Servidor MCP
Python Code Validator
ai.statemind/python-code-validator
Qué hace este MCP
Validates Python code through linting, type checks, security analysis, sandbox execution, and corrective suggestions.
Capacidades
Herramientas
3
herramientas
execute_python
Execute Python
Everything repair does, and then RUNS the code in a throwaway container — no network, read-only filesystem, killed at options.timeout_s — reporting exit code, stdout and stderr. Any '>>>' examples in the code are run too, and one that does not print what it says is an error the other tools cannot see. This is a side effect: do not submit code you do not want executed. Use it when you need proof that the code runs, or that it does what it says. Alternatives: validate_python for the diagnosis and repair_python for the fix, neither of which runs anything.
Auth: a key is required. This call needs a paid key and answers HTTP 402 without one. Credits are bought without an account, 10 per call: GET /v1/pricing says where to send the xDAI. Or pay for this one call with no key at all: call it without one and the result carries x402 payment requirements ($0.1 in USD Coin on eip155:8453); sign them and repeat the call with the payment in _meta['x402/payment'].
Arguments: code: the whole file, 1..200000 bytes of UTF-8 measured after encoding (empty is refused with 400, larger with 413); a fragment is fine, but line and column numbers in the answer count from 1 in what you sent. language: must be 'python'; anything else is 400, and the field may be omitted. options.max_iterations (1..10, default 3) caps the fix/verify rounds: raise it for a file with several independent faults, leave it for a snippet. options.optimize (default false) additionally folds constants and drops dead code, and is only worth setting when you asked for a rewrite anyway. options.transpile_to (e.g. 'javascript') returns a translation of the *repaired* source in transpiled, not of what you sent. fixed_code is null when nothing could be proven safe to change, so treat null as 'no fix', not as an error. options.timeout_s (seconds, default 5) is the wall clock for the run; the schema allows up to 60 but this deployment caps it at 30 and refuses a larger value with 400. options.expected_output compares stdout byte for byte and adds an 'expected-output' diagnostic (valid=false) when it differs, which is how you ask for 'it did the right thing' rather than 'it ran'. options.examples is the same question for code with no output: pass what you asked for as doctest lines ('>>> total([1, 2])' then '3') or assertions ('assert total([1, 2]) == 3'), and each is run against the code -- one that does not hold is a 'python:example-mismatch' error, and repair looks for a single-token change that makes them all pass. Send it whenever you know what you asked for: without it, code that runs but returns the wrong answer looks perfect from here. The program that runs is the repaired one, so read fixed_code before you trust runtime.stdout, and it runs exactly once however many rounds the repair took.
Returns valid, score 0..1, diagnostics (rule, message, line, column), security findings, fixes, fixed_code and runtime; see outputSchema. The code and its verdict are retained to improve the service.
Idempotente
Esquema de entrada
{'type': 'object', '$defs': {'Mode': {'enum': ['static', 'repair', 'execute'], 'type': 'string', 'title': 'Mode', 'description': 'How much work the service is allowed to do.\n\n``static``\n Never executes the submitted code. Parsing, linting and security\n scanning only. This is the default and the only mode that is safe to\n expose without a container sandbox.\n``repair``\n Static mode plus deterministic auto-fixes and refactors.\n``execute``\n Repair plus running the code inside a sandbox to prove it works.'}, 'Options': {'type': 'object', 'title': 'Options', 'properties': {'examples': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Examples', 'default': None, 'description': "What the code is supposed to do, as doctest lines ('>>> f(2)' on one line, '4' on the next) or as plain assertions ('assert f(2) == 4'). In execute mode they are run in the sandbox: an example that does not hold is a 'python:example-mismatch' error and makes the response invalid, and repair searches for a single-token change that makes every one of them pass. This is the only way the service can tell code that runs from code that is right, so send it whenever you know what you asked for. Examples already written in the code ('>>> ' in any string) are used the same way without this option. Ignored in the other modes, which run nothing."