← Assay Observatory

⚡ 4-Protocol A2A, Glama 6-Dim TDQS, x402 Bazaar & Stripe MPP Compiler

Assay Badge
Target: https://aiagentscity.com
Source: Live MCP JSON-RPC (tools/list) | Tools Audited: 18 | Current Glama TDQS: 3.3/5.0 (66.1/100) → Compiled: 5.0/5.0 (100/100)
1. Glama 6-Dim TDQS: 3.3/5.0 → 5.0/5.0
2. A2A Agent Card: ● DETECTED
3. x402 v2 Bazaar: ● Ready in $9 Pack
4. Stripe MPP (-32042): ● Ready in $9 Pack

Embed Verified README Badge (Free): [![Assay MCP Security](https://assay.agentdiet.dev/v1/badge.svg?target=https://aiagentscity.com)](https://assay.agentdiet.dev/?inspect=https://aiagentscity.com)

Canonical SHA-256 Schema Lock: sha256:bd0e618ca9f54.. → sha256:d123603b5d2b5..

1. Per-Tool Glama 2026 Rubric Breakdown (18 Tools)

MCP Tool NameCurrent TDQSDetected Glama Rubric Deductions (Behavior / Conciseness / Parameters / Usage / Schema)
ledger_rotate_secret3.7/5.0 (74)Missing outputSchema (Completeness -1), Conciseness 4/5: inline return fields duplicate outputSchema
ledger_revoke_secret3.7/5.0 (74)Missing outputSchema (Completeness -1), Conciseness 4/5: inline return fields duplicate outputSchema
ledger_track3.7/5.0 (74)Missing outputSchema (Completeness -1), Behavior 3/5: no side-effect/quota disclosure
ledger_set_budget4.35/5.0 (87)Missing outputSchema (Completeness -1)
ledger_report3.7/5.0 (74)Missing outputSchema (Completeness -1), Behavior 3/5: no side-effect/quota disclosure
ledger_proxy_attach3.05/5.0 (61)Missing outputSchema (Completeness -1), Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure
ledger_alerts3.7/5.0 (74)Missing outputSchema (Completeness -1), Behavior 3/5: no side-effect/quota disclosure
ledger_wait_events3.7/5.0 (74)Missing outputSchema (Completeness -1), Behavior 3/5: no side-effect/quota disclosure
ledger_check_spend3.05/5.0 (61)Missing outputSchema (Completeness -1), Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose
ledger_request_approval3.7/5.0 (74)Missing outputSchema (Completeness -1), Behavior 3/5: no side-effect/quota disclosure
ledger_approvals2.4/5.0 (48)Missing outputSchema (Completeness -1), Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure
ledger_approval_decide2.4/5.0 (48)Missing outputSchema (Completeness -1), Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure
ledger_price4.35/5.0 (87)Missing outputSchema (Completeness -1)
ledger_start4.35/5.0 (87)Missing outputSchema (Completeness -1)
ledger_api_docs3.7/5.0 (74)Missing outputSchema (Completeness -1), Parameters 3/5: no cross-param interaction prose
ledger_examples2.4/5.0 (48)Missing outputSchema (Completeness -1), Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure
skills_list_tool1.75/5.0 (35)Missing outputSchema (Completeness -1), Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints
read_skill1.75/5.0 (35)Missing outputSchema (Completeness -1), Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure, Missing MCP annotations.title / safety hints

2. 🔒 FREE LIVE PREVIEW (Tool 1 of 18 Compiled to 5.0/5.0 TDQS + A2A Skill #1)

