{"api":"v1","generated_at":"2026-09-15T23:43:17.129Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/x402-api-catalog-onrender-com-api-mcp-audit-c86d45","pinned_page":"https://tollindex.com/e/x402-api-catalog-onrender-com-api-mcp-audit-c86d45/at/2026-09-15T21-20Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-15T21:20:12.737Z","snapshot_stamp":"2026-09-15T21-20Z","endpoint":{"slug":"x402-api-catalog-onrender-com-api-mcp-audit-c86d45","canonical_url":"https://x402-api-catalog.onrender.com/api/mcp-audit","resource":"https://x402-api-catalog.onrender.com/api/mcp-audit","http_method":"GET","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"MCP server safety audit: completes a real initialize+tools/list handshake, then statically scans every tool's name/description/schema for hidden unicode (tool-poisoning), prompt-injection-style phrasing, and tools that quietly combine multiple high-privilege capabilities (network+filesystem+exec+credential access). If a GitHub repo is supplied, folds in a real software-supply-chain signal too.","service_name":"PreFlight Checker","declared_category":null,"declared_tags":["mcp","security","audit","tool-poisoning","prompt-injection"],"route_template":null,"registry_updated":"2026-09-07T17:52:09.026Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"mcp audit","category":"identity","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-15T21:20:12.737Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.06 USDC","amount_units":0.06,"decimals_known":true,"pay_to":"0x9041f8a43D0B43209B9227DE2c7fb25c9FE3847E","scheme":"exact"}],"counters":{"observed_at":"2026-09-15T21:20:12.737Z","calls_30d":2,"unique_payers_30d":1,"last_called_at":"2026-09-07T17:52:08.646Z"},"validation":{"latest":{"observed_at":"2026-09-15T06:31:03.415Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-15"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":5,"passed":5,"ratio":1},{"days":90,"observed":5,"passed":5,"ratio":1}],"history_90d":[{"observed_at":"2026-09-15T06:31:03.415Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T06:00:08.277Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T05:52:12.447Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T08:09:22.575Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T12:07:31.950Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0x9041f8a43D0B43209B9227DE2c7fb25c9FE3847E","page":"https://tollindex.com/seller/0x9041f8a43D0B43209B9227DE2c7fb25c9FE3847E","endpoints":6,"hosts":1},"reports":0,"registry_record":{"cdp":[{"tags":["mcp","security","audit","tool-poisoning","prompt-injection"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x9041f8a43D0B43209B9227DE2c7fb25c9FE3847E","amount":"60000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300}],"quality":{"lastCalledAt":"2026-09-07T17:52:08.646Z","l30DaysTotalCalls":2,"l30DaysUniquePayers":1},"resource":"https://x402-api-catalog.onrender.com/api/mcp-audit","extensions":{"bazaar":{"info":{"input":{"type":"http","method":"GET","queryParams":{"url":"https://mcp.example.com/mcp","repo":"example-org/example-mcp-server"}},"output":{"type":"json","example":{"url":"https://mcp.example.com/mcp","score":90,"verdict":"healthy: no red flags found","findings":[],"tools_found":3}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["url"],"properties":{"url":{"type":"string","description":"base URL of the MCP server (streamable-HTTP transport)"},"repo":{"type":"string","description":"optional owner/repo to fold in a GitHub supply-chain signal"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"url":{"type":"string"},"score":{"type":"number"},"verdict":{"type":"string"}}}}}}}}},"description":"MCP server safety audit: completes a real initialize+tools/list handshake, then statically scans every tool's name/description/schema for hidden unicode (tool-poisoning), prompt-injection-style phrasing, and tools that quietly combine multiple high-privilege capabilities (network+filesystem+exec+credential access). If a GitHub repo is supplied, folds in a real software-supply-chain signal too.","lastUpdated":"2026-09-07T17:52:09.026Z","serviceName":"PreFlight Checker","x402Version":2}]}}