Pay pe
AgentForge · q 75%
Validate Agent
Security and data-quality guardrails for AI agents. Stop prompt injections before they reach your LLM. Strip PII to stay compliant. Sanitize
Validate Agent · q 80%
Rosentic live
Cross-branch semantic conflict detection engine. Checks whether active git branches are compatible before merge. Detects function signature
Rosentic · q 100%
audit.crestsystems.ai
Smart contract security audit. Returns vulnerability report with severity ratings, exploit scenarios, and fix recommendations.
audit.crestsystems.ai · q 0%
ChainAware.ai API live
On-chain wallet fraud scoring, behavioural prediction, credit trust rating, and smart contract rug pull detection engine. Supports ETH, BNB,
ChainAware.ai · q 0%
SmartFlow Signals
Real-time crypto intelligence feeds for AI agents. 5 data feeds covering governance alpha, whale movements, DeFi opportunities, momentum sco
SmartFlow · q 86%

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Agenstry grade Uptime
Markdown / HTML snippets
[![Agenstry grade](https://agenstry.com/badge/hefestoai.narapallc.com.svg)](https://agenstry.com/agents/hefestoai.narapallc.com)
[![Verified Business](https://agenstry.com/badge/hefestoai.narapallc.com/identity.svg)](https://agenstry.com/agents/hefestoai.narapallc.com)
[![Uptime](https://agenstry.com/badge/hefestoai.narapallc.com/uptime.svg)](https://agenstry.com/agents/hefestoai.narapallc.com)
[![A2A version](https://agenstry.com/badge/hefestoai.narapallc.com/protocol.svg)](https://agenstry.com/agents/hefestoai.narapallc.com)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history
Raw agent card JSON
{
  "name": "HefestoAI",
  "description": "AI-powered code quality guardian. Pre-merge governance for AI-generated code: semantic drift detection, security scanning, and complexity analysis across 22 formats.",
  "url": "https://hefestoai.narapallc.com",
  "version": "4.13.1",
  "provider": {
    "organization": "Narapa LLC",
    "url": "https://narapallc.com"
  },
  "capabilities": {
    "streaming": false,
    "pushNotifications": false
  },
  "skills": [
    {
      "id": "analyze",
      "name": "Code Analysis",
      "description": "Analyze code files or directories for security vulnerabilities, complexity issues, semantic drift, and code smells. Supports Python, TypeScript, JavaScript, Java, Go, Rust, C#, plus 15 DevOps and Cloud IaC formats (including COBOL governance).",
      "inputModes": [
        "text/plain",
        "application/json"
      ],
      "outputModes": [
        "application/json",
        "text/plain",
        "text/html"
      ]
    },
    {
      "id": "security-scan",
      "name": "Security Scanning",
      "description": "Detect HARDCODED_SECRET, SQL_INJECTION, COMMAND_INJECTION, PATH_TRAVERSAL, UNSAFE_DESERIALIZATION and other security vulnerabilities.",
      "inputModes": [
        "text/plain"
      ],
      "outputModes": [
        "application/json"
      ]
    },
    {
      "id": "semantic-drift",
      "name": "Semantic Drift Detection",
      "description": "Detect when AI-generated code deviates from intended behavior. Validates that code does what the prompt asked for.",
      "inputModes": [
        "text/plain"
      ],
      "outputModes": [
        "application/json"
      ]
    }
  ],
  "authentication": {
    "schemes": [
      "apiKey"
    ],
    "credentials": "Set HEFESTO_API_KEY environment variable or X-API-Key header"
  },
  "defaultInputModes": [
    "text/plain"
  ],
  "defaultOutputModes": [
    "application/json"
  ]
}