← Assay Observatory

⚡ 4-Protocol A2A, Glama 6-Dim TDQS, x402 Bazaar & Stripe MPP Compiler

Assay Badge
Target: https://mailalign.mike-tusa.workers.dev
Source: Live MCP JSON-RPC (tools/list) | Tools Audited: 1 | Current Glama TDQS: 3.7/5.0 (74.0/100) → Compiled: 5.0/5.0 (100/100)
1. Glama 6-Dim TDQS: 3.7/5.0 → 5.0/5.0
2. A2A Agent Card: ○ MISSING (Auto-Generated in $9 Pack)
3. x402 v2 Bazaar: ● Ready in $9 Pack
4. Stripe MPP (-32042): ● Ready in $9 Pack

Embed Verified README Badge (Free): [![Assay MCP Security](https://assay.agentdiet.dev/v1/badge.svg?target=https://mailalign.mike-tusa.workers.dev)](https://assay.agentdiet.dev/?inspect=https://mailalign.mike-tusa.workers.dev)

Canonical SHA-256 Schema Lock: sha256:6876a1658ee76.. → sha256:c6043b37f1afc..

1. Per-Tool Glama 2026 Rubric Breakdown (1 Tools)

MCP Tool NameCurrent TDQSDetected Glama Rubric Deductions (Behavior / Conciseness / Parameters / Usage / Schema)
analyze_headers3.7/5.0 (74)Usage Guidelines 3/5: no sibling routing, Parameters 3/5: no cross-param interaction prose

2. 🔒 FREE LIVE PREVIEW (Tool 1 of 1 Compiled to 5.0/5.0 TDQS + A2A Skill #1)

