customermates/customermates
69 issues need attention.
69 warnings in the paths between 57 routes and 65 tables.
- ROUTES
- 57
- TABLES
- 65
- FILES READ
- 120
- RULES RUN
- 7/7
69 findings
GET /llms.txt has no validator or rate limiter attached.
public-entry-guardedGET /og/[...slug] has no validator or rate limiter attached.
public-entry-guardedGET /api/v1/openapi has no validator or rate limiter attached.
public-entry-guardedGET /llms-full.txt has no validator or rate limiter attached.
public-entry-guardedAuthUser is not connected to anything.
no-orphan-datastoreAuthSession is not connected to anything.
no-orphan-datastoreAuthAccount is not connected to anything.
no-orphan-datastoreAuthVerification is not connected to anything.
no-orphan-datastoreApikey is not connected to anything.
no-orphan-datastoreOauthApplication is not connected to anything.
no-orphan-datastoreOauthAccessToken is not connected to anything.
no-orphan-datastoreOauthConsent is not connected to anything.
no-orphan-datastoreUser is not connected to anything.
no-orphan-datastoreCompany is not connected to anything.
no-orphan-datastoreEntityTerminology is not connected to anything.
no-orphan-datastoreP13n is not connected to anything.
no-orphan-datastoreDataView is not connected to anything.
no-orphan-datastoreTask is not connected to anything.
no-orphan-datastoreInviteToken is not connected to anything.
no-orphan-datastoreAuditLog is not connected to anything.
no-orphan-datastoreContact is not connected to anything.
no-orphan-datastoreOrganization is not connected to anything.
no-orphan-datastoreCustomColumn is not connected to anything.
no-orphan-datastoreCustomFieldValue is not connected to anything.
no-orphan-datastoreDeal is not connected to anything.
no-orphan-datastoreService is not connected to anything.
no-orphan-datastoreServiceDeal is not connected to anything.
no-orphan-datastoreServiceUser is not connected to anything.
no-orphan-datastoreDealOrganization is not connected to anything.
no-orphan-datastoreDealUser is not connected to anything.
no-orphan-datastoreDealContact is not connected to anything.
no-orphan-datastoreContactUser is not connected to anything.
no-orphan-datastoreOrganizationUser is not connected to anything.
no-orphan-datastoreTaskUser is not connected to anything.
no-orphan-datastoreTaskContact is not connected to anything.
no-orphan-datastoreTaskOrganization is not connected to anything.
no-orphan-datastoreTaskDeal is not connected to anything.
no-orphan-datastoreTaskService is not connected to anything.
no-orphan-datastoreContactOrganization is not connected to anything.
no-orphan-datastoreWidget is not connected to anything.
no-orphan-datastoreUserRole is not connected to anything.
no-orphan-datastoreRolePermission is not connected to anything.
no-orphan-datastoreWebhook is not connected to anything.
no-orphan-datastoreWebhookDelivery is not connected to anything.
no-orphan-datastoreSubscription is not connected to anything.
no-orphan-datastoreAgentCreditAdjustment is not connected to anything.
no-orphan-datastoreOperatorAuditEvent is not connected to anything.
no-orphan-datastoreConnectedAccount is not connected to anything.
no-orphan-datastoreMessagingThread is not connected to anything.
no-orphan-datastoreMessagingThreadParticipant is not connected to anything.
no-orphan-datastoreMessagingMessage is not connected to anything.
no-orphan-datastoreAccountActivity is not connected to anything.
no-orphan-datastoreContactIdentifier is not connected to anything.
no-orphan-datastoreCalendar is not connected to anything.
no-orphan-datastoreCalendarEvent is not connected to anything.
no-orphan-datastoreMessagingInboundEvent is not connected to anything.
no-orphan-datastoreAgentConversation is not connected to anything.
no-orphan-datastoreAgentMessage is not connected to anything.
no-orphan-datastoreAgentUsageEvent is not connected to anything.
no-orphan-datastoreAgentTurnRequest is not connected to anything.
no-orphan-datastoreAgentApproval is not connected to anything.
no-orphan-datastoreAgentUiCommandResult is not connected to anything.
no-orphan-datastoreAgentRunRound is not connected to anything.
no-orphan-datastoreAgentToolReceipt is not connected to anything.
no-orphan-datastoreAgentRunLease is not connected to anything.
no-orphan-datastoreRoutine is not connected to anything.
no-orphan-datastoreRoutineRun is not connected to anything.
no-orphan-datastoreAdAttribution is not connected to anything.
no-orphan-datastoreConversionEvent is not connected to anything.
no-orphan-datastore
Part of this repository was not read, so this report is incomplete. Read 120 of 1,876 files, schemas and routes first. Point Wyro at a single service directory to read one in full. Unread: app/api/v1/mcp/route.ts, app/api/auth/[...all]/route.ts, features/webhook/webhook.schema.ts.
Free account, no card. The repository opens as an editable graph.
Add this check to the README
[](https://wyro.in/scan/customermates/customermates)It updates itself whenever the repository changes and links back to this report.
What this is
Wyro reads the repository’s routes and data models and checks the paths between them: whether a route can reach a table without passing a guard, whether a datastore holding personal data is exposed to a public read, whether an endpoint that issues credentials requires the credentials it issues.
It is rule-based, not a model. The same commit produces the same result every time, and it does not guess at business rules it cannot see. A rule with nothing to look at is reported as not having run — never as a pass.
This check runs on public source through GitHub’s own API and needs no account. A free account adds the editable architecture canvas, private repositories on paid plans, and a CI gate. No card required.