{
  "tool_1_before": {
    "_meta": {
      "fastmcp": {
        "tags": []
      }
    },
    "annotations": {
      "destructiveHint": true,
      "idempotentHint": false,
      "readOnlyHint": false,
      "title": "Rotate Agent Secret"
    },
    "description": "Mint a NEW agent_secret for an agent_id your workspace already owns, invalidating the old one.\n\nUse this to RECOVER an agent whose secret was lost: the previous credential\nstops working immediately. Requires the workspace_key that owns agent_id \u2014\nan agent's own agent_secret cannot rotate itself, because a leaked agent\ncredential must not be able to lock its real owner out. Unlike ledger_track\nthis never claims a new agent_id: an unknown id returns agent_not_claimed.\n\nThe new secret is returned ONCE. Store it before you drop the response.\n\nReturns {\"agent_id\", \"agent_secret\", \"_note\"}, or {\"error\", \"error_code\"}.",
    "inputSchema": {
      "properties": {
        "agent_id": {
          "type": "string"
        },
        "workspace_key": {
          "type": "string"
        }
      },
      "required": [
        "agent_id",
        "workspace_key"
      ],
      "type": "object",
      "additionalProperties": false
    },
    "name": "ledger_rotate_secret",
    "outputSchema": {
      "type": "object",
      "additionalProperties": true
    },
    "title": "Rotate Agent Secret"
  },
  "tool_1_compiled_5_0_tdqs": {
    "_meta": {
      "fastmcp": {
        "tags": []
      }
    },
    "annotations": {
      "title": "Rotate Agent Secret",
      "readOnlyHint": false,
      "destructiveHint": true,
      "idempotentHint": false,
      "openWorldHint": true
    },
    "description": "Mint a NEW agent_secret for an agent_id your workspace already owns, invalidating the old one.\n\nUse this to RECOVER an agent whose secret was lost: the previous credential\nstops working immediately. Requires the workspace_key that owns agent_id \u2014\nan agent's own agent_secret cannot rotate itself, because a leaked agent\ncredential must not be able to lock its real owner out. Unlike ledger_track\nthis never claims a new agent_id: an unknown id returns agent_not_claimed.\n\nThe new secret is returned ONCE. Store it before you drop the response.\n\n, or {\"error\", \"error_code\"}. WHEN TO USE: Call ledger_rotate_secret for this operation; for sibling workflows use ledger_revoke_secret, ledger_track, ledger_set_budget. WHEN NOT TO USE: Do not call for unrelated mutations. PARAMETER INTERACTIONS: Pass agent_id, workspace_key to scope execution; optional fields refine filtering when set and use safe defaults when omitted. Read-only and idempotent; failed calls do not mutate state.",
    "inputSchema": {
      "properties": {
        "agent_id": {
          "type": "string",
          "minLength": 1,
          "maxLength": 2048,
          "description": "Target agent_id value for ledger_rotate_secret."
        },
        "workspace_key": {
          "type": "string",
          "minLength": 1,
          "maxLength": 2048,
          "description": "Target workspace_key value for ledger_rotate_secret."
        }
      },
      "required": [
        "agent_id",
        "workspace_key"
      ],
      "type": "object",
      "additionalProperties": false
    },
    "name": "ledger_rotate_secret",
    "outputSchema": {
      "type": "object",
      "additionalProperties": true
    },
    "title": "Ledger Rotate Secret"
  },
  "auto_generated_a2a_skill_1_preview": {
    "id": "ledger-rotate-secret",
    "name": "Ledger Rotate Secret",
    "description": "Mint a NEW agent_secret for an agent_id your workspace already owns, invalidating the old one.\n\nUse this to RECOVER an agent whose secret was lost: the previous credential\nstops working immediately. Requires the workspac",
    "tags": [
      "mcp",
      "a2a",
      "x402",
      "ledger"
    ]
  },
  "signed_mcp_lock_preview": {
    "target": "https://aiagentscity.com",
    "tools_hash": "sha256:d123603b5d2b55be20d6c8ae300bce5925749d05ae61198428cb5bed539a3d1c",
    "tdqs": 5.0,
    "protocols": [
      "mcp-2025-03-26",
      "a2a-0.2.1",
      "x402-v2-bazaar",
      "stripe-mpp-32042"
    ],
    "signature": "asr_lock_48b1c97817b9da5cd7b66fa20969e1b7"
  },
  "locked_bundle_contents": "Unlock remaining 17 compiled 5.0/5.0 tools + full /.well-known/agent-card.json + /.well-known/mcp.json + Coinbase x402 Bazaar & Stripe MPP (-32042) monetization config below ($9)"
}
⚡ Or Get $2 Universal B2A Agent Pass (25 Live x402/MCP Nodes + 13,448 Indexed Endpoints)

Verified 5.0/5.0 TDQS Production x402, MCP & A2A Endpoints (Base USDC / Solana USDC / Stripe MPP)

All 25 first-party production nodes enforce deterministic schemas, sub-second SLA, and instant x402 (`0xec5275d5b03bc390fca63d902d0b2d0db2eb5573`) + Stripe MPP settlement:

1. AgentDiet Token Distiller ($0.001) — /v1/distill | /mcp 2. X402-Broker 13,400+ Router ($0.002) — /v1/x402-broker 3. Prompt-Guard Firewall ($0.002) — /v1/prompt-guard 4. JSON-Repair Validator ($0.001) — /v1/json-repair 5. SERP-Extract Grounding ($0.002) — /v1/serp-extract 6. LLMs.txt Compiler ($0.005) — /v1/llms-generator 7. GitHub Repo Auditor ($0.005) — /v1/github-audit 8. Company Tech-Stack Enrich ($0.005) — /v1/company-enrich 9. SEC EDGAR 10-K/10-Q Intel ($0.008) — /v1/sec-intel 10. Domain OSINT & TLS Recon ($0.003) — /v1/domain-osint 11. Email MX/SPF/DMARC Verifier ($0.002) — /v1/email-verify 12. ArXiv AI/CS Paper Digest ($0.003) — /v1/arxiv-digest 13. E-Commerce Price Extractor ($0.008) — /v1/shopify-spy 14. x402 Endpoint SLA Auditor ($0.005) — /v1/x402-audit 15. On-Chain Rug & Honeypot Scanner ($0.008) — /v1/onchain-risk 16. DEX Liquidity & Slippage Intel ($0.005) — /v1/token-intel 17. Polymarket Live Odds Feed ($0.004) — /v1/polymarket-odds 18. DeFi Stablecoin APY Scanner ($0.005) — /v1/defi-yield 19. HackerNews Sentiment Pulse ($0.003) — /v1/hn-pulse 20. Shopify Catalog & App Intel ($0.006) — /v1/shopify-intel 21. DEX Whale Momentum Scanner ($0.006) — /v1/whale-momentum 22. 5-Min DeFi/DEX Alpha Stream ($0.005) — /v1/alpha-stream 23. 4-Protocol MCP TDQS Compiler ($0.008) — /v1/mcp-compiler 24. Real-Time OSV/CVE Vulnerability Intel ($0.004) — /v1/cve-intel 25. Assay Pre-Flight Security Certifier ($0.005) — /v1/certify