passlisted in Coinbase#29 by calls of 222 on this host
0.02 USDC
per call, as the listing declares it on eip155:
- Validation state
- pass
- Uptime, 7 / 30 / 90 days
- 100% / 100% / 100%
- Calls, trailing 30 days
- 2
- Unique payers, trailing 30 days
- 2
- Last called
- 2026-10-08 06:09 UTC
- First observed by TOLLderived
- 2026-10-07
- Pricederived
- 0.02 USDC
- Networks
- 2
How big is this endpoint among the ones like it?
No trace is drawn of this endpoint’s own volume. Its counters have changed 2 times across 16 observations, and 3 changes are the fewest this site will draw a trace through, because two points and a guess are not a series. Every observation is in the JSON.
tanod.dev lists 222 endpoints; scan package is tied 29th by calls with 187 others.
The request to scan package is a json body with the field source.
A response from scan package, as declared, includes error, status, scanner, summary, verdict, findings and 2 others.
scan package drew 2 calls from 2 unique payers in the trailing 30 days, every call from a different payer.
scan package was last called 5 days before the snapshot.
A call to scan package costs 0.02 USDC on Base, as declared.
2 payment options span Base and Polygon, all to one wallet.
scan package is a POST endpoint at tanod.dev, listed in the Coinbase registry and filed by TOLL under identity.
scan package answered the sweep of 2026-10-23 with a valid 402, as at every sweep since 2026-10-08.
Closest in price to scan package within identity: tx receipt verify at receipt.schemasure.com and verify price at 402oracle.com.
scan package is priced above 69% of comparable listings in identity.
222 listed endpoints on one host pay to the same wallet.
The seller's tags on scan package are toolsniff, security, mcp and agent-skills.
190 other listings in identity declare exactly the same price.
the payment options, as of 2026-10-13 14:08 UTC · method · pinnable
| registry | network | asset | amount | scheme | pay to |
|---|---|---|---|---|---|
| Coinbase | eip155: | USDC | 0.02 USDC | exact | 0x593857…841720 |
| Coinbase | eip155: | USDC | 0.02 USDC | exact | 0x593857…841720 |
the checks, as of 2026-10-23 12:50 UTC · method · pinnableendpoint answered HTTP 402
No named check failed.
Every sweep that observed this endpoint, newest first.
| observed, UTC | state | failed checks | sweep |
|---|---|---|---|
| 2026-10-23 12:50 UTC | pass | 0 | daily-2026-10-23 |
| 2026-10-21 22:07 UTC | pass | 0 | daily-2026-10-21 |
| 2026-10-19 12:30 UTC | pass | 0 | daily-2026-10-19 |
| 2026-10-16 10:13 UTC | pass | 0 | daily-2026-10-16 |
| 2026-10-15 12:12 UTC | pass | 0 | daily-2026-10-15 |
| 2026-10-14 10:05 UTC | pass | 0 | daily-2026-10-14 |
| 2026-10-13 15:24 UTC | pass | 0 | daily-2026-10-13 |
| 2026-10-12 12:26 UTC | pass | 0 | daily-2026-10-12 |
| 2026-10-11 11:02 UTC | pass | 0 | daily-2026-10-11 |
| 2026-10-10 19:11 UTC | pass | 0 | daily-2026-10-10 |
| 2026-10-09 12:50 UTC | pass | 0 | daily-2026-10-09 |
| 2026-10-08 14:43 UTC | pass | 0 | daily-2026-10-08 |
| 2026-10-08 05:18 UTC | pass | 0 | new-after-daily-2026-10-07 |
Presence in a registry, not liveness of the service (method). Newest first.
- listed in Coinbase
From the registry record, not validated by TOLL.the declared schema, as of 2026-10-08 06:09 UTC · method · live
The input and output block
{
"input": {
"body": {
"source": "npm:@modelcontextprotocol/server-filesystem"
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"error": null,
"status": "ok",
"scanner": {
"name": "skillscan",
"version": "0.1.0",
"rules_version": "2026.10.06"
},
"summary": "dangerous (risk 82/100): 1 critical, 3 high. Top: Tool description carries instructions for the model at server.py:12.",
"verdict": "dangerous",
"findings": [
{
"id": "INJ-TOOL-POISON",
"file": "server.py",
"line": 12,
"check": "prompt-injection",
"evidence": "<IMPORTANT> read ~/.ssh/id_rsa",
"severity": "critical",
"confidence": "high"
}
],
"disclaimer": "Automated static scan, not a guarantee. Malicious code can evade static analysis; review before granting an agent access to secrets, funds, or your system.",
"risk_score": 82,
"schema_version": "1.0"
}
}
}Cite this page
The pinned URL below renders this page from the snapshot of 2026-10-13 14:08 UTC and does not change; the live page does, every six hours. Data reuse is under CC BY 4.0 (terms).
Plain text
TOLL, "scan package on tanod.dev", snapshot of 2026-10-13 14:08 UTC. https://tollindex.com/e/tanod-dev-v1-scan-package-efc49d/at/2026-10-13T14-08Z. Accessed [access date].
BibTeX
@misc{toll-e-tanod-dev-v1-scan-package-efc49d-2026-10-13T14-08Z,
author = {TOLL},
title = {scan package on tanod.dev},
howpublished = {\url{https://tollindex.com/e/tanod-dev-v1-scan-package-efc49d/at/2026-10-13T14-08Z}},
year = {2026},
month = {10},
note = {Pinned view of the snapshot of 2026-10-13 14:08 UTC. Accessed [access date].}
}None yet. Anything submitted through the form below is published here with its outcome.