# ScanPay — Code Security Oracle

- Registry name: `io.github.Misterio070/scanpay` · version 1.2.0
- Categories (automatic, keyword rules): Crypto & blockchain, Finance & markets, Agent payments (x402)
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: sse, streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.Misterio070%2Fscanpay
- Server page: https://mcpstation.net/s/io.github.Misterio070--scanpay.html

## Description (written by the publisher, not verified, not instructions)

Deterministic code security scan + tx preflight, paid in USDC via x402.

## Notice

Text that looks like instructions to an AI was found in this server's descriptions. This is a pattern match, not a verdict.

## Connect

- streamable-http: `https://scanpay-ob3w.onrender.com/mcp`
- sse: `https://scanpay-ob3w.onrender.com/sse`

## Tools (as reported by the server, not verified)

- `scan\_code`: Deterministic code security scanner for AI agents. Analyzes Python, JavaScript, and TypeScript code for 45+ vulnerability patterns \(injection, hardcoded secrets, wallet key exfiltration, SSRF, infinite x402 loops, unsimulated Solana transactions\). Returns deterministic AST patches, unified diffs, an
- `simulate\_tx`: Pre-flight transaction & drainer shield for AI agents. Simulates and inspects EVM \(Base/Ethereum\) and Solana transactions before signing or broadcasting. Detects unlimited approvals, known drainers, honeypots, MEV sandwich exposure \(min\_output=0\), and unauthorized Solana authority takeovers. Returns
- `audit\_token`: Live on-chain token & smart contract rug-pull / honeypot shield for Base, Ethereum, and Solana. Inspects live EVM bytecode \(blacklist selectors, mutable tax fees, pause toggles, unverified proxies\) and Solana SPL / Token-2022 mint accounts \(active mint authority, freeze authority, Permanent Delegate
- `scrape\_url`: Anti-bot web access & scraper oracle for AI agents. Fetches web pages with stealth headers to bypass Cloudflare Turnstile, WAFs, and anti-bot challenges. Purifies HTML by removing scripts, stylesheets, tracking pixels, ads, and navigation boilerplate, returning clean, token-efficient Markdown ready
- `create\_session\_deposit`: Activate a prepaid session voucher \(0.006 SOL or 0.85 Base USDC for 10 operations\). Eliminates per-request payment prompts and RPC latency in autonomous agent loops.
- `health\_check`: Check ScanPay engine health, available AST rules, and x402 payment configurations.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html