Skip to content

Revenue Agent — OpenAPI Audit & Change Detection

by prh.news · remote · no sign-in to list tools · v0.1.1 · published by news.prh

Paid OpenAPI audit and API change detection for agents. $0.10 USDC per analysis via x402 on Base.

Changes · 1
CompareRegistry entry

2 tools: 1 change things and 1 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http revenue-agent https://agent.prh.news/mcp

Findings

Matches of fixed checks, with the text they matched.

1 info
  • Infocheck_openapi

    The input schema at properties.url.description mentions "credentials".

    Matched text

    inputSchema.properties.url.description: "...ger JSON or YAML URL (http or https, no credentials or query string)"

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

2 tools

Changes things 1Claude Code: ask
  • check_openapiDeveloper tool for OpenAPI audit, API analysis, Swagger analysis, and API contract change validation (not general OpenAPI conformance linting).1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The input schema at properties.url.description mentions "credentials".

      Matched text

      inputSchema.properties.url.description: "...ger JSON or YAML URL (http or https, no credentials or query string)"

      What this check looks for
    Description, as the server wrote it
    Developer tool for OpenAPI audit, API analysis, Swagger analysis, and API contract change validation (not general OpenAPI conformance linting). The paid analysis detects breaking changes and API drift by comparing a public OpenAPI/Swagger JSON or YAML contract with the service's last stored snapshot of that URL (the first check records the baseline). It returns deterministic JSON classifying endpoint, method, media-type, status, request/response field, type, requiredness, and structural oneOf/anyOf branch changes as breaking, potentially breaking, non-breaking or informational, plus a Markdown summary. It does not infer schema satisfiability or branch overlap; not and external references are unsupported. Cost: 0.10 USDC per completed analysis via x402 on Base (eip155:8453), settled only after the analysis is computed. This MCP tool itself is free: it validates the URL and returns the x402 endpoint and payment terms; it does not run the analysis or move funds. Canonical service OpenAPI: https://agent.prh.news/openapi.json. To get the analysis, POST {"url": "<spec URL>"} to the returned endpoint with an x402-capable HTTP client.

    Annotations the server declares

    • title: OpenAPI Audit & Breaking-Change Detection
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 1Claude Code: allow
  • compare_openapiValidates explicit before and after public OpenAPI/Swagger URLs and returns purchase terms for an immediate deterministic semantic comparison, including structural oneOf/anyOf bran…No findings

    Why it is in this group

    • The name "compare_openapi" says "compare": a word for reading.
    Description, as the server wrote it
    Validates explicit before and after public OpenAPI/Swagger URLs and returns purchase terms for an immediate deterministic semantic comparison, including structural oneOf/anyOf branch changes. It does not infer schema satisfiability or branch overlap; not and external references are unsupported. The paid endpoint returns breaking, potentially breaking, non-breaking and informational findings plus Markdown without reading or advancing snapshot history. Cost: 0.25 USDC via x402 on Base (eip155:8453). This MCP tool is free and never executes analysis or moves funds.

    Annotations the server declares

    • title: Immediate Stateless OpenAPI Comparison
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http revenue-agent https://agent.prh.news/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__revenue-agent__compare_openapi"
    ],
    "ask": [
      "mcp__revenue-agent__check_openapi"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as revenue-agent. Review it before you use it.