← Assay Observatory

⚡ 4-Protocol A2A, Glama 6-Dim TDQS, x402 Bazaar & Stripe MPP Compiler

Assay Badge
Target: https://runstack.pro/api
Source: Live MCP JSON-RPC (tools/list) | Tools Audited: 6 | Current Glama TDQS: 4.12/5.0 (82.3/100) → Compiled: 5.0/5.0 (100/100)
1. Glama 6-Dim TDQS: 4.12/5.0 → 5.0/5.0
2. A2A Agent Card: ○ MISSING (Auto-Generated in $9 Pack)
3. x402 v2 Bazaar: ● Ready in $9 Pack
4. Stripe MPP (-32042): ● Ready in $9 Pack

Embed Verified README Badge (Free): [![Assay MCP Security](https://assay.agentdiet.dev/v1/badge.svg?target=https://runstack.pro/api)](https://assay.agentdiet.dev/?inspect=https://runstack.pro/api)

Canonical SHA-256 Schema Lock: sha256:12dc6b0734a3c.. → sha256:4a5d1df289f0e..

1. Per-Tool Glama 2026 Rubric Breakdown (6 Tools)

MCP Tool NameCurrent TDQSDetected Glama Rubric Deductions (Behavior / Conciseness / Parameters / Usage / Schema)
check_tls4.9/5.0 (98)5.0/5.0 Glama Rubric Ready
check_http3.7/5.0 (74)Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure
check_email_domain4.35/5.0 (87)Behavior 3/5: no side-effect/quota disclosure
check_dns4.35/5.0 (87)Behavior 3/5: no side-effect/quota disclosure
check_port3.7/5.0 (74)Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure
check_ip3.7/5.0 (74)Parameters 3/5: no cross-param interaction prose, Behavior 3/5: no side-effect/quota disclosure

2. 🔒 FREE LIVE PREVIEW (Tool 1 of 6 Compiled to 5.0/5.0 TDQS + A2A Skill #1)

