# MCP Registry Supply-Chain Risk Scanner

> MCP Registry Supply-Chain Risk Scanner is a paid API for AI agents from eltociear-skill-audit.hf.space, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-30).

Scans the newest servers listed in the official MCP registry for supply-chain risk patterns and malicious AI-skill indicators

## Facts

- Endpoint: POST https://eltociear-skill-audit.hf.space/audit/registry?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-30
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/mcp-registry-supply-chain-risk-scanner-6c0abc1b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_TzYqstlS8wAX90X7aE3eQ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability mcp-registry-supply-chain-risk-scanner-6c0abc1b -d '<json body>'
```

Example prompt: Scan the 10 newest servers in the official MCP registry for supply-chain risk and tell me if any look malicious or suspicious.

## When to prefer this

Use this endpoint when you need to proactively audit the newest MCP registry servers for supply-chain risk without providing any specific repo or URL — it automatically targets the freshest registry entries. Prefer this over the GitHub repo scanner when you want broad registry-level surveillance rather than deep analysis of a single known repository.

## Known failure modes

- limit out of range (must be 1-15) returns validation error
- MCP registry unreachable causes timeout or connectivity error
- no new servers in registry returns empty result set
- payment failure (x402) blocks the request before scanning begins

## How this service works

Scan the newest servers in the official MCP registry for supply-chain risk — no input required

## Output

Returns audit results for the N newest MCP registry servers, including risk flags, detected malicious or suspicious patterns, and supply-chain threat indicators for each scanned server entry.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "limit": {
   "type": "integer",
   "description": "How many of the newest registry servers to scan (1-15, default 5)"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/mcp-registry-supply-chain-risk-scanner-6c0abc1b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from eltociear-skill-audit.hf.space](https://www.zero.xyz/host/eltociear-skill-audit.hf.space/llms.txt)