{"api":"v1","generated_at":"2026-09-15T22:55:14.501Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/api-hergertsynthora-com-v1-mcpscan-06623a","pinned_page":"https://tollindex.com/e/api-hergertsynthora-com-v1-mcpscan-06623a/at/2026-09-15T21-20Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-15T21:20:12.737Z","snapshot_stamp":"2026-09-15T21-20Z","endpoint":{"slug":"api-hergertsynthora-com-v1-mcpscan-06623a","canonical_url":"https://api.hergertsynthora.com/v1/mcpscan","resource":"https://api.hergertsynthora.com/v1/mcpscan","http_method":"POST","type":"http","x402_version":2,"registries":[],"primary_registry":"cdp","curated_by_coinbase":false,"description":"MCP Server Security Scan: probes an MCP server (JSON-RPC initialize + tools/list) and applies a deterministic rule engine over its tools — embedded secrets, dangerous shell/exec/filesystem capabilities, prompt-injection surface, hidden unicode, permissive input schemas, and auth/TLS/CORS headers — returning a security_score + findings[]. The trust layer for the agent economy. Zero-LLM, Ed25519-signed. 0.05 USDC via x402 on Base. SYNTHORA.","service_name":"SYNTHORA","declared_category":null,"declared_tags":[],"route_template":null,"registry_updated":"2026-08-12T22:53:32.069Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"mcpscan","category":"compute","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-11T20:57:00.628Z","observation_began":"2026-09-10"},"presence":{"listed_now":false,"first_absent_at":"2026-09-12T04:32:46.838Z","delisting_confirmed_at":"2026-09-12T10:44:49.991Z","events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"},{"registry":"cdp","at":"2026-09-12T04:32:46.838Z","event":"delisted"},{"registry":"cdp","at":"2026-09-12T10:44:49.991Z","event":"delisting_confirmed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.05 USDC","amount_units":0.05,"decimals_known":true,"pay_to":"0x10800a5a5B9d72251566EC651E862A8b4B427dE0","scheme":"exact"}],"counters":{"observed_at":"2026-09-11T20:57:00.628Z","calls_30d":1,"unique_payers_30d":1,"last_called_at":"2026-08-12T22:53:31.615Z"},"validation":{"latest":{"observed_at":"2026-09-11T09:30:28.546Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-11"},"uptime":[{"days":7,"observed":1,"passed":1,"ratio":1},{"days":30,"observed":1,"passed":1,"ratio":1},{"days":90,"observed":1,"passed":1,"ratio":1}],"history_90d":[{"observed_at":"2026-09-11T09:30:28.546Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0x10800a5a5B9d72251566EC651E862A8b4B427dE0","page":"https://tollindex.com/seller/0x10800a5a5B9d72251566EC651E862A8b4B427dE0","endpoints":56,"hosts":10},"reports":0,"registry_record":{"cdp":[{"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x10800a5a5B9d72251566EC651E862A8b4B427dE0","amount":"50000","scheme":"exact","network":"eip155:8453","mimeType":"application/json","resource":"https://api.hergertsynthora.com/v1/mcpscan","description":"MCP Server Security Scan: probes an MCP server (JSON-RPC initialize + tools/list) and applies a deterministic rule engine over its tools — embedded secrets, dangerous shell/exec/filesystem capabilities, prompt-injection surface, hidden unicode, permissive input schemas, and auth/TLS/CORS headers — returning a security_score + findings[]. The trust layer for the agent economy. Zero-LLM, Ed25519-signed. 0.05 USDC via x402 on Base. SYNTHORA.","maxAmountRequired":"50000","maxTimeoutSeconds":300}],"quality":{"lastCalledAt":"2026-08-12T22:53:31.615Z","l30DaysTotalCalls":1,"l30DaysUniquePayers":1},"resource":"https://api.hergertsynthora.com/v1/mcpscan","extensions":{"bazaar":{"info":{"input":{"body":{"manifest":{"name":"demo-mcp","tools":[{"name":"search","description":"web search"},{"name":"fetch","description":"http fetch"}],"version":"1.0.0"}},"type":"http","method":"POST","bodyType":"json"},"output":{"type":"json","example":{"ok":true,"niche":"mcp_scan","result":{"counts":{"low":0,"high":2,"medium":2,"critical":1},"signed":"ed25519","target":"https://mcp.example.dev/mcp","verdict":"critico","findings":[{"id":"MCP-S01","rule":"secret_in_manifest","tool":"read_file","detail":"openai_key embedded in tool","severity":"critical"}],"tools_scanned":2,"security_score":14}}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object","properties":{"url":{"type":"string","description":"MCP server URL (Streamable-HTTP endpoint)"},"manifest":{"type":"object","description":"Or paste the MCP manifest (serverInfo + tools) directly"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"ok":{"type":"boolean"},"type":"object","niche":{"type":"string"}}}}}}},"delivery":{"note":"unlike the signature -- which you verify BEFORE paying -- this one is checked afterwards, on-chain, from your own wallet","order":"compute -> failure gate -> verify -> settle -> deliver","scope":"this covers service FAILURE, not verdict quality","policy":"no-charge-on-service-failure","verify":"after a request of yours FAILS, check your own wallet on Base: no USDC settlement to our payTo will exist for it. If we had charged you, the transfer would be public and permanent","behaviour":"if the service FAILS (invalid input, timeout, stale cache, withdrawn product, malformed output) you receive 402 and are NOT charged"},"signature":{"alg":"ed25519","canon":"json:sort_keys+separators(,:)+ensure_ascii+utf8","verify":"recompute canon from envelope.result, then VerifyKey(bytes.fromhex(pubkey)).verify(canon, bytes.fromhex(sig)) -- no name to trust, verify the signature yourself","jwksUrl":"https://api.hergertsynthora.com/.well-known/jwks.json","envelope":"{result, attestation:{alg,pubkey,sig,canon}}","sigEncoding":"hex(64B raw)","publicKeyUrl":"https://api.hergertsynthora.com/pubkey"}},"description":"MCP Server Security Scan: probes an MCP server (JSON-RPC initialize + tools/list) and applies a deterministic rule engine over its tools — embedded secrets, dangerous shell/exec/filesystem capabilities, prompt-injection surface, hidden unicode, permissive input schemas, and auth/TLS/CORS headers — returning a security_score + findings[]. The trust layer for the agent economy. Zero-LLM, Ed25519-signed. 0.05 USDC via x402 on Base. SYNTHORA.","lastUpdated":"2026-08-12T22:53:32.069Z","serviceName":"SYNTHORA","x402Version":2}]}}