{ "x402Version": 2, "id": 38012, "slug": "38012", "resource": "https://zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev/v1/analyze", "description": "MCP security checks and feedback for users and developers. Choose paid access without reports, or ongoing free access within limits: POST /v1/client-token; 1 check/24h + 1 for a previous-use report. Check URL/DNS, metadata/schema/auth, OSV/CVE risk and catalog drift before connecting. Verified owners can read consented weekly reports. ALLOW/BLOCK/UNKNOWN uses caller-confirmed versions. No tool execution or safety certification. Terms: /complimentary-policy.", "type": "http", "serviceName": "ZeroWorker MCP Trust Gate", "accepts": [ { "scheme": "exact", "network": "eip155:8453", "payTo": "0xad277cf8B5D9fa5008D06cBdBE349F5DF3c0Cc8f", "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "amount": "5000", "amountUsd": 0.005, "maxTimeoutSeconds": 60 }, { "scheme": "exact", "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp", "payTo": "EtmJof6dunotKvh18rBhfqeML5kZp6gCUmiY6MSf4qjb", "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v", "amount": "5000", "amountUsd": 0.005, "maxTimeoutSeconds": 60 } ], "outputSchema": { "properties": { "example": { "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" }, "extensions": { "bazaar": { "info": { "input": { "body": { "components": [ { "ecosystem": "npm", "name": "@modelcontextprotocol/sdk", "version": "1.25.3" } ], "url": "https://target.example/mcp" }, "bodyType": "json", "method": "POST", "type": "http" }, "output": { "example": { "fingerprint": { "components": [ { "confidence": "high", "ecosystem": "npm", "evidence": "component was explicitly supplied by the caller", "name": "@modelcontextprotocol/sdk", "source": "caller_hint", "version": "1.25.3" } ], "status": "identified" }, "generatedAt": "2026-09-27T00:00:00.000Z", "mcp": { "authRequired": false, "era": "modern", "reachable": true, "serverInfoTrustedForSecurityDecision": false, "transport": "streamable-http" }, "securityPrioritization": { "result": { "status": "ok", "transport": "service_binding" }, "submittedCves": [ "CVE-2026-25536" ] }, "target": "https://target.example/mcp", "vulnerabilityCheck": { "affectedComponentSummary": { "confirmed": 1, "potential": 0, "probable": 0 }, "componentEvidenceSummary": { "counts": { "confirmed": 1, "potential": 0, "probable": 0 }, "hasPrioritizationEligibleEvidence": true, "strongestLevel": "confirmed", "versionedDecisionReadyCount": 1 }, "source": "OSV.dev", "uniqueCves": [ "CVE-2026-25536" ] } }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "body": { "properties": { "access": { "description": "Recurring free access within published limits, with one optional feedback report unlocking nine additional analyses. Requires an issued client token and enabled /complimentary-policy. Omit for paid x402 access without outcome reporting.", "properties": { "clientToken": { "maxLength": 1500, "type": "string", "writeOnly": true }, "mode": { "enum": [ "complimentary" ], "type": "string" }, "providerSharing": { "default": "service_only", "description": "Explicit consent for protected weekly aggregates shared with a verified endpoint owner. New query-free targets only; requires enabled /provider-policy. No effect on free credit.", "enum": [ "service_only", "provider-aggregate-v1" ], "type": "string" } }, "required": [ "mode", "clientToken" ], "type": "object" }, "components": { "items": { "properties": { "ecosystem": { "type": "string" }, "name": { "type": "string" }, "purl": { "type": "string" }, "version": { "type": "string" } }, "type": "object" }, "maxItems": 20, "type": "array" }, "options": { "properties": { "includeTools": { "type": "boolean" }, "securityPrioritization": { "type": "boolean" } }, "type": "object" }, "previousObservation": { "additionalProperties": false, "description": "Optional, honest, unverified self-report about the previous analysis target. reason is allowed only with not_used. Single-use, client-bound, seven-day expiry. Requires complimentary access; accepted only when the new free analysis succeeds.", "properties": { "outcome": { "enum": [ "used_worked", "used_failed_connect", "used_failed_auth", "used_failed_tool", "not_used" ], "type": "string" }, "reason": { "enum": [ "security", "permission", "auth", "missing_capability", "alternative", "other" ], "type": "string" }, "shareWithDeveloper": { "description": "Set false to withdraw sharing for this previous ticket; free credit is unchanged. True or omitted cannot upgrade an originally service-only ticket.", "type": "boolean" }, "token": { "maxLength": 1500, "type": "string", "writeOnly": true } }, "required": [ "token", "outcome" ], "type": "object" }, "url": { "description": "Public HTTPS MCP endpoint to inspect.", "format": "uri", "type": "string" } }, "required": [ "url" ], "type": "object" }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" }, "method": { "enum": [ "POST" ], "type": "string" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method", "bodyType", "body" ], "type": "object" }, "output": { "properties": { "example": { "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" } } }, "tags": [ "mcp", "security", "ai-agents", "preflight", "osv", "bazaar" ], "sourceHost": "zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev", "lastUpdated": "2026-10-07T11:38:01.663Z", "quality": { "calls30d": 9, "uniquePayers30d": 1, "lastCalledAt": "2026-10-07T11:38:01.203Z" }, "metadata": { "serviceName": "ZeroWorker MCP Trust Gate", "extensions": { "bazaar": { "info": { "input": { "body": { "components": [ { "ecosystem": "npm", "name": "@modelcontextprotocol/sdk", "version": "1.25.3" } ], "url": "https://target.example/mcp" }, "bodyType": "json", "method": "POST", "type": "http" }, "output": { "example": { "fingerprint": { "components": [ { "confidence": "high", "ecosystem": "npm", "evidence": "component was explicitly supplied by the caller", "name": "@modelcontextprotocol/sdk", "source": "caller_hint", "version": "1.25.3" } ], "status": "identified" }, "generatedAt": "2026-09-27T00:00:00.000Z", "mcp": { "authRequired": false, "era": "modern", "reachable": true, "serverInfoTrustedForSecurityDecision": false, "transport": "streamable-http" }, "securityPrioritization": { "result": { "status": "ok", "transport": "service_binding" }, "submittedCves": [ "CVE-2026-25536" ] }, "target": "https://target.example/mcp", "vulnerabilityCheck": { "affectedComponentSummary": { "confirmed": 1, "potential": 0, "probable": 0 }, "componentEvidenceSummary": { "counts": { "confirmed": 1, "potential": 0, "probable": 0 }, "hasPrioritizationEligibleEvidence": true, "strongestLevel": "confirmed", "versionedDecisionReadyCount": 1 }, "source": "OSV.dev", "uniqueCves": [ "CVE-2026-25536" ] } }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "body": { "properties": { "access": { "description": "Recurring free access within published limits, with one optional feedback report unlocking nine additional analyses. Requires an issued client token and enabled /complimentary-policy. Omit for paid x402 access without outcome reporting.", "properties": { "clientToken": { "maxLength": 1500, "type": "string", "writeOnly": true }, "mode": { "enum": [ "complimentary" ], "type": "string" }, "providerSharing": { "default": "service_only", "description": "Explicit consent for protected weekly aggregates shared with a verified endpoint owner. New query-free targets only; requires enabled /provider-policy. No effect on free credit.", "enum": [ "service_only", "provider-aggregate-v1" ], "type": "string" } }, "required": [ "mode", "clientToken" ], "type": "object" }, "components": { "items": { "properties": { "ecosystem": { "type": "string" }, "name": { "type": "string" }, "purl": { "type": "string" }, "version": { "type": "string" } }, "type": "object" }, "maxItems": 20, "type": "array" }, "options": { "properties": { "includeTools": { "type": "boolean" }, "securityPrioritization": { "type": "boolean" } }, "type": "object" }, "previousObservation": { "additionalProperties": false, "description": "Optional, honest, unverified self-report about the previous analysis target. reason is allowed only with not_used. Single-use, client-bound, seven-day expiry. Requires complimentary access; accepted only when the new free analysis succeeds.", "properties": { "outcome": { "enum": [ "used_worked", "used_failed_connect", "used_failed_auth", "used_failed_tool", "not_used" ], "type": "string" }, "reason": { "enum": [ "security", "permission", "auth", "missing_capability", "alternative", "other" ], "type": "string" }, "shareWithDeveloper": { "description": "Set false to withdraw sharing for this previous ticket; free credit is unchanged. True or omitted cannot upgrade an originally service-only ticket.", "type": "boolean" }, "token": { "maxLength": 1500, "type": "string", "writeOnly": true } }, "required": [ "token", "outcome" ], "type": "object" }, "url": { "description": "Public HTTPS MCP endpoint to inspect.", "format": "uri", "type": "string" } }, "required": [ "url" ], "type": "object" }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" }, "method": { "enum": [ "POST" ], "type": "string" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method", "bodyType", "body" ], "type": "object" }, "output": { "properties": { "example": { "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" } } } }, "liveness": { "reliability": null }, "verified": false, "featured": false, "provider": { "host": "zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev", "manifest_name": "zeroworker-mcp-preflight-api.zeroworker-lab.workers.dev", "source": "cdp-mirror", "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources", "submitted_at": "2026-10-13T15:56:53.641Z" }, "exampleResponse": { "example": {}, "type": "string" } }