{"api":"v1","generated_at":"2026-10-01T05:48:15.739Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/saylorinnovations-com-api-mcp-scan-02a73b","pinned_page":"https://tollindex.com/e/saylorinnovations-com-api-mcp-scan-02a73b/at/2026-09-30T22-14Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-30T22:14:11.940Z","snapshot_stamp":"2026-09-30T22-14Z","endpoint":{"slug":"saylorinnovations-com-api-mcp-scan-02a73b","canonical_url":"https://saylorinnovations.com/api/mcp-scan","resource":"https://saylorinnovations.com/api/mcp-scan","http_method":"GET","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"MCP Server Security Scan (tool poisoning, prompt injection, risky capabilities). MCP server security scan and trust check before connecting: connects as an MCP client (initialize, tools/list, prompts/list, resources/list) and checks every tool for tool poisoning and prompt injection (hidden <IMPORTANT> instructions, requests to read ~/.ssh or config files, do-not-tell-the-user language, exfiltration), invisible Unicode and data-smuggling parameters; flags risky capabilities (code execution…","service_name":null,"declared_category":null,"declared_tags":["mcp","security","tool-poisoning","prompt-injection","trust"],"route_template":null,"registry_updated":"2026-09-25T20:26:51.271Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"mcp scan","category":"compute","first_observed_by_toll":"2026-09-24T21:29:59.628Z","last_observed_by_toll":"2026-09-30T22:14:11.940Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-24T21:29:59.629Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","asset_name":null,"symbol":"USDC","decimals":6,"amount_display":"0.01 USDC","amount_units":0.01,"decimals_known":true,"pay_to":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","scheme":"exact"},{"registry":"cdp","ordinal":1,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB","asset_name":null,"symbol":"USDT","decimals":6,"amount_display":"0.01 USDT","amount_units":0.01,"decimals_known":true,"pay_to":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","scheme":"exact"},{"registry":"cdp","ordinal":2,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.01 USDC","amount_units":0.01,"decimals_known":true,"pay_to":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","scheme":"exact"},{"registry":"cdp","ordinal":3,"network":"eip155:137","asset":"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.01 USDC","amount_units":0.01,"decimals_known":true,"pay_to":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","scheme":"exact"},{"registry":"cdp","ordinal":4,"network":"eip155:42161","asset":"0xaf88d065e77c8cc2239327c5edb3a432268e5831","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.01 USDC","amount_units":0.01,"decimals_known":true,"pay_to":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","scheme":"exact"},{"registry":"cdp","ordinal":5,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"So11111111111111111111111111111111111111112","asset_name":null,"symbol":null,"decimals":null,"amount_display":"79534 smallest units, decimals unknown","amount_units":null,"decimals_known":false,"pay_to":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","scheme":"exact"}],"counters":{"observed_at":"2026-09-30T22:14:11.940Z","calls_30d":4,"unique_payers_30d":1,"last_called_at":"2026-09-25T20:26:50.948Z"},"validation":{"latest":{"observed_at":"2026-09-30T05:35:36.370Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-30"},"uptime":[{"days":7,"observed":7,"passed":7,"ratio":1},{"days":30,"observed":7,"passed":7,"ratio":1},{"days":90,"observed":7,"passed":7,"ratio":1}],"history_90d":[{"observed_at":"2026-09-30T05:35:36.370Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-30","state_changed":false},{"observed_at":"2026-09-29T17:56:12.121Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-29","state_changed":false},{"observed_at":"2026-09-28T03:50:02.792Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-28","state_changed":false},{"observed_at":"2026-09-27T16:48:40.461Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-27","state_changed":false},{"observed_at":"2026-09-26T22:58:35.074Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-26","state_changed":false},{"observed_at":"2026-09-25T19:32:19.378Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-25","state_changed":false},{"observed_at":"2026-09-25T19:15:01.823Z","state":"pass","failed_checks":[],"run_id":"new-after-daily-2026-09-24","state_changed":true}]},"seller":{"wallet":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","page":"https://tollindex.com/seller/7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","endpoints":397,"hosts":1},"reports":0,"registry_record":{"cdp":[{"tags":["mcp","security","tool-poisoning","prompt-injection","trust"],"type":"http","accepts":[{"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"memo":"saylor:mcpscan:scan","session":"eyJhcnRpY2xlSWQiOiJtY3BzY2FuOnNjYW4iLCJyZWZlcmVuY2UiOiIzUURWcGtqV0FQN1Q3RWpBVTNQaFZEZ0xoNEZqd2RiOVh6UkNxUlZvWnVBZiIsInJlY2lwaWVudCI6IjdMU2pmckpmOGZOc0I4VkE5dTdOM1dFbjI1c21RTHBvYjNTdnlVdlhhY3k3IiwibWludCI6IkVQakZXZGQ1QXVmcVNTcWVNMnFOMXh6eWJhcEM4RzR3RUdHa1p3eVREdDF2IiwibWluQW1vdW50IjoxMDAwMCwiZXhwIjoxNzkwMzY4MTMxMjA4fQ.5PcpqoS44UUNQDRXdOOjgpcfzCoURHLTkfznbWvu_eU","feePayer":"GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb","reference":"3QDVpkjWAP7T7EjAU3PhVDgLh4Fjwdb9XzRCqRVoZuAf"},"payTo":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","amount":"10000","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":120},{"asset":"Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB","extra":{"memo":"saylor:mcpscan:scan","session":"eyJhcnRpY2xlSWQiOiJtY3BzY2FuOnNjYW4iLCJyZWZlcmVuY2UiOiJCcDdQbldmb01WcTJ1TGpMMUVnYXE0eEhXY2JBOG84UXk3Zm1KU1pTQXJFUSIsInJlY2lwaWVudCI6IjdMU2pmckpmOGZOc0I4VkE5dTdOM1dFbjI1c21RTHBvYjNTdnlVdlhhY3k3IiwibWludCI6IkVzOXZNRnJ6YUNFUm1KZnJGNEgyRllENEtDb05rWTExTWNDZThCZW53TllCIiwibWluQW1vdW50IjoxMDAwMCwiZXhwIjoxNzkwMzY4MTMxMjA4fQ.5s50FMJR3tzwl60kPUzMZFOCsM6bfKpWJ2O5iCGSvMo","feePayer":"GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb","reference":"Bp7PnWfoMVq2uLjL1Egaq4xHWcbA8o8Qy7fmJSZSArEQ"},"payTo":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","amount":"10000","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":120},{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"memo":"saylor:mcpscan:scan","name":"USD Coin","note":"Base settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.","version":"2","facilitatorOnly":true,"assetTransferMethod":"eip3009"},"payTo":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","amount":"10000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":120},{"asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"memo":"saylor:mcpscan:scan","name":"USD Coin","note":"Polygon settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.","version":"2","facilitatorOnly":true,"assetTransferMethod":"eip3009"},"payTo":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","amount":"10000","scheme":"exact","network":"eip155:137","maxTimeoutSeconds":120},{"asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","extra":{"memo":"saylor:mcpscan:scan","name":"USD Coin","note":"Arbitrum settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.","version":"2","facilitatorOnly":true,"assetTransferMethod":"eip3009"},"payTo":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","amount":"10000","scheme":"exact","network":"eip155:42161","maxTimeoutSeconds":120},{"asset":"So11111111111111111111111111111111111111112","extra":{"memo":"saylor:mcpscan:scan","note":"Native SOL: send lamports with a system transfer, not an SPL transfer. Price is quoted live and this quote expires in 120s.","native":true,"session":"eyJhcnRpY2xlSWQiOiJtY3BzY2FuOnNjYW4iLCJyZWZlcmVuY2UiOiJqSGJVUTV6bzVIYWRvbTZRRzZkRmg5VVl0bUpGZUt6ZWFXcEpnNWNkNG9VIiwicmVjaXBpZW50IjoiN0xTamZySmY4Zk5zQjhWQTl1N04zV0VuMjVzbVFMcG9iM1N2eVV2WGFjeTciLCJtaW50IjpudWxsLCJtaW5BbW91bnQiOjc5NTM0LCJleHAiOjE3OTAzNjgxMzEyMDl9.iFOcr-iKTW5M3EaJs2Eav8G_RIozMkPsyZdIDTb7tdY","reference":"jHbUQ5zo5Hadom6QG6dFh9UYtmJFeKzeaWpJg5cd4oU","solUsdPrice":121.96,"quotedLamports":"81994"},"payTo":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","amount":"79534","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":120}],"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1790235422/bazaar-icons/bc5e2b3d111ebbef.jpg","quality":{"lastCalledAt":"2026-09-25T20:26:50.948Z","l30DaysTotalCalls":4,"l30DaysUniquePayers":1},"resource":"https://saylorinnovations.com/api/mcp-scan","extensions":{"bazaar":{"info":{"input":{"type":"http","method":"GET","queryParams":{"url":"https://docs.mcp.cloudflare.com/mcp"}},"output":{"type":"json","example":{"url":"https://example.com/mcp","score":30,"tools":[{"name":"add_numbers","findings":[],"capabilities":[]}],"counts":{"tools":3,"prompts":0,"findings":1,"resources":0},"server":{"tls":true,"name":"example-server","protocol_version":"2025-06-18"},"reasons":["1 critical finding(s): hidden instructions or invisible text in what the model reads"],"verdict":"do-not-connect","findings":[{"rule":"prompt-injection","tool":"add_numbers","detail":"references local secret or config files","evidence":"~/.ssh","severity":"critical"}],"registry":{"listed":false},"reachable":true}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","POST","PUT","PATCH","DELETE","HEAD"],"type":"string"},"queryParams":{"type":"object","properties":{"url":{"type":"string","description":"MCP server endpoint URL, e.g. https://example.com/mcp (query)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string","const":"json"},"example":{"type":"object","required":["url","verdict"],"properties":{"url":{"type":"string"},"score":{"type":["number","null"]},"tools":{"type":"array","items":{"type":"object"}},"counts":{"type":"object"},"server":{"type":"object"},"reasons":{"type":"array","items":{"type":"string"}},"verdict":{"enum":["no-issues-found","caution","high-risk","do-not-connect","auth-required","unreachable","not-mcp","not-scanned"],"type":"string"},"findings":{"type":"array","items":{"type":"object"}}}}}}}}}},"description":"MCP Server Security Scan (tool poisoning, prompt injection, risky capabilities). MCP server security scan and trust check before connecting: connects as an MCP client (initialize, tools/list, prompts/list, resources/list) and checks every tool for tool poisoning and prompt injection (hidden <IMPORTANT> instructions, requests to read ~/.ssh or config files, do-not-tell-the-user language, exfiltration), invisible Unicode and data-smuggling parameters; flags risky capabilities (code execution…","lastUpdated":"2026-09-25T20:26:51.271Z","x402Version":2}]}}