{
  "x402Version": 2,
  "id": 29249,
  "slug": "29249",
  "resource": "https://api.agentstools.dev/mcp/scan",
  "description": "Static security scan of an MCP manifest or tool list. Detects tool poisoning, hidden unicode instructions, prompt injection, data-exfiltration directives, dangerous capabilities, tool shadowing and post-approval rug-pull drift. Returns a 0-100 risk score, category, per-tool findings and content hashes. Security indicators, not a guarantee.",
  "type": "http",
  "serviceName": "mcp-scan",
  "resourceType": "MCP Tool",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0xF22e558a00D91Ee12A1F50C52186FecB8dDFf493",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "10000",
      "amountUsd": 0.01,
      "maxTimeoutSeconds": 300
    }
  ],
  "outputSchema": {
    "properties": {
      "example": {
        "type": "object"
      },
      "type": {
        "type": "string"
      }
    },
    "required": [
      "type"
    ],
    "type": "object"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "body": {
            "manifest": {
              "tools": [
                {
                  "description": "Get the weather for a city.",
                  "inputSchema": {
                    "properties": {
                      "city": {
                        "type": "string"
                      }
                    },
                    "type": "object"
                  },
                  "name": "get_weather"
                }
              ]
            }
          },
          "bodyType": "json",
          "method": "POST",
          "type": "http"
        },
        "output": {
          "example": {
            "coverage": {
              "dimensions_flagged": [],
              "dimensions_total": 8,
              "tools_scanned": 1
            },
            "disclaimer": "Automated security indicators, not a guarantee.",
            "findings": [],
            "manifest_hash": "sha256:…",
            "object": "manifest",
            "per_tool": {
              "get_weather": {
                "category": "clean",
                "findings": [],
                "score": 0,
                "tool_hash": "sha256:…"
              }
            },
            "reasons": [],
            "risk_category": "clean",
            "risk_score": 0,
            "tool_count": 1
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "body": {
                "properties": {
                  "known_hashes": {
                    "description": "Optional map of tool name to a previously pinned tool_hash, to detect rug-pull drift",
                    "type": "object"
                  },
                  "manifest": {
                    "description": "MCP manifest object (with a tools list) or a single tool object",
                    "type": "object"
                  },
                  "tools": {
                    "description": "Alternatively, a list of tool objects (name, description, inputSchema)",
                    "items": {
                      "type": "object"
                    },
                    "type": "array"
                  }
                }
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              },
              "method": {
                "enum": [
                  "POST",
                  "PUT",
                  "PATCH"
                ],
                "type": "string"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "mcp",
    "security",
    "tool-poisoning",
    "prompt-injection",
    "scanner",
    "bazaar"
  ],
  "sourceHost": "api.agentstools.dev",
  "lastUpdated": "2026-10-08T06:08:38.293Z",
  "quality": {
    "calls30d": 3,
    "uniquePayers30d": 2,
    "lastCalledAt": "2026-10-08T06:08:38.04Z"
  },
  "metadata": {
    "serviceName": "mcp-scan",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "manifest": {
                "tools": [
                  {
                    "description": "Get the weather for a city.",
                    "inputSchema": {
                      "properties": {
                        "city": {
                          "type": "string"
                        }
                      },
                      "type": "object"
                    },
                    "name": "get_weather"
                  }
                ]
              }
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "coverage": {
                "dimensions_flagged": [],
                "dimensions_total": 8,
                "tools_scanned": 1
              },
              "disclaimer": "Automated security indicators, not a guarantee.",
              "findings": [],
              "manifest_hash": "sha256:…",
              "object": "manifest",
              "per_tool": {
                "get_weather": {
                  "category": "clean",
                  "findings": [],
                  "score": 0,
                  "tool_hash": "sha256:…"
                }
              },
              "reasons": [],
              "risk_category": "clean",
              "risk_score": 0,
              "tool_count": 1
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "properties": {
                    "known_hashes": {
                      "description": "Optional map of tool name to a previously pinned tool_hash, to detect rug-pull drift",
                      "type": "object"
                    },
                    "manifest": {
                      "description": "MCP manifest object (with a tools list) or a single tool object",
                      "type": "object"
                    },
                    "tools": {
                      "description": "Alternatively, a list of tool objects (name, description, inputSchema)",
                      "items": {
                        "type": "object"
                      },
                      "type": "array"
                    }
                  }
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST",
                    "PUT",
                    "PATCH"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    }
  },
  "liveness": {
    "reliability": null
  },
  "verified": false,
  "featured": false,
  "provider": {
    "host": "api.agentstools.dev",
    "manifest_name": "api.agentstools.dev",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-10-14T01:15:01.050Z"
  },
  "exampleResponse": {
    "example": {},
    "type": "string"
  }
}