github TypeScript analyzed f4ad215

cambridgetcg/agenttool

github

Sovereign agent infrastructure where agents arrive as themselves · public read-only Canon MCP · SDKs + local tools

maintainer
cambridgetcg
license
Apache-2.0
first seen
2026-06-22
last seen
2026-08-02
releases · 30d
67
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit f4ad215 · analyzer v28 · 2d ago

skills & prompt files 46

danger signals8

code evidence vbrowser-v0.5.1 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1941

filesystem 56

  • fs cambridgetcg-agenttool-f4ad215/api/src/services/canon/registry.ts :23 import { existsSync, readFileSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/api/src/services/doctrine/integrity.ts :27 import { readFileSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/api/src/services/kingdom/library.ts :18 import { existsSync, readFileSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/api/src/services/substrate-tasks/verifiers/doctrine_urn_check.ts :18 import { promises as fs } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/api/src/services/youspeak/content.ts :14 import { readFileSync } from "fs";
  • fs cambridgetcg-agenttool-f4ad215/bin/_secret-store.ts :33 import { existsSync, mkdirSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/bin/agenttool-castle-whitehack-intake.ts :12 import { constants as fsConstants } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/bin/agenttool-castle.ts :15 import { constants as fsConstants } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/bin/agenttool-seed.ts :905 await fs.mkdir(dir, { recursive: true, mode: 0o700 });
  • fs cambridgetcg-agenttool-f4ad215/bin/agenttool-whitehack-evidence-storage.ts :11 import { constants as fsConstants } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/bin/build-love-packages.ts :29 } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/bin/estate-strip-patch.ts :5 import { readdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/bin/heartbeat.ts :13 import { readdirSync, readFileSync, writeFileSync, existsSync, statSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/bin/npm-release.ts :13 import { copyFile, mkdir, readFile, stat, writeFile } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/bin/platform-genesis.ts :40 import { readFileSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/bin/pypi-release.ts :21 } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/bin/render-wake.ts :19 import { readFileSync, writeFileSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/bin/sovereign-router.ts :32 import { exists } from "fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/bin/sovereign-store.ts :16 import { mkdirSync } from "fs";
  • fs cambridgetcg-agenttool-f4ad215/bin/whitehack-advisory.mjs :19 } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/bin/whitehack-wallet-understanding.ts :12 import { constants as fsConstants } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/bin/worker-host.ts :12 import { exists, mkdir } from "fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/cli/think/src/config.ts :7 import { readFileSync, existsSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/cli/think/src/keys.ts :17 import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/cli/think/src/modes/inbox.ts :9 import { readFileSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/cli/think/src/modes/restore.ts :14 import { existsSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/cli/think/src/modes/template.ts :21 import { readFileSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/cli/think/src/outbox.ts :39 import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/browser/src/browser.ts :2 import { existsSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/browser/src/config.ts :1 import { existsSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/browser/src/mcp.ts :2 import { readFile } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/packages/collab/src/repository.ts :12 } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/collab/src/session-file.ts :14 } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/collab/src/store.ts :10 } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/constructive-intelligence/src/io.ts :1 import { closeSync, fstatSync, lstatSync, openSync, readSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/constructive-intelligence/src/store.ts :11 } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/credential-broker/src/audit.ts :2 import { constants } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/credential-broker/src/config.ts :1 import { constants } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/credential-broker/src/owner-files.ts :2 import { constants } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/credential-broker/src/server.ts :2 import { chmod, lstat, mkdir, unlink } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/packages/data-protocol/src/file-store.ts :1 import { mkdir, open, rename, rm, writeFile } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/packages/data-sync/src/checkpoints.ts :2 import { chmodSync, closeSync, mkdirSync, openSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/data/src/blob-store.ts :1 import { mkdir, open, readFile, rename, rm, stat } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/packages/data/src/collectors.ts :5 import { open, type FileHandle } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/packages/data/src/sqlite-store.ts :6 import { chmodSync, closeSync, mkdirSync, openSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/kingdom/src/cli.ts :1 import { open } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/packages/repo-archive/src/archive.ts :1 import { mkdtemp, realpath, rm } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/packages/repo-archive/src/git.ts :13 } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/packages/repo-archive/src/simulator.ts :6 } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/packages/scriptwriter/bin/scriptwriter-mcp.ts :35 import { existsSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/scriptwriter/src/identity.ts :10 import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/skills/src/inspect.ts :2 import { lstat } from "node:fs/promises";
  • fs cambridgetcg-agenttool-f4ad215/packages/skills/src/inventory.ts :1 import { constants, type Stats } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/telescope/src/archive.ts :2 import type { Stats } from "node:fs";
  • fs cambridgetcg-agenttool-f4ad215/packages/telescope/src/plans.ts :6 "import { link,open,unlink } from 'node:fs/promises';",
  • fs cambridgetcg-agenttool-f4ad215/packages/telescope/src/verify.ts :2 import { createReadStream } from "node:fs";

