{"id":11873,"name":"MCP Server Security Scan","description":"MCP Server Security Scan: probes an MCP server (JSON-RPC initialize + tools/list) and applies a deterministic rule engine over its tools — embedded secrets, dangerous shell/exec/filesystem capabilities, prompt-injection surface, hidden unicode, permissive input schemas, and auth/TLS/CORS headers — returning a security_score + findings[]. The trust layer for the agent economy. Zero-LLM, Ed25519-signed. 0.05 USDC via x402 on Base. SYNTHORA.","card_url":"https://mcpscan.hergertsynthora.com/.well-known/agent-card.json","endpoint":"https://api.hergertsynthora.com/v1/mcpscan","protocol_version":"0.3.0","first_seen":"2026-10-10T13:30:00.410020+00:00","last_verified":"2026-10-10T16:22:26.919694+00:00","card":{"mcp":{"endpoint":"https://api.hergertsynthora.com/v1/mcp","transport":"http-jsonrpc"},"url":"https://api.hergertsynthora.com/v1/mcpscan","name":"MCP Server Security Scan","x402":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0xEf879BFD6C4AccB8F795136de90246e1EC245e06","amount":"50000","network":"eip155:8453","resource":"https://api.hergertsynthora.com/v1/mcpscan"},"skills":[{"id":"mcp_scan","name":"mcp scan","tags":["mcp","scan","x402","synthora","m2m","a2a"],"examples":["{\"manifest\": {\"name\": \"demo-mcp\", \"version\": \"1.0.0\", \"tools\": [{\"name\": \"search\", \"description\": \"web search\"}, {\"name\": \"fetch\", \"description\": \"http fetch\"}]}}"],"inputModes":["application/json"],"description":"MCP Server Security Scan: probes an MCP server (JSON-RPC initialize + tools/list) and applies a deterministic rule engine over its tools — embedded secrets, dangerous shell/exec/filesystem capabilities, prompt-injection surface, hidden unicode, permissive input schemas, and auth/TLS/CORS headers — returning a security_score + findings[]. The trust layer for the agent economy. Zero-LLM, Ed25519-signed. 0.05 USDC via x402 on Base. SYNTHORA.","inputSchema":{"type":"object","properties":{"url":{"type":"string","description":"MCP server URL (Streamable-HTTP endpoint)"},"manifest":{"type":"object","description":"Or paste the MCP manifest (serverInfo + tools) directly"}}},"outputModes":["application/json"]}],"version":"1.0.0","provider":{"url":"https://hergertsynthora.com","organization":"SYNTHORA"},"security":[{"x402":[]}],"description":"MCP Server Security Scan: probes an MCP server (JSON-RPC initialize + tools/list) and applies a deterministic rule engine over its tools — embedded secrets, dangerous shell/exec/filesystem capabilities, prompt-injection surface, hidden unicode, permissive input schemas, and auth/TLS/CORS headers — returning a security_score + findings[]. The trust layer for the agent economy. Zero-LLM, Ed25519-signed. 0.05 USDC via x402 on Base. SYNTHORA.","capabilities":{"streaming":false,"pushNotifications":false,"stateTransitionHistory":false},"protocolVersion":"0.3.0","securitySchemes":{"x402":{"type":"http","scheme":"x402","description":"HTTP 402 micropayment. 50000 atomic USDC on eip155:8453."}},"defaultInputModes":["application/json"],"defaultOutputModes":["application/json"],"preferredTransport":"HTTP+JSON","additionalInterfaces":[{"url":"https://api.hergertsynthora.com/v1/mcpscan","transport":"HTTP+JSON"},{"url":"https://api.hergertsynthora.com/v1/a2a","transport":"JSONRPC"}]},"signature_status":"unsigned","signature_detail":"No card signature supplied","signature_key_url":null,"signature_checked_at":"2026-10-10T16:22:26.919694+00:00","domain_claimed_at":null,"domain_proof_checked_at":null,"source_name":"Agent Tools Catalog","source_url":"https://agent-tools.cloud","last_check":{"checked_at":"2026-10-10T16:22:26.919694+00:00","success":true,"http_status":200,"detail":"Agent Card validated"},"also_published_at":[],"history_urls":["https://mcpscan.hergertsynthora.com/.well-known/agent-card.json"],"skills":[{"skill_id":"mcp_scan","name":"mcp scan","description":"MCP Server Security Scan: probes an MCP server (JSON-RPC initialize + tools/list) and applies a deterministic rule engine over its tools — embedded secrets, dangerous shell/exec/filesystem capabilities, prompt-injection surface, hidden unicode, permissive input schemas, and auth/TLS/CORS headers — returning a security_score + findings[]. The trust layer for the agent economy. Zero-LLM, Ed25519-signed. 0.05 USDC via x402 on Base. SYNTHORA.","tags":["mcp","scan","x402","synthora","m2m","a2a"],"quality_warning":false}],"quality_flags":["bulk_publisher"],"check_history":{"checks":2,"passed":2},"recent_checks":[{"card_url":"https://mcpscan.hergertsynthora.com/.well-known/agent-card.json","checked_at":"2026-10-10T16:22:26.919694+00:00","success":true,"http_status":200,"detail":"Agent Card validated"},{"card_url":"https://mcpscan.hergertsynthora.com/.well-known/agent-card.json","checked_at":"2026-10-10T13:30:00.410020+00:00","success":true,"http_status":200,"detail":"Agent Card validated"}],"endpoint_tls_check":{"checked_at":"2026-10-10T16:22:26.919694+00:00","success":true,"detail":"Valid TLS connection to advertised endpoint host; no A2A request sent"},"protocol_check":{"checked_at":"2026-10-10T13:30:00.410020+00:00","state":"unconfirmed","http_status":404,"detail":"Endpoint returned a generic not-found response"},"events":[],"relationships":[],"verification":{"agent_card_url":"https://mcpscan.hergertsynthora.com/.well-known/agent-card.json","last_successful_card_check":"2026-10-10T16:22:26.919694+00:00","latest_card_check":{"checked_at":"2026-10-10T16:22:26.919694+00:00","success":true,"http_status":200,"detail":"Agent Card validated"},"signature_status":"unsigned","signature_checked_at":"2026-10-10T16:22:26.919694+00:00","task_endpoint_tested":true,"task_execution_tested":false,"endpoint_tls_checked_at":"2026-10-10T16:22:26.919694+00:00","endpoint_tls_reachable":true,"protocol_check_state":"unconfirmed","protocol_checked_at":"2026-10-10T13:30:00.410020+00:00","provider_identity_verified":false,"domain_claimed_at":null,"domain_proof_checked_at":null}}