Agent Tools
Back to directory

FHI MCP Server Security Audit

https://polished-truth-c514.fhi-llc-1118.workers.dev
● healthy security

MCP server security audit before an agent connects or pays. $0.01 USDC on Base: probes initialize and tools/list, then returns ALLOW/CAUTION/BLOCK and a 0-100 risk score for command, filesystem, or wallet capabilities; prompt-injection or data-exfiltration signals; permissive JSON-schema inputs; missing HSTS; and large tool surfaces. Does not execute tools. Also offers $0.01 npm/PyPI dependency and typosquat preflight, DNS/CAA/certificate monitoring, and SEC filing deltas.

Category
security
Chains
base, eip155:8453
Price
$0.0030–$0.1000 USDC

Quality grade

How grading works
B 63.0 / 100
Availability 40.0 / 40
Endpoint responded (HTTP 200)
Payability 20.0 / 20
  • ✓ Answers a real HTTP 402 challenge
  • ✓ Publishes a /.well-known/x402 descriptor
  • ✓ Payment address on record
  • ✓ Settlement network declared
  • ✓ Price declared
Demand 0.0 / 40
0 distinct payers, 0 USDC transfers in the last 30 days
Owner verified 3.0 / 3
Operator proved control of this domain
Endpoint last checked 6 h ago. On-chain activity last read 11 d ago. Availability and on-chain demand are both re-probed daily; the grade updates automatically on the next pass.

Paid endpoints

9 resource(s) advertised by this origin.

https://polished-truth-c514.fhi-llc-1118.workers.dev/api/v1/agent-execute
https://polished-truth-c514.fhi-llc-1118.workers.dev/api/v1/cve-priority-report
https://polished-truth-c514.fhi-llc-1118.workers.dev/api/v1/domain-change-evidence
https://polished-truth-c514.fhi-llc-1118.workers.dev/api/v1/mcp-change-evidence
https://polished-truth-c514.fhi-llc-1118.workers.dev/api/v1/mcp-vendor-due-diligence
https://polished-truth-c514.fhi-llc-1118.workers.dev/api/v1/package-install-preflight
https://polished-truth-c514.fhi-llc-1118.workers.dev/api/v1/public-contract-award-delta
https://polished-truth-c514.fhi-llc-1118.workers.dev/api/v1/sec-material-event-delta
https://polished-truth-c514.fhi-llc-1118.workers.dev/v1/chat/completions

How to call

cURL · x402-fetch / x402-axios will auto-handle 402
curl -X POST https://polished-truth-c514.fhi-llc-1118.workers.dev/api/v1/agent-execute
/.well-known/x402.json
https://polished-truth-c514.fhi-llc-1118.workers.dev/.well-known/x402

Listed in

Directories this entry was found in.

x402scan