shell / exec 30

  • shell cambridgetcg-agenttool-f4ad215/api/src/services/discovery/crawl.ts :44 ].map((path) => `Allow: ${path}$`);
  • shell cambridgetcg-agenttool-f4ad215/api/src/services/marketplace/witness.ts :73 * excluded. The leading guard also closes JavaScript `$`'s special
  • shell cambridgetcg-agenttool-f4ad215/api/src/services/mcp/tools/chronicle.ts :69 const proc = Bun.spawnSync(["bun", "run", SCRIPT, ...argv], { env: process.env });
  • shell cambridgetcg-agenttool-f4ad215/api/src/services/mcp/tools/consolidate.ts :53 const proc = Bun.spawnSync(["bun", "run", SCRIPT, strand, summary], { env: process.env });
  • shell cambridgetcg-agenttool-f4ad215/api/src/services/mcp/tools/recall.ts :36 const proc = Bun.spawnSync(["bun", "run", SCRIPT, query], { env: process.env });
  • shell cambridgetcg-agenttool-f4ad215/api/src/services/mcp/tools/remember.ts :76 const proc = Bun.spawnSync(["bun", "run", SCRIPT, ...argv], { env: process.env });
  • shell cambridgetcg-agenttool-f4ad215/api/src/services/mcp/tools/substrate.ts :26 const proc = Bun.spawnSync(["bun", "run", SCRIPT], { env: process.env });
  • shell cambridgetcg-agenttool-f4ad215/api/src/services/mcp/tools/think.ts :72 const proc = Bun.spawnSync(["bun", "run", SCRIPT, strand, kind, content], { env: process.env });
  • shell cambridgetcg-agenttool-f4ad215/api/src/services/mcp/tools/voice.ts :54 const proc = Bun.spawnSync(["bun", "run", SCRIPT, ...argv], { env: process.env });
  • shell cambridgetcg-agenttool-f4ad215/api/src/services/mcp/tools/vow.ts :51 const proc = Bun.spawnSync(["bun", "run", SCRIPT, counterpartyDid, vow], { env: process.env });
  • shell cambridgetcg-agenttool-f4ad215/api/src/services/mcp/tools/witness.ts :43 const proc = Bun.spawnSync(["bun", "run", SCRIPT, memoryId], { env: process.env });
  • shell cambridgetcg-agenttool-f4ad215/api/src/services/tools/execute/sandbox.ts :1 /** Bounded host execution — Node `vm` (JS) + child_process (Python/bash).
  • shell cambridgetcg-agenttool-f4ad215/api/src/services/tools/static-parser.ts :259 const proc = Bun.spawn({
  • shell cambridgetcg-agenttool-f4ad215/bin/_secret-store.ts :86 const p = Bun.spawnSync(
  • shell cambridgetcg-agenttool-f4ad215/bin/agenttool-bridge.ts :51 const p = Bun.spawnSync(["security", "find-generic-password", "-s", service, "-a", ACCT, "-w"]);
  • shell cambridgetcg-agenttool-f4ad215/bin/agenttool-castle.ts :13 import { spawnSync } from "node:child_process";
  • shell cambridgetcg-agenttool-f4ad215/bin/agenttool-seed.ts :89 const r = Bun.spawnSync(
  • shell cambridgetcg-agenttool-f4ad215/bin/build-love-packages.ts :431 const child = Bun.spawn([...command], {
  • shell cambridgetcg-agenttool-f4ad215/bin/gen-k-master.ts :25 const probe = Bun.spawnSync(["security", "find-generic-password", "-s", SERVICE, "-w"]);
  • shell cambridgetcg-agenttool-f4ad215/bin/npm-release.ts :297 const child = Bun.spawn([executable, ...args], {
  • shell cambridgetcg-agenttool-f4ad215/bin/pypi-release.ts :395 const child = Bun.spawn([executable, ...args], {
  • shell cambridgetcg-agenttool-f4ad215/bin/whitehack-advisory.mjs :13 import { execFileSync } from "node:child_process";
  • shell cambridgetcg-agenttool-f4ad215/cli/think/src/config.ts :61 const { execSync } = require("node:child_process") as typeof import("node:child_process");
  • shell cambridgetcg-agenttool-f4ad215/cli/think/src/modes/restore.ts :39 const { execSync } = require("node:child_process") as typeof import("node:child_process");
  • shell cambridgetcg-agenttool-f4ad215/packages/collab/src/repository.ts :14 import { spawnSync } from "node:child_process";
  • shell cambridgetcg-agenttool-f4ad215/packages/credential-broker/src/backends.ts :1 import { spawn } from "node:child_process";
  • shell cambridgetcg-agenttool-f4ad215/packages/credential-broker/src/controller.ts :1 import { spawn } from "node:child_process";
  • shell cambridgetcg-agenttool-f4ad215/packages/repo-archive/src/git.ts :1 import { spawn } from "node:child_process";
  • shell cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/identity.ts :615 async fork(
  • shell cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/kingdom-os.ts :207 let spawn: typeof import("node:child_process").spawn;

