# Bright Gaming Agent Release Security Audit

> Bright Gaming Agent Release Security Audit is a paid API for AI agents from playbrightgaming.com, paid per call via x402, $0.004/call, status unknown (last checked 2026-10-10).

Reviews submitted agent or MCP release source files for security vulnerabilities and issues a structured security audit report.

## Facts

- Endpoint: POST https://playbrightgaming.com/agent-services-mainnet/agent-release-security-audit?utm_source=zero.xyz
- Price: $0.004/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-10
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/bright-gaming-agent-release-security-audit-79390703
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_v03SVH-5CUOG6S6bJWwkf

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability bright-gaming-agent-release-security-audit-79390703 -d '<json body>'
```

Example prompt: Can you run a security audit on my agent release files before I push to production? Here are the source files — check for vulnerabilities, prompt injection risks, and any other security issues.

## When to prefer this

Choose this endpoint when you need an automated, machine-payable security review of AI agent or MCP release source files prior to deployment. It is especially suited for CI/CD pipelines gating agent releases, or when a human security reviewer is unavailable and a fast, structured vulnerability assessment is needed. Prefer this over generic code scanners when the audit focus is specifically on agent/MCP release artifacts and AI-specific security concerns.

## Known failure modes

- Empty files array or files with no content returns validation error
- File content exceeding 262,144 character limit per file is rejected
- More than 512 files submitted causes request failure
- Non-UTF-8 content or wrong kind value causes schema validation failure
- Payment not included or insufficient USDC results in 402 Payment Required response
- Malformed JSON body returns 400 Bad Request

## How this service works

Thirteen machine-payable services for public URL observations/assertions, website release and agent metadata checks, x402 preflight, PDF citations, IRS form editions and FIRE/IRIS migration, redacted 1099 readiness, year-end close checklists, tax-year source diffs, ledger/1099-K reconciliation, and submitted-text agent/MCP release security review. Exact input/output schemas, examples, prices, billing rules and durable replay semantics support agent selection. Runtime PAYMENT-REQUIRED remains authoritative.

## Output

A structured security audit report covering submitted agent or MCP source files, identifying vulnerabilities, security risks (e.g. prompt injection, credential exposure, unsafe patterns), and overall release readiness based on the analyzed file contents.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "files": {
   "type": "array",
   "items": {
    "type": "object",
    "required": [
     "path",
     "kind",
     "content"
    ],
    "properties": {
     "kind": {
      "const": "text_utf8"
     },
     "path": {
      "type": "string",
      "maxLength": 240,
      "minLength": 1
     },
     "content": {
      "type": "string",
      "maxLength": 262144
     }
    },
    "additionalProperties": false
   },
   "maxItems": 512,
   "minItems": 1
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/bright-gaming-agent-release-security-audit-79390703/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from playbrightgaming.com](https://www.zero.xyz/host/playbrightgaming.com/llms.txt)