}, 'optimize': {'type': 'boolean', 'title': 'Optimize', 'default': False, 'description': 'Run constant folding / dead-code elimination. Off by default: the optimiser rewrites the program, and a rewrite is only returned when it provably keeps every effectful construct.'}, 'timeout_s': {'anyOf': [{'type': 'number', 'maximum': 60, 'exclusiveMinimum': 0}, {'type': 'null'}], 'title': 'Timeout S', 'default': None, 'description': "Wall-clock budget for running the code. Omitted means the service's own default (MSVC_DEFAULT_TIMEOUT_S). Only execute mode runs anything; a deployment may cap this below the 60 the schema allows and refuses a larger value."}, 'transpile_to': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Transpile To', 'default': None, 'description': "Target language for a transpiled copy, e.g. 'javascript'. The copy is made from the code as it ends up, so in repair and execute mode it translates the repaired source rather than the submitted one."}, 'max_iterations': {'type': 'integer', 'title': 'Max Iterations', 'default': 3, 'maximum': 10, 'minimum': 1, 'description': 'How many fix/verify rounds the repair loop may take. Ignored in static mode, which changes nothing.'}, 'expected_output': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Expected Output', 'default': None, 'description': "Exact stdout the code must produce in execute mode. A mismatch is an 'expected-output' diagnostic and makes the response invalid, even when the program exits cleanly. Ignored in the other modes, which produce no output."}}, 'description': 'Per-request tuning knobs.'}, 'Language': {'enum': ['python', 'javascript', 'typescript', 'html', 'sql', 'solidity', 'other'], 'type': 'string', 'title': 'Language', 'description': 'Source languages a validator can accept.'}}, 'title': 'ValidateRequest', 'required': ['code'], 'properties': {'code': {'type': 'string', 'title': 'Code', 'maxLength': 200000, 'minLength': 1, 'description': 'The source to check, as a whole file where possible: diagnostics carry the line and column of the text you send, and a fragment hides the imports and definitions the type check needs. A deployment may accept fewer bytes than the 200000 here.'}, 'options': {'$ref': '#/$defs/Options', 'description': 'Tuning knobs. Most of them only take effect in the mode that does the corresponding work; see each field.'}, 'language': {'$ref': '#/$defs/Language', 'default': 'python', 'description': 'The language of the code. A service that does not handle it refuses the request rather than guessing; the enum is shared across services, so it lists more than any one of them accepts.'}}, 'description': 'A validation job submitted by an agent.'}
Esquema de salida
{'type': 'object', '$defs': {'Meta': {'type': 'object', 'title': 'Meta', 'required': ['service', 'version'], 'properties': {'ai': {'anyOf': [{'$ref': '#/$defs/AIReport'}, {'type': 'null'}], 'default': None}, 'api': {'type': 'string', 'title': 'Api', 'default': 'v1'}, 'mode': {'$ref': '#/$defs/Mode', 'default': 'static'}, 'engine': {'type': 'object', 'title': 'Engine', 'additionalProperties': {'type': 'string'}}, 'service': {'type': 'string', 'title': 'Service'}, 'version': {'type': 'string', 'title': 'Version'}, 'request_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Request Id', 'default': None}, 'duration_ms': {'type': 'integer', 'title': 'Duration Ms', 'default': 0}}, 'description': 'Provenance of a response, so results stay reproducible.'}, 'Mode': {'enum': ['static', 'repair', 'execute'], 'type': 'string', 'title': 'Mode', 'description': 'How much work the service is allowed to do.\n\n``static``\n Never executes the submitted code. Parsing, linting and security\n scanning only. This is the default and the only mode that is safe to\n expose without a container sandbox.\n``repair``\n Static mode plus deterministic auto-fixes and refactors.\n``execute``\n Repair plus running the code inside a sandbox to prove it works.'}, 'AIReport': {'type': 'object', 'title': 'AIReport', 'properties': {'calls': {'type': 'integer', 'title': 'Calls', 'default': 0}, 'detail': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Detail', 'default': None}, 'backend': {'type': 'string', 'title': 'Backend', 'default': ''}, 'outcome': {'type': 'string', 'title': 'Outcome', 'default': 'not-consulted'}, 'consulted': {'type': 'boolean', 'title': 'Consulted', 'default': False}, 'duration_ms': {'type': 'integer', 'title': 'Duration Ms', 'default': 0}}, 'description': 'What the optional AI refinement backend contributed.\n\nAbsent from a response when no backend is configured. Present but with\n``consulted=False`` when the deterministic fixers settled the code on their\nown, so a caller can tell "the model was never needed" apart from "the\nmodel was asked and came back empty-handed".'