deploy-check — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited deploy-check (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Verify ECS deployment state for Execution Market services. Use when the user says "deploy check", "check deployment", "verify ECS", "is it running", "check health", "deployment status", or after deploying new code.
Run all checks in parallel:
# 1. Check what revision each service is running
aws ecs describe-services \
--cluster em-production-cluster \
--services em-production-mcp-server em-production-dashboard \
--region us-east-2 \
--query 'services[*].{name:serviceName,taskDef:taskDefinition,running:runningCount,desired:desiredCount,pending:pendingCount}' \
--output table
# 2. Check health endpoints
curl -s https://mcp.execution.market/health/ | python3 -m json.tool
curl -s https://execution.market/ | head -5
# 3. Check x402 payment health
curl -s https://mcp.execution.market/health/ | python3 -c "import sys,json; h=json.load(sys.stdin); print('x402:', h.get('components',{}).get('x402',{}))"aws ecs describe-services \
--cluster em-production-cluster \
--services em-production-mcp-server em-production-dashboard \
--region us-east-2 \
--query 'services[*].{name:serviceName,taskDef:taskDefinition,running:runningCount,desired:desiredCount,deployments:deployments[*].{status:status,taskDef:taskDefinition,running:runningCount}}' \
--output jsonWhat to check:
runningCount == desiredCount (usually 1)runningCount > 0# MCP Server
aws ecs describe-task-definition \
--task-definition em-production-mcp-server \
--region us-east-2 \
--query 'taskDefinition.{rev:revision,image:containerDefinitions[0].image,env:containerDefinitions[0].environment[*].name,secrets:containerDefinitions[0].secrets[*].name}'
# Dashboard
aws ecs describe-task-definition \
--task-definition em-production-dashboard \
--region us-east-2 \
--query 'taskDefinition.{rev:revision,image:containerDefinitions[0].image}'Expected MCP (rev 150+):
<YOUR_AWS_ACCOUNT_ID>.dkr.ecr.us-east-2.amazonaws.com/em-production-mcp-server:latest# Detailed health (includes component latency)
curl -s https://mcp.execution.market/health/ | python3 -m json.tool
# Version info
curl -s https://mcp.execution.market/health/version
# Route count
curl -s https://mcp.execution.market/health/routes | python3 -c "import sys,json; r=json.load(sys.stdin); print(f'{r[\"total_routes\"]} routes')"cd /mnt/z/ultravioleta/dao/execution-market/scripts
npx tsx smoke-test.tsECS services can keep running an old task definition even after registering new revisions. Always verify:
# Check ACTUAL running revision (not just latest registered)
aws ecs describe-services \
--cluster em-production-cluster \
--services em-production-mcp-server \
--region us-east-2 \
--query 'services[0].taskDefinition'If the service is stuck on an old revision:
aws ecs update-service \
--cluster em-production-cluster \
--service em-production-mcp-server \
--task-definition em-production-mcp-server:<LATEST_REV> \
--force-new-deployment \
--region us-east-2Task definitions MUST reference :latest tag. If a ship-* tag is referenced, register a new revision.
# Full deploy script (builds, pushes, deploys both services)
.claude/scripts/deploy.sh
# Or manual:
# 1. Login to ECR
aws ecr get-login-password --region us-east-2 | docker login --username AWS --password-stdin <YOUR_AWS_ACCOUNT_ID>.dkr.ecr.us-east-2.amazonaws.com
# 2. Build + push
docker build --no-cache -f mcp_server/Dockerfile -t em-mcp ./mcp_server
docker tag em-mcp:latest <YOUR_AWS_ACCOUNT_ID>.dkr.ecr.us-east-2.amazonaws.com/em-production-mcp-server:latest
docker push <YOUR_AWS_ACCOUNT_ID>.dkr.ecr.us-east-2.amazonaws.com/em-production-mcp-server:latest
# 3. Force new deployment
aws ecs update-service --cluster em-production-cluster --service em-production-mcp-server --force-new-deployment --region us-east-2
# 4. Wait and verify
sleep 60
aws ecs describe-services --cluster em-production-cluster --services em-production-mcp-server --region us-east-2 --query 'services[0].{running:runningCount,desired:desiredCount}'| Resource | Value |
|---|---|
| Account | <YOUR_AWS_ACCOUNT_ID> |
| Region | us-east-2 |
| Cluster | em-production-cluster |
| MCP Service | em-production-mcp-server |
| Dashboard Service | em-production-dashboard |
| MCP ECR | em-production-mcp-server |
| Dashboard ECR | em-production-dashboard |
| MCP Task Def Rev | 150+ (:latest tag) |
| Dashboard Task Def Rev | 12 |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.