What kind of repositories does Costwright Mcp analyze?
It analyzes Python repositories that use LangGraph, CrewAI, or the OpenAI Agents SDK, returning worst‑case token budgets for every workflow graph.
@hernaninverso
基本情報
Static worst-case token-budget analysis of LLM-agent workflows
以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。
{
"mcpServers": {
"costwright": {
"command": "npx",
"args": [
"-y",
"costwright-mcp"
],
"env": {
"COSTWRIGHT_API_KEY": "your_rapidapi_key"
}
}
}
}Statically analyze an LLM-agent repo (LangGraph / CrewAI / OpenAI-Agents-SDK) for runaway-budget risk WITHOUT running it. Builds a .py-only archive of the given local path and returns a worst-case budget summary: counts of certifiable / default_dependent / non_certifiable / runaway graph units and a pass|fail verdict. Use before deploying a workflow to catch missing token caps and while-True runaway drivers.
Issue a tamper-evident, Ed25519-signed budget certificate for an agent repo (re-run server-side, logged to a public transparency log). Same input as costwright_check plus an optional label. Returns the cert_id, the signed certificate and a verify_url. Use to produce an auditable proof of a workflow's worst-case spend ceiling.
Verify a previously issued costwright certificate by id (public, no key). Returns its state (valid|expired|revoked|signature_invalid), whether the signature checks out, and the certified result.
Fetch costwright's active Ed25519 public keys (PEM) for offline signature verification of any certificate (public, no key).
Costwright Mcp is a static worst-case token‑budget analyzer for LLM‑agent workflows. It examines a Python repository that uses LangGraph, CrewAI, or the OpenAI Agents SDK and reports – by pure AST analysis, without running the code – the worst‑case budget ceiling of every workflow graph. It can optionally issue an Ed25519‑signed budget certificate that is logged to a public transparency log.
Configure the MCP server using npx costwright-mcp with the COSTWRIGHT_API_KEY environment variable. Four tools are provided: costwright_check (static analysis), costwright_certify (signed certificate), costwright_verify (public certificate verification), and costwright_pubkey (retrieve public keys). The verify and pubkey tools require no API key.
verify and pubkey tools for offline verification.while True: runaway drivers in LLM agent code.It analyzes Python repositories that use LangGraph, CrewAI, or the OpenAI Agents SDK, returning worst‑case token budgets for every workflow graph.
No. It performs pure static AST analysis – the code is never executed.
Yes, for the `check` and `certify` tools. The `verify` and `pubkey` tools are public and require no key.
The `check` and `certify` tools upload a compressed archive of the repository to the hosted API. See the privacy policy at https://eleata.io/privacy/ for details.
It returns a pass/fail status along with counts of units categorized as certifiable, default‑dependent, non‑certifiable, or runaway, and identifies which LLM calls have no token cap.

Social listening for AI agents. Rumoro's remote MCP server lets Claude, Cursor, Codex and other MCP clients search and sort mentions of your product, your competitors and your topics on Reddit, X, Hacker News, GitHub, Yo
NetFoundry MCP Gateway enables secure, isolated access to Model Context Protocol (MCP) tools across distributed systems without exposing public endpoints. Zero trust gateway for MCP servers. Aggregate, filter, and secure

Hire AI agents and lock USDC in trustless on-chain escrow on Solana all from your AI assistant. Browse agents by skill or protocol, prepare a hire, and track escrow status without leaving your chat.

Give an agent access to your YouSpot CRM: contacts, companies, notes, files, and your connected Gmail, Calendar, HubSpot, LinkedIn, Slack and X.
Public docs + tool manifest for the GetIntel MCP connector (app.getintel.ai)
コメント