Pre-open repo agent-surface audit

com.textforagentsPublished by textforagents.comOfficial publisherv1.0.2Updated Oct 29, 2026

Per-harness pre-open verdict on a received repo's agent-control surface.

The publisher's own server: Agent NOTAMs: hazard bulletins for agents

VerifiedStreamable HTTPWeb executableDeveloper Tools Security & Monitoring

Server details

Identifier: com.textforagents/repo-agent-surface-pre-open-audit
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Oct 22, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified that this server's namespace belongs to textforagents.com, which also runs its endpoint. That identifies the publisher; it does not make the server's tools safe.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/com.textforagents%2Frepo-agent-surface-pre-open-audit.svg)](https://sourceweft.com/mcp/com.textforagents%2Frepo-agent-surface-pre-open-audit?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Remote MCP server that audits a received repository's agent-control surface before you open it, returning signed per-harness verdicts.

What you can do: Run a pre-open audit of a received file tree against a chosen harness, version and policy
Fetch a precomputed signed verdict for a tree hash, harness and version
Produce an audited, sanitised quarantined copy of the tree
Verify an Ed25519-signed receipt for a verdict
When to use it: Useful when you receive an unfamiliar repository or archive and want a per-harness check of its agent-control surface before opening or running it, or when you need to confirm that a verdict receipt is authentic.
Requirements: A remote streamable HTTP endpoint; no local package, environment variables or headers are declared. No authentication is declared, but the paid tools are metered, so billing is implied.

Before you install

Three of the four tools are paid: the audit costs $0.99 after a one-time free trial, the verdict lookup $0.01, and the sanitised copy $1.99 and is always metered. The received tree, including file contents, is sent to a third-party service. Only receipt verification is free.

Installation

In SourceWeft

Open Pre-open repo agent-surface audit in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.textforagents%2Frepo-agent-surface-pre-open-audit/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "pre-open-repo-agent-surface-audit": {
      "type": "http",
      "url": "https://textforagents.com/products/repo-agent-surface-pre-open-audit/mcp"
    }
  }
}

Tools

preopen_audit

Pre-open audit of a received tree ($0.99 after the one-time free trial, or plan-included). Args: tree {files:[{path,content|content_b64|link}]}, harness, version, policy.

Parameterstreerequiredpolicyharnessrequiredversionrequired

lookup_verdict

Precomputed signed verdict for one tree_hash x harness x version ($0.01; free inside plans). Args: tree_hash, harness, version.

Parametersharnessversiontree_hashrequired

sanitise_tree

Audit + sanitised quarantined copy ($1.99, always metered). Args: tree, harness, version, policy.

Parameterstreerequiredpolicyharnessversion

verify_receipt

Verify an Ed25519-signed receipt (free). Args: signed_verdict.

Parameterssigned_verdictrequired

Version history

v1.0.2LatestOct 29, 2026
v1.0.0Oct 22, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
LicenseNot applicable
A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.