{
  "tool_1_before": {
    "name": "check_tls",
    "title": "TLS / certificate check",
    "description": "Scan a public host's TLS from the internet: certificate validity, chain completeness, expiry date, hostname match, enabled protocols (TLS 1.0\u20131.3), cipher suites, HSTS. Use when browsers show certificate errors, before/after renewing or rotating a certificate, or to confirm old TLS versions are disabled. Use this (not check_http) for anything about the certificate or TLS configuration itself; works on any TLS port, not only 443. Returns a verdict, findings with cause and fix, and a shareable report link. Takes up to ~60 s.",
    "inputSchema": {
      "type": "object",
      "properties": {
        "host": {
          "type": "string",
          "description": "Public hostname to scan, without scheme or path, e.g. example.com"
        },
        "port": {
          "type": "integer",
          "minimum": 1,
          "maximum": 65535,
          "default": 443,
          "description": "TLS port, e.g. 443 (HTTPS), 465 (SMTPS), 993 (IMAPS). Default 443."
        }
      },
      "required": [
        "host"
      ],
      "additionalProperties": false
    },
    "outputSchema": {
      "type": "object",
      "properties": {
        "ok": {
          "type": "boolean",
          "description": "false when the check could not run (see error / message)"
        },
        "tool": {
          "type": "string"
        },
        "target": {
          "type": "string",
          "description": "What was checked"
        },
        "verdict": {
          "type": "string",
          "enum": [
            "ok",
            "warn",
            "fail"
          ]
        },
        "headline": {
          "type": "string",
          "description": "One-line summary"
        },
        "findings": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "severity": {
                "type": "string",
                "enum": [
                  "error",
                  "warning",
                  "info",
                  "ok"
                ]
              },
              "code": {
                "type": "string"
              },
              "title": {
                "type": "string"
              },
              "detail": {
                "type": "string",
                "description": "Why it matters / cause"
              },
              "fix": {
                "type": "string",
                "description": "How to fix"
              },
              "docs": {
                "type": "string",
                "description": "How-to article URL"
              }
            },
            "required": [
              "severity",
              "title"
            ]
          }
        },
        "facts": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "label": {
                "type": "string"
              },
              "value": {
                "type": "string"
              }
            },
            "required": [
              "label",
              "value"
            ]
          }
        },
        "reportUrl": {
          "type": "string",
          "description": "Shareable report link"
        },
        "error": {
          "type": "string",
          "description": "Error code when ok is false"
        },
        "message": {
          "type": "string"
        },
        "notice": {
          "type": "string",
          "description": "Usage note, e.g. anonymous-tier limits"
        }
      },
      "required": [
        "ok"
      ]
    },
    "annotations": {
      "title": "TLS / certificate check",
      "readOnlyHint": true,
      "destructiveHint": false,
      "idempotentHint": true,
      "openWorldHint": true
    }
  },
  "tool_1_compiled_5_0_tdqs": {
    "name": "check_tls",
    "title": "Check Tls",
    "description": "Scan a public host's TLS from the internet: certificate validity, chain completeness, expiry date, hostname match, enabled protocols (TLS 1.0\u20131.3), cipher suites, HSTS. Use when browsers show certificate errors, before/after renewing or rotating a certificate, or to confirm old TLS versions are disabled. Use this (not check_http) for anything about the certificate or TLS configuration itself; works on any TLS port, not only 443. Returns a verdict, findings with cause and fix, and a shareable report link. Takes up to ~60 s. WHEN TO USE: Call check_tls for this operation; for sibling workflows use check_http, check_email_domain, check_dns. WHEN NOT TO USE: Do not call for unrelated mutations. PARAMETER INTERACTIONS: Pass host, port to scope execution; optional fields refine filtering when set and use safe defaults when omitted. Read-only and idempotent; failed calls do not mutate state.",
    "inputSchema": {
      "type": "object",
      "properties": {
        "host": {
          "type": "string",
          "description": "Public hostname to scan, without scheme or path, e.g. example.com",
          "minLength": 1,
          "maxLength": 2048
        },
        "port": {
          "type": "integer",
          "minimum": 1,
          "maximum": 65535,
          "default": 443,
          "description": "TLS port, e.g. 443 (HTTPS), 465 (SMTPS), 993 (IMAPS). Default 443."
        }
      },
      "required": [
        "host"
      ],
      "additionalProperties": false
    },
    "outputSchema": {
      "type": "object",
      "properties": {
        "ok": {
          "type": "boolean",
          "description": "false when the check could not run (see error / message)"
        },
        "tool": {
          "type": "string"
        },
        "target": {
          "type": "string",
          "description": "What was checked"
        },
        "verdict": {
          "type": "string",
          "enum": [
            "ok",
            "warn",
            "fail"
          ]
        },
        "headline": {
          "type": "string",
          "description": "One-line summary"
        },
        "findings": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "severity": {
                "type": "string",
                "enum": [
                  "error",
                  "warning",
                  "info",
                  "ok"
                ]
              },
              "code": {
                "type": "string"
              },
              "title": {
                "type": "string"
              },
              "detail": {
                "type": "string",
                "description": "Why it matters / cause"
              },
              "fix": {
                "type": "string",
                "description": "How to fix"
              },
              "docs": {
                "type": "string",
                "description": "How-to article URL"
              }
            },
            "required": [
              "severity",
              "title"
            ]
          }
        },
        "facts": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "label": {
                "type": "string"
              },
              "value": {
                "type": "string"
              }
            },
            "required": [
              "label",
              "value"
            ]
          }
        },
        "reportUrl": {
          "type": "string",
          "description": "Shareable report link"
        },
        "error": {
          "type": "string",
          "description": "Error code when ok is false"
        },
        "message": {
          "type": "string"
        },
        "notice": {
          "type": "string",
          "description": "Usage note, e.g. anonymous-tier limits"
        }
      },
      "required": [
        "ok"
      ]
    },
    "annotations": {
      "title": "TLS / certificate check",
      "readOnlyHint": true,
      "destructiveHint": false,
      "idempotentHint": true,
      "openWorldHint": true
    }
  },
  "auto_generated_a2a_skill_1_preview": {
    "id": "check-tls",
    "name": "Check Tls",
    "description": "Scan a public host's TLS from the internet: certificate validity, chain completeness, expiry date, hostname match, enabled protocols (TLS 1.0\u20131.3), cipher suites, HSTS. Use when browsers show certificate errors, before/a",
    "tags": [
      "mcp",
      "a2a",
      "x402",
      "check"
    ]
  },
  "signed_mcp_lock_preview": {
    "target": "https://runstack.pro/api",
    "tools_hash": "sha256:4a5d1df289f0e015725d69e38f2db22fd6047632e8c69cafb593ef886db84a9d",
    "tdqs": 5.0,
    "protocols": [
      "mcp-2025-03-26",
      "a2a-0.2.1",
      "x402-v2-bazaar",
      "stripe-mpp-32042"
    ],
    "signature": "asr_lock_8c489a0b2c14084f7573f76ee32e701c"
  },
  "locked_bundle_contents": "Unlock remaining 5 compiled 5.0/5.0 tools + full /.well-known/agent-card.json + /.well-known/mcp.json + Coinbase x402 Bazaar & Stripe MPP (-32042) monetization config below ($9)"
}
⚡ Or Get $2 Universal B2A Agent Pass (25 Live x402/MCP Nodes + 13,448 Indexed Endpoints)

