{"uid":"cap_VW7aAlVmdKr4RHtwVH4Nn","slug":"mcp-security-agentdiet-dev-github-repository-security-license-risk-2cded68f","name":"GitHub Repository Security & License Risk Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://mcp-security.agentdiet.dev/v1/repo-risk-score)","url":"https://mcp-security.agentdiet.dev/v1/repo-risk-score?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Zss3i_NOuNJrB4q89GNOD","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"mcp-security.agentdiet.dev","brandSlug":"mcp-security-agentdiet-dev-mpp","brandBaseUrl":"https://mcp-security.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution or dependency adoption.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you run a security and license audit on it and tell me if there are any supply-chain risks or maintenance red flags?","exampleUseCases":[{"title":"Pre-integration dependency safety check","prompt":"I'm about to include modelcontextprotocol/servers in my project — can you audit that GitHub repo for license risks, supply-chain issues, and whether it's actively maintained?"},{"title":"Open source license compliance review","prompt":"Our legal team needs to know if the license on huggingface/transformers poses any compliance risk before we ship it in our product — can you pull the license risk score for that repo?"},{"title":"Abandoned repo risk detection","prompt":"I found a promising library at sindresorhus/got but I'm worried it might be stale or poorly maintained — can you check its maintenance velocity, stars, and any supply-chain security flags?"}],"resultDescription":"Returns a structured risk assessment of the requested GitHub repository, including license risk level, maintenance velocity indicators, star/fork counts, and supply-chain security signals that help determine whether the repo is safe to adopt or execute code from.","failureModes":["Invalid or non-existent repository (owner/name not found on GitHub) returns an error","Repository is private and inaccessible, returning a not-found or permission error","Rate limiting from GitHub API causing degraded or failed responses","Malformed repo parameter (missing slash separator) triggers validation error","Payment failure via x402 protocol results in HTTP 402 with no data returned"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer workflow needs to vet a GitHub repository before importing it as a dependency, executing its code, or recommending it — especially when license compliance, supply-chain integrity, or maintenance health are concerns. Prefer this over generic search endpoints when you need a structured risk score rather than raw repository metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:25:39.351Z","isFirstParty":false,"canonicalSlug":"mcp-security-agentdiet-dev-github-repository-security-license-risk-2cded68f"}