All servers · Agent payments (x402) · Scraping & browsing · Email & messaging
InjectScan
io.github.agentgate-builder/x402-prompt-injection-scan · v0.1.0
New (7 days)Instruction-like text in descriptionsTools changed (7 days)
Measured by MCP Station
| Last check | Reachable |
|---|---|
| Checked at | — |
| Check success 7 / 30 days | — |
| First-try success 30 days | — |
| Median response | — |
| Lookups 30 days | — |
| Authentication | No auth |
| MCP version | 2025-06-18 |
| Rank score | — |
| Declared risk | Read-only (all tools declare readOnlyHint) |
| Capabilities declared | tools |
| Tool definitions | 3 tools · with description 100% · input schema is an object 100% · read/destructive hints 100% |
Instruction-like text was found in scan_text, scan_tools. This is a pattern match, not a verdict. What we look for
Description written by the publisher, not verified
Prompt-injection scanner for agents: risk score, categories and spans for text, pages, MCP tools
Connect
streamable-http · https://injectscan.agentgate.workers.dev/mcp
claude mcp add --transport http x402-prompt-injection-scan https://injectscan.agentgate.workers.dev/mcp{
"mcpServers": {
"x402-prompt-injection-scan": {
"url": "https://injectscan.agentgate.workers.dev/mcp"
}
}
}Tools as reported by the server
scan_textScans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flags instruction overrides, jailbreak personas, system-prompt extraction, fake delimiters, exfiltration URLs, tool hijacking, hidden Unicode anscan_urlFetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent browses or summarizes it. Use scan_text if you already have the content and scan_tools for MCP tool definitions. Respects robots.txt and refusscan_toolsChecks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and schemas) before your agent installs or calls them. Use scan_text for ordinary content and scan_url for web pages. Up to 100 tools per call. F
Tool changes
- 2026-10-24: scan_text, scan_url, scan_tools
- 2026-10-22: scan_text
Repository · Website · JSON · Text for agents · Registry updated 2026-10-21