{"uid":"cap_V_IQX7grSwlVZyOapKp78","slug":"mcp-security-agentdiet-dev-github-repository-security-license-auditor-e8f2b5dc","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://mcp-security.agentdiet.dev/v1/repo-audit)","url":"https://mcp-security.agentdiet.dev/v1/repo-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_XvSPqg-MXWDzXeAseFbFi","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"mcp-security.agentdiet.dev","brandSlug":"mcp-security-agentdiet-dev-mpp","brandBaseUrl":"https://mcp-security.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, dependency vulnerabilities, and supply-chain security signals.","exampleAgentPrompt":"Can you audit the GitHub repo langchain-ai/langgraph for me — I want to know about its license risk, how actively it's maintained, its stars and forks, and any supply-chain security concerns before I add it as a dependency?","exampleUseCases":[{"title":"Pre-dependency license compliance check","prompt":"Before I add huggingface/transformers to our project, can you check its GitHub repo for license risk and any supply-chain security issues? We need to make sure it's compatible with our commercial use."},{"title":"Open source library maintenance health check","prompt":"Can you evaluate how well-maintained the vercel/next.js GitHub repo is — I want to see stars, forks, maintenance velocity, and whether there are any dependency or security red flags."},{"title":"Coding agent pre-execution security gate","prompt":"I'm about to run code from the repo skyvern-org/skyvern — can you audit it first for any license issues, supply-chain vulnerabilities, or signs it's abandoned before I execute anything from it?"}],"resultDescription":"Returns a structured JSON report covering the repository's license type and associated legal risk, maintenance velocity (commit frequency, last update), popularity signals (stars, forks, watchers), supply-chain security flags (dependency vulnerabilities, known CVEs, suspicious patterns), and an overall risk summary — giving an agent or developer a clear go/no-go signal before integrating or executing code from the repo.","failureModes":["Invalid or non-existent repository format returns an error (repo must be owner/name)","Private repositories may return limited or no data if not publicly accessible","Rate limits from GitHub's underlying API may cause transient failures","Repository with no license file may return null license risk with low confidence","Payment required (HTTP 402) if x402 credentials are missing or insufficient"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-integration security gate for any GitHub repository — especially when license compliance, supply-chain risk, or maintenance health are concerns before adding a dependency or executing third-party code. Prefer it over manual GitHub browsing when you need structured, agent-consumable risk signals in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:20.929Z","isFirstParty":false,"canonicalSlug":"mcp-security-agentdiet-dev-github-repository-security-license-auditor-d230a3f5"}