{"uid":"cap_4XXDQO7cVbDVNG1EIsvsF","slug":"live-exposure-scan-origin-mcp-fly-dev-7fe9c7eb","name":"Live Exposure Scan – origin-mcp.fly.dev","description":"Probe-grounded live composite (Weak agent-infra endpoint; scan for exposed MCP tools.): nuclei exposure/misconfig scan of a public host for weak TLS, open services and misconfigurations. Live check for origin-mcp.fly.dev.","url":"https://k2so.wrong.systems/api/services/live-exposure-scan-origin-mcp-fly-dev?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","properties":{"meta":{"enum":["0","1"],"type":"string","description":"Set to 1 for free metadata JSON (no payment required)"},"domain":{"type":"string","default":"origin-mcp.fly.dev","description":"Composite input. Optional (default: origin-mcp.fly.dev)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","title":"Live Exposure Scan - origin-mcp.fly.dev paid response","$schema":"https://json-schema.org/draft/2020-12/schema","required":["ok","paid","service","provider","result"],"properties":{"ok":{"type":"boolean"},"paid":{"type":"boolean"},"result":{"type":"object","required":["ok","service"],"properties":{"ok":{"type":"boolean","description":"Handler success"},"score":{"type":"number"},"service":{"type":"string","description":"Service slug"},"summary":{"type":"string"},"evidence":{"type":"object"},"strengths":{"type":"array","items":{"type":"string"}},"confidence":{"type":"string"},"generatedAt":{"type":"string","description":"ISO-8601 timestamp"},"riskFactors":{"type":"array","items":{"type":"string"}}}},"payment":{"type":"object","properties":{"code":{"type":"string"},"payer":{"type":"string"},"detail":{"type":"string"},"selfPay":{"type":"boolean"},"transaction":{"type":"string"}}},"service":{"type":"string"},"provider":{"type":"string","const":"K-2SO"}}}}}}},"responseSchema":{"type":"json","example":{"ok":true,"paid":true,"result":{"ok":true,"service":"live-exposure-scan-origin-mcp-fly-dev"},"service":"live-exposure-scan-origin-mcp-fly-dev","provider":"K-2SO"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.1","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"down","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.1/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_4NXzwyus-HlKHKovj9Cj-","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.1","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Runs a live nuclei-based exposure and misconfiguration scan against origin-mcp.fly.dev, checking for weak TLS, open services, and security misconfigurations.","exampleAgentPrompt":"Can you run a live exposure scan on origin-mcp.fly.dev and tell me if it has any weak TLS settings, open services, or misconfigurations — I want the risk score and a summary of any findings.","exampleUseCases":[{"title":"MCP server security audit","prompt":"I just deployed an MCP server at origin-mcp.fly.dev and want to know if it's leaking anything — can you scan it for exposed services, TLS weaknesses, and misconfigurations and give me a risk score?"},{"title":"Agent infrastructure vetting","prompt":"Before I let my agent connect to origin-mcp.fly.dev, can you do a live probe to check if that host has any open services or security issues I should know about?"},{"title":"Ongoing exposure monitoring","prompt":"Check origin-mcp.fly.dev right now for any new misconfigurations or weak TLS — I want to know the confidence level and what evidence was found."}],"resultDescription":"Returns a JSON object with an overall boolean success flag, a numeric risk score, a plain-English summary, an array of risk factors, an array of strengths, a confidence string, supporting evidence details, and an ISO-8601 timestamp indicating when the scan was generated.","failureModes":["Target host unreachable — scan returns ok:false with no evidence","Payment not completed — request rejected before scan runs","Domain parameter malformed — validation error returned","Nuclei probe timeout — partial or empty result set","Service temporarily unavailable on k2so.wrong.systems — HTTP 5xx"],"whenToPreferThis":"Choose this endpoint when you specifically need a live, probe-grounded nuclei scan of origin-mcp.fly.dev (or a configurable public host) for TLS weaknesses, open service exposure, and misconfigurations — particularly when evaluating MCP or agent-infrastructure endpoints before connecting to them. Prefer this over generic port scanners when you want a structured risk score, evidence object, and confidence rating in a single paid API call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-15T23:28:40.722Z","isFirstParty":false,"canonicalSlug":"live-exposure-scan-origin-mcp-fly-dev-7fe9c7eb"}