MCP Observatory
1m ago Tracked 59,469 Last 1m ago 24h 2,466
github analyzed 991be63

observer-protocol/at-directory

github

Verified merchants accepting agentic payments on Lightning/L402/BOLT12/USDT — search, verify, pay.

maintainer
observer-protocol
licence
—
first seen
2026-06-03
last seen
2026-06-03
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged hidden prompt content in observer-protocol/at-directory
  2. HIGH code analysis flagged hidden prompt content in observer-protocol/at-directory
capabilities 6 tools
transport stdio · streamable-http · http counts 6 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • get_merchant
  • list_categories
  • list_rails
  • search_merchants
  • verify_payment_endpoint
  • whoami
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 991be63 · analyzer v33 · 3w ago

skills & prompt files 1

danger signals1

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 77

filesystem 7

  • fs observer-protocol-at-directory-991be63/apps/web/lib/data.ts :1 import { readFileSync } from 'node:fs';
  • fs (weak) observer-protocol-at-directory-991be63/apps/web/scripts/bundle-data.ts :5 import { mkdirSync, writeFileSync, existsSync, copyFileSync } from 'node:fs';
  • fs (weak) observer-protocol-at-directory-991be63/packages/core/src/load.test.ts :2 import { mkdtempSync, writeFileSync, mkdirSync } from 'node:fs';
  • fs observer-protocol-at-directory-991be63/packages/core/src/load.ts :1 import { readdirSync, readFileSync } from 'node:fs';
  • fs (weak) observer-protocol-at-directory-991be63/packages/mcp-server/scripts/bundle.mjs :7 import { mkdirSync, copyFileSync, writeFileSync, readFileSync } from 'node:fs';
  • fs (weak) observer-protocol-at-directory-991be63/packages/mcp-server/src/auth.test.ts :3 import { readFileSync } from 'node:fs';
  • fs observer-protocol-at-directory-991be63/packages/mcp-server/src/bootstrap.ts :1 import { readFileSync, existsSync } from 'node:fs';

network 19

  • net observer-protocol-at-directory-991be63/apps/web/components/ApplyModal.tsx :69 const vcRes = await fetch(input);
  • net observer-protocol-at-directory-991be63/apps/web/components/MerchantTrustPanel.tsx :88 const vcRes = await fetch(vcUrl);
  • net observer-protocol-at-directory-991be63/apps/web/components/PostTaskModal.tsx :38 const res = await fetch(url);
  • net observer-protocol-at-directory-991be63/apps/web/components/TrustTier.tsx :63 fetch(`${DIRECTORY_API}/v1/merchants/${encodeURIComponent(merchantId)}`, { signal: ac.signal })
  • net observer-protocol-at-directory-991be63/apps/web/components/VerifyNowButton.tsx :18 const res = await fetch('/.netlify/functions/verify-rail', {
  • net observer-protocol-at-directory-991be63/apps/web/netlify/functions/mint-did.ts :208 const res = await fetch(url, {
  • net observer-protocol-at-directory-991be63/apps/web/netlify/functions/request-did.ts :74 const res = await fetch(
  • net observer-protocol-at-directory-991be63/apps/web/netlify/functions/submit-application.ts :95 const res = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
  • net observer-protocol-at-directory-991be63/apps/web/netlify/functions/submit-merchant.ts :113 const res = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
  • net observer-protocol-at-directory-991be63/apps/web/netlify/functions/submit-task.ts :107 const res = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
  • net (weak) observer-protocol-at-directory-991be63/packages/mcp-server/src/auth.test.ts :2 import { createServer, type Server } from 'node:http';
  • net observer-protocol-at-directory-991be63/packages/mcp-server/src/auth.ts :55 response = await fetch(verifier, {
show 7 more
  • net observer-protocol-at-directory-991be63/packages/mcp-server/src/bootstrap.ts :82 const res = await fetch(dataUrl, { signal: AbortSignal.timeout(5000) });
  • net observer-protocol-at-directory-991be63/packages/mcp-server/src/dev/mock-verifier.ts :10 import { createServer, type IncomingMessage } from 'node:http';
  • net observer-protocol-at-directory-991be63/packages/mcp-server/src/http.ts :1 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
  • net (weak) observer-protocol-at-directory-991be63/packages/mcp-server/src/rest.test.ts :2 import type { IncomingMessage, ServerResponse } from 'node:http';
  • net observer-protocol-at-directory-991be63/packages/mcp-server/src/rest.ts :6 import type { IncomingMessage, ServerResponse } from 'node:http';
  • net (weak) observer-protocol-at-directory-991be63/packages/mcp-server/src/verify/guarded-request.test.ts :6 import { createServer, type Server } from 'node:http';
  • net observer-protocol-at-directory-991be63/packages/mcp-server/src/verify/guarded-request.ts :24 import { request as httpsRequest } from 'node:https';

secrets 4

  • secrets observer-protocol-at-directory-991be63/apps/web/netlify/functions/submit-application.ts :92 const secret = process.env.TURNSTILE_SECRET_KEY;
  • secrets observer-protocol-at-directory-991be63/apps/web/netlify/functions/submit-merchant.ts :109 const secret = process.env.TURNSTILE_SECRET_KEY;
  • secrets observer-protocol-at-directory-991be63/apps/web/netlify/functions/submit-task.ts :104 const secret = process.env.TURNSTILE_SECRET_KEY;
  • secrets observer-protocol-at-directory-991be63/packages/mcp-server/src/stdio.ts :8 const rawCredential = process.env.AT_CREDENTIAL;

tool registrations 6

  • search_merchants observer-protocol-at-directory-991be63/packages/mcp-server/src/server.ts :33
  • get_merchant observer-protocol-at-directory-991be63/packages/mcp-server/src/server.ts :40
  • verify_payment_endpoint observer-protocol-at-directory-991be63/packages/mcp-server/src/server.ts :47
  • list_categories observer-protocol-at-directory-991be63/packages/mcp-server/src/server.ts :55
  • list_rails observer-protocol-at-directory-991be63/packages/mcp-server/src/server.ts :59
  • whoami observer-protocol-at-directory-991be63/packages/mcp-server/src/server.ts :66

install hooks 1

  • prepublishOnly observer-protocol-at-directory-991be63/packages/mcp-server/package.json :32 node scripts/bundle.mjs

declared dependencies 5

  • @types/node@^25.0.0
  • prettier@^3.4.0
  • tsx@^4.21.0
  • typescript@^5.7.0
  • vitest@^3.0.0