{"name":"mcp-server-safety-report","description":"MCP server audit / mcp safety report / tool risk review / agent tool security in one call: point it at a live MCP server URL or hand it a tool manifest and get a risk read before an agent starts calling that server's tools. Composite: one call runs mcp-tools-list + mcp-tool-risk-score + prompt-injection-surface + secrets-exposure-check in parallel, merged into {risk, injection_surface, secrets_exposure}. mcp-tools-list discovers the tool catalog from server_url via JSON-RPC tools/list; mcp-tool-risk-score scores each tool 0-100 for permission scope and destructive-action risk. Pass a GitHub repo alongside the server to also scan the server's own code for prompt injection and secrets exposure. Use it as an MCP server audit API, an agent tool security checker, or a pre-connect safety gate.","price":"$0.06","method":"POST","input_schema":{"properties":{"server_url":{"type":"string","description":"Live MCP server JSON-RPC endpoint to discover tools from. Provide exactly one of server_url or manifest."},"manifest":{"type":"array","description":"A tool manifest already in hand: an array of MCP tool definitions ({name, description, inputSchema}). Provide exactly one of server_url or manifest. Max 50 entries."},"repo":{"type":"string","description":"Optional GitHub repo in 'owner/name' format hosting the MCP server's source. When given, also runs a prompt-injection and secrets-exposure scan of the repo."},"context":{"type":"string","description":"Optional deployment context for the risk scorer, e.g. 'runs with full filesystem access in CI'. Max 500 chars."}},"required":[]},"input_example":{"manifest":[{"name":"read_file","description":"Read a file from disk","inputSchema":{"type":"object"}}]},"output_example":{"source":"manifest","server_url":null,"tool_count":1,"risk":{"heuristic":true,"tools":[{"name":"read_file","overall_score":25,"reasons":["read-only"]}],"overall_score":25,"summary":"Low risk, read-only tool."},"injection_surface":null,"secrets_exposure":null,"skipped":["prompt-injection-surface","secrets-exposure-check"],"composed_of":["mcp-tools-list","mcp-tool-risk-score","prompt-injection-surface","secrets-exposure-check"],"components":[{"name":"mcp-tool-risk-score","ok":true,"ms":900}],"degraded":true},"x402_payment_required":true,"x402_facilitator":"https://api.cdp.coinbase.com/platform/v2/x402"}