}, 'Severity': {'enum': ['error', 'warning', 'info'], 'type': 'string', 'title': 'Severity', 'description': 'Severity of a single finding.'}, 'Diagnostic': {'type': 'object', 'title': 'Diagnostic', 'required': ['severity', 'rule', 'message'], 'properties': {'line': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Line', 'default': None}, 'rule': {'type': 'string', 'title': 'Rule'}, 'column': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Column', 'default': None}, 'message': {'type': 'string', 'title': 'Message'}, 'severity': {'$ref': '#/$defs/Severity'}}, 'description': 'A correctness problem found in the code.'}, 'RuntimeReport': {'type': 'object', 'title': 'RuntimeReport', 'properties': {'ran': {'type': 'boolean', 'title': 'Ran', 'default': False}, 'stderr': {'type': 'string', 'title': 'Stderr', 'default': ''}, 'stdout': {'type': 'string', 'title': 'Stdout', 'default': ''}, 'sandbox': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Sandbox', 'default': None}, 'timed_out': {'type': 'boolean', 'title': 'Timed Out', 'default': False}, 'returncode': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Returncode', 'default': None}, 'duration_ms': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Duration Ms', 'default': None}}, 'description': 'Outcome of executing the code in a sandbox.'}, 'SecurityFinding': {'type': 'object', 'title': 'SecurityFinding', 'required': ['tool', 'id', 'severity', 'message'], 'properties': {'id': {'type': 'string', 'title': 'Id'}, 'cwe': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Cwe', 'default': None}, 'line': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Line', 'default': None}, 'tool': {'type': 'string', 'title': 'Tool'}, 'message': {'type': 'string', 'title': 'Message'}, 'severity': {'$ref': '#/$defs/Severity'}, 'confidence': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Confidence', 'default': None}}, 'description': 'A security problem reported by one of the scanners.'}}, 'title': 'ValidateResponse', 'required': ['valid', 'score', 'meta'], 'properties': {'meta': {'$ref': '#/$defs/Meta'}, 'fixes': {'type': 'array', 'items': {'type': 'string'}, 'title': 'Fixes'}, 'score': {'type': 'number', 'title': 'Score', 'maximum': 1.0, 'minimum': 0.0}, 'valid': {'type': 'boolean', 'title': 'Valid'}, 'runtime': {'$ref': '#/$defs/RuntimeReport'}, 'security': {'type': 'array', 'items': {'$ref': '#/$defs/SecurityFinding'}, 'title': 'Security'}, 'fixed_code': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Fixed Code', 'default': None}, 'transpiled': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Transpiled', 'default': None}, 'diagnostics': {'type': 'array', 'items': {'$ref': '#/$defs/Diagnostic'}, 'title': 'Diagnostics'}}, 'description': 'The result an agent gets back and pays for.'}
repair_python
Repair Python
Everything validation does, plus deterministic fixes: the corrected source comes back in fixed_code, and the original is kept whenever the fix cannot be proven safe. The code is still never run. Use it when validation failed and you want the fix rather than the diagnosis. Alternatives: validate_python when the diagnosis is enough; execute_python when the fix has to be proven to run.
Auth: a key is required. This call needs a paid key and answers HTTP 402 without one. Credits are bought without an account, 3 per call: GET /v1/pricing says where to send the xDAI. Or pay for this one call with no key at all: call it without one and the result carries x402 payment requirements ($0.03 in USD Coin on eip155:8453); sign them and repeat the call with the payment in _meta['x402/payment'].
Arguments: code: the whole file, 1..200000 bytes of UTF-8 measured after encoding (empty is refused with 400, larger with 413); a fragment is fine, but line and column numbers in the answer count from 1 in what you sent. language: must be 'python'; anything else is 400, and the field may be omitted. options.max_iterations (1..10, default 3) caps the fix/verify rounds: raise it for a file with several independent faults, leave it for a snippet. options.optimize (default false) additionally folds constants and drops dead code, and is only worth setting when you asked for a rewrite anyway. options.transpile_to (e.g. 'javascript') returns a translation of the *repaired* source in transpiled, not of what you sent. fixed_code is null when nothing could be proven safe to change, so treat null as 'no fix', not as an error. options.timeout_s, options.examples and options.expected_output do nothing here: nothing is run, so there is no clock, no stdout, and no way to check an example.
