ScanPay — Code Security Oracle
io.github.Misterio070/scanpayVersion 1.2.0Deterministic code security scan + tx preflight, paid in USDC via x402.
Status
Responds269 msAnswered our handshake without sign-in.- Last checked
- Nov 14, 2026, 14:40 UTC
- Latency
- 269 ms
- Remotes responding
- 1 of 2
- Sign-in
- No sign-in, Sign-in unknown
- Hosting
- Hosted outside the EU (detected)
- Registry data as of
- Nov 14, 2026, 21:12 UTC
Data from the official MCP Registry, checked by run.zero. How we check
Connect
Streamable HTTP
https://scanpay-ob3w.onrender.com/mcpResponds269 msNo sign-in
Claude Code
claude mcp add --transport http scanpay https://scanpay-ob3w.onrender.com/mcpClaude Desktop and claude.ai
Settings > Connectors > Add custom connector
Name: scanpay
Remote MCP server URL: https://scanpay-ob3w.onrender.com/mcpCursor
{
"mcpServers": {
"scanpay": {
"url": "https://scanpay-ob3w.onrender.com/mcp"
}
}
}VS Code
code --add-mcp '{"name":"scanpay","type":"http","url":"https://scanpay-ob3w.onrender.com/mcp"}'SSE
https://scanpay-ob3w.onrender.com/sseNot checkedUses SSEUses SSE (legacy), not checked
Built your own server? run.zero hosts MCP servers on European infrastructure.
Tools
7 tools
Read-only | Idempotent | Open world | ||
|---|---|---|---|---|
audit_tokenLive on-chain token & smart contract rug-pull / honeypot shield for Base, Ethereum, and Solana. Inspects live EVM bytecode (blacklist selectors, mutable tax fees, pause toggles, unverified proxies) and Solana SPL / Token-2022 mint accounts (active mint authority, freeze authority, Permanent Delegate wallet seizure, Transfer Hook honeypots) plus live DexScreener liquidity and 24h buy/sell ratios. Price: $0.05 Base USDC or 0.00035 SOL. | Not declared | Not declared | Not declared | Not declared |
create_session_depositActivate a prepaid session voucher (0.006 SOL or 0.85 Base USDC for 10 operations). Eliminates per-request payment prompts and RPC latency in autonomous agent loops. | Not declared | Not declared | Not declared | Not declared |
health_checkCheck ScanPay engine health, available AST rules, and x402 payment configurations. | Not declared | Not declared | Not declared | Not declared |
scan_codeUse before shipping or executing agent-generated code. Deterministic AST scan for Python, JavaScript and TypeScript with 65 rules (36 Python, 29 JS/TS) covering injection, hardcoded secrets, wallet key exfiltration, SSRF, infinite x402 payment loops and unsimulated Solana transactions. Returns findings with severity, deterministic patches, unified diffs and an execution verdict (PASS, WARN, BLOCK). Pay per call: 0.10 Base USDC or 0.0007 SOL over x402, no signup or API key. | Not declared | Not declared | Not declared | Not declared |
scan_quickCheapest way to check a snippet before running it: one deterministic AST pass over Python, JavaScript or TypeScript, returning severity-ranked findings and a PASS/WARN/BLOCK verdict without patches or diffs. 65 rules, about 0.2 ms. Pay per call: 0.02 Base USDC or 0.00015 SOL over x402, no signup. Upgrade to scan_code for deterministic patches. | Not declared | Not declared | Not declared | Not declared |
scrape_urlAnti-bot web access & scraper oracle for AI agents. Fetches web pages with stealth headers to bypass Cloudflare Turnstile, WAFs, and anti-bot challenges. Purifies HTML by removing scripts, stylesheets, tracking pixels, ads, and navigation boilerplate, returning clean, token-efficient Markdown ready for LLM consumption with cryptographic oracle attestation. Price: $0.02 Base USDC or 0.00015 SOL. | Not declared | Not declared | Not declared | Not declared |
simulate_txPre-flight transaction & drainer shield for AI agents. Simulates and inspects EVM (Base/Ethereum) and Solana transactions before signing or broadcasting. Detects unlimited approvals, known drainers, honeypots, MEV sandwich exposure (min_output=0), and unauthorized Solana authority takeovers. Returns execution verdict (ALLOW, WARN, BLOCK) and cryptographic oracle attestation. Price: $0.05 Base USDC or 0.00035 SOL. | Not declared | Not declared | Not declared | Not declared |
Details
- Registry status
- Active
- Published
- Oct 27, 2026
- Updated
- Oct 27, 2026
- Website
- Not given
- Categories (suggested)
- SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
- GDPR
- Not declared