github analyzed d0c64d1

Clawdio777/verity

github

Real-time fact-checking MCP. Verifies claims against live sources with structured verdicts.

maintainer
Clawdio777
licence
first seen
2026-06-03
last seen
2026-06-03
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret in Clawdio777/verity
capabilities 4 tools
transport stdio · http verified reported listed in the official MCP registry counts 4 tools · 0 res · 0 prompts permission surface via README inference

tools

  • verity_agent

    Natural language fact-checking

  • verity_batch

    Verify up to 10 claims at once

  • verity_deep_check

    Multi-angle thorough verification

  • verity_verify

    Verify a claim or URL against live sources

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit d0c64d1 · analyzer v33 · 2w ago

skills & prompt files 1

danger signals1

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 20

filesystem 1

  • fs Clawdio777-verity-d0c64d1/seller-v2.mjs :11 import { writeFileSync, mkdirSync } from "fs";

shell / exec 1

  • shell Clawdio777-verity-d0c64d1/seller-v2.mjs :10 import { execFileSync, execSync, spawn } from "child_process";

network 11

  • net Clawdio777-verity-d0c64d1/api/checkout.ts :3 * Creates a Stripe Checkout session via raw fetch (handles sk_org_live_ keys with Stripe-Context header),
  • net Clawdio777-verity-d0c64d1/api/cron-check-deps.ts :25 const r = await fetch(`https://registry.npmjs.org/${pkg.name}/latest`);
  • net Clawdio777-verity-d0c64d1/api/daily-summary.ts :68 const resendRes = await fetch("https://api.resend.com/emails", {
  • net Clawdio777-verity-d0c64d1/api/mcp.ts :152 fetch(url, { ...init, headers: { ...(init?.headers as Record<string, string> ?? {}), "x-internal-key": auth.internalKey! } })
  • net Clawdio777-verity-d0c64d1/api/recover-key.ts :16 const res = await fetch(`https://api.stripe.com${path}`, {
  • net Clawdio777-verity-d0c64d1/api/stripe-webhook.ts :55 const pgRes = await fetch(`${pgUrl}/topup`, {
  • net Clawdio777-verity-d0c64d1/register-erc8004.mjs :62 const res = await fetch("https://api.pinata.cloud/pinning/pinJSONToIPFS", {
  • net Clawdio777-verity-d0c64d1/seller-v2.mjs :133 const res = await fetch(`${VERITY_API_BASE}${config.endpoint}`, {
  • net Clawdio777-verity-d0c64d1/src/tools.ts :237 const res = await fetch("https://api.perplexity.ai/chat/completions", {
  • net Clawdio777-verity-d0c64d1/trigger-bazaar-index.mjs :28 const probe = await fetch(AGENT_URL, { method: "POST", headers: { "Content-Type": "application/json" }, body: "{}" });
  • net Clawdio777-verity-d0c64d1/update-erc8004.mjs :55 const res = await fetch("https://api.pinata.cloud/pinning/pinJSONToIPFS", {

secrets 17

  • secrets Clawdio777-verity-d0c64d1/api/_x402-gate.ts :14 process.env.CDP_API_KEY_NAME && process.env.CDP_API_KEY_PRIVATE_KEY
  • secrets Clawdio777-verity-d0c64d1/api/agent.ts :21 process.env.CDP_API_KEY_NAME && process.env.CDP_API_KEY_PRIVATE_KEY
  • secrets Clawdio777-verity-d0c64d1/api/batch-verify.ts :25 const db = createClient(process.env.SUPABASE_URL!, process.env.SUPABASE_SERVICE_KEY!);
  • secrets Clawdio777-verity-d0c64d1/api/checkout.ts :24 const stripeKey = process.env.STRIPE_SECRET_KEY;
  • secrets Clawdio777-verity-d0c64d1/api/cron-check-deps.ts :17 if (req.headers.authorization !== `Bearer ${process.env.CRON_SECRET}`) {
  • secrets Clawdio777-verity-d0c64d1/api/daily-summary.ts :9 const db = createClient(process.env.SUPABASE_URL!, process.env.SUPABASE_SERVICE_KEY!);
  • secrets Clawdio777-verity-d0c64d1/api/deep-check.ts :25 const db = createClient(process.env.SUPABASE_URL!, process.env.SUPABASE_SERVICE_KEY!);
  • secrets Clawdio777-verity-d0c64d1/api/mcp.ts :183 const isPaygated = !!pgToken && !!process.env.PAYGATE_AUTH_SECRET && pgToken === process.env.PAYGATE_AUTH_SECRET;
  • secrets Clawdio777-verity-d0c64d1/api/recover-key.ts :34 const stripeKey = process.env.STRIPE_SECRET_KEY;
  • secrets Clawdio777-verity-d0c64d1/api/stripe-webhook.ts :25 const stripeKey = process.env.STRIPE_SECRET_KEY!;
  • secrets Clawdio777-verity-d0c64d1/api/verify.ts :26 const db = createClient(process.env.SUPABASE_URL!, process.env.SUPABASE_SERVICE_KEY!);
  • secrets Clawdio777-verity-d0c64d1/mcp-server.mjs :22 const PRIVATE_KEY = process.env.VERITY_PRIVATE_KEY;
show 5 more
  • secrets Clawdio777-verity-d0c64d1/register-erc8004.mjs :73 const pk = process.env.OWNER_PRIVATE_KEY;
  • secrets Clawdio777-verity-d0c64d1/src/agent.ts :15 const anthropic = new Anthropic({ apiKey: process.env.ANTHROPIC_API_KEY! });
  • secrets Clawdio777-verity-d0c64d1/src/tools.ts :19 process.env.SUPABASE_SERVICE_KEY!
  • secrets Clawdio777-verity-d0c64d1/trigger-bazaar-index.mjs :15 const pk = process.env.OWNER_PRIVATE_KEY;
  • secrets Clawdio777-verity-d0c64d1/update-erc8004.mjs :65 const pk = process.env.OWNER_PRIVATE_KEY;

declared dependencies 13

  • @anthropic-ai/sdk@^0.39.0
  • @coinbase/x402@^2.1.0
  • @supabase/supabase-js@^2.49.0
  • @vercel/node@^5.0.0
  • @x402/core@^2.14.0
  • @x402/evm@^2.14.0
  • @x402/extensions@^2.14.0
  • @x402/fetch@^2.14.0
  • resend@^4.8.0
  • stripe@^17.7.0
  • viem@^2.0.0
  • @types/node@^22.0.0
show 1 more
  • typescript@^5.7.0