Returns valid, score 0..1, diagnostics (rule, message, line, column), security findings, fixes, fixed_code and runtime; see outputSchema. The code and its verdict are retained to improve the service.
Solo lectura
Idempotente
Esquema de entrada
{'type': 'object', '$defs': {'Mode': {'enum': ['static', 'repair', 'execute'], 'type': 'string', 'title': 'Mode', 'description': 'How much work the service is allowed to do.\n\n``static``\n Never executes the submitted code. Parsing, linting and security\n scanning only. This is the default and the only mode that is safe to\n expose without a container sandbox.\n``repair``\n Static mode plus deterministic auto-fixes and refactors.\n``execute``\n Repair plus running the code inside a sandbox to prove it works.'}, 'Options': {'type': 'object', 'title': 'Options', 'properties': {'examples': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Examples', 'default': None, 'description': "What the code is supposed to do, as doctest lines ('>>> f(2)' on one line, '4' on the next) or as plain assertions ('assert f(2) == 4'). In execute mode they are run in the sandbox: an example that does not hold is a 'python:example-mismatch' error and makes the response invalid, and repair searches for a single-token change that makes every one of them pass. This is the only way the service can tell code that runs from code that is right, so send it whenever you know what you asked for. Examples already written in the code ('>>> ' in any string) are used the same way without this option. Ignored in the other modes, which run nothing."}, 'optimize': {'type': 'boolean', 'title': 'Optimize', 'default': False, 'description': 'Run constant folding / dead-code elimination. Off by default: the optimiser rewrites the program, and a rewrite is only returned when it provably keeps every effectful construct.'}, 'timeout_s': {'anyOf': [{'type': 'number', 'maximum': 60, 'exclusiveMinimum': 0}, {'type': 'null'}], 'title': 'Timeout S', 'default': None, 'description': "Wall-clock budget for running the code. Omitted means the service's own default (MSVC_DEFAULT_TIMEOUT_S). Only execute mode runs anything; a deployment may cap this below the 60 the schema allows and refuses a larger value."}, 'transpile_to': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Transpile To', 'default': None, 'description': "Target language for a transpiled copy, e.g. 'javascript'. The copy is made from the code as it ends up, so in repair and execute mode it translates the repaired source rather than the submitted one."}, 'max_iterations': {'type': 'integer', 'title': 'Max Iterations', 'default': 3, 'maximum': 10, 'minimum': 1, 'description': 'How many fix/verify rounds the repair loop may take. Ignored in static mode, which changes nothing.'}, 'expected_output': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Expected Output', 'default': None, 'description': "Exact stdout the code must produce in execute mode. A mismatch is an 'expected-output' diagnostic and makes the response invalid, even when the program exits cleanly. Ignored in the other modes, which produce no output."}}, 'description': 'Per-request tuning knobs.'}, 'Language': {'enum': ['python', 'javascript', 'typescript', 'html', 'sql', 'solidity', 'other'], 'type': 'string', 'title': 'Language', 'description': 'Source languages a validator can accept.'}}, 'title': 'ValidateRequest', 'required': ['code'], 'properties': {'code': {'type': 'string', 'title': 'Code', 'maxLength': 200000, 'minLength': 1, 'description': 'The source to check, as a whole file where possible: diagnostics carry the line and column of the text you send, and a fragment hides the imports and definitions the type check needs. A deployment may accept fewer bytes than the 200000 here.'}, 'options': {'$ref': '#/$defs/Options', 'description': 'Tuning knobs. Most of them only take effect in the mode that does the corresponding work; see each field.'}, 'language': {'$ref': '#/$defs/Language', 'default': 'python', 'description': 'The language of the code. A service that does not handle it refuses the request rather than guessing; the enum is shared across services, so it lists more than any one of them accepts.'}}, 'description': 'A validation job submitted by an agent.'}
Esquema de salida
{'type': 'object', '$defs': {'Meta': {'type': 'object', 'title': 'Meta', 'required': ['service', 'version'], 'properties': {'ai': {'anyOf': [{'$ref': '#/$defs/AIReport'}, {'type': 'null'}], 'default': None}, 'api': {'type': 'string', 'title': 'Api', 'default': 'v1'}, 'mode': {'$ref': '#/$defs/Mode', 'default': 'static'}, 'engine': {'type': 'object', 'title': 'Engine', 'additionalProperties': {'type': 'string'}}, 'service': {'type': 'string', 'title': 'Service'}, 'version': {'type': 'string', 'title': 'Version'}, 'request_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Request Id', 'default': None}, 'duration_ms': {'type': 'integer', 'title': 'Duration Ms', 'default': 0}}, 'description': 'Provenance of a response, so results stay reproducible.'}, 'Mode': {'enum': ['static', 'repair', 'execute'], 'type': 'string', 'title': 'Mode', 'description': 'How much work the service is allowed to do.\n\n``static``\n Never executes the submitted code. Parsing, linting and security\n scanning only. This is the default and the only mode that is safe to\n expose without a container sandbox.\n``repair``\n Static mode plus deterministic auto-fixes and refactors.\n``execute``\n Repair plus running the code inside a sandbox to prove it works.'}, 'AIReport': {'type': 'object', 'title': 'AIReport', 'properties': {'calls': {'type': 'integer', 'title': 'Calls', 'default': 0}, 'detail': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Detail', 'default': None}, 'backend': {'type': 'string', 'title': 'Backend', 'default': ''}, 'outcome': {'type': 'string', 'title': 'Outcome', 'default': 'not-consulted'}, 'consulted': {'type': 'boolean', 'title': 'Consulted', 'default': False}, 'duration_ms': {'type': 'integer', 'title': 'Duration Ms', 'default': 0}}, 'description': 'What the optional AI refinement backend contributed.\n\nAbsent from a response when no backend is configured. Present but with\n``consulted=False`` when the deterministic fixers settled the code on their\nown, so a caller can tell "the model was never needed" apart from "the\nmodel was asked and came back empty-handed".'}, 'Severity': {'enum': ['error', 'warning', 'info'], 'type': 'string', 'title': 'Severity', 'description': 'Severity of a single finding.'}, 'Diagnostic': {'type': 'object', 'title': 'Diagnostic', 'required': ['severity', 'rule', 'message'], 'properties': {'line': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Line', 'default': None}, 'rule': {'type': 'string', 'title': 'Rule'}, 'column': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Column', 'default': None}, 'message': {'type': 'string', 'title': 'Message'}, 'severity': {'$ref': '#/$defs/Severity'}}, 'description': 'A correctness problem found in the code.'}, 'RuntimeReport': {'type': 'object', 'title': 'RuntimeReport', 'properties': {'ran': {'type': 'boolean', 'title': 'Ran', 'default': False}, 'stderr': {'type': 'string', 'title': 'Stderr', 'default': ''}, 'stdout': {'type': 'string', 'title': 'Stdout', 'default': ''}, 'sandbox': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Sandbox', 'default': None}, 'timed_out': {'type': 'boolean', 'title': 'Timed Out', 'default': False}, 'returncode': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Returncode', 'default': None}, 'duration_ms': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Duration Ms', 'default': None}}, 'description': 'Outcome of executing the code in a sandbox.'}, 'SecurityFinding': {'type': 'object', 'title': 'SecurityFinding', 'required': ['tool', 'id', 'severity', 'message'], 'properties': {'id': {'type': 'string', 'title': 'Id'}, 'cwe': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Cwe', 'default': None}, 'line': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Line', 'default': None}, 'tool': {'type': 'string', 'title': 'Tool'}, 'message': {'type': 'string', 'title': 'Message'}, 'severity': {'$ref': '#/$defs/Severity'}, 'confidence': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Confidence', 'default': None}}, 'description': 'A security problem reported by one of the scanners.'}}, 'title': 'ValidateResponse', 'required': ['valid', 'score', 'meta'], 'properties': {'meta': {'$ref': '#/$defs/Meta'}, 'fixes': {'type': 'array', 'items': {'type': 'string'}, 'title': 'Fixes'}, 'score': {'type': 'number', 'title': 'Score', 'maximum': 1.0, 'minimum': 0.0}, 'valid': {'type': 'boolean', 'title': 'Valid'}, 'runtime': {'$ref': '#/$defs/RuntimeReport'}, 'security': {'type': 'array', 'items': {'$ref': '#/$defs/SecurityFinding'}, 'title': 'Security'}, 'fixed_code': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Fixed Code', 'default': None}, 'transpiled': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Transpiled', 'default': None}, 'diagnostics': {'type': 'array', 'items': {'$ref': '#/$defs/Diagnostic'}, 'title': 'Diagnostics'}}, 'description': 'The result an agent gets back and pays for.'}
validate_python
Validate Python
Check Python source without running it: parse, lint (ruff), type-check (mypy), AST security policy, credential scan. Safe on code you do not trust. Use it on every Python file you generated or edited, before writing it to disk. Alternatives: repair_python to get the corrected source instead of the diagnosis; execute_python to prove the code runs.
