Troystack Api — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Troystack Api (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
REST API + MCP Server for TroyStack. Provides live precious metals data, portfolio management, and AI/LLM integration.
npm install
cp .env.example .env # fill in Supabase credentials
npm run devSUPABASE_URLSUPABASE_SERVICE_ROLE_KEYPORT (Railway sets automatically)Custom domain: api.troystack.ai
Run migrations/001_api_keys.sql in Supabase SQL editor.
| Method | Path | Description |
|---|---|---|
| GET | /v1/prices | Live spot prices (Au, Ag, Pt, Pd) |
| GET | /v1/prices/history | Historical prices |
| GET | /v1/market-intel | News headlines |
| GET | /v1/vault-watch | COMEX inventory |
| GET | /v1/speculation | What-if projections |
| Method | Path | Description |
|---|---|---|
| GET | /v1/portfolio | Portfolio summary |
| GET | /v1/analytics | Cost basis analysis |
| GET | /v1/holdings | List holdings |
| POST | /v1/holdings | Add purchase |
| Path | Description |
|---|---|
/llms.txt | LLM-readable description |
/openapi.json | OpenAPI 3.0 spec |
/.well-known/ai-plugin.json | AI plugin manifest |
/.well-known/mcp.json | MCP server manifest |
User's iPhone → TroyStack app (local SQLite)
↕ sync
Supabase (server-side storage)
↕
TroyStack API (Railway)
↕ ↕
AI Agents X/Twitter Bot
(Claude, GPT) (auto-tweets)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.