customermates/customermates

0 errors, 69 warningsmain

69 issues need attention.

69 warnings in the paths between 57 routes and 65 tables.

ROUTE FINDINGS4 of 57 · 7/7 rules
ROUTES
57
TABLES
65
FILES READ
120
RULES RUN
7/7

69 findings

  • GET /llms.txt has no validator or rate limiter attached.

    public-entry-guarded

  • GET /og/[...slug] has no validator or rate limiter attached.

    public-entry-guarded

  • GET /api/v1/openapi has no validator or rate limiter attached.

    public-entry-guarded

  • GET /llms-full.txt has no validator or rate limiter attached.

    public-entry-guarded

  • AuthUser is not connected to anything.

    no-orphan-datastore

  • AuthSession is not connected to anything.

    no-orphan-datastore

  • AuthAccount is not connected to anything.

    no-orphan-datastore

  • AuthVerification is not connected to anything.

    no-orphan-datastore

  • Apikey is not connected to anything.

    no-orphan-datastore

  • OauthApplication is not connected to anything.

    no-orphan-datastore

  • OauthAccessToken is not connected to anything.

    no-orphan-datastore

  • OauthConsent is not connected to anything.

    no-orphan-datastore

  • User is not connected to anything.

    no-orphan-datastore

  • Company is not connected to anything.

    no-orphan-datastore

  • EntityTerminology is not connected to anything.

    no-orphan-datastore

  • P13n is not connected to anything.

    no-orphan-datastore

  • DataView is not connected to anything.

    no-orphan-datastore

  • Task is not connected to anything.

    no-orphan-datastore

  • InviteToken is not connected to anything.

    no-orphan-datastore

  • AuditLog is not connected to anything.

    no-orphan-datastore

  • Contact is not connected to anything.

    no-orphan-datastore

  • Organization is not connected to anything.

    no-orphan-datastore

  • CustomColumn is not connected to anything.

    no-orphan-datastore

  • CustomFieldValue is not connected to anything.

    no-orphan-datastore

  • Deal is not connected to anything.

    no-orphan-datastore

  • Service is not connected to anything.

    no-orphan-datastore

  • ServiceDeal is not connected to anything.

    no-orphan-datastore

  • ServiceUser is not connected to anything.

    no-orphan-datastore

  • DealOrganization is not connected to anything.

    no-orphan-datastore

  • DealUser is not connected to anything.

    no-orphan-datastore

  • DealContact is not connected to anything.

    no-orphan-datastore

  • ContactUser is not connected to anything.

    no-orphan-datastore

  • OrganizationUser is not connected to anything.

    no-orphan-datastore

  • TaskUser is not connected to anything.

    no-orphan-datastore

  • TaskContact is not connected to anything.

    no-orphan-datastore

  • TaskOrganization is not connected to anything.

    no-orphan-datastore

  • TaskDeal is not connected to anything.

    no-orphan-datastore

  • TaskService is not connected to anything.

    no-orphan-datastore

  • ContactOrganization is not connected to anything.

    no-orphan-datastore

  • Widget is not connected to anything.

    no-orphan-datastore

  • UserRole is not connected to anything.

    no-orphan-datastore

  • RolePermission is not connected to anything.

    no-orphan-datastore

  • Webhook is not connected to anything.

    no-orphan-datastore

  • WebhookDelivery is not connected to anything.

    no-orphan-datastore

  • Subscription is not connected to anything.

    no-orphan-datastore

  • AgentCreditAdjustment is not connected to anything.

    no-orphan-datastore

  • OperatorAuditEvent is not connected to anything.

    no-orphan-datastore

  • ConnectedAccount is not connected to anything.

    no-orphan-datastore

  • MessagingThread is not connected to anything.

    no-orphan-datastore

  • MessagingThreadParticipant is not connected to anything.

    no-orphan-datastore

  • MessagingMessage is not connected to anything.

    no-orphan-datastore

  • AccountActivity is not connected to anything.

    no-orphan-datastore

  • ContactIdentifier is not connected to anything.

    no-orphan-datastore

  • Calendar is not connected to anything.

    no-orphan-datastore

  • CalendarEvent is not connected to anything.

    no-orphan-datastore

  • MessagingInboundEvent is not connected to anything.

    no-orphan-datastore

  • AgentConversation is not connected to anything.

    no-orphan-datastore

  • AgentMessage is not connected to anything.

    no-orphan-datastore

  • AgentUsageEvent is not connected to anything.

    no-orphan-datastore

  • AgentTurnRequest is not connected to anything.

    no-orphan-datastore

  • AgentApproval is not connected to anything.

    no-orphan-datastore

  • AgentUiCommandResult is not connected to anything.

    no-orphan-datastore

  • AgentRunRound is not connected to anything.

    no-orphan-datastore

  • AgentToolReceipt is not connected to anything.

    no-orphan-datastore

  • AgentRunLease is not connected to anything.

    no-orphan-datastore

  • Routine is not connected to anything.

    no-orphan-datastore

  • RoutineRun is not connected to anything.

    no-orphan-datastore

  • AdAttribution is not connected to anything.

    no-orphan-datastore

  • ConversionEvent is not connected to anything.

    no-orphan-datastore

Part of this repository was not read, so this report is incomplete. Read 120 of 1,876 files, schemas and routes first. Point Wyro at a single service directory to read one in full. Unread: app/api/v1/mcp/route.ts, app/api/auth/[...all]/route.ts, features/webhook/webhook.schema.ts.

Free account, no card. The repository opens as an editable graph.

Add this check to the README

wyro architecture badge
[![wyro architecture](https://wyro.in/api/badge/customermates/customermates)](https://wyro.in/scan/customermates/customermates)

It updates itself whenever the repository changes and links back to this report.

What this is

Wyro reads the repository’s routes and data models and checks the paths between them: whether a route can reach a table without passing a guard, whether a datastore holding personal data is exposed to a public read, whether an endpoint that issues credentials requires the credentials it issues.

It is rule-based, not a model. The same commit produces the same result every time, and it does not guess at business rules it cannot see. A rule with nothing to look at is reported as not having run — never as a pass.

This check runs on public source through GitHub’s own API and needs no account. A free account adds the editable architecture canvas, private repositories on paid plans, and a CI gate. No card required.