{"uid":"cap_Qh8wEVe_hIYOuNASPRnw7","slug":"mcp-security-agentdiet-dev-github-repository-security-license-auditor-1d39cbfc","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://mcp-security.agentdiet.dev/v1/github-scanner)","url":"https://mcp-security.agentdiet.dev/v1/github-scanner?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_qkmqEdjKUIOqvX8XFAhwh","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"mcp-security.agentdiet.dev","brandSlug":"mcp-security-agentdiet-dev-mpp","brandBaseUrl":"https://mcp-security.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Scans a GitHub repository for license risk, maintenance velocity, star/fork metrics, dependency vulnerabilities, and supply-chain security issues.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit its GitHub repo for license risks, how actively it's maintained, and any supply-chain security issues?","exampleUseCases":[{"title":"Pre-adoption open source due diligence","prompt":"We're thinking of using huggingface/transformers in our product — can you check its GitHub repo for any license restrictions, maintenance activity, and supply-chain security flags before we commit?"},{"title":"Dependency security check before code execution","prompt":"I'm about to run some code that depends on psf/requests — can you scan that GitHub repo and tell me if there are any known vulnerabilities or worrying supply-chain signals?"},{"title":"License compliance audit for legal review","prompt":"Our legal team needs to know whether facebook/react has any license risk for our commercial product — can you pull the license details and risk assessment from its GitHub repo?"}],"resultDescription":"Returns a structured object covering: detected license type and associated risk level, repository maintenance velocity (commit frequency, last activity), stars and forks counts, dependency vulnerability findings, and supply-chain security flags such as typosquatting or suspicious contributor patterns.","failureModes":["Invalid or non-existent repo (owner/name) returns an error indicating the repository was not found","Private or inaccessible repositories may return insufficient data or an access error","GitHub API rate limits may cause intermittent failures or incomplete results","Repos with no dependency manifests may return empty dependency vulnerability sections","Malformed repo format (not owner/name) triggers a validation error"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer workflow needs to vet a GitHub repository before importing or executing code from it — especially for license compliance checks, supply-chain risk assessment, or maintenance health scoring. It is particularly valuable before adding new open source dependencies to a production codebase or when conducting automated security reviews of third-party libraries.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:30:45.248Z","isFirstParty":false,"canonicalSlug":"mcp-security-agentdiet-dev-github-repository-security-license-auditor-d230a3f5"}