io.github.cristianmoroaica/bountyverdict MCP Server
The MCP server io.github.cristianmoroaica/bountyverdict provides access to information described as “Read-only GitHub bounty” focused on “agent harness, Actions failure, flake, and MCP tool-drift decisions.” Its description indicates the server’s scope around these decision categories and failure modes.
🛠️ Key Features
Read-only GitHub bounty information
Coverage of agent harness topics
Tracks or describes Actions failure
Addresses flake-related considerations
Supports “MCP tool-drift” decision context
🚀 Use Cases
Reviewing GitHub bounty-related content in a read-only manner
Analyzing agent harness outcomes
Understanding Actions failure and flake decision contexts
Investigating MCP tool-drift decisions
⚡ Developer Benefits
Provides structured, developer-consumable access to the described decision context
Clarifies the categories: agent harness, Actions failure, flake, and tool drift
⚠️ Limitations
Description indicates read-only access
No tool count or additional capabilities are provided in the available source data
Is this public GitHub issue bounty still claimable, or is someone already working on it? Checks current status, reward evidence, competing work, and maintainer signals; returns AVOID, CAUTION, or VIABLE. For 2-7 issues, repeated single checks cost less unless one ranked response is worth the premium; use rank_github_bounties for 8-10.
Parameters1
issue_url
string
required
Canonical public GitHub issue URL, for example https://github.com/owner/repository/issues/123. No query string, fragment, pull request, or non-GitHub host.
Raw schema
{
"type": "object",
"properties": {
"issue_url": {
"type": "string",
"pattern": "^https:\\/\\/github\\.com\\/[A-Za-z0-9_.-]+\\/[A-Za-z0-9_.-]+\\/issues\\/[1-9]\\d*\\/?$",
"description": "Canonical public GitHub issue URL, for example https://github.com/owner/repository/issues/123. No query string, fragment, pull request, or non-GitHub host."
}
},
"required": [
"issue_url"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}
rank_github_bounties
Which public GitHub bounty should I work on next? Compares 2-10 issue URLs, chooses the strongest non-AVOID candidate or recommends none, and returns cited evidence plus partial failures. It is unit-price economical for 8-10; repeated check_github_bounty calls cost less for 2-7 when ranked orchestration is unnecessary.
Parameters1
issue_urls
array
required
Two to ten distinct canonical public GitHub issue URLs. Duplicate issue URLs are rejected before payment.
Raw schema
{
"type": "object",
"properties": {
"issue_urls": {
"type": "array",
"items": {
"type": "string",
"pattern": "^https:\\/\\/github\\.com\\/[A-Za-z0-9_.-]+\\/[A-Za-z0-9_.-]+\\/issues\\/[1-9]\\d*\\/?$",
"description": "Canonical public GitHub issue URL, for example https://github.com/owner/repository/issues/123. No query string, fragment, pull request, or non-GitHub host."
},
"minItems": 2,
"maxItems": 10,
"description": "Two to ten distinct canonical public GitHub issue URLs. Duplicate issue URLs are rejected before payment."
}
},
"required": [
"issue_urls"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}
audit_agent_harness
Can a coding agent safely work in this public repository without missing project instructions? Audits AGENTS.md, CLAUDE.md, and related instructions at an immutable commit; does not diagnose CI.
Parameters1
repo_url
string
required
Canonical public GitHub repository URL, for example https://github.com/owner/repository. No subpath, query string, fragment, or non-GitHub host.
Raw schema
{
"type": "object",
"properties": {
"repo_url": {
"type": "string",
"pattern": "^https:\\/\\/github\\.com\\/[A-Za-z0-9_.-]+\\/[A-Za-z0-9_.-]+\\/?$",
"description": "Canonical public GitHub repository URL, for example https://github.com/owner/repository. No subpath, query string, fragment, or non-GitHub host."
}
},
"required": [
"repo_url"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}
diagnose_github_actions_run
Why did this public GitHub Actions run fail, and what should I fix? Uses bounded failed-job logs and redacted evidence. Use classify_github_actions_flake only for retry-once versus fix.
Parameters1
run_url
string
required
Canonical public GitHub Actions run URL, for example https://github.com/owner/repository/actions/runs/123456. No job URL, query string, fragment, or non-GitHub host.
Raw schema
{
"type": "object",
"properties": {
"run_url": {
"type": "string",
"pattern": "^https:\\/\\/github\\.com\\/[A-Za-z0-9_.-]+\\/[A-Za-z0-9_.-]+\\/actions\\/runs\\/[1-9]\\d*\\/?$",
"description": "Canonical public GitHub Actions run URL, for example https://github.com/owner/repository/actions/runs/123456. No job URL, query string, fragment, or non-GitHub host."
