Mcp Server Safety Report

MCP server audit / mcp safety report / tool risk review / agent tool security in one call: point it at a live MCP server URL or hand it a tool manifest and get a risk read before…

Overview

MCP server audit / mcp safety report / tool risk review / agent tool security in one call: point it at a live MCP server URL or hand it a tool manifest and get a risk read before an agent starts calling that server's tools. Composite: one call runs mcp-tools-list + mcp-tool-risk-score + prompt-injection-surface + secrets-exposure-check in parallel, merged into {risk, injection_surface, secrets_exposure}. mcp-tools-list discovers the tool catalog from server_url via JSON-RPC tools/list; mcp-tool-risk-score scores each tool 0-100 for permission scope and destructive-action risk. Pass a GitHub repo alongside the server to also scan the server's own code for prompt injection and secrets exposure. Use it as an MCP server audit API, an agent tool security checker, or a pre-connect safety gate.

Endpoint

Method	Endpoint	Price	Description
POST	/v1/marketplace/api/mcp-server-safety-report	$0.069	Invoke Mcp Server Safety Report (Code) and return the upstream response.

How to call it

Requests are paid per call over the x402 protocol. Call the endpoint, receive a 402 Payment Required quote, then repeat the request with the signed payment header. The SDKs do both steps for you.

# 1. Ask for a quote
curl -i -X POST https://api.jarvisclaw.ai/v1/marketplace/api/mcp-server-safety-report \
  -H 'Content-Type: application/json' \
  -d '{}'

# 2. Pay it (the SDK signs and retries for you)
curl -X POST https://api.jarvisclaw.ai/v1/marketplace/api/mcp-server-safety-report \
  -H 'Content-Type: application/json' \
  -H 'X-PAYMENT: <signed-payload>' \
  -d '{}'

Open in the marketplace