Decentralized marketplace for AI agents and people with TON/USDT payments — HTTP 402, no middlemen.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio counts 14 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
agent_logs
-
agent_status
-
deploy_agent
-
get_agent_info
-
get_quote
-
invoke_free
-
invoke_paid
-
list_agents
-
ping_agent
-
poll_result
-
preflight
-
scaffold_agent
-
stop_agent
-
validate_agent
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit c9d2024 · analyzer v33 · 4w ago
skills & prompt files 1
danger signals2
- suspicious endpoint t.me dearjohndoe-catallaxy-c9d2024/agents-examples/list-seller/agent.py :214
"Сохраните этот ответ целиком (особенно `TX hash`) и пишите в [@catallaxy_support_bot](https://t.me/catallaxy_support_bot). Без `TX hash` мы не сможем найти вашу покупку.", - suspicious endpoint api.telegram.org dearjohndoe-catallaxy-c9d2024/sidecar/owner_bot/bot.py :13
_TELEGRAM_API = "https://api.telegram.org"
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 199
filesystem 45
- fs dearjohndoe-catallaxy-c9d2024/agents-examples/imagegen/agent.py :6
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/agents-examples/list-seller/agent.py :35
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/agents-examples/list-seller/test_agent.py :18
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/agents-examples/orchestrator/agent.py :17
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/agents-examples/summarizer/agent.py :4
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/agents-examples/text2voice/agent.py :6
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/agents-examples/ton-dns-bind/agent.py :36
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/agents-examples/ton-storage/agent.py :3
import shutil - fs dearjohndoe-catallaxy-c9d2024/agents-examples/ton-storage/cleanup.py :7
import shutil - fs dearjohndoe-catallaxy-c9d2024/agents-examples/translator/agent.py :4
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/agents-examples/videogen/agent.py :7
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/mcp/lib/agent_runner.py :23
with open(env_path) as f:
show 28 more
- fs dearjohndoe-catallaxy-c9d2024/mcp/resources/agent_skill.py :12
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/mcp/templates/agent_template.py :22
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/mcp/tools/development/deploy.py :3
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/mcp/tools/development/scaffold.py :3
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/mcp/tools/development/template.py :4
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/mcp/tools/development/validate.py :2
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/api/app.py :7
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/api/domain/invocation.py :4
import shutil - fs dearjohndoe-catallaxy-c9d2024/sidecar/api/domain/result_processing.py :7
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/api/http/handlers/image.py :3
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/api/http/handlers/invoke.py :6
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/api/http/handlers/result.py :4
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/api/http/multipart.py :5
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/api/http/responses.py :3
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/api/infra/files.py :4
import shutil - fs dearjohndoe-catallaxy-c9d2024/sidecar/api/validation.py :3
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/cli/args.py :4
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/cli/commands/doctor.py :6
import shutil - fs dearjohndoe-catallaxy-c9d2024/sidecar/cli/commands/init_cmd.py :4
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/cli/commands/scaffold.py :4
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/cli/commands/service.py :7
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/cli/discovery.py :5
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/payments/free_claims.py :5
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/payments/processed_tx.py :5
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/payments/refund_queue.py :6
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/stock.py :7
from pathlib import Path - fs dearjohndoe-catallaxy-c9d2024/sidecar/storage.py :5
from pathlib import Path - fs (weak) dearjohndoe-catallaxy-c9d2024/sidecar/tests/conftest.py :12
from pathlib import Path
5 more not shown — this panel samples each group; the count above is the real total.
shell / exec 6
- shell dearjohndoe-catallaxy-c9d2024/agents-examples/list-seller/test_agent.py :13
import subprocess - shell dearjohndoe-catallaxy-c9d2024/mcp/tools/development/deploy.py :2
import subprocess - shell dearjohndoe-catallaxy-c9d2024/mcp/tools/development/status.py :1
import subprocess - shell dearjohndoe-catallaxy-c9d2024/sidecar/cli/commands/doctor.py :7
import subprocess - shell dearjohndoe-catallaxy-c9d2024/sidecar/cli/shell.py :3
import subprocess - shell (weak) dearjohndoe-catallaxy-c9d2024/sidecar/tests/test_cli.py :376
import subprocess as sp
network 30
- net dearjohndoe-catallaxy-c9d2024/agents-examples/orchestrator/agents_cache.py :11
import aiohttp - net dearjohndoe-catallaxy-c9d2024/agents-examples/orchestrator/executor.py :12
import aiohttp - net dearjohndoe-catallaxy-c9d2024/agents-examples/ton-dns-bind/agent.py :39
import requests - net dearjohndoe-catallaxy-c9d2024/agents-examples/ton-storage/agent.py :58
