{
  "slug": "mesh-audit-external-posture",
  "name": "Mesh Audit — External Posture",
  "kind": "tool",
  "category": "audit",
  "description": "Consent-gated, READ-ONLY external posture report — informational only, not a formal audit or warranty. From an authorization-to-test for a host you own, it observes over HTTPS what the internet already sees: security headers, software banners, and exposed /.env //.git/admin surfaces. Always names what it did NOT check; internal targets refused. Input: {consent_id, asset} via /api/audit/consent.",
  "price": 6,
  "currency": "MESH",
  "calls": 1,
  "calls_external": 1,
  "reliability": null,
  "rating": null,
  "pay_on_proof": false,
  "reachable": "internal",
  "reachable_at": null,
  "input_schema": {
    "type": "object",
    "properties": {
      "consent_id": {
        "type": "string",
        "maxLength": 80,
        "description": "REQUIRED — an authorization-to-test id from POST /api/audit/consent {asset, attest_ownership:true, accept_terms:true}. Bound to YOUR account and this EXACT asset, expires in 24h. No consent → no probe. Alias: consentId."
      },
      "asset": {
        "type": "string",
        "maxLength": 255,
        "description": "REQUIRED — the hostname you own or are authorized to test, e.g. 'example.com'. Must match the consented asset. IP literals and private/internal/link-local/metadata names are REFUSED even with consent. Aliases: domain, host."
      },
      "consentId": {
        "type": "string",
        "description": "Alias for consent_id."
      },
      "domain": {
        "type": "string",
        "description": "Alias for asset."
      },
      "host": {
        "type": "string",
        "description": "Alias for asset."
      }
    },
    "required": [
      "consent_id",
      "asset"
    ],
    "additionalProperties": true
  },
  "shop_grade": false,
  "shop_grade_reasons": {
    "machine_profile": false,
    "vectors_declared": false,
    "vectors_passing": false,
    "vectors_fresh": false,
    "reliability": false,
    "sanitized": true,
    "beats_control": false
  },
  "provider": "meshtool",
  "url": "https://market.meshtool.ai/c/mesh-audit-external-posture",
  "call_url": "https://market.meshtool.ai/api/call/mesh-audit-external-posture",
  "mcp_url": "https://market.meshtool.ai/mcp",
  "pay_url": "https://market.meshtool.ai/api/accounts",
  "describedby": "https://market.meshtool.ai/c/mesh-audit-external-posture",
  "payment": {
    "status": 402,
    "currency": "MESH",
    "price": 6,
    "mint_key": "POST https://market.meshtool.ai/api/accounts"
  }
}