← Back to search

AgentPay

Rumblingb streamable_http Scanned 9d ago

Agent payments, API key vaulting, and governed mandates. Agents spend within user-defined limits.

MCP Registry ↗
D
40 / 100

Versions

0.2.0latest
Apr 19, 2026
0.1.1
Mar 17, 2026
0.1.0
Mar 17, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

bee_inbox_read
annotations: none low

Read assigned tasks from Bee board

status str assignee str
bee_inbox_claim
annotations: none low

Claim a task for execution

id str agent str
bee_outcome_report
annotations: none low

Report task completion result

id str result str status str
bee_registry_consult
annotations: none low

Query agent capabilities and state

bee_state_poll
annotations: none low

Get unified fleet state snapshot

bee_memory_query
annotations: none low

Query shared vault notes

keys list

Permissions 5

network medium
Server uses network capabilities via: fetch(), http, httpx, node-fetch, requests, urllib
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, os, path, pathlib
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
database medium
Server uses database capabilities via: pg, sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 156

low
Tool 'bee_inbox_read' has no annotations annotation_checker · 100%
low
Tool 'bee_inbox_claim' has no annotations annotation_checker · 100%
low
Tool 'bee_outcome_report' has no annotations annotation_checker · 100%
low
Tool 'bee_registry_consult' has no annotations annotation_checker · 100%
low
Tool 'bee_state_poll' has no annotations annotation_checker · 100%
low
Tool 'bee_memory_query' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in Rumblingb-Agentpay-4ffa862/apps/api-edge/tests/payment-providers.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in Rumblingb-Agentpay-4ffa862/tests/unit/fiatPayments.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in Rumblingb-Agentpay-4ffa862/tests/unit/mcp-server.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 121 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-native dependency_analyzer · 60%
medium
Vulnerable dependency: joi@18.0.2 (GHSA-q7cg-457f-vx79) dependency_analyzer · 95%
medium
Vulnerable dependency: morgan@1.10.0 (GHSA-4vj7-5mj6-jm8m) dependency_analyzer · 95%
medium
Vulnerable dependency: uuid@13.0.0 (GHSA-w5hq-g745-h8pq) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.18 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: @babel/core@7.24.0 (GHSA-4x5r-pxfx-6jf8) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.27 (GHSA-54fx-42gc-7vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.27 (GHSA-79qm-7rj5-m7r9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.27 (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.27 (GHSA-f23p-vx2j-j53r) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-3c8v-cfp5-9885) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-4f78-qhmw-8j8m) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-4p4r-m79c-wq3v) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-532v-xpq5-8h95) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-5c9j-mhmv-5xgx) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-5rqw-r77c-jp79) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-8337-3p73-46f4) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-9899-m83m-qhpj) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-9f4c-93c8-jc8g) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-9pf5-hg6p-4pwp) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-9w97-2464-8783) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-9wfr-w7mm-pc7f) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-f2r8-jv7c-xqmp) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-f37v-82c4-4x64) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-f3pv-wv63-48x8) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-ff2p-hmqr-hxm4) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-h7rp-cf8h-j98x) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-jfqx-fxh3-c62j) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-jjp3-mq3x-295m) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-jm7p-cc5g-qwxx) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-m55f-7gqj-fr98) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-mwmh-mq4g-g6gr) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-p2rr-rvmm-c5fp) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-pfmc-3mgc-p6fp) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-r5p7-gp4j-qhrx) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-v3j7-r9gq-3gjw) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-v64r-4m7r-3mvq) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-v93f-fgjr-hjrj) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-vmqv-hx8q-j7mg) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-x8rc-wpg4-grpf) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-xj5x-m3f3-5x3h) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@30.5.1 (GHSA-xwr5-m59h-vwqr) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.2 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.2 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: uuid@9.0.0 (GHSA-w5hq-g745-h8pq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-35jp-ww65-95wh) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-3g43-6gmg-66jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-3p68-rc4w-qgx5) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-3w6x-2g7m-8v23) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-43fc-jf86-j433) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-445q-vr5w-6q77) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-4hjh-wcwx-xvwj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-5c9x-8gcm-mpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-62hf-57xw-28j9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-6chq-wfr3-2hj9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-898c-q2cr-xwhg) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-8hc4-vh64-cxmj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-fvcv-3m26-pcqx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-hfxv-24rg-xrqf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-j5f8-grm9-p9fc) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-jr5f-v2jv-69x6) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-m7pr-hjqh-92cm) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-p92q-9vqr-4j8v) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-pf86-5x62-jrwf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-pmwg-cvhr-8vh7) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-q8qp-cvcw-x6jj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-vf2m-468p-8v99) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-w9j2-pvgh-6h63) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-xhjh-pmcv-23jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.6.0 (GHSA-xx6v-rp6x-q39c) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.0 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.0 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-35jp-ww65-95wh) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-3g43-6gmg-66jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-3w6x-2g7m-8v23) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-445q-vr5w-6q77) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-5c9x-8gcm-mpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-62hf-57xw-28j9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-6chq-wfr3-2hj9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-777c-7fjr-54vf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-898c-q2cr-xwhg) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-f4gw-2p7v-4548) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-hfxv-24rg-xrqf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-j5f8-grm9-p9fc) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-jqh4-m9w3-8hp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-m7pr-hjqh-92cm) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-mwf2-3pr3-8698) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-p92q-9vqr-4j8v) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pf86-5x62-jrwf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pjwm-pj3p-43mv) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pmwg-cvhr-8vh7) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-q8qp-cvcw-x6jj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-vf2m-468p-8v99) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-w9j2-pvgh-6h63) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-xhjh-pmcv-23jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.15.0 (GHSA-xx6v-rp6x-q39c) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.1 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.1 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in Rumblingb-Agentpay-4ffa862/apps/api-edge/tests/rcm-state-machine.test.ts:619 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in Rumblingb-Agentpay-4ffa862/apps/api-edge/tests/rcm-state-machine.test.ts:648 entropy_analyzer · 70%
medium
Buffer.from base64 in Rumblingb-Agentpay-4ffa862/dashboard/src/generated/prisma/internal/class.ts:43 entropy_analyzer · 75%
medium
Buffer.from base64 in Rumblingb-Agentpay-4ffa862/src/services/certificateService.ts:31 entropy_analyzer · 75%
medium
Buffer.from base64 in Rumblingb-Agentpay-4ffa862/src/test/mocks/jsonwebtokenMock.js:12 entropy_analyzer · 75%
medium
Buffer.from base64 in Rumblingb-Agentpay-4ffa862/src/test/mocks/jsonwebtokenMock.js:21 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in Rumblingb-Agentpay-4ffa862/tests/routes/verify.test.ts:48 entropy_analyzer · 70%
medium
Buffer.from base64 in Rumblingb-Agentpay-4ffa862/tests/unit/certificateService.test.ts:19 entropy_analyzer · 75%
medium
Buffer.from base64 in Rumblingb-Agentpay-4ffa862/tests/unit/certificateService.test.ts:24 entropy_analyzer · 75%
medium
Buffer.from base64 in Rumblingb-Agentpay-4ffa862/tests/unit/certificateService.test.ts:54 entropy_analyzer · 75%
medium
Buffer.from base64 in Rumblingb-Agentpay-4ffa862/tests/unit/certificateService.test.ts:62 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: bee_inbox_read manifest_parser · 90%
info
Tool: bee_inbox_claim manifest_parser · 90%
info
Tool: bee_outcome_report manifest_parser · 90%
info
Tool: bee_registry_consult manifest_parser · 90%
info
Tool: bee_state_poll manifest_parser · 90%
info
Tool: bee_memory_query manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (149) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1900 components sbom_generator · 100%
critical
Database URL with Password found in Rumblingb-Agentpay-4ffa862/.env.production.example secret_scanner · 85%
critical
Database URL with Password found in Rumblingb-Agentpay-4ffa862/scripts/wait-for-db.js secret_scanner · 85%
high
Generic API Key Assignment found in Rumblingb-Agentpay-4ffa862/docs/BETA_LAUNCH_CHECKLIST.md secret_scanner · 75%
high
Hardcoded Password found in Rumblingb-Agentpay-4ffa862/apps/api-edge/.dev.vars.example secret_scanner · 65%
high
Authorization Bearer Token found in Rumblingb-Agentpay-4ffa862/examples/harness-configs/cursor.json secret_scanner · 70%
high
Authorization Bearer Token found in Rumblingb-Agentpay-4ffa862/examples/harness-configs/claude-code.json secret_scanner · 70%
critical
Database URL with Password found in Rumblingb-Agentpay-4ffa862/.github/workflows/ci.yml secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%