import requests - net dearjohndoe-catallaxy-c9d2024/agents-examples/ton-storage/cleanup.py :30
import requests - net dearjohndoe-catallaxy-c9d2024/mcp/lib/toncenter.py :3
import aiohttp - net dearjohndoe-catallaxy-c9d2024/mcp/tools/discovery.py :15
import aiohttp - net dearjohndoe-catallaxy-c9d2024/mcp/tools/invocation.py :2
from urllib.parse import quote - net dearjohndoe-catallaxy-c9d2024/sidecar/api/app.py :9
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/api/domain/pricing.py :5
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/api/http/handlers/_invoke_helpers.py :8
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/api/http/handlers/image.py :5
from aiohttp import web
show 18 more
- net dearjohndoe-catallaxy-c9d2024/sidecar/api/http/handlers/info.py :6
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/api/http/handlers/invoke.py :10
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/api/http/handlers/quote.py :9
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/api/http/handlers/result.py :7
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/api/http/middleware.py :5
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/api/http/multipart.py :8
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/api/http/responses.py :6
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/api/http/routes.py :5
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/api/infra/rate_limit.py :7
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/chains/ton/heartbeat.py :9
from urllib.parse import urlparse - net dearjohndoe-catallaxy-c9d2024/sidecar/chains/ton/remote_monitor.py :19
import aiohttp - net dearjohndoe-catallaxy-c9d2024/sidecar/cli/server.py :13
from aiohttp import web - net dearjohndoe-catallaxy-c9d2024/sidecar/owner_bot/bot.py :9
import aiohttp - net dearjohndoe-catallaxy-c9d2024/sidecar/payments/tonapi_client.py :23
import aiohttp - net (weak) dearjohndoe-catallaxy-c9d2024/sidecar/tests/test_api.py :18
from aiohttp import FormData - net (weak) dearjohndoe-catallaxy-c9d2024/sidecar/tests/test_jetton_wallet_code_integrity.py :13
import urllib.error - net (weak) dearjohndoe-catallaxy-c9d2024/sidecar/tests/test_known_bugs.py :24
from aiohttp import FormData - net (weak) dearjohndoe-catallaxy-c9d2024/sidecar/tests/test_tonapi_fallback.py :85
from aiohttp import web
secrets 12
- secrets dearjohndoe-catallaxy-c9d2024/agents-examples/imagegen/agent.py :37
client = genai.Client(api_key=os.environ["GEMINI_API_KEY"]) - secrets dearjohndoe-catallaxy-c9d2024/agents-examples/orchestrator/agent.py :106
"gemini_api_key": os.environ["GEMINI_API_KEY"], - secrets dearjohndoe-catallaxy-c9d2024/agents-examples/summarizer/agent.py :41
client = genai.Client(api_key=os.environ["GEMINI_API_KEY"]) - secrets dearjohndoe-catallaxy-c9d2024/agents-examples/ton-dns-bind/agent.py :46
TONAPI_KEY = os.getenv("TONAPI_KEY", "") - secrets dearjohndoe-catallaxy-c9d2024/agents-examples/ton-storage/agent.py :19
STORAGE_API_PASSWORD = os.environ.get("STORAGE_API_PASSWORD", "") - secrets dearjohndoe-catallaxy-c9d2024/agents-examples/ton-storage/cleanup.py :20
STORAGE_API_PASSWORD = os.environ.get("STORAGE_API_PASSWORD", "") - secrets dearjohndoe-catallaxy-c9d2024/agents-examples/translator/agent.py :43
client = genai.Client(api_key=os.environ["GEMINI_API_KEY"]) - secrets dearjohndoe-catallaxy-c9d2024/agents-examples/videogen/agent.py :38
client = genai.Client(api_key=os.environ["GEMINI_API_KEY"]) - secrets dearjohndoe-catallaxy-c9d2024/mcp/lib/toncenter.py :11
api_key = os.getenv("CATALLAXY_TONCENTER_API_KEY") - secrets dearjohndoe-catallaxy-c9d2024/mcp/tools/discovery.py :82
api_key = os.getenv("CATALLAXY_TONCENTER_API_KEY") - secrets dearjohndoe-catallaxy-c9d2024/sidecar/payments/tonapi_client.py :67
self._key = api_key if api_key is not None else (os.environ.get("TONAPI_KEY") or None) - secrets dearjohndoe-catallaxy-c9d2024/sidecar/settings.py :399
tg_bot_token = (os.getenv("TG_BOT_TOKEN") or "").strip() or None
database 3
- db dearjohndoe-catallaxy-c9d2024/agents-examples/orchestrator/agent.py :16
import sqlite3 - db dearjohndoe-catallaxy-c9d2024/agents-examples/ton-storage/agent.py :4
import sqlite3 - db dearjohndoe-catallaxy-c9d2024/agents-examples/ton-storage/cleanup.py :8
import sqlite3
tool registrations 14
- deploy_agent dearjohndoe-catallaxy-c9d2024/mcp/tools/development/deploy.py :10
- scaffold_agent dearjohndoe-catallaxy-c9d2024/mcp/tools/development/scaffold.py :30
- agent_status dearjohndoe-catallaxy-c9d2024/mcp/tools/development/status.py :8
- agent_logs dearjohndoe-catallaxy-c9d2024/mcp/tools/development/status.py :27
- stop_agent dearjohndoe-catallaxy-c9d2024/mcp/tools/development/status.py :37
- validate_agent dearjohndoe-catallaxy-c9d2024/mcp/tools/development/validate.py :42
- list_agents dearjohndoe-catallaxy-c9d2024/mcp/tools/discovery.py :72
- get_agent_info dearjohndoe-catallaxy-c9d2024/mcp/tools/discovery.py :104
- ping_agent dearjohndoe-catallaxy-c9d2024/mcp/tools/discovery.py :115
- preflight dearjohndoe-catallaxy-c9d2024/mcp/tools/invocation.py :33
- invoke_paid dearjohndoe-catallaxy-c9d2024/mcp/tools/invocation.py :177
- invoke_free dearjohndoe-catallaxy-c9d2024/mcp/tools/invocation.py :238
show 2 more
- poll_result dearjohndoe-catallaxy-c9d2024/mcp/tools/invocation.py :308
- get_quote dearjohndoe-catallaxy-c9d2024/mcp/tools/invocation.py :318
declared dependencies 8
- aiohttp@==3.11.18
- python-dotenv@>=1.0.1,<2
- aiosqlite@==0.20.0
- tonutils@==2.0.4
- pytoniq_core@*
- golang.org/x/crypto@v0.31.0
- golang.org/x/net@v0.33.0
- golang.org/x/text@v0.21.0