Server definition

Hash: sha256:844f4426963cb0c75f355627d300fc4f92c1631a373a62a2f2d409233cb24d9c
What it is: What a remote MCP server returned when asked what it offers: 8 tools

The blob, as servednamed by its sha256

{
  "instructions": null,
  "tools": [
    {
      "description": "Audit an MCP client configuration for security risks — works offline,\nno external service required. Detects: tool poisoning, hidden/coercive\ninstructions in tool descriptions, hardcoded credentials, unpinned\npackages (rug-pull risk), insecure transport, and toxic capability\ncombinations (shell + network, file-read + network).",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "config_json": {
            "description": "The FULL JSON content of the MCP config file as a string\n         (e.g. claude_desktop_config.json or .mcp.json). Paste the\n         file content, not the path.",
            "type": "string"
          }
        },
        "required": [
          "config_json"
        ],
        "type": "object"
      },
      "name": "audit_mcp_server_config",
      "outputSchema": {
        "properties": {
          "result": {
            "type": "string"
          }
        },
        "required": [
          "result"
        ],
        "type": "object",
        "x-fastmcp-wrap-result": true
      }
    },
    {
      "description": "Check the health of your agent's external dependencies: uptime, SSL\nvalidity, blacklist status, and a trust score 0-100 (DepScan).",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "endpoints": {
            "description": "List of URLs your agent/skill depends on,\n       e.g. [\"https://api.openai.com\", \"https://api.stripe.com\"]",
            "items": {
              "type": "string"
            },
            "type": "array"
          }
        },
        "required": [
          "endpoints"
        ],
        "type": "object"
      },
      "name": "check_dependencies",
      "outputSchema": {
        "properties": {
          "result": {
            "type": "string"
          }
        },
        "required": [
          "result"
        ],
        "type": "object",
        "x-fastmcp-wrap-result": true
      }
    },
    {
      "description": "Complete security posture in one call: audits the MCP config, checks\ndependency health, analyzes an untrusted skill, scans the local network\ngateway, and scans any payload you're about to send out for secrets/PII —\nthen correlates everything into a single prioritized report. Pass only\nwhat you have; each section is skipped gracefully if its input or service\nis missing.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "dependency_endpoints": {
            "anyOf": [
              {
                "items": {
                  "type": "string"
                },
                "type": "array"
              },
              {
                "type": "null"
              }
            ],
            "default": null,
            "description": "URLs your stack depends on (optional)"
          },
          "mcp_config_json": {
            "default": "",
            "description": "MCP config content as string (optional)",
            "type": "string"
          },
          "network_authorized": {
            "default": false,
            "description": "REQUIRED to scan network_target. Set True to certify\n                you own or have permission to scan it. (optional, default False)",
            "type": "boolean"
          },
          "network_target": {
            "default": "",
            "description": "IP to scan, e.g. \"192.168.1.1\" (optional)",
            "type": "string"
          },
          "skill_url": {
            "default": "",
            "description": "untrusted skill to vet (optional)",
            "type": "string"
          },
          "text_to_scan": {
            "default": "",
            "description": "payload to vet for secret/PII egress (optional)",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "full_stack_audit",
      "outputSchema": {
        "properties": {
          "result": {
            "type": "string"
          }
        },
        "required": [
          "result"
        ],
        "type": "object",
        "x-fastmcp-wrap-result": true
      }
    },
    {
      "description": "Active security scan of a device or host with an autonomous AI agent that\ndecides which follow-up probes to run (ActiveScanner). Only scan targets\nyou own or have permission to test.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "authorized": {
            "description": "REQUIRED. You must set this to True to certify that you own\n        the target or have explicit permission to test it. Setting it\n        to False (or omitting it) aborts the scan. Scanning without\n        authorization may be illegal (CFAA / Computer Misuse Act).",
            "type": "boolean"
          },
          "scan_type": {
            "default": "quick",
