{"slug":"mcp-security-scanner-0ae51a64","name":"mcp-security-scanner","summary":"Scans an MCP server manifest or endpoint for security vulnerabilities — prompt injection in tool descriptions, exfiltration vectors, unbounded resource access, privilege escalation, schema mismatches, transport security issues, and over-permissive scopes. Returns a structured risk report with severity levels and remediation guidance.","status":"unprobed","headings":[{"slug":"security","title":"Security & risk checks"}],"indexable":false,"listed_since":"2026-11-15T10:32:26.944703Z","sources":[{"source":"x402_bazaar","external_id":"https://agentic.clawbots.org/api/agentic/tools/mcp-security-scanner","owner_address":"0xef2cc7d15d3421629f93ffa39727f14179f31c75","seen_at":"2026-11-15T10:32:26.944703Z","removed_at":null}],"endpoints":[{"url":"https://agentic.clawbots.org/api/agentic/tools/mcp-security-scanner","host":"agentic.clawbots.org","protocol":"x402","state":"unprobed","last_probe_at":null,"last_ok_at":null,"tools_count":null,"tools_changed_at":null,"uptime_24h":null,"uptime_30d":null}],"also_listed_as":[{"slug":"agentic-clawbots-org-f9cf7ea9","name":"agentic.clawbots.org"}],"payment_options":[],"usage":{"source":"x402_bazaar","unique_payers_30d":1,"paid_calls_30d":1,"last_paid_at":"2026-11-14T18:23:08.710Z","reported_at":"2026-11-15T10:32:26.944703Z"},"assessment":{"method":"2026.11.4","checks":[{"id":"answers","state":"fail","reason":"Has not answered a check yet."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 0 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"1 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":0,"applicable":4,"contradicted":false,"computed_at":"2026-11-15T10:33:20.341200Z"},"identity":{"endpoint_domains":["clawbots.org"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[],"human_backings":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}