Auth: a key is required. A free key covers this call, 25 per day, then HTTP 429; get one with POST /v1/keys. Credits are bought without an account, 1 per call: GET /v1/pricing says where to send the xDAI. Or pay for this one call with no key at all: call it without one and the result carries x402 payment requirements ($0.01 in USD Coin on eip155:8453); sign them and repeat the call with the payment in _meta['x402/payment'].
Arguments: code: the whole file, 1..200000 bytes of UTF-8 measured after encoding (empty is refused with 400, larger with 413); a fragment is fine, but line and column numbers in the answer count from 1 in what you sent. language: must be 'python'; anything else is 400, and the field may be omitted. Of options only transpile_to (e.g. 'javascript', which returns a translated copy in transpiled) acts here; timeout_s, max_iterations, optimize, examples and expected_output need a pass that rewrites or runs the code, so send code alone. Ignored options are not refused, so a call that sets them looks like it worked; and code that does not parse is answered rather than refused: valid=false with the syntax error located, which is the point.
Returns valid, score 0..1, diagnostics (rule, message, line, column), security findings, fixes, fixed_code and runtime; see outputSchema. The code and its verdict are retained to improve the service.
Solo lectura
Idempotente
Esquema de entrada
{'type': 'object', '$defs': {'Mode': {'enum': ['static', 'repair', 'execute'], 'type': 'string', 'title': 'Mode', 'description': 'How much work the service is allowed to do.\n\n``static``\n Never executes the submitted code. Parsing, linting and security\n scanning only. This is the default and the only mode that is safe to\n expose without a container sandbox.\n``repair``\n Static mode plus deterministic auto-fixes and refactors.\n``execute``\n Repair plus running the code inside a sandbox to prove it works.'}, 'Options': {'type': 'object', 'title': 'Options', 'properties': {'examples': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Examples', 'default': None, 'description': "What the code is supposed to do, as doctest lines ('>>> f(2)' on one line, '4' on the next) or as plain assertions ('assert f(2) == 4'). In execute mode they are run in the sandbox: an example that does not hold is a 'python:example-mismatch' error and makes the response invalid, and repair searches for a single-token change that makes every one of them pass. This is the only way the service can tell code that runs from code that is right, so send it whenever you know what you asked for. Examples already written in the code ('>>> ' in any string) are used the same way without this option. Ignored in the other modes, which run nothing."}, 'optimize': {'type': 'boolean', 'title': 'Optimize', 'default': False, 'description': 'Run constant folding / dead-code elimination. Off by default: the optimiser rewrites the program, and a rewrite is only returned when it provably keeps every effectful construct.'}, 'timeout_s': {'anyOf': [{'type': 'number', 'maximum': 60, 'exclusiveMinimum': 0}, {'type': 'null'}], 'title': 'Timeout S', 'default': None, 'description': "Wall-clock budget for running the code. Omitted means the service's own default (MSVC_DEFAULT_TIMEOUT_S). Only execute mode runs anything; a deployment may cap this below the 60 the schema allows and refuses a larger value."}, 'transpile_to': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Transpile To', 'default': None, 'description': "Target language for a transpiled copy, e.g. 'javascript'. The copy is made from the code as it ends up, so in repair and execute mode it translates the repaired source rather than the submitted one."}, 'max_iterations': {'type': 'integer', 'title': 'Max Iterations', 'default': 3, 'maximum': 10, 'minimum': 1, 'description': 'How many fix/verify rounds the repair loop may take. Ignored in static mode, which changes nothing.'