}
},
"required": [
"run_url"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}
classify_github_actions_flake
Is this failed GitHub Actions run flaky—should I retry it once or fix the code? Uses the current attempt and bounded history. Use diagnose_github_actions_run for root cause.
Parameters2
run_url
string
required
Canonical public GitHub Actions run URL, for example https://github.com/owner/repository/actions/runs/123456. No job URL, query string, fragment, or non-GitHub host.
attempt
integer
optional
Optional exact workflow run attempt number, starting at 1. Omit to use the run URL's latest available completed attempt.
Raw schema
{
"type": "object",
"properties": {
"run_url": {
"type": "string",
"pattern": "^https:\\/\\/github\\.com\\/[A-Za-z0-9_.-]+\\/[A-Za-z0-9_.-]+\\/actions\\/runs\\/[1-9]\\d*\\/?$",
"description": "Canonical public GitHub Actions run URL, for example https://github.com/owner/repository/actions/runs/123456. No job URL, query string, fragment, or non-GitHub host."
},
"attempt": {
"type": "integer",
"exclusiveMinimum": 0,
"description": "Optional exact workflow run attempt number, starting at 1. Omit to use the run URL's latest available completed attempt."
}
},
"required": [
"run_url"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}
check_mcp_tool_drift
Will upgrading to this complete MCP tools/list break my agent or weaken declared safety hints? Compares caller-supplied baseline and current snapshots; never fetches or invokes tools.
Parameters5
contract_version
string
required
subject
object
required
Caller-chosen identity for the MCP server being compared; ownership is not verified.
annotation_source_trust
string
required
Whether the caller recognizes the annotation source. Annotations never become runtime-behavior proof.
Seven paid, bounded decision APIs for autonomous coding agents. Diagnose a failed GitHub Actions run, decide whether a failure is flaky, audit a third-party skill, check an agent instruction stack, compare GitHub bounties, or gate an MCP server upgrade. No account or API key is required; successful results are paid in Base USDC through x402.
Install the router that selects the narrowest check and applies its payment safeguards:
That plugin exposes the five task-specific public GitHub, CI, and MCP workflow skills. SkillVerdict and the broad router remain separate least-privilege installs.
Then ask, for example:
“Why did this public GitHub Actions workflow fail, and what should I do next?”
“Will this MCP tools/list schema change break my agent after the server upgrade?”
Task-specific skills are the least-privilege path. Install all seven only when needed with npx skills add cristianmoroaica/bountyverdict --skill '*' -y.
For the six-tool remote MCP surface, install the task-first marketplace adapter directly from its public repository while directory indexing is pending:
That adapter routes GitHub bounty, repository-readiness, GitHub Actions, flaky-retry, and MCP schema-drift requests to one exact tool, keeps SkillVerdict excluded, and uses a coarse source marker without storing prompts, tool arguments, or caller identities. A valid unsigned call is only a free payment preview; an x402-aware client must separately authorize the exact Base USDC amount before receiving a verdict.
MCP-compatible agents can instead connect to the production Streamable HTTP server at https://bountyverdict-agent-production.mimirslab.workers.dev/mcp. It exposes six real paid tools matching the independently distributed products; SkillVerdict remains excluded from this channel. tools/list publishes task-selection boundaries, canonical input patterns, and compact machine-readable success contracts covering each verdict or action and its reuse rule. Invalid input is rejected before payment, while a valid selected tool returns an exact x402 USDC requirement. The official registry contract is server.json under io.github.cristianmoroaica/bountyverdict; its publisher metadata includes unbranded task keywords, use cases, prices, and result summaries so downstream MCP aggregators can index what each tool actually solves.
Use the client-specific llms-install.md guide for Codex, Claude, Gemini, VS Code, Cursor, Cline, and Kilo. A remote MCP connection does not itself provide a wallet: direct automatic settlement requires an x402-aware MCP client, while standard hosts can use the versioned exact-HTTP handoff included in every valid unpaid tool response with a separately authorized x402 wallet.
Agentic Resource Discovery crawlers can ingest the origin-owned ai-catalog.json. It advertises the existing MCP server with six unbranded representative buyer queries for semantic retrieval; catalog fetches are measured separately from tool calls, payments, and purchases.
For the broad CI use case, the crawlable GitHub Actions Failure Diagnosis MCP Server guide compares the root-cause and flaky-retry tools, leads with the source-marked routing-adapter install, and publishes exact prices, free samples, typed outputs, and the mutation boundary.
