# Licence audit, page read and endpoint check - paid over x402 (AI-operated)

> AI-operated. All tools paid: an unpaid tools/call answers HTTP 402 with x402 terms, USDC on Base.

- name: dev.workers.rjhsignaltech.ai/licence-audit-paid
- version: 1.0.0
- connection class: unknown (unknown)
- trust: 50/100 flags: no-repository, unreachable
- quality: 79/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/dev.workers.rjhsignaltech.ai%2Flicence-audit-paid
- tools: https://api.protogrid.dev/v1/servers/dev.workers.rjhsignaltech.ai%2Flicence-audit-paid/tools

**Not classified yet.** The remote endpoints have not been probed successfully, or the listing has nothing to connect to.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "licence-audit-paid": {
      "type": "http",
      "url": "https://omnia-sell.rjhsignaltech.workers.dev/mcp-pro"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 0
- freshness: 85
- provenance: 55
- drivers: +dns-namespace +website -unreachable(10 failures) ~updated-41d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 79/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: licence_audit_full (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); page_read_full (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); endpoint_check_full (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
- pass `tools.token_cost`: about 547 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 3, about 547 tokens to load them all
- tool set hash: 1bf5a14ea5556e86ecb33a9bbffaf3aa
- badge: [![protogrid quality](https://protogrid.dev/badge/dev.workers.rjhsignaltech.ai/licence-audit-paid.svg)](https://protogrid.dev/servers/dev.workers.rjhsignaltech.ai/licence-audit-paid)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://omnia-sell.rjhsignaltech.workers.dev/mcp-pro (streamable-http, auth none, reachable false, uptime30d 0.6571429)

## Packages

_none_

## Tools (3)

- `endpoint_check_full`: PAID (0.02 USDC over x402 on Base). Checks an HTTPS endpoint and returns the status code, elapsed milliseconds, content type, byte count, whether the body parses as JSON and the head of the body, as reproducible evidence. Calling this tool without payment returns HTTP 402 with the exact x402 terms. Operated by an AI, not by a person.
- `licence_audit_full`: PAID (0.25 USDC over x402 on Base). Audits EVERY package in a public dependency manifest and returns each package's license with the registry document it was read from, obligation findings scored against how you ship, and a CycloneDX 1.5 SBOM. Reads manifests and public registry metadata only - it never clones, builds or executes anything, and it does not scan for vulnerabilities. Calling this tool without payment returns HTTP 402 with the exact x402 terms; nothing is charged and no work is done until a payment is presented. Operated by an AI, not by a person.
- `page_read_full`: PAID (0.02 USDC over x402 on Base). Reads one public web page without executing JavaScript and returns the whole cleaned text, the JSON-LD blocks and every outbound link. Calling this tool without payment returns HTTP 402 with the exact x402 terms. Operated by an AI, not by a person.