{"name":"production-readiness-score","description":"Composite: one call runs secrets-exposure-check, deploy-config-risk, db-migration-risk, dep-risk-summary, and prompt-injection-surface in parallel and rolls the results into one production-readiness verdict for a repo. Send either {repo: 'owner/name'} or {files: [{path, content}]}, with optional weights (each component in [0, 0.5], normalized) and max_findings (default 10, cap 50) to tune the output. Returns a composite score 0-100, a production_grade (production-ready, needs-review, risky, or do-not-ship), per-component sub-scores, deduped findings ranked by severity and score_contribution, and a plain-English summary naming the most acute risks. Use it as an AI app deploy gate, one-call repo audit, pre-deploy risk scan, or vibe-coded app safety check before shipping code an LLM wrote.","price":"$0.10","method":"POST","input_schema":{"oneOf":[{"type":"object","properties":{"repo":{"type":"string","description":"GitHub repo in 'owner/name' format"},"branch":{"type":"string","description":"Optional branch; defaults to repo's default_branch"},"weights":{"type":"object","description":"Optional weights override; each key in [0, 0.5]","properties":{"secrets":{"type":"number"},"deploy":{"type":"number"},"migrations":{"type":"number"},"deps":{"type":"number"},"prompt":{"type":"number"}}},"max_findings":{"type":"integer","description":"Cap on findings in response (default 10, max 50)"}},"required":["repo"]},{"type":"object","properties":{"files":{"type":"array","items":{"type":"object","properties":{"path":{"type":"string"},"content":{"type":"string"}},"required":["path","content"]}},"weights":{"type":"object","properties":{"secrets":{"type":"number"},"deploy":{"type":"number"},"migrations":{"type":"number"},"deps":{"type":"number"},"prompt":{"type":"number"}}},"max_findings":{"type":"integer"}},"required":["files"]}]},"input_example":{"repo":"rooz21/prooflayer-fixtures"},"output_example":{"score":62,"risk_level":"high","production_grade":"risky","component_scores":{"secrets":80,"migrations":60,"deps":30,"deploy":40,"prompt":50},"weights_used":{"secrets":0.3,"migrations":0.2,"deps":0.2,"deploy":0.15,"prompt":0.15},"findings":[{"kind":"hardcoded_secret","severity":"critical","path":".env","line":3,"evidence":"AWS_ACCESS_KEY_ID=[REDACTED:aws_access_key]","recommendation":"Remove the aws_access_key from .env and rotate it.","score_contribution":12}],"signals":{"findings_emitted":10,"findings_total_after_dedupe":14,"findings_total_pre_dedupe":18,"components_succeeded":5},"summary":"Composite 62/100 (risky). Critical AWS key in .env, open CORS in vercel.json, DROP COLUMN migration. Address secrets first; the prod-readiness score is dominated by secret exposure.","metadata":{"repo":"rooz21/prooflayer-fixtures","branch":"main","files_scanned":18,"files_fetched_via_api":26,"degraded":false}},"x402_payment_required":true,"x402_facilitator":"https://api.cdp.coinbase.com/platform/v2/x402"}