Discover / mcpscan.openverbs.com

Scan MCP manifest for risks

■ Challenge detected

Statically analyse a Model Context Protocol (MCP) server manifest for security risks. Tool descriptions enter the model context, a prime prompt-injection vector. Deterministic and offline (inline manifest). Flags dangerous capabilities (command/code execution, filesystem, credential and network access), injection patterns, hidden unicode and unconstrained parameters. Returns severity-ranked findings and a 0-100 score.

x402
Base
USDC

Listed price: $0.004
Challenge detected: 9 of the last 9 checks
Median response: 176 ms
Last checked: 16 Oct, 13:59 UTC
In our index since: 26 Sept 2026

Endpoint

curl -i https://mcpscan.openverbs.com/v1/scan
# 402 Payment Required: pay with an x402 client (USDC on Base),
# then send the same request again with the payment attached.

1 listed endpoints · on x402 Bazaar

Checks and payment terms on this page refer to the endpoint above. Other listed endpoints have not been checked individually.

POSThttps://mcpscan.openverbs.com/v1/scan$0.004Statically analyse a Model Context Protocol (MCP) server manifest for security risks. Tool descriptions enter the model context, a prime prompt-injection vector. Deterministic and offline (inline manifest). Flags dangerous capabilities (command/code execution, filesystem, credential and network access), injection patterns, hidden unicode and unconstrained parameters. Returns severity-ranked findings and a 0-100 score.

A dash means the listing gives no price or method. Copy buttons copy the full URL.

Showing 1 of 1 listed endpoints.

Agents can find it through the Superstables MCP server and JSON API: GET /api/v1/services/mcpscan.openverbs.com

Recent checks

30 Sept 2026One bar per check, showing up to 20 recent checks. Coloured bars show relative response time, with a minimum visible height; full-height grey bars mean no challenge was detected. “Challenge detected” means HTTP 402 or another detected payment-challenge signal.16 Oct 2026

All 9 checks

When (UTC)	Result	HTTP	Response
16 Oct, 13:59 UTC	Challenge detected	402	193ms
15 Oct, 04:47 UTC	Challenge detected	402	173ms
13 Oct, 20:45 UTC	Challenge detected	402	282ms
11 Oct, 12:57 UTC	Challenge detected	402	176ms
10 Oct, 00:46 UTC	Challenge detected	402	181ms
8 Oct, 21:32 UTC	Challenge detected	402	187ms
7 Oct, 18:39 UTC	Challenge detected	402	174ms
6 Oct, 15:34 UTC	Challenge detected	402	163ms
30 Sept, 05:03 UTC	Challenge detected	402	172ms

Questions

Did our last probe detect a payment challenge?

At our last probe on 16 Oct, 13:59 UTC, it returned HTTP 402 or another detected payment-challenge signal. This check did not test payment, delivery or compatibility with the Superstables client.

What price is recorded for Scan MCP manifest for risks?

Its listed price is $0.004.

What payment terms does Scan MCP manifest for risks advertise?

The listing advertises x402, Base and USDC. It names cdp as its facilitator. Check the seller's current payment challenge and authentication requirements before paying.

Where is Scan MCP manifest for risks listed?

In x402 Bazaar. Superstables first indexed it on 26 Sept 2026.

Something wrong on this page? Tell us.