# sri-test MCP Server Source Verifier

> sri-test MCP Server Source Verifier is a paid API for AI agents from sri-test.biz, paid per call via x402, $0.2/call, status unknown (last checked 2026-09-14).

Analyzes an MCP server's published source code and returns security findings with file:line citations before you connect to it

## Facts

- Endpoint: POST https://sri-test.biz/v1/x402/verify
- Price: $0.2/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sri-test-mcp-server-source-verifier-f5924050
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_rBtKmG9xQA6rw7rENSTwl

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sri-test-mcp-server-source-verifier-f5924050 -d '<json body>'
```

Example prompt: Before I connect to the MCP server called 'filesystem' version '1.0.2', can you analyze its published source code and show me any security findings with the exact file and line citations?

## When to prefer this

Use this endpoint when you need human-readable, cited security analysis of an MCP server before connecting to or installing it — particularly when you cannot manually audit the source code yourself. It is the right choice over generic code search or LLM summarization when you need authoritative, source-grounded findings with exact file:line provenance.

## Known failure modes

- No analyzed result available for the requested name/version — no charge is made
- Invalid or unknown ecosystem value provided
- Server name or version not found in the index
- Network or payment processing failure
- Source code not publicly available for the requested package

## How this service works

Read what an MCP server does before connecting: findings quoted at file:line from its published source. POST {ecosystem:'mcp', name, version}. Charged only when an analyzed result is returned.

## Output

A structured report containing security findings extracted from the MCP server's published source code, with each finding cited at a specific file path and line number, allowing the agent or user to review exactly what the server does before connecting.

## Request schema (JSON Schema)

```json
{
 "input": {
  "type": "object"
 },
 "output": {
  "type": "object"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sri-test-mcp-server-source-verifier-f5924050/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from sri-test.biz](https://www.zero.xyz/host/sri-test.biz/llms.txt)