{
  "x402Version": 2,
  "id": 29309,
  "slug": "29309",
  "resource": "https://api.agentstools.dev/pr/verdict",
  "description": "One merge-safety verdict for a public GitHub pull request. Fetches the PR diff and runs it through code, secret, CI/CD pipeline and dependency scanners, returning a single verdict (pass, caution, block), a risk score and findings with severity, file, line and a fix hint. One call instead of slicing the diff into several. Security indicators, not a guarantee.",
  "type": "http",
  "serviceName": "pr-verdict",
  "resourceType": "Agent Service",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "30000",
      "amountUsd": 0.03,
      "maxTimeoutSeconds": 300
    }
  ],
  "outputSchema": {
    "properties": {
      "example": {
        "type": "object"
      },
      "type": {
        "type": "string"
      }
    },
    "required": [
      "type"
    ],
    "type": "object"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "body": {
            "pr_url": "https://github.com/gitpython-developers/GitPython/pull/1901"
          },
          "bodyType": "json",
          "method": "POST",
          "type": "http"
        },
        "output": {
          "example": {
            "counts_by_dimension": {
              "ci": 1,
              "code": 1,
              "secret": 1
            },
            "counts_by_severity": {
              "high": 2,
              "medium": 1
            },
            "coverage": {
              "dimensions_partial": [],
              "dimensions_run": [
                "code",
                "secret",
                "ci"
              ],
              "files_scanned": 6,
              "files_total": 6,
              "graph_rules_ran": true,
              "skipped_files": [],
              "source": "diff",
              "truncated": false
            },
            "disclaimer": "Automated merge-risk indicators — security signals, not a guarantee.",
            "findings": [
              {
                "dimension": "secret",
                "evidence": "AWS_KEY = \"AKIA…4E7Q\"",
                "fix_hint": "Remove the hardcoded AWS credential, rotate it, and load it from a secret manager / environment variable.",
                "line": 12,
                "path": "src/upload.py",
                "provider": "secretscan",
                "reason": "A hardcoded AWS access key appears in an added line.",
                "rule_id": "aws.akia",
                "severity": "high"
              },
              {
                "dimension": "ci",
                "evidence": "uses: actions/checkout@v4",
                "fix_hint": "Pin to the full 40-char commit SHA.",
                "line": null,
                "path": ".github/workflows/ci.yml",
                "provider": "cicdscan",
                "reason": "Third-party action pinned to a mutable tag, not a commit SHA.",
                "rule_id": "gha.unpinned_uses",
                "severity": "high"
              }
            ],
            "findings_truncated": false,
            "object": "pr_verdict",
            "pr": {
              "head_sha": "d34db33f…",
              "number": 42,
              "owner": "acme",
              "repo": "widget",
              "title": "Add uploader"
            },
            "risk_score": 80,
            "ruleset_versions": {
              "ci": "2026.07.24",
              "code": "2026.07.16",
              "secret": "2026.07.16"
            },
            "verdict": "block"
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "body": {
                "properties": {
                  "dimensions": {
                    "description": "Optional subset of code, secret, ci, deps (default: all)",
                    "items": {
                      "type": "string"
                    },
                    "type": "array"
                  },
                  "max_files": {
                    "description": "Optional cap on files scanned for a large PR",
                    "type": "integer"
                  },
                  "pr_url": {
                    "description": "Public GitHub pull-request URL (github.com/owner/repo/pull/N)",
                    "type": "string"
                  }
                },
                "required": [
                  "pr_url"
                ]
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              },
              "method": {
                "enum": [
                  "POST",
                  "PUT",
                  "PATCH"
                ],
                "type": "string"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "github",
    "pull-request",
    "code-review",
    "security",
    "merge",
    "bazaar"
  ],
  "sourceHost": "api.agentstools.dev",
  "lastUpdated": "2026-10-08T06:10:22.726Z",
  "quality": {
    "calls30d": 1,
    "uniquePayers30d": 1,
    "lastCalledAt": "2026-10-08T06:10:22.496Z"
  },
  "metadata": {
    "serviceName": "pr-verdict",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "pr_url": "https://github.com/gitpython-developers/GitPython/pull/1901"
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "counts_by_dimension": {
                "ci": 1,
                "code": 1,
                "secret": 1
              },
