{"uid":"cap_bKreBX44OEHHLIC_GOir6","slug":"mcp-compiler-agentdiet-dev-github-repository-security-license-auditor-4ea2232c","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://mcp-compiler.agentdiet.dev/v1/github-scanner)","url":"https://mcp-compiler.agentdiet.dev/v1/github-scanner?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_8UM3qg5gWep72cVLnhzQe","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"mcp-compiler.agentdiet.dev","brandSlug":"mcp-compiler-agentdiet-dev-mpp","brandBaseUrl":"https://mcp-compiler.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Analyzes a GitHub repository for license risk, maintenance health, popularity metrics, and supply-chain security vulnerabilities before code execution.","exampleAgentPrompt":"Can you audit the GitHub repo langchain-ai/langgraph and tell me about its license risk, how actively it's maintained, its stars and forks, and whether there are any supply-chain security concerns before I add it as a dependency?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"Before I add huggingface/transformers to my project, can you scan that GitHub repo and tell me if the license is permissive, how recently it's been maintained, and whether there are any supply-chain security red flags?"},{"title":"Open source license compliance check","prompt":"I need to know if the license on facebook/react is safe for commercial use — can you run a license risk audit on that GitHub repo for me?"},{"title":"Unknown library trust assessment","prompt":"I found a GitHub repo called someuser/cool-ml-tool that I want to run locally — can you check its maintenance activity, star count, and supply-chain security before I execute any of its code?"}],"resultDescription":"Returns a structured report covering the repository's license type and associated legal risk, maintenance velocity (commit frequency, last activity), community popularity signals (stars, forks), and supply-chain security findings such as dependency vulnerabilities or suspicious package patterns.","failureModes":["Repository not found or does not exist (invalid owner/name format)","Private repository inaccessible without authentication","GitHub API rate limiting causing delayed or failed response","Malformed repo parameter (missing slash separator between owner and name)","Repository exists but has no detectable license, yielding incomplete license assessment"],"whenToPreferThis":"Choose this endpoint when an AI coding agent needs to vet a third-party GitHub repository before integrating it as a dependency or executing its code — especially when license compliance, supply-chain security, and maintenance health all need to be assessed in a single call. Prefer this over manual GitHub browsing or general web search when you need structured, machine-readable risk signals specifically scoped to repository auditing.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:24:17.073Z","isFirstParty":false,"canonicalSlug":"mcp-compiler-agentdiet-dev-github-repository-security-license-auditor-69910681"}