network 68

  • net cambridgetcg-agenttool-f4ad215/api/src/auth/client-source.ts :8 * fetch() in a browser cannot set User-Agent) with `User-Agent` as a
  • net cambridgetcg-agenttool-f4ad215/api/src/index.ts :1475 async fetch(req: Request, server: Server<BridgeWsData>) {
  • net cambridgetcg-agenttool-f4ad215/api/src/middleware/client-ip.ts :9 import { isIP } from "node:net";
  • net cambridgetcg-agenttool-f4ad215/api/src/observability/otel.ts :212 await fetch(target, {
  • net cambridgetcg-agenttool-f4ad215/api/src/routes/public/river.ts :195 const r = await fetch("/public/river"); const j = await r.json();
  • net cambridgetcg-agenttool-f4ad215/api/src/services/economy/crypto/sign-solana.ts :92 return await fetch(input, { ...init, signal: controller.signal });
  • net cambridgetcg-agenttool-f4ad215/api/src/services/federation/safe-fetch.ts :11 import { isIP } from "node:net";
  • net cambridgetcg-agenttool-f4ad215/api/src/services/net/safe-fetch.ts :18 } from "node:net";
  • net cambridgetcg-agenttool-f4ad215/api/src/services/runtime/llm.ts :309 res = await fetch("https://api.anthropic.com/v1/messages", {
  • net cambridgetcg-agenttool-f4ad215/api/src/services/storage/artifacts.ts :70 const res = await fetch(url, {
  • net cambridgetcg-agenttool-f4ad215/apps/web/porch.js :240 var response = await fetch(ENDPOINT, {
  • net cambridgetcg-agenttool-f4ad215/bin/agenttool-autonomous.ts :74 const res = await fetch(`${apiBase()}${path}`, {
  • net cambridgetcg-agenttool-f4ad215/bin/agenttool-bridge.ts :369 fetch(req, server) {
  • net cambridgetcg-agenttool-f4ad215/bin/agenttool-seed.ts :367 let res = await fetch(url, {
  • net cambridgetcg-agenttool-f4ad215/bin/agenttool-think.ts :47 const res = await fetch(`${apiBase()}${path}`, {
  • net cambridgetcg-agenttool-f4ad215/bin/creation-loop.ts :140 async fetch(req) {
  • net cambridgetcg-agenttool-f4ad215/bin/dark-continent.ts :141 async fetch(req) {
  • net cambridgetcg-agenttool-f4ad215/bin/greed-island.ts :66 async fetch(req) {
  • net cambridgetcg-agenttool-f4ad215/bin/hmrc-roast.ts :216 async fetch(req) {
  • net cambridgetcg-agenttool-f4ad215/bin/mindicraft-brain.ts :36 const res = await fetch(url, {
  • net cambridgetcg-agenttool-f4ad215/bin/mindicraft-heartbeat.ts :91 async fetch(req) {
  • net cambridgetcg-agenttool-f4ad215/bin/nen-dojo.ts :162 async fetch(req) {
  • net cambridgetcg-agenttool-f4ad215/bin/nen-en-expansion.ts :194 async fetch(req) {
  • net cambridgetcg-agenttool-f4ad215/bin/npm-release.ts :871 return fetch(url, {
  • net cambridgetcg-agenttool-f4ad215/bin/pt1-plug-in-test.ts :233 const res = await fetch(`${API}/v1/register/agent`, {
  • net cambridgetcg-agenttool-f4ad215/bin/pypi-release.ts :1140 response = await fetch(
  • net cambridgetcg-agenttool-f4ad215/bin/qwythos-bridge.ts :41 const res = await fetch(OLLAMA_URL, {
  • net cambridgetcg-agenttool-f4ad215/bin/sign-thought.ts :61 const res = await fetch(`${base}/v1/strands/${strandId}/thoughts`, {
  • net cambridgetcg-agenttool-f4ad215/bin/solo-leveling.ts :127 async fetch(req) {
  • net cambridgetcg-agenttool-f4ad215/bin/sovereign-router.ts :117 const res = await fetch(url, {
  • net cambridgetcg-agenttool-f4ad215/bin/tax-atlas.ts :217 async fetch(req) {
  • net cambridgetcg-agenttool-f4ad215/bin/tax-comedy.ts :262 async fetch(req) {
  • net cambridgetcg-agenttool-f4ad215/bin/tax-game.ts :321 async fetch(req) {
  • net cambridgetcg-agenttool-f4ad215/bin/tax-transparency.ts :96 async fetch(req) {
  • net cambridgetcg-agenttool-f4ad215/bin/verify-guestbook.mjs :116 const door = await (await fetch(`${base}/public/embassy`)).json();
  • net cambridgetcg-agenttool-f4ad215/bin/worker-host.ts :8 // The worker.js file exports a default object with a fetch(request) method.
  • net cambridgetcg-agenttool-f4ad215/cli/think/src/api.ts :83 res = await fetch(url, {
  • net cambridgetcg-agenttool-f4ad215/cli/think/src/embed.ts :19 const res = await fetch("https://api.openai.com/v1/embeddings", {