}, 'expected_output': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Expected Output', 'default': None, 'description': "Exact stdout the code must produce in execute mode. A mismatch is an 'expected-output' diagnostic and makes the response invalid, even when the program exits cleanly. Ignored in the other modes, which produce no output."}}, 'description': 'Per-request tuning knobs.'}, 'Language': {'enum': ['python', 'javascript', 'typescript', 'html', 'sql', 'solidity', 'other'], 'type': 'string', 'title': 'Language', 'description': 'Source languages a validator can accept.'}}, 'title': 'ValidateRequest', 'required': ['code'], 'properties': {'code': {'type': 'string', 'title': 'Code', 'maxLength': 200000, 'minLength': 1, 'description': 'The source to check, as a whole file where possible: diagnostics carry the line and column of the text you send, and a fragment hides the imports and definitions the type check needs. A deployment may accept fewer bytes than the 200000 here.'}, 'options': {'$ref': '#/$defs/Options', 'description': 'Tuning knobs. Most of them only take effect in the mode that does the corresponding work; see each field.'}, 'language': {'$ref': '#/$defs/Language', 'default': 'python', 'description': 'The language of the code. A service that does not handle it refuses the request rather than guessing; the enum is shared across services, so it lists more than any one of them accepts.'}}, 'description': 'A validation job submitted by an agent.'}
Esquema de salida
{'type': 'object', '$defs': {'Meta': {'type': 'object', 'title': 'Meta', 'required': ['service', 'version'], 'properties': {'ai': {'anyOf': [{'$ref': '#/$defs/AIReport'}, {'type': 'null'}], 'default': None}, 'api': {'type': 'string', 'title': 'Api', 'default': 'v1'}, 'mode': {'$ref': '#/$defs/Mode', 'default': 'static'}, 'engine': {'type': 'object', 'title': 'Engine', 'additionalProperties': {'type': 'string'}}, 'service': {'type': 'string', 'title': 'Service'}, 'version': {'type': 'string', 'title': 'Version'}, 'request_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Request Id', 'default': None}, 'duration_ms': {'type': 'integer', 'title': 'Duration Ms', 'default': 0}}, 'description': 'Provenance of a response, so results stay reproducible.'}, 'Mode': {'enum': ['static', 'repair', 'execute'], 'type': 'string', 'title': 'Mode', 'description': 'How much work the service is allowed to do.\n\n``static``\n Never executes the submitted code. Parsing, linting and security\n scanning only. This is the default and the only mode that is safe to\n expose without a container sandbox.\n``repair``\n Static mode plus deterministic auto-fixes and refactors.\n``execute``\n Repair plus running the code inside a sandbox to prove it works.'}, 'AIReport': {'type': 'object', 'title': 'AIReport', 'properties': {'calls': {'type': 'integer', 'title': 'Calls', 'default': 0}, 'detail': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Detail', 'default': None}, 'backend': {'type': 'string', 'title': 'Backend', 'default': ''}, 'outcome': {'type': 'string', 'title': 'Outcome', 'default': 'not-consulted'}, 'consulted': {'type': 'boolean', 'title': 'Consulted', 'default': False}, 'duration_ms': {'type': 'integer', 'title': 'Duration Ms', 'default': 0}}, 'description': 'What the optional AI refinement backend contributed.\n\nAbsent from a response when no backend is configured. Present but with\n``consulted=False`` when the deterministic fixers settled the code on their\nown, so a caller can tell "the model was never needed" apart from "the\nmodel was asked and came back empty-handed".'}, 'Severity': {'enum': ['error', 'warning', 'info'], 'type': 'string', 'title': 'Severity', 'description': 'Severity of a single finding.'}, 'Diagnostic': {'type': 'object', 'title': 'Diagnostic', 'required': ['severity', 'rule', 'message'], 'properties': {'line': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Line', 'default': None}, 'rule': {'type': 'string', 'title': 'Rule'}, 'column': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Column', 'default': None}, 'message': {'type': 'string', 'title': 'Message'}, 'severity': {'$ref': '#/$defs/Severity'}}, 'description': 'A correctness problem found in the code.'