Inspect before paying
Every product has a free sample, a machine-readable OpenAPI contract, a declared price, and a successful-result service_reuse rule. Invalid inputs and upstream failures are not settled. Start with the agent page, agent-manifest.json, the production openapi.json, or the remote MCP server above.
The bounty samples are captured from real public issues rather than invented fixtures: the single-check sample rejects an assigned, withdrawn, and maintainer-rejected TypeORM bounty, while the portfolio sample refuses to recommend either it or an open but already-assigned Tenstorrent $1,500 bounty. Use the $0.05 single check for one candidate; the fixed $0.40 portfolio is economical for 8–10 candidates or when one ranked, partial-failure-aware response materially simplifies the workflow.
The seven contracts are continuously checked in production. Coinbase Bazaar currently merchant-indexes six resources. Six existing non-SkillVerdict products are also available through exact-schema the402 listings, either per call or through a $1.05 monthly bundle of up to 20 combined requests. Owner-funded proofs are excluded from customer revenue.
For the strongest current buyer-intent fit, inspect the free SkillVerdict sample and the task-specific preflight-agent-skills workflow. It audits the entire commit-pinned public skill directory without executing it; the paid verdict costs $0.06.
HarnessVerdict pins the repository default branch to an immutable commit and audits recognized AGENTS.md, CLAUDE.md, GEMINI.md, Copilot, Cursor, and SKILL.md surfaces without cloning or executing repository code. It reports evidence-linked path, scope, portability, context-budget, skill-frontmatter, and secret-like-material findings.
SkillVerdict pins and statically scans a requested public skill directory without executing it. It combines high-confidence dangerous-pattern checks with repository context, capability disclosure, external-domain inventory, secret redaction, and explicit coverage to reduce both missed supply-chain hazards and naive false positives.
RunVerdict reads exact-attempt job metadata and bounded failed-job logs without executing or rerunning code. It separates primary failures from aggregate-result jobs, redacts secret-like excerpts, classifies root-cause families, and recommends whether to fix, investigate, wait, or retry.
FlakeVerdict compares a completed public GitHub Actions failure with other attempts of the same run, same-commit outcomes, and up to 12 earlier comparable workflow runs. It scans at most 8 selected failed-job logs and 4 MiB of log data, never executes repository code, and never triggers, reruns, cancels, approves, or otherwise mutates CI. Its six typed outcomes are CONFIRMED_FLAKE, LIKELY_FLAKE, RECURRING_FAILURE, NEW_FAILURE, INCONCLUSIVE, and NOT_FAILED; only a current CONFIRMED_FLAKE can recommend one retry.
Agents can inspect the free FlakeVerdict sample and use the guarded classify-github-flakes skill. Every successful result carries this reuse rule: call FlakeVerdict for every completed public GitHub Actions failure before spending a retry; reuse the result only for its exact run ID and attempt, and call again after a new attempt appears.
MCPDriftVerdict accepts two complete inline MCP 2025-11-25 tools/list snapshots, canonicalizes and hashes them, proves only a conservative JSON Schema 2020-12 compatibility subset, reverses variance for outputs, and flags tool removals, model-facing metadata changes, task-mode breaks, and declared safety-hint regressions. It validates and computes the whole verdict before x402 settlement and never connects to an MCP server, fetches catalog URLs, invokes tools, or follows catalog instructions. Agents can inspect the free sample and guarded check-mcp-tool-drift skill.
See agent/README.md for the protocol, local verification, and deployment configuration.
The launch prices and differentiation are grounded in a live Bazaar comparison documented in docs/MARKET_VALIDATION.md. Agents and crawlers can read llms.txt before deciding whether a product is relevant.
Review the public security policy and privacy/data-handling disclosure before submitting data or authorizing payment. Vulnerabilities can be reported privately through GitHub without opening a public issue.
Free human bounty checker
Visit BountyVerdict and paste a public GitHub issue URL. The browser makes read-only requests directly to GitHub's public API without an account, backend, analytics, or data storage. It checks issue and repository state, competing pull requests, failed-attempt swarms, maintainer rejection, and reward-withdrawal language. Every important result links to public evidence; no result guarantees a reward, acceptance, merge, or payment.
Run locally
bash
npm run serve
Open http://localhost:4174.
Test
bash
npm test
Method and limits
The score is deliberately conservative and deterministic. BountyVerdict currently reads up to 300 issue comments and the first and newest timeline pages. Very large threads may contain additional evidence it does not see. Anonymous GitHub API rate limits apply.
Treat a VIABLE verdict as permission to investigate further—not permission to start coding. Reproduce the issue, read contribution and AI-use policies, confirm reward terms and payout eligibility, and establish acceptance criteria first.
