ServerScan

com.serverscan/mcpVersion 1.2.0

PCI ASV scan prices, SAQ check, free payment page check, PCI guides and scan-failure fixes.

Status

Responds349 msNov 14, 2026, 14:15 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:15 UTC
Latency: 349 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 22:14 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://www.serverscan.com/api/mcpResponds349 msNov 14, 2026, 14:15 UTC

No sign-in

Claude Code

claude mcp add --transport http serverscan https://www.serverscan.com/api/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: serverscan
Remote MCP server URL: https://www.serverscan.com/api/mcp

Cursor

{
  "mcpServers": {
    "serverscan": {
      "url": "https://www.serverscan.com/api/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"serverscan","type":"http","url":"https://www.serverscan.com/api/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

6 tools

Tools of ServerScan
	Description		Read-only	Idempotent	Open world
`check_payment_page`Runs ServerScan's free one-off check of a payment or checkout page: TLS, security headers, the HTTP to HTTPS redirect, which scripts load and from where, and whether third-party scripts carry an integrity hash (PCI DSS 6.4.3 and 11.6.1). Returns six yes/no/not-yet-known answers and what to fix first. It fetches the page once. Any one site can be checked only a few times a day, and a repeat within 15 minutes returns the stored answer.	Runs ServerScan's free one-off check of a payment or checkout page: TLS, security headers, the HTTP to HTTPS redirect, which scripts load and from where, and whether third-party scripts carry an integrity hash (PCI DSS 6.4.3 and 11.6.1). Returns six yes/no/not-yet-known answers and what to fix first. It fetches the page once. Any one site can be checked only a few times a day, and a repeat within 15 minutes returns the stored answer.	No	Yes	Yes	Yes
`do_i_need_an_asv_scan`Says whether a merchant's PCI DSS self-assessment questionnaire (SAQ) requires quarterly external scans by an Approved Scanning Vendor, under PCI DSS v4.0.1, and what to scan. Pass the SAQ type, or "unsure" to get every SAQ with who it is for.	Says whether a merchant's PCI DSS self-assessment questionnaire (SAQ) requires quarterly external scans by an Approved Scanning Vendor, under PCI DSS v4.0.1, and what to scan. Pass the SAQ type, or "unsure" to get every SAQ with who it is for.	No	Yes	Yes	No
`fix_failed_scan`Explains a failed PCI ASV scan finding and how to fix it, for the ten most common causes: certificates, old TLS, unpatched software, open ports, default credentials, version banners, missing headers, insecure remote access, DNS and mail, and injection flaws. Pass the finding text from the scan report, or an issue name, or neither to list all ten.	Explains a failed PCI ASV scan finding and how to fix it, for the ten most common causes: certificates, old TLS, unpatched software, open ports, default credentials, version banners, missing headers, insecure remote access, DNS and mail, and injection flaws. Pass the finding text from the scan report, or an issue name, or neither to list all ten.	No	Yes	Yes	No
`get_pricing`Current prices for ServerScan PCI ASV scanning (per domain or IP address), payment page monitoring and penetration testing of networks and web applications, read live from the store, with what each plan includes and the refund terms.	Current prices for ServerScan PCI ASV scanning (per domain or IP address), payment page monitoring and penetration testing of networks and web applications, read live from the store, with what each plan includes and the refund terms.	No	Yes	Yes	No
`search_guides`Searches ServerScan's published guides on PCI DSS requirements, ASV scanning, choosing or switching ASV, scan failures, payment page monitoring and penetration testing. Returns up to five matching guides with a short excerpt and a link each. Use it to answer a PCI question from our own pages, then cite the link. For current prices, call get_pricing.	Searches ServerScan's published guides on PCI DSS requirements, ASV scanning, choosing or switching ASV, scan failures, payment page monitoring and penetration testing. Returns up to five matching guides with a short excerpt and a link each. Use it to answer a PCI question from our own pages, then cite the link. For current prices, call get_pricing.	No	Yes	Yes	No
`start_order`Returns a link to ServerScan's signup page with the plan picked and the domain filled in, for the person to open, check and pay. Creates nothing and charges nothing. For a penetration test, of a network or of web applications, it returns the page to request a quote from.	Returns a link to ServerScan's signup page with the plan picked and the domain filled in, for the person to open, check and pay. Creates nothing and charges nothing. For a penetration test, of a network or of web applications, it returns the page to request a quote from.	No	Yes	Yes	No

Details

Registry status: Active
Published: Oct 30, 2026
Updated: Oct 30, 2026
Website: https://www.serverscan.com/⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): Finance and paymentsSuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing