{"uid":"cap_TdUe-qvXu24oQhpIHsYJu","slug":"mcp-security-agentdiet-dev-github-repository-license-dependency-81770c3b","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://mcp-security.agentdiet.dev/v1/repo-audit)","url":"https://mcp-security.agentdiet.dev/v1/repo-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_GYB9i19hYwooo2q4ekGf2","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"mcp-security.agentdiet.dev","brandSlug":"mcp-security-agentdiet-dev-mpp","brandBaseUrl":"https://mcp-security.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance health, popularity signals, and supply-chain security vulnerabilities before use or code execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit its GitHub repo for license compatibility, supply-chain risks, and maintenance health?","exampleUseCases":[{"title":"Pre-integration open source due diligence","prompt":"I'm about to use modelcontextprotocol/servers in our product — can you audit that GitHub repo and tell me if there are any license risks, outdated dependencies, or supply-chain security concerns I should know about?"},{"title":"Coding agent dependency vetting","prompt":"My AI coding agent wants to install a library from vercel/next.js — can you scan that repo for security issues, check its maintenance velocity, and confirm the license is permissive before it runs any code?"},{"title":"Enterprise OSS risk review","prompt":"We're evaluating huggingface/transformers for enterprise use — audit the GitHub repo and give me a full picture of its license risk, star/fork signals, and any dependency vulnerabilities."}],"resultDescription":"Returns a structured report covering license type and risk level, maintenance velocity (commit frequency, last commit date), repository popularity signals (stars, forks), and supply-chain security findings including flagged dependencies or known vulnerabilities.","failureModes":["Repository not found or invalid owner/name format returns an error","Private repositories that are inaccessible to the auditor return an access error","GitHub API rate limits may cause transient failures","Repositories with no dependency manifests may return limited supply-chain data","Malformed repo string (e.g. missing slash) triggers input validation error"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before executing, installing, or integrating its code — especially for license compliance checks, supply-chain risk, or maintenance health. Prefer it over generic GitHub API calls when you need a consolidated security and compliance report in a single call rather than assembling data from multiple GitHub endpoints manually.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:30:19.293Z","isFirstParty":false,"canonicalSlug":"mcp-security-agentdiet-dev-github-repository-license-dependency-81770c3b"}