{
  "tool_1_before": {
    "name": "analyze_headers",
    "title": "Analyze email headers",
    "description": "Analyze pasted raw email headers. Reports From / Return-Path / Reply-To / DKIM d= alignment (relaxed and strict), SPF / DKIM / DMARC / ARC verdicts as recorded by the receiving servers (Authentication-Results, ARC-*), the Received hop chain oldest first with per-hop delays and public IPs, and plain-English findings with severity and what each means or how to fix it. Makes no network or DNS calls and does not verify signatures. Header text is not stored. Read-only. Same engine as the MailAlign JSON API (POST /api/analyze).",
    "inputSchema": {
      "type": "object",
      "properties": {
        "headers": {
          "type": "string",
          "minLength": 1,
          "maxLength": 60000,
          "description": "The full raw header block of one email, e.g. \"Received: from ...\nAuthentication-Results: ...\nFrom: ...\". A body after the first blank line is ignored."
        },
        "include_raw": {
          "type": "boolean",
          "default": false,
          "description": "Also return the full /api/analyze JSON (all findings and hops) in structuredContent.raw."
        }
      },
      "required": [
        "headers"
      ],
      "additionalProperties": false
    },
    "outputSchema": {
      "type": "object",
      "properties": {
        "verdict": {
          "type": "string",
          "enum": [
            "pass",
            "review",
            "fail",
            "unknown"
          ]
        },
        "fromDomain": {
          "type": "string"
        },
        "spf": {
          "type": "string"
        },
        "dkim": {
          "type": "string"
        },
        "dmarc": {
          "type": "string"
        },
        "arc": {
          "type": "string"
        },
        "dkimAligned": {
          "type": "object",
          "properties": {
            "strict": {
              "type": "boolean"
            },
            "relaxed": {
              "type": "boolean"
            }
          },
          "required": [
            "strict",
            "relaxed"
          ]
        },
        "spfAligned": {
          "type": "object",
          "properties": {
            "strict": {
              "type": "boolean"
            },
            "relaxed": {
              "type": "boolean"
            }
          },
          "required": [
            "strict",
            "relaxed"
          ]
        },
        "hops": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "hop": {
                "type": "number"
              },
              "from": {
                "type": "string"
              },
              "by": {
                "type": "string"
              },
              "ip": {
                "type": "string"
              },
              "ipScope": {
                "type": "string"
              },
              "timestamp": {
                "type": "string"
              },
              "delaySeconds": {
                "type": "number"
              }
            },
            "required": [
              "hop"
            ]
          }
        },
        "hopsOmitted": {
          "type": "number"
        },
        "totalDelaySeconds": {
          "type": "number"
        },
        "publicIps": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "findings": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "severity": {
                "type": "string",
                "enum": [
                  "critical",
                  "warning",
                  "info",
                  "ok"
                ]
              },
              "code": {
                "type": "string"
              },
              "title": {
                "type": "string"
              },
              "detail": {
                "type": "string"
              }
            },
            "required": [
              "severity",
              "code",
              "title",
              "detail"
            ]
          }
        },
        "findingsOmitted": {
          "type": "number"
        },
        "version": {
          "type": "string"
        },
        "raw": {
          "type": "object",
          "description": "Full /api/analyze response (only when include_raw is true)"
        }
      },
      "required": [
        "verdict",
        "findings",
        "hops",
        "version"
      ]
    },
    "annotations": {
      "title": "Analyze email headers",
      "readOnlyHint": true,
      "destructiveHint": false,
      "idempotentHint": true,
      "openWorldHint": false
    }
  },
  "tool_1_compiled_5_0_tdqs": {
    "name": "analyze_headers",
    "title": "Analyze Headers",
    "description": "Analyze pasted raw email headers. Reports From / Return-Path / Reply-To / DKIM d= alignment (relaxed and strict), SPF / DKIM / DMARC / ARC verdicts as recorded by the receiving servers (Authentication-Results, ARC-*), the Received hop chain oldest first with per-hop delays and public IPs, and plain-English findings with severity and what each means or how to fix it. Makes no network or DNS calls and does not verify signatures. Header text is not stored. Read-only. Same engine as the MailAlign JSON API (POST /api/analyze). WHEN TO USE: Call analyze_headers as the primary endpoint operation. PARAMETER INTERACTIONS: Pass headers, include_raw to scope execution; optional fields refine filtering when set and use safe defaults when omitted. Read-only and idempotent; failed calls do not mutate state.",
    "inputSchema": {
      "type": "object",
      "properties": {
        "headers": {
          "type": "string",
          "minLength": 1,
          "maxLength": 60000,
          "description": "The full raw header block of one email, e.g. \"Received: from ...\nAuthentication-Results: ...\nFrom: ...\". A body after the first blank line is ignored."
        },
        "include_raw": {
          "type": "boolean",
          "default": false,
          "description": "Also return the full /api/analyze JSON (all findings and hops) in structuredContent.raw."
        }
      },
      "required": [
        "headers"
      ],
      "additionalProperties": false
    },
    "outputSchema": {
      "type": "object",
      "properties": {
        "verdict": {
          "type": "string",
          "enum": [
            "pass",
            "review",
            "fail",
            "unknown"
          ]
        },
        "fromDomain": {
          "type": "string"
        },
        "spf": {
          "type": "string"
        },
        "dkim": {
          "type": "string"
        },
        "dmarc": {
          "type": "string"
        },
        "arc": {
          "type": "string"
        },
        "dkimAligned": {
          "type": "object",
          "properties": {
            "strict": {
              "type": "boolean"
            },
            "relaxed": {
              "type": "boolean"
            }
          },
          "required": [
            "strict",
            "relaxed"
          ]
        },
        "spfAligned": {
          "type": "object",
          "properties": {
            "strict": {
              "type": "boolean"
            },
            "relaxed": {
              "type": "boolean"
            }
          },
          "required": [
            "strict",
            "relaxed"
          ]
        },
        "hops": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "hop": {
                "type": "number"
              },
              "from": {
                "type": "string"
              },
              "by": {
                "type": "string"
              },
              "ip": {
                "type": "string"
              },
              "ipScope": {
                "type": "string"
              },
              "timestamp": {
                "type": "string"
              },
              "delaySeconds": {
                "type": "number"
              }
            },
            "required": [
              "hop"
            ]
          }
        },
        "hopsOmitted": {
          "type": "number"
        },
        "totalDelaySeconds": {
          "type": "number"
        },
        "publicIps": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "findings": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "severity": {
                "type": "string",
                "enum": [
                  "critical",
                  "warning",
                  "info",
                  "ok"
                ]
              },
              "code": {
                "type": "string"
              },
              "title": {
                "type": "string"
              },
              "detail": {
                "type": "string"
              }
            },
            "required": [
              "severity",
              "code",
              "title",
              "detail"
            ]
          }
        },
        "findingsOmitted": {
          "type": "number"
        },
        "version": {
          "type": "string"
        },
        "raw": {
          "type": "object",
          "description": "Full /api/analyze response (only when include_raw is true)"
        }
      },
      "required": [
        "verdict",
        "findings",
        "hops",
        "version"
      ]
    },
    "annotations": {
      "title": "Analyze email headers",
      "readOnlyHint": true,
      "destructiveHint": false,
      "idempotentHint": true,
      "openWorldHint": false
    }
  },
  "auto_generated_a2a_skill_1_preview": {
    "id": "analyze-headers",
    "name": "Analyze Headers",
    "description": "Analyze pasted raw email headers. Reports From / Return-Path / Reply-To / DKIM d= alignment (relaxed and strict), SPF / DKIM / DMARC / ARC verdicts as recorded by the receiving servers (Authentication-Results, ARC-*), th",
    "tags": [
      "mcp",
      "a2a",
      "x402",
      "analyze"
    ]
  },
  "signed_mcp_lock_preview": {
    "target": "https://mailalign.mike-tusa.workers.dev",
    "tools_hash": "sha256:c6043b37f1afcfdd7865ce764e62d0ba2e398a3dc28a84e912af8c52122d27a5",
    "tdqs": 5.0,
    "protocols": [
      "mcp-2025-03-26",
      "a2a-0.2.1",
      "x402-v2-bazaar",
      "stripe-mpp-32042"
    ],
    "signature": "asr_lock_6560a1fe461e0d968c8b599b1d8dbf22"
  },
  "locked_bundle_contents": "Unlock remaining 0 compiled 5.0/5.0 tools + full /.well-known/agent-card.json + /.well-known/mcp.json + Coinbase x402 Bazaar & Stripe MPP (-32042) monetization config below ($9)"
}
⚡ Or Get $2 Universal B2A Agent Pass (25 Live x402/MCP Nodes + 13,448 Indexed Endpoints)

