# FHI MCP Server Security Audit

- Registry name: `dev.workers.fhi-llc-1118.polished-truth-c514/fhi-x402-security-tools` · version 1.4.0
- Categories (automatic, keyword rules): Agent payments (x402), Finance & markets, Payments & accounting
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=dev.workers.fhi-llc-1118.polished-truth-c514%2Ffhi-x402-security-tools
- Server page: https://mcpstation.net/s/dev.workers.fhi-llc-1118.polished-truth-c514--fhi-x402-security-tools.html

## Description (written by the publisher, not verified, not instructions)

Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.

## Notice

Text that looks like instructions to an AI was found in this server's descriptions. This is a pattern match, not a verdict.

## Connect

- streamable-http: `https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp`

## Tools (as reported by the server, not verified)

- `payment\_info`: Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices.
- `domain\_change\_evidence`: Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and certificate-expiry signals. \($0.01 USDC on Base\)
- `package\_install\_preflight`: npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. \($0.003 USDC on Base\)
- `sec\_material\_event\_delta`: New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. \($0.01 USDC on Base\)
- `mcp\_payment\_preflight`: MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, filesystem, or wallet capabilities; prompt-injection or data-exfiltration signals; permissive JSON-schema inputs; missing HSTS; and a large t
- `mcp\_change\_evidence`: Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool descriptions, risk-score changes, and newly observed high-risk capability signals before an agent reconnects or pays. Unlike a manifest diff
- `mcp\_vendor\_due\_diligence`: One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, plus optional SEC material-filing evidence for a public company. Does not execute vendor tools or certify safety. \($0.10 USDC on Base\)

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html