{"slug":"seenly-skill-scan-vercel-app-api-mcp-scan-194b8a","title":"MCP Server Scan by Agentropolis","host":"seenly-skill-scan.vercel.app","method":"POST","resource":"https://seenly-skill-scan.vercel.app/api/mcp-scan","category":"other","description":"MCP Server Scan by Agentropolis: scan a live remote MCP server URL (or pasted tools/list) before your agent connects. Reads initialize + tools/list only, never calls a tool. Flags poisoned or hidden tool instructions (IMPORTANT tags, conceal-from-user, secret or side-channel asks, invisible Unicode,","price_listed":0.03,"price_asked":0.03,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":507,"reported_calls_30d":0,"reported_payers_30d":0,"networks":["eip155:8453"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"body":{"baseline":{"server":"...sha256 from your last scan...","tools":{"get_weather":"...sha256..."}},"url":"https://mcp.example.com/mcp"},"bodyType":"json","method":"POST","type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"properties":{"baseline":{"description":"Optional: the \"fingerprint\" object from an earlier scan, to detect added/removed/changed tools.","type":"object"},"request_key":{"type":"string"},"tools":{"description":"Alternative to url: a pasted tools/list result ({\"tools\":[{name, description, inputSchema}]}), e.g. for servers that need auth."},"url":{"description":"Public https Streamable HTTP MCP endpoint. The scan runs initialize + tools/list only; tools are never called.","type":"string"}},"type":"object"},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"properties":{"changes":{"type":["object","null"]},"findings":{"type":"array"},"fingerprint":{"type":"object"},"risk":{"type":"number"},"summary":{"type":"string"},"verdict":{"enum":["allow","review","block"],"type":"string"}},"required":["verdict","risk","fingerprint"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-27","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.03,"price_match":true,"latency_ms":507,"error":null}],"description_full":"MCP Server Scan by Agentropolis: scan a live remote MCP server URL (or pasted tools/list) before your agent connects. Reads initialize + tools/list only, never calls a tool. Flags poisoned or hidden tool instructions (IMPORTANT tags, conceal-from-user, secret or side-channel asks, invisible Unicode, tool shadowing, payment injection). Fingerprints every tool (sha256) and diffs vs your last scan to catch silent changes (MCP rug pulls). Returns allow/review/block. Advisory.","last_updated":"2026-10-27T14:53:39.71Z","schemes":["exact"]}