}, 'RuntimeReport': {'type': 'object', 'title': 'RuntimeReport', 'properties': {'ran': {'type': 'boolean', 'title': 'Ran', 'default': False}, 'stderr': {'type': 'string', 'title': 'Stderr', 'default': ''}, 'stdout': {'type': 'string', 'title': 'Stdout', 'default': ''}, 'sandbox': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Sandbox', 'default': None}, 'timed_out': {'type': 'boolean', 'title': 'Timed Out', 'default': False}, 'returncode': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Returncode', 'default': None}, 'duration_ms': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Duration Ms', 'default': None}}, 'description': 'Outcome of executing the code in a sandbox.'}, 'SecurityFinding': {'type': 'object', 'title': 'SecurityFinding', 'required': ['tool', 'id', 'severity', 'message'], 'properties': {'id': {'type': 'string', 'title': 'Id'}, 'cwe': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Cwe', 'default': None}, 'line': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Line', 'default': None}, 'tool': {'type': 'string', 'title': 'Tool'}, 'message': {'type': 'string', 'title': 'Message'}, 'severity': {'$ref': '#/$defs/Severity'}, 'confidence': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Confidence', 'default': None}}, 'description': 'A security problem reported by one of the scanners.'}}, 'title': 'ValidateResponse', 'required': ['valid', 'score', 'meta'], 'properties': {'meta': {'$ref': '#/$defs/Meta'}, 'fixes': {'type': 'array', 'items': {'type': 'string'}, 'title': 'Fixes'}, 'score': {'type': 'number', 'title': 'Score', 'maximum': 1.0, 'minimum': 0.0}, 'valid': {'type': 'boolean', 'title': 'Valid'}, 'runtime': {'$ref': '#/$defs/RuntimeReport'}, 'security': {'type': 'array', 'items': {'$ref': '#/$defs/SecurityFinding'}, 'title': 'Security'}, 'fixed_code': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Fixed Code', 'default': None}, 'transpiled': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Transpiled', 'default': None}, 'diagnostics': {'type': 'array', 'items': {'$ref': '#/$defs/Diagnostic'}, 'title': 'Diagnostics'}}, 'description': 'The result an agent gets back and pays for.'}
Historial
Cambios recientes en herramientas
Añadido
execute_python
17 de September de 2026 a las 07:57
Añadido
repair_python
17 de September de 2026 a las 07:57
Añadido
validate_python
17 de September de 2026 a las 07:57
Descubrir
Servidores MCP similares
hyperion
com.thetempleofdoom.hyperion/hyperion
Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…
Vee3
io.github.Vee3io/vee3
Manages Clerk authentication infrastructure, including users, organizations, domains, sessions, tokens, OAuth, SSO, machines, per…
IA-QA — 130+ QA & Dev Tools for AI Agents
io.github.JcJamet/ia-qa-toolbox
Provides deterministic QA, evaluation, testing, code analysis, prompt and RAG checks, model comparison, and web security diagnost…
validoria-mcp
com.validoria/validoria-mcp
Runs continuous website, API, and webshop tests covering security, SEO, performance, accessibility, browser journeys, and inciden…
HubVibe: Pay-per-Call Tools for AI Agents: Web Search, Email Verify, KYC, Stocks, Crypto, News, Data
io.github.Its-fortunatefolly/hubvibe
Offers paid utilities for web audits, HTTP fetching and extraction, BigQuery analysis, LLM processing, code execution, blockchain…
developer-tools
net.programmes/developer-tools
Provides general-purpose developer utilities for encoding, hashing, encryption, JSON, HTML, CSS, networking, and related data tra…
Qiniso
io.github.qinisolabs/qiniso
Provides deterministic formatting, parsing, holiday and tax lookups, address handling, and checksum or structure validation for i…
ContrastAPI
com.contrastcyber/api
Provides security research and assessment tools covering CVEs, IOCs, dependencies, secrets, injection risks, HTTP headers, domain…