  • net cambridgetcg-agenttool-f4ad215/cli/think/src/llm.ts :31 const res = await fetch("https://api.anthropic.com/v1/messages", {
  • net cambridgetcg-agenttool-f4ad215/cli/think/src/modes/loop.ts :118 res = await fetch(url, {
  • net cambridgetcg-agenttool-f4ad215/cli/think/src/modes/sync.ts :58 const res = await fetch(url, {
  • net cambridgetcg-agenttool-f4ad215/cli/think/src/modes/voice.ts :161 res = await fetch(url, {
  • net cambridgetcg-agenttool-f4ad215/infra/apex-door/worker.js :257 fetch(request) {
  • net cambridgetcg-agenttool-f4ad215/infra/pages/sensitive-path-worker.js :59 async fetch(request, env) {
  • net cambridgetcg-agenttool-f4ad215/packages/browser/src/policy.ts :2 import { isIP } from "node:net";
  • net cambridgetcg-agenttool-f4ad215/packages/correspondence-yutabase-projector/src/source.ts :188 response = await this.#fetch(url, {
  • net cambridgetcg-agenttool-f4ad215/packages/credential-broker/src/client.ts :2 import { createConnection, type Socket } from "node:net";
  • net cambridgetcg-agenttool-f4ad215/packages/credential-broker/src/http.ts :2 import { request as httpsRequest } from "node:https";
  • net cambridgetcg-agenttool-f4ad215/packages/credential-broker/src/network.ts :2 import { isIP } from "node:net";
  • net cambridgetcg-agenttool-f4ad215/packages/credential-broker/src/server.ts :3 import { createConnection, createServer, type Server, type Socket } from "node:net";
  • net cambridgetcg-agenttool-f4ad215/packages/data-protocol/src/s3-store.ts :628 Promise.resolve(this.#fetch(input, init)),
  • net cambridgetcg-agenttool-f4ad215/packages/data-sync/src/service.ts :533 response = await this.#fetch(`${peer.base_url}/v1/data/sync/page`, {
  • net cambridgetcg-agenttool-f4ad215/packages/data/src/collectors.ts :10 import { isIP } from "node:net";
  • net cambridgetcg-agenttool-f4ad215/packages/data/src/conformance.ts :1391 response = await context.fetch(url, {
  • net cambridgetcg-agenttool-f4ad215/packages/scriptwriter/src/peers.ts :70 const res = await fetch(url, {
  • net cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/_http.ts :36 return globalThis.fetch(input, { ...init, headers });
  • net cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/bootstrap-agent.ts :215 res = await fetch(`${baseUrl}/v1/register/agent`, {
  • net cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/client.ts :164 // Origin signal — browser-safe custom header (fetch() in a browser
  • net cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/dark-continent.ts :296 const discoverResp = await globalThis.fetch(discoverUrl, {
  • net cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/data.ts :302 response = await globalThis.fetch(`${this.baseUrl}${path}`, init);
  • net cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/kingdom-framework.ts :620 response = await globalThis.fetch(
  • net cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/lounge.ts :514 const response = await globalThis.fetch(`${baseUrl.replace(/\/+$/, "")}/public/lounge`, {
  • net cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/memory.ts :75 const resp = await this.fetch("GET", `/v1/memories/${memoryId}`);
  • net cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/pathways.ts :168 const resp = await globalThis.fetch(`${baseUrl}/v1/pathways`, {
  • net cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/register.ts :82 const resp = await globalThis.fetch(`${baseUrl}/v1/register`, {
  • net cambridgetcg-agenttool-f4ad215/packages/telescope/src/plans.ts :13 "const response=await fetch(url,{redirect:'manual',credentials:'omit',headers:{'accept-encoding':'identity'},signal:AbortSignal.timeout(120000)});",
  • net cambridgetcg-agenttool-f4ad215/packages/telescope/src/target.ts :2 import { BlockList, isIP } from "node:net";
  • net cambridgetcg-agenttool-f4ad215/packages/telescope/src/transport.ts :220 const response = await input.fetch(url, {

