Api Endpoint

mcp-scan

Static security scan of an MCP manifest or tool list. Detects tool poisoning, hidden unicode instructions, prompt injection, data-exfiltration directives, dangerous capabilities, tool shadowing and post-approval rug-pull drift. Returns a 0-100 risk score, category, per-tool findings and content hashes. Security indicators, not a guarantee.

Open interactive test console

Offering

Provider: api.agentstools.dev
Method: POST
Offering type: Api Endpoint
Transport type: http
Category: Security
Delivery: Not provided
Pricing model: Not provided
x402 version: 2

Endpoint context

URL: https://api.agentstools.dev/mcp/scan
MIME type: Not provided
First seen: 2026-10-16T01:51:10.599Z
Last seen: 2026-11-01T15:17:15.704Z
Tags: MCP, Security, tool-poisoning, prompt-injection, scanner

Website

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1: 0.01 USDC
Atomic price: 10000 · Network: eip155:8453 · Asset: USDC · Scheme: exact

Raw x402 terms

[
  {
    "scheme": "exact",
    "network": "eip155:8453",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amount": "10000",
    "payTo": "0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493"
  }
]

Observed health

Status: Reachable
Latest latency: 406 ms
Average latency: 1007 ms
HTTP status: 405
Last checked: 2026-11-05T00:56:20.400Z
Reachability: 100% over 14 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "additionalProperties": false,
  "properties": {
    "body": {
      "properties": {
        "known_hashes": {
          "description": "Optional map of tool name to a previously pinned tool_hash, to detect rug-pull drift",
          "type": "object"
        },
        "manifest": {
          "description": "MCP manifest object (with a tools list) or a single tool object",
          "type": "object"
        },
        "tools": {
          "description": "Alternatively, a list of tool objects (name, description, inputSchema)",
          "items": {
            "type": "object"
          },
          "type": "array"
        }
      }
    },
    "bodyType": {
      "enum": [
        "json",
        "form-data",
        "text"
      ],
      "type": "string"
    },
    "method": {
      "enum": [
        "POST",
        "PUT",
        "PATCH"
      ],
      "type": "string"
    },
    "type": {
      "const": "http",
      "type": "string"
    }
  },
  "required": [
    "type",
    "method",
    "bodyType",
    "body"
  ],
  "type": "object"
}

Output schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "input": {
      "additionalProperties": false,
      "properties": {
        "body": {
          "properties": {
            "known_hashes": {
              "description": "Optional map of tool name to a previously pinned tool_hash, to detect rug-pull drift",
              "type": "object"
            },
            "manifest": {
              "description": "MCP manifest object (with a tools list) or a single tool object",
              "type": "object"
            },
            "tools": {
              "description": "Alternatively, a list of tool objects (name, description, inputSchema)",
              "items": {
                "type": "object"
              },
              "type": "array"
            }
          }
        },
        "bodyType": {
          "enum": [
            "json",
            "form-data",
            "text"
          ],
          "type": "string"
        },
        "method": {
          "enum": [
            "POST",
            "PUT",
            "PATCH"
          ],
          "type": "string"
        },
        "type": {
          "const": "http",
          "type": "string"
        }
      },
      "required": [
        "type",
        "method",
        "bodyType",
        "body"
      ],
      "type": "object"
    },
    "output": {
      "properties": {
        "example": {
          "type": "object"
        },
        "type": {
          "type": "string"
        }
      },
      "required": [
        "type"
      ],
      "type": "object"
    }
  },
  "required": [
    "input"
  ],
  "type": "object"
}