{"uid":"cap_Mu0kMFy8ZbxSaQTWVbKZP","slug":"mcp-compiler-agentdiet-dev-github-repository-supply-chain-license-218d7579","name":"GitHub Repository Supply Chain & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://mcp-compiler.agentdiet.dev/v1/repo-supply-chain-scan)","url":"https://mcp-compiler.agentdiet.dev/v1/repo-supply-chain-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_4EOw6OLrB17TPfXnA84ff","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"mcp-compiler.agentdiet.dev","brandSlug":"mcp-compiler-agentdiet-dev-mpp","brandBaseUrl":"https://mcp-compiler.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance health, stars/forks, dependency vulnerabilities, and supply-chain security signals before integrating or executing its code.","exampleAgentPrompt":"Can you run a supply chain and license security audit on the langchain-ai/langgraph GitHub repo — I want to know about any license risks, how actively it's maintained, and whether there are any dependency vulnerabilities before I start using it?","exampleUseCases":[{"title":"Vetting a new open source dependency","prompt":"Before I add huggingface/transformers to our project, can you audit the GitHub repo for license risks, supply chain vulnerabilities, and maintenance activity? I need to know if it's safe to depend on."},{"title":"Pre-execution security check for an agent","prompt":"My coding agent is about to pull code from microsoft/autogen — can you scan that GitHub repo for supply chain security issues and dependency vulnerabilities before we run anything?"},{"title":"License compliance review for legal team","prompt":"Our legal team needs a license risk assessment for the openai/openai-python GitHub repository — can you check what license it uses and flag any compliance concerns?"}],"resultDescription":"Returns a structured object covering the repository's license type and associated legal risk level, maintenance velocity indicators (commit frequency, last update), popularity signals (stars and forks), and supply-chain security findings including dependency vulnerability data — giving a holistic risk profile of the repo before integration or execution.","failureModes":["Invalid or non-existent repo format returns an error (repo must be in owner/name format)","Private repositories may not be accessible and will return an access error","Rate limits on the underlying GitHub API may cause transient failures","Repos with no dependency manifest files may return limited supply-chain data","Payment not received or x402 authentication failure blocks the request"],"whenToPreferThis":"Choose this endpoint when you need a combined license, maintenance, and supply-chain security assessment of a GitHub repository in a single call — particularly useful for coding agents that need to vet third-party repos before executing or depending on their code, or for compliance workflows requiring automated open-source risk scoring.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:35.654Z","isFirstParty":false,"canonicalSlug":"mcp-compiler-agentdiet-dev-github-repository-supply-chain-license-218d7579"}