Index onlineMerchant portal
Api Endpoint

MCP Server Security Scan

Security scan of a target MCP server: audits every advertised tool for prompt-injection / tool-poisoning / exfiltration / dangerous-capability / hidden-unicode (OWASP LLM01/LLM08). Returns findings + risk score + verdict (clear/review/block).

Open interactive test console

Offering

Provider
x402-data-api.sigrunner.workers.dev
Method
GET
Offering type
Api Endpoint
Transport type
http
Category
Security
Delivery
Not provided
Pricing model
Not provided
x402 version
2

Endpoint context

URL
https://x402-data-api.sigrunner.workers.dev/scan/mcp
MIME type
application/json
First seen
2026-10-16T02:59:31.787Z
Last seen
Tags
MCP, Security, prompt-injection, audit, tool-poisoning, X402

Website

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1
0.05 USDC
Atomic price: 50000 · Network: eip155:8453 · Asset: USDC · Scheme: exact
Raw x402 terms
[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "50000",
    "payTo": "0x5765ae06a52dc7A0BB71c36A11db512c7ea9ed10"
  }
]

Observed health

Status
Healthy
Latest latency
50 ms
Average latency
836 ms
HTTP status
402
Last checked
Reachability
100% over 14 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "type": "object",
  "properties": {
    "type": {
      "type": "string",
      "const": "http"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET"
      ]
    },
    "queryParams": {
      "type": "object",
      "properties": {}
    },
    "pathParams": {
      "type": "object",
      "properties": {
        "url": {
          "type": "string",
          "description": "Target MCP server endpoint URL to audit"
        }
      }
    }
  },
  "required": [
    "type",
    "method"
  ],
  "additionalProperties": false
}

Output schema

{
  "type": "object",
  "properties": {
    "type": {
      "type": "string"
    },
    "example": {
      "type": "object",
      "properties": {
        "target": {
          "type": "string"
        },
        "tools_scanned": {
          "type": "integer"
        },
        "findings": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "tool": {
                "type": "string"
              },
              "severity": {
                "type": "string"
              },
              "rule": {
                "type": "string"
              },
              "detail": {
                "type": "string"
              },
              "evidence": {
                "type": "string"
              }
            },
            "required": [
              "tool",
              "severity",
              "rule",
              "detail",
              "evidence"
            ]
          }
        },
        "risk_score": {
          "type": "integer"
        },
        "verdict": {
          "type": "string"
        },
        "risk_summary": {
          "type": "string"
        }
      },
      "required": [
        "target",
        "tools_scanned",
        "findings",
        "risk_score",
        "verdict",
        "risk_summary"
      ]
    }
  },
  "required": [
    "type"
  ]
}