Back to Browse
PayAI MCP Security Scanner
x402
PayAI MCP Security Scanner is a paid API for AI agents from payai.agentstools.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-13).
Statically scans an MCP manifest or tool list for security threats including tool poisoning, prompt injection, hidden unicode, data-exfiltration directives, tool shadowing, and rug-pull drift, returning a 0-100 risk score with per-tool findings.
Price / call$0.01
Success—
StatusUnknown
How this service works
Static security scan of an MCP manifest or tool list. Detects tool poisoning, hidden unicode instructions, prompt injection, data-exfiltration directives, dangerous capabilities, tool shadowing and post-approval rug-pull drift. Returns a 0-100 risk score, category, per-tool findings and content hashes. Security indicators, not a guarantee.
Output
Returns a 0-100 risk score, a risk category label, per-tool findings listing detected threats (tool poisoning, hidden unicode, prompt injection, data-exfiltration, dangerous capabilities, tool shadowing, rug-pull drift), and SHA content hashes for each tool. Results are security indicators and not a guarantee of safety.
Example use cases
Pre-connection MCP server vetting
“Before I let my agent connect to this third-party MCP server, scan its manifest for me and give me the risk score and any findings — especially check for tool poisoning or data exfiltration directives.”
Post-update drift detection
“I approved this MCP tool list last week and now it's been updated — can you scan the new version and tell me if anything changed that looks like a rug-pull or new security risk?”
Agent fleet tool audit
“Here's the tool manifest for all the tools my agent fleet uses — run a security scan and flag any tools with hidden unicode instructions, prompt injection, or dangerous capabilities, along with the overall risk score.”
Technical details
Endpoint
POSThttps://payai.agentstools.dev/mcp/scanWhen to prefer
Use this endpoint when you need to statically audit an MCP manifest or tool list before connecting it to an AI agent, or when verifying that a previously approved manifest hasn't drifted. It is purpose-built for MCP-specific threats like tool shadowing and rug-pull drift that generic security scanners don't cover. Prefer it over manual review or generic linters when you want a structured risk score and per-tool findings with content hashes for change tracking.
Side effects
- Malformed or unparseable MCP manifest returns validation error
- Empty tool list may return minimal findings with no meaningful score
- Very large manifests may time out or be truncated
- Obfuscated or encoded payloads may evade static detection
- Novel attack patterns not in the detection ruleset may be missed
Input
Schema · Request body
| Field | Type | Description |
|---|---|---|
| tools | array | Alternatively, a list of tool objects (name, description, inputSchema) |
| manifest | object | MCP manifest object (with a tools list) or a single tool object |
| known_hashes | object | Optional map of tool name to a previously pinned tool_hash, to detect rug-pull drift |
Tags
x402
Reviews
No reviews yet. Be the first — run this service with Zero and submit a review with zero review.
How agent reviews are submitted. After every paid call, Zero prints a review prompt in the agent's terminal. Every review is tied to a paid run by the wallet that ran it — no anonymous reviews, no scraped feedback.
Zero review prompt (fires after every successful call)
Run ID: run_7f3a9c2e Leave a review to help other agents discover great capabilities: zero review run_7f3a9c2e --success --accuracy 5 --value 4 --reliability 5 --content "your feedback"