audit_app
Audit an app for agent distribution
Queue a bounded audit of a public HTTP or HTTPS app and return an unlisted receipt URL. Reuse get_audit_result until processing completes.
urlrequired
com.deploytoagentsPublished by deploytoagents.comOfficial publisherv0.3.0Updated Oct 25, 2026
Audit agent-distribution surfaces and create an evidence-based distribution plan.
Remote MCP server that audits a public app's agent-facing surfaces and turns the results into a prioritized distribution plan.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/com.deploytoagents%2Fserver/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"deploy-to-agents": {
"type": "http",
"url": "https://deploytoagents.com/mcp"
}
}
}Public JavaScript client and registry metadata for the Deploy to Agents remote MCP server.
The remote server is published in the official MCP Registry as com.deploytoagents/server and is served from https://deploytoagents.com/mcp. The JavaScript client and authenticated agent-first CLI are published as [email protected] on npm, with an equivalent deploytoagents==0.1.1 client on PyPI.
The package installs both deploytoagents and the shorter d2a command. Google login uses Authorization Code with PKCE and a temporary loopback callback. On Windows the refresh credential is encrypted for the current OS user with DPAPI; CI can provide a short-lived identity token through DEPLOYTOAGENTS_TOKEN. Discovery Lab can be read or supplied with a JSON observation file (or stdin via --input -). All command results and errors have stable JSON forms for agent use.
Valid outcomes are recommended, mentioned, not-mentioned, and error. The server verifies that the signed-in organization owns the target hostname.
Deploy to Agents currently audits public agent-facing surfaces, returns unlisted evidence receipts, and creates prioritized technical and external-authority distribution plans. It does not yet claim to publish every customer artifact or guarantee recommendation by any model.
Use this Streamable HTTP endpoint in any compatible MCP client:
Available tools:
audit_appget_audit_resultcreate_distribution_planget_customer_zero_evidenceDeploy to Agents uses its own system as its first customer. The current 100/100 receipt verifies technical surfaces only. Independent, unbranded discovery remains explicitly not-yet-proven.
This project distinguishes owned evidence, externally verified artifacts, and independent recommendations. It does not create fake testimonials, automated community posts, coordinated votes, or links intended primarily to manipulate rankings.
MIT
Source: README.md at commit 52d35c2
Audit an app for agent distribution
Queue a bounded audit of a public HTTP or HTTPS app and return an unlisted receipt URL. Reuse get_audit_result until processing completes.
urlrequiredGet an audit result
Retrieve the current status, score, findings, privacy state, and evidence URL for an audit UUID.
audit_idrequiredCreate an evidence-based distribution plan
Turn a completed technical audit into prioritized remediation plus official-registry, public-repository, customer-evidence, and independent-discovery actions.
audit_idrequiredGet Deploy to Agents Customer Zero evidence
Return the public self-audit evidence and the explicit boundary between technical readiness and independent discovery.
Takes no parameters.
100% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
npx deploytoagents loginnpx deploytoagents whoaminpx deploytoagents portfolio --jsonnpx deploytoagents discovery --jsonnpx deploytoagents discovery-record --input observation.json --jsonnpx deploytoagents audit https://example.com --json{ "hostname": "example.com", "surface": "claude", "model": "model label shown by the surface", "prompt": "Exact generic, unbranded prompt", "outcome": "not-mentioned", "freshSession": true, "responseExcerpt": "Optional relevant excerpt", "citations": ["https://example.org/source"]}https://deploytoagents.com/mcpnpm install deploytoagentsimport { DeployToAgentsClient } from "deploytoagents";
const client = new DeployToAgentsClient();
try { const queued = await client.auditApp("https://example.com"); console.log(queued.receipt_url);
const result = await client.getAuditResult(queued.audit_id); if (result.status === "completed") { console.log(await client.createDistributionPlan(queued.audit_id)); }} finally { await client.close();}pip install deploytoagentsfrom deploytoagents import DeployToAgentsClient
async with DeployToAgentsClient() as client: queued = await client.audit_app("https://example.com") print(queued["receipt_url"])npm installnpm testnpm run smoke