# Agentalog MCP Server Security Check

> Agentalog MCP Server Security Check is a paid API for AI agents from agentalog.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-11-03).

Performs a security check on an MCP server by URL, returning measured signals, catalog listings, and domain facts

## Facts

- Endpoint: GET https://agentalog.com/api/x402/check?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-11-03
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentalog-mcp-server-security-check-4ab75432
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_hFO2TR3rIcE7avTi1H5bC

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentalog-mcp-server-security-check-4ab75432
```

Example prompt: Run a security check on the MCP server at https://mcp.example.com and tell me whether it looks safe to connect to — I need its measured signals, catalog listing status, and domain facts.

## When to prefer this

Use this endpoint when you need to programmatically vet an MCP server before connecting an AI agent to it — especially for third-party or community MCP servers where trust has not been established. Prefer this over manual domain lookups when you want consolidated security signals, catalog presence, and domain facts in a single paid-per-call API with no subscription required.

## Known failure modes

- Invalid or unreachable MCP server URL returns an error or empty result
- Non-MCP HTTP endpoints may return limited or irrelevant signals
- Payment failure (insufficient USDC balance) blocks the call
- URL with embedded credentials rejected (credentials must be stripped)
- Unknown or very new domains may have sparse domain facts

## How this service works

Agentalog: security check of an MCP server by address (measured signals, catalog listings, domain facts), paid per call

## Output

Returns security-relevant measured signals about the MCP server, any catalog listing entries for that server, and domain-level facts (such as registration age, hosting info, or known associations), helping an agent or user decide whether the MCP server is trustworthy to connect to.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "queryParams"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "description": "The http(s) endpoint of the MCP server, without credentials."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "properties": {
      "api": {
       "type": "string",
       "description": "Absolute URL of this check."
      },
      "url": {
       "type": "string",
       "description": "The address as the catalog keeps it: lower-case host, no query, fragment or credential."
      },
      "host": {
       "type": "string",
       "description": "The host of the address."
      },
      "dominio": {
       "type": "object",
       "properties": {
        "nome": {
         "type": "string"
        },
        "mudou_em": {
         "type": "string"
        },
        "registrado": {
         "type": "object",
         "properties": {
          "ate": {
           "type": "string"
          },
          "desde": {
           "type": "string"
          },
          "fonte": {
           "type": "string"
          }
         }
        },
        "organizacao": {
         "type": "null"
        },
        "tambem_cobre": {
         "type": "array",
         "items": {
          "type": "object",
          "properties": {
           "dominio": {
            "type": "string"
           },
           "visto_em": {
            "type": "string"
           },
           "certificados": {
            "type": "number"
           }
          }
         }
        }
       },
       "description": "The domain facts, as in `Seguranca.dominio`, or null."
      },
      "cobranca": {
       "type": "object",
       "properties": {
        "via": {
         "type": "string",
         "description": "`x402`, `credito` or the marketplace that already charged the call."
        },
        "repetido": {
         "type": "boolean",
         "
… (truncated)
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentalog-mcp-server-security-check-4ab75432/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentalog.com](https://www.zero.xyz/host/agentalog.com/llms.txt)