Verified 5.0/5.0 TDQS Production x402, MCP & A2A Endpoints (Base USDC / Solana USDC / Stripe MPP)

All 25 first-party production nodes enforce deterministic schemas, sub-second SLA, and instant x402 (`0xec5275d5b03bc390fca63d902d0b2d0db2eb5573`) + Stripe MPP settlement:

1. AgentDiet Token Distiller ($0.001) — /v1/distill | /mcp 2. X402-Broker 13,400+ Router ($0.002) — /v1/x402-broker 3. Prompt-Guard Firewall ($0.002) — /v1/prompt-guard 4. JSON-Repair Validator ($0.001) — /v1/json-repair 5. SERP-Extract Grounding ($0.002) — /v1/serp-extract 6. LLMs.txt Compiler ($0.005) — /v1/llms-generator 7. GitHub Repo Auditor ($0.005) — /v1/github-audit 8. Company Tech-Stack Enrich ($0.005) — /v1/company-enrich 9. SEC EDGAR 10-K/10-Q Intel ($0.008) — /v1/sec-intel 10. Domain OSINT & TLS Recon ($0.003) — /v1/domain-osint 11. Email MX/SPF/DMARC Verifier ($0.002) — /v1/email-verify 12. ArXiv AI/CS Paper Digest ($0.003) — /v1/arxiv-digest 13. E-Commerce Price Extractor ($0.008) — /v1/shopify-spy 14. x402 Endpoint SLA Auditor ($0.005) — /v1/x402-audit 15. On-Chain Rug & Honeypot Scanner ($0.008) — /v1/onchain-risk 16. DEX Liquidity & Slippage Intel ($0.005) — /v1/token-intel 17. Polymarket Live Odds Feed ($0.004) — /v1/polymarket-odds 18. DeFi Stablecoin APY Scanner ($0.005) — /v1/defi-yield 19. HackerNews Sentiment Pulse ($0.003) — /v1/hn-pulse 20. Shopify Catalog & App Intel ($0.006) — /v1/shopify-intel 21. DEX Whale Momentum Scanner ($0.006) — /v1/whale-momentum 22. 5-Min DeFi/DEX Alpha Stream ($0.005) — /v1/alpha-stream 23. 4-Protocol MCP TDQS Compiler ($0.008) — /v1/mcp-compiler 24. Real-Time OSV/CVE Vulnerability Intel ($0.004) — /v1/cve-intel 25. Assay Pre-Flight Security Certifier ($0.005) — /v1/certify