{"uid":"cap_D6O_H2OSs3bhfBiYoZPBu","slug":"verdict-mcp-vet-c7989049","name":"Verdict MCP Vet","description":"Before an agent installs an MCP server, skill or tool: is the description poisoned (hidden orders to the agent), does it ask for more permissions than its purpose, does it imitate a known tool? Code checks (lookalike names, broad permissions, hidden text) then a reading of the descriptions. Judges t","url":"https://verdict.kechlab.com/v1/mcp-vet?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"name":{"type":"string","description":"name of the tool or server"},"tools":{"type":"array","items":{"type":"object"},"description":"(optional) list of { name, description } of the exposed functions"},"description":{"type":"string","description":"description of the tool"},"permissions":{"type":"array","items":{"type":"string"},"description":"(optional) list of requested permissions (e.g. filesystem:write, network, shell)"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.0214","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.0214/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0214","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0214","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_9cLHynOeefR55kM7fMRh8","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.0214","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes an MCP server or tool before installation to detect prompt injection, excessive permissions, lookalike names, and hidden instructions that could compromise an agent.","exampleAgentPrompt":"Before I install this MCP server called 'filesystem-helper' — its description says it reads and writes local files and requests filesystem:write and network permissions — can you vet it for hidden instructions, permission overreach, or lookalike impersonation?","exampleUseCases":[{"title":"Vetting a new MCP server before install","prompt":"I found an MCP server called 'github-copilot-tools' that claims to be a coding assistant and requests shell and filesystem:write permissions. Can you check whether it's impersonating a real tool, has hidden instructions, or is asking for more permissions than it needs?"},{"title":"Scanning a marketplace tool for prompt injection","prompt":"Before my agent installs this skill from the marketplace — name is 'web-search-pro', description says it searches the web and summarizes results — can you scan the description for any hidden orders or injected instructions that could hijack my agent?"},{"title":"Auditing broad permissions on a data-processing tool","prompt":"This tool called 'data-transformer' wants permissions for filesystem:write, network, and shell access to transform CSV files. Can you vet whether those permissions make sense for what it claims to do, and check if the description contains any suspicious instructions?"}],"resultDescription":"A safety verdict indicating whether the MCP server or tool is safe, suspicious, or dangerous, along with specific flags for: detected prompt injection or hidden instructions, lookalike/impersonation of known tools, permission overreach relative to stated purpose, and any hidden text (CSS tricks, zero-width characters, etc.) found in descriptions.","failureModes":["Missing required 'name' or 'description' fields returns a validation error","Very long or binary tool descriptions may timeout or be truncated","Obfuscated or encoded injection attempts may evade detection","Novel attack patterns not yet in the model's knowledge may be missed","False positives on legitimate tools with broad but justified permissions"],"whenToPreferThis":"Choose this endpoint when an AI agent is about to install, load, or invoke an MCP server, plugin, or tool from an untrusted or third-party source and needs a pre-flight security check. Especially valuable when tools request elevated permissions (filesystem, network, shell) or come from marketplaces where supply-chain attacks are a realistic threat. Prefer this over generic content moderation endpoints because it is specifically tuned to the MCP/agent-tool threat model including lookalike names, steganographic hidden text, and permission-scope analysis.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:20:45.855Z","isFirstParty":false,"canonicalSlug":"verdict-mcp-vet-c7989049"}