Back to Browse

Scanpay MCP Server

SecurityLow Risk9.5MCP RegistryRemote
Free

Server data from the Official MCP Registry

Deterministic code security scan + tx preflight, paid in USDC via x402.

About

Deterministic code security scan + tx preflight, paid in USDC via x402.

Remote endpoints: streamable-http: https://scanpay-ob3w.onrender.com/mcp sse: https://scanpay-ob3w.onrender.com/sse

Security Report

9.5
Low Risk9.5Low Risk

Valid MCP server (1 strong, 1 medium validity signals). 1 known CVE in dependencies Imported from the Official MCP Registry.

6 tools verified ยท Open access ยท 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Found in Source Code

Found by scanning the linked source code. This listing connects to a hosted endpoint, so none of this runs on your machine: it describes what the server software does where it is hosted.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Applies to the server that hosts this plugin, not to your machine.

file_system

Applies to the server that hosts this plugin, not to your machine.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "io-github-misterio070-scanpay": {
      "url": "https://scanpay-ob3w.onrender.com/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

ScanPay โ€” Security Oracle & Agent Infrastructure Suite

License: MIT Engine Version x402 Conformance Multi-Chain Glama MCP

ScanPay is an autonomous security guardrail and oracle infrastructure suite designed specifically for the Agent-to-Agent (A2A) and Machine-to-Machine (M2M) economy with x402 v2 micropayments.

  • Production API: https://scanpay-ob3w.onrender.com
  • Remote Streamable MCP: https://scanpay-ob3w.onrender.com/mcp (HTTP) / https://scanpay-ob3w.onrender.com/sse (SSE)
  • Solana Merchant Wallet: JDKXvegmW5j4sAJPB6YCA9ffJbN422WLMmCWCcpy1vm4
  • Base (EVM) Merchant Wallet: 0xb295E606F38C363b476FC546c27226B5fBcAAEFA (USDC: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913)

๐Ÿ› ๏ธ The 3 Core Agent Services

ServiceEndpointMCP ToolPricing (Base USDC / SOL)Purpose
1. Code Security ScannerPOST /v2/scanscan_code$0.10 USDC (0.0007 SOL)AST vulnerability analysis, deterministic patches, and execution gating (PASS/WARN/BLOCK).
2. Pre-Flight Tx ShieldPOST /v2/preflight/simulatesimulate_tx$0.05 USDC (0.00035 SOL)Simulates EVM/Solana transactions before broadcast, detecting honeypots, drainers, and MEV slippage traps.
3. Anti-Bot Scraper OraclePOST /v2/oracle/scrapescrape_url$0.02 USDC (0.00015 SOL)Stealth browser scraping bypassing Cloudflare Turnstile/WAF, returning clean LLM Markdown.
4. 10-Operation SessionPOST /v2/session/depositcreate_session_deposit$0.85 USDC (0.006 SOL)Prepaid micro-voucher valid across all tools with sub-millisecond latency and 0ms RPC bypass.

๐ŸŽฏ Machine Experience (MX) & A2A Capabilities

Traditional developer tools output verbose human prose. ScanPay produces structured Machine Responses:

  1. Execution Gate Verdicts: Unambiguous ALLOW or BLOCK booleans with 0-100 risk_score and cryptographic Ed25519 oracle attestations.
  2. Deterministic Auto-Remediation: Generates instant remediated_code and unified_diff patches ready for git apply.
  3. Tx Pre-Flight Simulation: Decodes ERC-20 approvals, detects unlimited allowances to untrusted spenders, honeypot functions (setTrading, blacklist), and Solana SetAuthority account takeovers.
  4. Anti-Bot Scraper Oracle: Strips navigation, ads, cookies, and scripts, saving up to 90% of LLM context window tokens.

๐ŸŒ Live Discovery Endpoints

Autonomous agent frameworks discover ScanPay automatically via spec-compliant endpoints:

EndpointStandard / ProtocolPurpose
GET /llms.txtLLMs Discovery StandardMachine documentation for LLMs, agents, and Cursor
GET /robots.txtAI Crawler StandardExplicit index permissions for GPTBot, Claude-Web, PerplexityBot
GET /.well-known/x402x402 v2 SpecProtocol discovery, CAIP-2 network, multi-chain pricing & endpoints
GET /bazaar.jsonCoinbase CDP / Onyx BazaarRegistry catalog with extensions.bazaar.discoverable: true
GET /.well-known/mcp.jsonModel Context ProtocolRemote MCP manifest with 5 registered tools
GET /.well-known/agent-card.jsonERC-8004 / ERC-8183Agent identity card declaring Oracle capabilities
GET /.well-known/ai-plugin.jsonOpenAI Plugin StandardOpenAPI integration manifest for autonomous function callers
GET /SKILL.mdAgent SkillsNative instructions for Claude Code, Hermes, and Codex
GET /PAY.mdMulti-Chain SettlementSettlement routes, recipient wallets, and spend caps
POST /mcp & GET /sseMCP Remote TransportsStateless JSON-RPC tool invocation over HTTP & SSE

๐Ÿค– Remote Model Context Protocol (MCP)

ScanPay runs as a native remote streamable MCP server.

Zero-Install stdio (CLI)

npx github:Misterio070/scanpay

Add to Claude Desktop / Cursor / Windsurf

{
  "mcpServers": {
    "scanpay": {
      "url": "https://scanpay-ob3w.onrender.com/sse"
    }
  }
}

๐Ÿ“ฆ Agent Framework Integrations

  • Coinbase AgentKit (Base USDC): packages/agentkit-action-scanpay (@scanpay/agentkit-action)
  • Solana Agent Kit v2: packages/plugin-solana-agent-kit (@scanpay/plugin-solana-agent-kit)
  • ElizaOS: packages/plugin-elizaos (@elizaos/plugin-scanpay)
  • Universal Guardrail Hook: packages/scanpay-guardrail/scanpay-hook.py (Claude Code PreToolUse hook, OpenCode, Codex, LangGraph)
  • ERC-8183 Commerce Evaluator: contracts/ScanPayEvaluatorV2.sol (Base ERC-8004 Validation Registry bridge)

๐Ÿงช Testing & Verification

# Run 125+ automated unit and integration tests
python3 -m pytest

๐Ÿ“„ License

MIT ยฉ Alex Taghiashvili

Reviews

No reviews yet

Be the first to review this server!