              "counts_by_severity": {
                "high": 2,
                "medium": 1
              },
              "coverage": {
                "dimensions_partial": [],
                "dimensions_run": [
                  "code",
                  "secret",
                  "ci"
                ],
                "files_scanned": 6,
                "files_total": 6,
                "graph_rules_ran": true,
                "skipped_files": [],
                "source": "diff",
                "truncated": false
              },
              "disclaimer": "Automated merge-risk indicators — security signals, not a guarantee.",
              "findings": [
                {
                  "dimension": "secret",
                  "evidence": "AWS_KEY = \"AKIA…4E7Q\"",
                  "fix_hint": "Remove the hardcoded AWS credential, rotate it, and load it from a secret manager / environment variable.",
                  "line": 12,
                  "path": "src/upload.py",
                  "provider": "secretscan",
                  "reason": "A hardcoded AWS access key appears in an added line.",
                  "rule_id": "aws.akia",
                  "severity": "high"
                },
                {
                  "dimension": "ci",
                  "evidence": "uses: actions/checkout@v4",
                  "fix_hint": "Pin to the full 40-char commit SHA.",
                  "line": null,
                  "path": ".github/workflows/ci.yml",
                  "provider": "cicdscan",
                  "reason": "Third-party action pinned to a mutable tag, not a commit SHA.",
                  "rule_id": "gha.unpinned_uses",
                  "severity": "high"
                }
              ],
              "findings_truncated": false,
              "object": "pr_verdict",
              "pr": {
                "head_sha": "d34db33f…",
                "number": 42,
                "owner": "acme",
                "repo": "widget",
                "title": "Add uploader"
              },
              "risk_score": 80,
              "ruleset_versions": {
                "ci": "2026.07.24",
                "code": "2026.07.16",
                "secret": "2026.07.16"
              },
              "verdict": "block"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "properties": {
                    "dimensions": {
                      "description": "Optional subset of code, secret, ci, deps (default: all)",
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    },
                    "max_files": {
                      "description": "Optional cap on files scanned for a large PR",
                      "type": "integer"
                    },
                    "pr_url": {
                      "description": "Public GitHub pull-request URL (github.com/owner/repo/pull/N)",
                      "type": "string"
                    }
                  },
                  "required": [
                    "pr_url"
                  ]
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST",
                    "PUT",
                    "PATCH"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    }
  },
  "liveness": {
    "reliability": null
  },
  "verified": false,
  "featured": false,
  "provider": {
    "host": "api.agentstools.dev",
    "manifest_name": "api.agentstools.dev",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-10-14T01:15:01.050Z"
  },
  "exampleResponse": {
    "counts_by_dimension": {
      "ci": 1,
      "code": 1,
      "secret": 1
    },
    "counts_by_severity": {
      "high": 2,
      "medium": 1
    },
    "coverage": {
      "dimensions_partial": [],
      "dimensions_run": [
        "code",
        "secret",
        "ci"
      ],
      "files_scanned": 6,
      "files_total": 6,
      "graph_rules_ran": true,
      "skipped_files": [],
      "source": "diff",
      "truncated": false
    },
    "disclaimer": "Automated merge-risk indicators — security signals, not a guarantee.",
    "findings": [
      {
        "dimension": "secret",
        "evidence": "AWS_KEY = \"AKIA…4E7Q\"",
        "fix_hint": "Remove the hardcoded AWS credential, rotate it, and load it from a secret manager / environment variable.",
        "line": 12,
        "path": "src/upload.py",
        "provider": "secretscan",
        "reason": "A hardcoded AWS access key appears in an added line.",
        "rule_id": "aws.akia",
        "severity": "high"
      },
      {
        "dimension": "ci",
        "evidence": "uses: actions/checkout@v4",
        "fix_hint": "Pin to the full 40-char commit SHA.",
        "line": null,
        "path": ".github/workflows/ci.yml",
        "provider": "cicdscan",
        "reason": "Third-party action pinned to a mutable tag, not a commit SHA.",
        "rule_id": "gha.unpinned_uses",
        "severity": "high"
      }
    ],
    "findings_truncated": false,
    "object": "pr_verdict",
    "pr": {
      "head_sha": "d34db33f…",
      "number": 42,
      "owner": "acme",
      "repo": "widget",
      "title": "Add uploader"
    },
    "risk_score": 80,
    "ruleset_versions": {
      "ci": "2026.07.24",
      "code": "2026.07.16",
      "secret": "2026.07.16"
    },
    "verdict": "block"
  }
}