{"uid":"cap_yJcKX-yeLAks2alvcsPAE","slug":"mcp-compiler-agentdiet-dev-github-repository-security-license-risk-137ac4d8","name":"GitHub Repository Security & License Risk Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://mcp-compiler.agentdiet.dev/v1/repo-risk-score)","url":"https://mcp-compiler.agentdiet.dev/v1/repo-risk-score?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_pEQwtMjpNeNyeNZw2WRC3","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"mcp-compiler.agentdiet.dev","brandSlug":"mcp-compiler-agentdiet-dev-mpp","brandBaseUrl":"https://mcp-compiler.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before integrating or executing its code","exampleAgentPrompt":"Can you run a full security and license audit on the langchain-ai/langgraph GitHub repo — I want to know if it's safe to depend on, whether the license is risky, and how actively maintained it is?","exampleUseCases":[{"title":"Vetting a new open source dependency","prompt":"Before I add huggingface/transformers to my project, can you audit that GitHub repo and tell me if the license is compatible with commercial use and whether the supply chain looks clean?"},{"title":"Pre-execution repo safety check for coding agent","prompt":"I'm about to have my coding agent pull in code from openai/openai-python — can you evaluate that repo for security risk, maintenance velocity, and any license issues first?"},{"title":"Comparing trust of two competing libraries","prompt":"Can you audit both encode/httpx and psf/requests on GitHub and give me a risk score for each so I can decide which one is safer to depend on long-term?"}],"resultDescription":"Returns a structured risk assessment for the specified GitHub repository, including license risk classification, maintenance velocity indicators, community signals (stars, forks), and supply-chain security evaluation, resulting in an overall risk score the agent can use to decide whether to proceed with integration.","failureModes":["Invalid or non-existent repository slug returns an error or empty result","Private repositories that GitHub API cannot access may return incomplete data","Rate limiting from GitHub API may cause delays or partial responses","Repos with no license file may yield indeterminate license risk","Payment failure (x402) blocks the request before analysis begins"],"whenToPreferThis":"Choose this endpoint when an AI coding agent needs to vet a GitHub repository before integrating or executing its code — particularly for license compatibility checks, supply-chain security validation, and maintenance health. It is purpose-built for pre-dependency due diligence workflows and covers multiple risk dimensions in a single call, making it more efficient than querying GitHub's raw API and interpreting results manually.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:51.444Z","isFirstParty":false,"canonicalSlug":"mcp-compiler-agentdiet-dev-github-repository-security-license-risk-137ac4d8"}