HACKv0.1.0
Compliance Engine

Service Audit Pipeline

The automated audit pipeline runs live HTTP probes, static source analysis, and LLM-powered reviews against any MCP server or API endpoint.

Submit an audit

bash
POST /api/audit/submit
{
  "service_name": "my-mcp-server",
  "service_type": "mcp",
  "endpoint_url": "https://my-service.example.com/api/...",
  "repo_url": "https://github.com/..."
}

Returns a payment quote. Pay 0.5 HBAR, then:

bash
POST /api/audit/run/{quote_id}?transaction_id=0.0.XXXX@...

The backend runs 5 live probes, 6 static rules, and a Groq LLM review. The call blocks 15–30 seconds.

Grading

  • A+ ≥ 95
  • A ≥ 90
  • B ≥ 80
  • C ≥ 70
  • D ≥ 60
  • F < 60

Pass threshold is 70 (C or above).