secrets 11

  • secrets cambridgetcg-agenttool-f4ad215/api/src/index.ts :1161 const platformWakeConfigured = !!process.env.AGENTTOOL_PLATFORM_SIGNING_KEY;
  • secrets cambridgetcg-agenttool-f4ad215/api/src/routes/public/embassy.ts :211 opts.receiptSecret ?? (() => process.env.EMBASSY_RECEIPT_SECRET);
  • secrets cambridgetcg-agenttool-f4ad215/api/src/routes/public/plans.ts :58 cdpApiKeySecret = process.env.CDP_API_KEY_SECRET,
  • secrets cambridgetcg-agenttool-f4ad215/api/src/services/economy/crypto/network.ts :222 const apiKey = process.env.ALCHEMY_API_KEY ?? "";
  • secrets cambridgetcg-agenttool-f4ad215/api/src/services/economy/facilitators/coinbase.ts :71 const apiKeySecret = options.cdpApiKeySecret ?? process.env.CDP_API_KEY_SECRET;
  • secrets cambridgetcg-agenttool-f4ad215/api/src/services/economy/x402-policy.ts :212 apiKeySecret = process.env.CDP_API_KEY_SECRET,
  • secrets cambridgetcg-agenttool-f4ad215/api/src/services/mathos/encode.ts :1205 const raw = process.env.AGENTTOOL_PLATFORM_SIGNING_KEY;
  • secrets cambridgetcg-agenttool-f4ad215/bin/npm-release.ts :1370 const token = ownString(process.env.GH_TOKEN, "GH_TOKEN");
  • secrets cambridgetcg-agenttool-f4ad215/bin/sign-thought.ts :36 const apiKey = process.env.AGENTTOOL_API_KEY!;
  • secrets cambridgetcg-agenttool-f4ad215/cli/think/src/modes/restore.ts :52 process.env.AGENTTOOL_API_KEY ?? loadKeychainSecret("agenttool") ?? "";
  • secrets cambridgetcg-agenttool-f4ad215/packages/sdk-ts/src/client.ts :149 options?.apiKey ?? (typeof process !== "undefined" ? process.env.AT_API_KEY : undefined);

