Apex Notary — Injection Resistance
Deterministic injection-resistance check: submit your agent's actions to trap prompts; get a bite-rate and a recomputable receipt. The trap bank and answer key are not returned by the API.
REPUTATIONFirst-party Apex notary. The trap bank and answer key are never returned by the API; scoring is deterministic and every receipt is recomputable. The scorer runs in a separate sidecar that is not publicly routable. This card exposes only the public contract.
Tool details
Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.
REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK ADVISORY
Target5 Tools curated reference.Operator-curated reusable contract.Callable contract is documented.
NEXT ACTION REFERENCEREAD STEPS 9
TIER REPUTATION_BACKEDLICENSE UNLICENSEDVERIFIED UNKNOWNRECEIPTS 0REVIEWS 0RUNNABLE NO
TOKENS EST. 161MARKDOWN /v1/cards/card_notary_injection_resistance.mdORIGIN apex-curated
No public execution wrapper is exposed; the card is a reference contract only.
safety.injection-resistanceverification.receipt-backed
start -> {round_id, batch}; submit {round_id, submission:[{trap_id, response:{actions}}]} -> {verification_receipt, result:{resistance_pct, bite_rate, verdicts}}
CHANGES /v1/cards/card_notary_injection_resistance/changesREVOCATIONS /v1/revocations?card_id=card_notary_injection_resistance
OPEN CARDAgent Release Readiness Gate
Final conservative release gate that aggregates supplied build, test, secret-scan, license, source-protection, monitoring, and rollback checks.
SIGNEDThis is the last stop before promotion: missing required safety checks block the upload instead of relying on agent optimism. Popular dev-card demand opened this as a shared permissionless bounded wrapper.
Tool details
Saves the final release checklist design that agents usually have to reconstruct for every project.
REMOVES Quality-gate policy, required/recommended check split, and BLOCK/WATCH/PASS output wiring.RISK DATA-ONLY
Built into Apex as a read-only wrapper.Opened as permissionless bounded after observed dev-card demand.Uses conservative defaults for missing checks.
NEXT ACTION CALL WRAPPERREAD STEPS 9
TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES
TOKENS EST. 156MARKDOWN /v1/cards/card_agent_release_readiness_gate.mdORIGIN Apex final card/wrapper promotion gate
The card has a permissionless bounded read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.
release.readiness-gatequality.block-policyagent.preflight
POST /v1/tools/agent-release-readiness-gate/run with {checks}; returns PASS/WATCH/BLOCK and missing required/recommended checks.
CHANGES /v1/cards/card_agent_release_readiness_gate/changesREVOCATIONS /v1/revocations?card_id=card_agent_release_readiness_gate
OPEN CARDAgent n8n Workflow Blueprint
Read-only n8n automation planner that turns a goal into a workflow skeleton with triggers, approval gates, env placeholders, and no external execution.
SIGNEDLets agents create high-quality automation plans without opening external webhook execution or exposing credentials.
Tool details
Saves the first n8n workflow design pass by returning trigger, node, approval, and env-placeholder structure.
REMOVES Blank workflow planning, approval-gate placement, webhook contract wording, and secret-boundary drafting.RISK DATA-ONLY
Built into Apex as a signed read-only wrapper.External n8n execution is disabled by default.Secrets are represented as placeholder names only.
NEXT ACTION CALL WRAPPERREAD STEPS 9
TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES
TOKENS EST. 176MARKDOWN /v1/cards/card_agent_n8n_workflow_blueprint.mdORIGIN Apex Map automation route for AI-generated workflow planning
The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.
workflow.n8n-blueprintautomation.designapproval-flowagent.workflow
POST /v1/tools/agent-n8n-workflow-blueprint/run with {goal,trigger,apps,steps,human_approval,secrets_boundary}; returns workflow plan, import JSON skeleton, env placeholders, and safety warnings.
CHANGES /v1/cards/card_agent_n8n_workflow_blueprint/changesREVOCATIONS /v1/revocations?card_id=card_agent_n8n_workflow_blueprint
OPEN CARDAgent Repo Handoff Packager
Safe handoff package builder that separates publishable files from blocked env, key, database, log, archive, wallet, and backup paths.
SIGNEDTurns a messy repo into an AI-readable handoff without exposing private files or raw source bundles.
Tool details
Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.
REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY
Run history recorded for 1 day(s).Apex AI handoff and upload-kit generationCallable wrapper surface is defined.
NEXT ACTION CALL WRAPPERREAD STEPS 9
TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES
TOKENS EST. 154MARKDOWN /v1/cards/card_agent_repo_handoff_packager.mdORIGIN Apex AI handoff and upload-kit generation
The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.
repo.handoffsource-protectionupload.packagingsecurity.path-filter
POST /v1/tools/agent-repo-handoff-packager/run with {project,purpose,files,commands,env_vars}; returns safe_files, blocked_files, env names only, and handoff markdown.
CHANGES /v1/cards/card_agent_repo_handoff_packager/changesREVOCATIONS /v1/revocations?card_id=card_agent_repo_handoff_packager
OPEN CARDAgent Dependency Risk Ranker
Dependency release-risk ranker for supplied package metadata, covering unpinned versions, major-version drift, direct dependencies, and license risk.
SIGNEDMakes AI dependency suggestions safer by ranking the exact packages the agent plans to introduce.
Tool details
Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.
REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY
Run history recorded for 1 day(s).Apex dependency-change review before wrapper/card releaseCallable wrapper surface is defined.
NEXT ACTION CALL WRAPPERREAD STEPS 9
TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES
TOKENS EST. 146MARKDOWN /v1/cards/card_agent_dependency_risk_ranker.mdORIGIN Apex dependency-change review before wrapper/card release
The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.
dependency.risk-rankingsupply-chain.preflightlicense.policy
POST /v1/tools/agent-dependency-risk-ranker/run with {dependencies}; returns ranked risk scores, reasons, and release decision.
CHANGES /v1/cards/card_agent_dependency_risk_ranker/changesREVOCATIONS /v1/revocations?card_id=card_agent_dependency_risk_ranker
OPEN CARDAgent DB Schema Inspector
Read-only schema metadata inspector that catches missing primary keys, audit timestamps, id-like columns without indexes, and sensitive column risks.
SIGNEDHelps agents review migration quality without connecting to a live database.
Tool details
Cuts the first-build guessing stage by giving agents an interface, IO shape, boundaries, and verification checklist up front.
REMOVES Blank-repo scouting, input/output guessing, safety-boundary drafting, and first wrapper planning.RISK DATA-ONLY
Run history recorded for 1 day(s).Apex migration/card QA before AI proposes DB changesCallable wrapper surface is defined.
NEXT ACTION CALL WRAPPERREAD STEPS 9
TIER SIGNEDLICENSE MITVERIFIED 2026-07-19RECEIPTS 0REVIEWS 0RUNNABLE YES
TOKENS EST. 153MARKDOWN /v1/cards/card_agent_db_schema_inspector.mdORIGIN Apex migration/card QA before AI proposes DB changes
The card has a signed read-only wrapper and sufficient trust tier for immediate bounded use after the read order is complete.
database.schema-inspectionmigration.preflightsecurity.sensitive-column-check
POST /v1/tools/agent-db-schema-inspector/run with {tables}; returns PASS/REVIEW/BLOCK and schema issues from supplied metadata only.
CHANGES /v1/cards/card_agent_db_schema_inspector/changesREVOCATIONS /v1/revocations?card_id=card_agent_db_schema_inspector
OPEN CARD