Verified 5.0/5.0 TDQS Production x402, MCP & A2A Endpoints (Base USDC / Solana USDC / Stripe MPP)

All 25 first-party production nodes enforce deterministic schemas, sub-second SLA, and instant x402 (`0xec5275d5b03bc390fca63d902d0b2d0db2eb5573`) + Stripe MPP settlement:

1. AgentDiet Token Distiller ($0.001) — /v1/distill | /mcp 2. X402-Broker 13,400+ Router ($0.002) — /v1/x402-broker 3. Prompt-Guard Firewall ($0.002) — /v1/prompt-guard 4. JSON-Repair Validator ($0.001) — /v1/json-repair 5. SERP-Extract Grounding ($0.002) — /v1/serp-extract 6. LLMs.txt Compiler ($0.005) — /v1/llms-generator 7. GitHub Repo Auditor ($0.005) — /v1/github-audit 8. Company Tech-Stack Enrich ($0.005) — /v1/company-enrich 9. SEC EDGAR 10-K/10-Q Intel ($0.008) — /v1/sec-intel 10. Domain OSINT & TLS Recon ($0.003) — /v1/domain-osint 11. Email MX/SPF/DMARC Verifier ($0.002) — /v1/email-verify 12. ArXiv AI/CS Paper Digest ($0.003) — /v1/arxiv-digest 13. E-Commerce Price Extractor ($0.008) — /v1/shopify-spy 14. x402 Endpoint SLA Auditor ($0.005) — /v1/x402-audit 15. On-Chain Rug & Honeypot Scanner ($0.008) — /v1/onchain-risk 16. DEX Liquidity & Slippage Intel ($0.005) — /v1/token-intel 17. Polymarket Live Odds Feed ($0.004) — /v1/polymarket-odds 18. DeFi Stablecoin APY Scanner ($0.005) — /v1/defi-yield 19. HackerNews Sentiment Pulse ($0.003) — /v1/hn-pulse 20. Shopify Catalog & App Intel ($0.006) — /v1/shopify-intel 21. DEX Whale Momentum Scanner ($0.006) — /v1/whale-momentum 22. 5-Min DeFi/DEX Alpha Stream ($0.005) — /v1/alpha-stream 23. 4-Protocol MCP TDQS Compiler ($0.008) — /v1/mcp-compiler 24. Real-Time OSV/CVE Vulnerability Intel ($0.004) — /v1/cve-intel 25. Assay Pre-Flight Security Certifier ($0.005) — /v1/certify