# MCP Manifest Security Scanner

> MCP Manifest Security Scanner is a paid API for AI agents from mcpscan.openverbs.com, paid per call via x402, $0.004/call, status unknown (last checked 2026-09-13).

Scans an MCP (Model Context Protocol) manifest for security risks, analyzing tool definitions, prompts, and resources for vulnerabilities or malicious patterns

## Facts

- Endpoint: POST https://mcpscan.openverbs.com/v1/scan
- Price: $0.004/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/mcp-manifest-security-scanner-ad98589d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_Xqyp8JnnZYR5rXVgkfO28

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability mcp-manifest-security-scanner-ad98589d -d '<json body>'
```

Example prompt: Can you scan this MCP manifest for any security risks? It has a tools array with definitions for file access and shell execution — I want to know if anything looks dangerous before I deploy it.

## When to prefer this

Choose this endpoint when you need to specifically analyze MCP (Model Context Protocol) manifests for security vulnerabilities before deploying or connecting to an MCP server. It is purpose-built for MCP manifest structure including tools, prompts, and resources — prefer it over generic code scanners or JSON validators when the concern is AI agent tool safety and MCP-specific risk patterns like prompt injection in tool descriptions or overly permissive inputSchemas.

## Known failure modes

- Missing required 'manifest' field in body returns validation error
- Malformed manifest JSON that doesn't match expected object or array structure causes parse failure
- Empty tools array may return no findings rather than an error
- Very large manifests may time out or hit payload limits
- Invalid bodyType enum value causes request rejection

## How this service works

Statically analyse a Model Context Protocol (MCP) server manifest for security risks. Tool descriptions enter the model context, a prime prompt-injection vector. Deterministic and offline (inline manifest). Flags dangerous capabilities (command/code execution, filesystem, credential and network access), injection patterns, hidden unicode and unconstrained parameters. Returns severity-ranked findings and a 0-100 score.

## Output

Returns a structured security report identifying risks found within the MCP manifest, including flagged tools, descriptions of detected vulnerabilities or suspicious patterns, and overall risk assessment of the manifest's tool definitions, prompts, and resources.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object",
     "properties": {
      "manifest": {
       "oneOf": [
        {
         "type": "object"
        },
        {
         "type": "array"
        }
       ],
       "description": "The MCP manifest to scan: either an object (with a `tools` array, optionally `prompts`/`resources`) or a bare array of tool definitions. Each tool may have `name`, `description` and `inputSchema`."
      }
     },
     "additionalProperties": false
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/mcp-manifest-security-scanner-ad98589d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from mcpscan.openverbs.com](https://www.zero.xyz/host/mcpscan.openverbs.com/llms.txt)