Tanod toolsniff
toolsniff (Tanod) static security scan of an AI-agent skill or MCP server package: prompt injection, hidden text, remote code, credential access, exfiltration, install hooks, over-broad MCP tools, typosquats and known-vulnerable dependencies; JSON report. The package is never run. Use when an agent is about to install an agent skill or MCP package and wants its code scanned first.
Offering
- Provider
- tanod.dev
- Method
- POST
- Offering type
- Api Endpoint
- Transport type
- http
- Category
- Security
- Delivery
- Not provided
- Pricing model
- Not provided
- x402 version
- 2
Endpoint context
- URL
https://tanod.dev/v1/scan/package- MIME type
- application/json
- First seen
- 2026-10-16T01:51:10.599Z
- Last seen
- Tags
- toolsniff, scan, package, Security, MCP, agent-skills, supply-chain
Payment pricing
x402 payment terms are the authoritative price for calling this endpoint.
- Payment option 1
- 0.02 USDC
Atomic price: 20000 · Network: eip155:8453 · Asset: USDC · Scheme: exact - Payment option 2
- 0.02 USDC
Atomic price: 20000 · Network: eip155:137 · Asset: USDC · Scheme: exact - Payment option 3
- 0.02 USDC
Atomic price: 20000 · Network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · Asset: USDC · Scheme: exact - Payment option 4
- 0.02 USDC
Atomic price: 20000000000000000 · Network: eip155:56 · Asset: USDC · Scheme: exact - Payment option 5
- 0.02 USDC
Atomic price: 20000 · Network: eip155:42161 · Asset: USDC · Scheme: exact - Payment option 6
- 0.02 USDC
Atomic price: 20000 · Network: eip155:8453 · Asset: USDC · Scheme: exact - Payment option 7
- 0.02 USDC
Atomic price: 20000 · Network: eip155:137 · Asset: USDC · Scheme: exact
Raw x402 terms
[
{
"scheme": "exact",
"network": "eip155:8453",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "20000",
"payTo": "0x593857A4a4F619543ea12394137C3004ce841720"
},
{
"scheme": "exact",
"network": "eip155:137",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"amount": "20000",
"payTo": "0x593857A4a4F619543ea12394137C3004ce841720"
},
{
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"amount": "20000",
"payTo": "RMk9k3VC8dr4hhjgFh88rGhjAbzfBzHxJJ5n2fTcqus"
},
{
"scheme": "exact",
"network": "eip155:56",
"asset": "0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d",
"amount": "20000000000000000",
"payTo": "0x593857A4a4F619543ea12394137C3004ce841720"
},
{
"scheme": "exact",
"network": "eip155:42161",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"amount": "20000",
"payTo": "0x593857A4a4F619543ea12394137C3004ce841720"
},
{
"scheme": "exact",
"network": "eip155:8453",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "20000",
"payTo": "0x593857A4a4F619543ea12394137C3004ce841720"
},
{
"scheme": "exact",
"network": "eip155:137",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"amount": "20000",
"payTo": "0x593857A4a4F619543ea12394137C3004ce841720"
}
]Observed health
- Status
- Healthy
- Latest latency
- 303 ms
- Average latency
- 980 ms
- HTTP status
- 204
- Last checked
- Reachability
- 100% over 11 checks
Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.
Input schema
{
"type": "object",
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"type": "string",
"enum": [
"POST"
]
},
"bodyType": {
"type": "string",
"enum": [
"json",
"form-data",
"text"
]
},
"body": {
"additionalProperties": false,
"properties": {
"source": {
"anyOf": [
{
"maxLength": 512,
"type": "string"
},
{
"type": "null"
}
],
"default": null,
"description": "npm:name[@version] | pypi:name[==version] | github:owner/repo[@ref][//subdir] | https://github.com/owner/repo[/tree/ref/dir] | clawhub:[owner/]slug[@version]. Pin a version (or a 40-hex commit) to get cached answers."
},
"content_base64": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
],
"default": null,
"description": "An uploaded package instead of a source: base64 of a .zip/.tar(.gz/.bz2/.xz) archive (up to 20 MB), or of a single file (then give filename, e.g. SKILL.md). Uploads are never sent to OSV.dev."
},
"filename": {
"anyOf": [
{
"pattern": "^[A-Za-z0-9._\\- ]{1,128}$",
"type": "string"
},
{
"type": "null"
}
],
"default": null,
"description": "File name of a single-file upload (e.g. SKILL.md, server.py)."
}
},
"type": "object"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"additionalProperties": false
}Output schema
{
"properties": {
"example": {
"properties": {
"disclaimer": {
"type": "string"
},
"error": {
"type": [
"object",
"null"
]
},
"findings": {
"items": {
"properties": {
"check": {
"type": "string"
},
"confidence": {
"type": "string"
},
"evidence": {
"type": "string"
},
"file": {
"type": "string"
},
"id": {
"type": "string"
},
"line": {
"type": "integer"
},
"severity": {
"type": "string"
}
},
"type": "object"
},
"type": "array"
},
"risk_score": {
"maximum": 100,
"minimum": 0,
"type": "integer"
},
"schema_version": {
"type": "string"
},
"status": {
"type": "string"
},
"summary": {
"type": "string"
},
"verdict": {
"enum": [
"safe-looking",
"review",
"dangerous",
"unknown"
],
"type": "string"
}
},
"required": [
"schema_version",
"status",
"verdict",
"risk_score",
"findings"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}