database 4

  • db cambridgetcg-agenttool-f4ad215/api/src/services/economy/escrow.ts :7 import type { Redis } from "ioredis";
  • db cambridgetcg-agenttool-f4ad215/api/src/services/economy/redis.ts :15 import Redis from "ioredis";
  • db cambridgetcg-agenttool-f4ad215/api/src/services/economy/wallets.ts :5 import type { Redis } from "ioredis";
  • db cambridgetcg-agenttool-f4ad215/api/src/services/tools/queue/connection.ts :11 import IORedis from "ioredis";

install hooks 17

  • prepack cambridgetcg-agenttool-f4ad215/packages/alchemy-agentcred/package.json :37 bun run ci
  • prepack cambridgetcg-agenttool-f4ad215/packages/alchemy/package.json :36 bun run ci
  • prepack cambridgetcg-agenttool-f4ad215/packages/browser/package.json :51 bun run typecheck && bun run build && bun run test
  • prepack cambridgetcg-agenttool-f4ad215/packages/collab/package.json :46 bun run build:mcp && bun run ci
  • prepack cambridgetcg-agenttool-f4ad215/packages/correspondence-yutabase/package.json :38 bun run ci
  • prepack cambridgetcg-agenttool-f4ad215/packages/credential-broker/package.json :42 bun run ci
  • prepublishOnly cambridgetcg-agenttool-f4ad215/packages/credential-broker/package.json :43 bun run ci
  • prepack cambridgetcg-agenttool-f4ad215/packages/data-sync/package.json :34 bun run ci
  • prepack cambridgetcg-agenttool-f4ad215/packages/data/package.json :44 bun run ci && bun run build
  • prepack cambridgetcg-agenttool-f4ad215/packages/kingdom/package.json :46 bun run ci
  • prepublishOnly cambridgetcg-agenttool-f4ad215/packages/kingdom/package.json :47 bun run ci
  • prepack cambridgetcg-agenttool-f4ad215/packages/repo-archive/package.json :47 bun run ci
  • prepack cambridgetcg-agenttool-f4ad215/packages/sdk-ts/package.json :33 bun run ci
  • prepack cambridgetcg-agenttool-f4ad215/packages/skills/package.json :42 bun run ci
  • prepack cambridgetcg-agenttool-f4ad215/packages/telescope/package.json :50 bun run ci
  • prepack cambridgetcg-agenttool-f4ad215/packages/wallet-zerone/package.json :43 bun run ci
  • prepack cambridgetcg-agenttool-f4ad215/packages/wallet/package.json :43 bun run ci

declared dependencies 32

  • @modelcontextprotocol/sdk@^1.29.0
  • @agenttool/xenia@0.1.0-beta.5
  • @coinbase/cdp-sdk@^1.52.0
  • @hono/zod-validator@^0.7.6
  • @mozilla/readability@^0.6.0
  • @noble/curves@^2.2.0
  • @noble/ed25519@^2.2.3
  • @noble/hashes@^2.0.1
  • @scure/bip32@^2.2.0
  • @scure/bip39@^2.2.0
  • @solana/spl-token@^0.4.14
  • @solana/web3.js@^1.98.4
  • bcryptjs@^2.4.3
  • bs58@^6.0.0
  • bullmq@^5.76.6
  • cheerio@^1.2.0
  • drizzle-orm@^0.36.0
  • hono@^4.12.5
  • ioredis@^5.10.0
  • jose@^6.0.11
  • linkedom@^0.18.12
  • playwright@^1.59.1
  • postgres@^3.4.9
  • stripe@^22.1.0
  • viem@^2.48.11
  • zod@^3.24.0
  • @types/bcryptjs@^2.4.6
  • @types/bun@latest
  • ajv@^8.20.0
  • ajv-formats@^3.0.1
  • drizzle-kit@^0.28.0
  • typescript@^5

perm:untrusted 1

  • untrusted cambridgetcg-agenttool-f4ad215/bin/verify-guestbook.mjs :116 const door = await (await fetch(`${base}/public/embassy`)).json();

transport_posture 1

  • punycode (IDN homograph) host in endpoint cambridgetcg-agenttool-f4ad215/packages/telescope/tests/target.test.ts :55 origin: "https://xn--bcher-kva.example.net",