All servers · Crypto & blockchain · Agent payments (x402)

ScanPay — Code Security Oracle

io.github.Misterio070/scanpay · v1.2.0

New (7 days)Instruction-like text in descriptions

Measured by MCP Station

Last check	Reachable
Checked at	—
Check success 7 / 30 days	—
First-try success 30 days	—
Median response	—
Lookups 30 days	—
Authentication	No auth
MCP version	2024-11-05
Rank score	—
Declared risk	Not declared (tools carry no read/destructive hints)
Capabilities declared	tools
Tool definitions	6 tools · with description 100% · input schema is an object 100% · read/destructive hints 0%

Instruction-like text was found in scan_code. This is a pattern match, not a verdict. What we look for

Description written by the publisher, not verified

Deterministic code security scan + tx preflight, paid in USDC via x402.

Connect

streamable-http · https://scanpay-ob3w.onrender.com/mcp

claude mcp add --transport http scanpay https://scanpay-ob3w.onrender.com/mcp

{
  "mcpServers": {
    "scanpay": {
      "url": "https://scanpay-ob3w.onrender.com/mcp"
    }
  }
}

sse · https://scanpay-ob3w.onrender.com/sse

claude mcp add --transport http scanpay https://scanpay-ob3w.onrender.com/sse

{
  "mcpServers": {
    "scanpay": {
      "url": "https://scanpay-ob3w.onrender.com/sse"
    }
  }
}

Tools as reported by the server

scan_code
Deterministic code security scanner for AI agents. Analyzes Python, JavaScript, and TypeScript code for 45+ vulnerability patterns (injection, hardcoded secrets, wallet key exfiltration, SSRF, infinite x402 loops, unsimulated Solana transactions). Returns deterministic AST patches, unified diffs, an
simulate_tx
Pre-flight transaction & drainer shield for AI agents. Simulates and inspects EVM (Base/Ethereum) and Solana transactions before signing or broadcasting. Detects unlimited approvals, known drainers, honeypots, MEV sandwich exposure (min_output=0), and unauthorized Solana authority takeovers. Returns
audit_token
Live on-chain token & smart contract rug-pull / honeypot shield for Base, Ethereum, and Solana. Inspects live EVM bytecode (blacklist selectors, mutable tax fees, pause toggles, unverified proxies) and Solana SPL / Token-2022 mint accounts (active mint authority, freeze authority, Permanent Delegate
scrape_url
Anti-bot web access & scraper oracle for AI agents. Fetches web pages with stealth headers to bypass Cloudflare Turnstile, WAFs, and anti-bot challenges. Purifies HTML by removing scripts, stylesheets, tracking pixels, ads, and navigation boilerplate, returning clean, token-efficient Markdown ready
create_session_deposit
Activate a prepaid session voucher (0.006 SOL or 0.85 Base USDC for 10 operations). Eliminates per-request payment prompts and RPC latency in autonomous agent loops.
health_check
Check ScanPay engine health, available AST rules, and x402 payment configurations.

Repository · JSON · Text for agents · Registry updated 2026-10-27