            "description": "\"quick\" (~30s, top ports) [default], \"standard\" (~2min,\n       agent loop), \"deep\" (~10min, full ports + credentials check)",
            "type": "string"
          },
          "target": {
            "description": "IP, CIDR, or hostname. Examples: \"192.168.1.1\", \"10.0.0.0/24\"",
            "type": "string"
          }
        },
        "required": [
          "target",
          "authorized"
        ],
        "type": "object"
      },
      "name": "network_scan",
      "outputSchema": {
        "properties": {
          "result": {
            "type": "string"
          }
        },
        "required": [
          "result"
        ],
        "type": "object",
        "x-fastmcp-wrap-result": true
      }
    },
    {
      "description": "Scan a text payload (a prompt, an outbound API body, a file's contents)\nfor secrets and PII BEFORE it leaves for an LLM or external API, and\nreturn a redacted copy. Catches the #1 real-world agent incident:\nsecrets/PII leaking into a model's context.\n\nWORKS OFFLINE with no API key — the detection runs in-process (pure regex\n+ Luhn check, no network). If a SecretScan backend key IS configured, the\nscan is routed there instead (which also persists an audit record).",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "redact": {
            "default": true,
            "description": "If True (default), each match is replaced with a token like\n    [REDACTED-KEY] / [REDACTED-EMAIL]. If False, only reports.",
            "type": "boolean"
          },
          "text": {
            "description": "The payload to inspect (prompt, request body, document text).",
            "type": "string"
          }
        },
        "required": [
          "text"
        ],
        "type": "object"
      },
      "name": "scan_secrets",
      "outputSchema": {
        "properties": {
          "result": {
            "type": "string"
          }
        },
        "required": [
          "result"
        ],
        "type": "object",
        "x-fastmcp-wrap-result": true
      }
    },
    {
      "description": "Analyze an AI agent skill for prompt injection, malware patterns, and\nOWASP LLM Top 10 issues BEFORE installing it (SecurityScan).",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "skill_url": {
            "description": "URL of the skill to analyze (e.g. a GitHub skill URL).",
            "type": "string"
          }
        },
        "required": [
          "skill_url"
        ],
        "type": "object"
      },
      "name": "scan_skill",
      "outputSchema": {
        "properties": {
          "result": {
            "type": "string"
          }
        },
        "required": [
          "result"
        ],
        "type": "object",
        "x-fastmcp-wrap-result": true
      }
    },
    {
      "description": "Start a Stripe checkout to buy a SecurityScan tier (agent-native sales).\nReturns a payment URL to hand to your user AND a PENDING API key that\nactivates automatically once payment clears — no other setup step.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "email": {
            "default": "",
            "description": "optional — prefills the Stripe checkout page for your user",
            "type": "string"
          },
          "existing_key": {
            "default": "",
            "description": "optional — upgrade an existing ask_live_ key instead of\n          minting a new one",
            "type": "string"
          },
          "tier": {
            "description": "one of \"founder\" ($29 one-time), \"personal\", \"executive\",\n  \"enterprise\" (monthly)",
            "type": "string"
          }
        },
        "required": [
          "tier"
        ],
        "type": "object"
      },
      "name": "securityscan_checkout",
      "outputSchema": {
        "properties": {
          "result": {
            "type": "string"
          }
        },
        "required": [
          "result"
        ],
        "type": "object",
        "x-fastmcp-wrap-result": true
      }
    },
    {
      "description": "SecurityScan catalog: tiers, prices, quotas and the evidence behind the\nproduct — the fact sheet an agent needs to evaluate or recommend a purchase\nto its user. Fully offline, no API key required.\n\nReturns:\n    JSON with the tier table (price / target slots / scan types), the\n    pricing model, benchmark evidence, and how to buy.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {},
        "type": "object"
      },
      "name": "securityscan_pricing",
      "outputSchema": {
        "properties": {
          "result": {
            "type": "string"
          }
        },
        "required": [
          "result"
        ],
        "type": "object",
        "x-fastmcp-wrap-result": true
      }
    }
  ]
}

Verify it yourself

curl -s https://api.teppi.xyz/v1/evidence/sha256:844f4426963cb0c75f355627d300fc4f92c1631a373a62a2f2d409233cb24d9c | sha256sum