{"uid":"cap_E19HSCK0M4A1NeIHYOIc5","slug":"fhi-mcp-security-monitoring-1c970232","name":"FHI MCP Security Monitoring","description":"Stateful remote-MCP change evidence, payable per call with x402 Base USDC.","url":"https://polished-truth-c514.fhi-llc-1118.workers.dev/api/v1/mcp-vendor-due-diligence?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"cik":{"type":"string","pattern":"^[0-9]{1,10}$"},"since":{"type":"string","format":"date"},"mcpUrl":{"type":"string","format":"uri","description":"Public HTTPS streamable-HTTP MCP endpoint"},"ticker":{"type":"string","pattern":"^[A-Za-z0-9.-]{1,12}$"}}},"responseSchema":{"type":"json","example":{"summary":{"mcpVerdict":"CAUTION","secFilings":0,"domainSignals":["baseline_created"]},"decision":"REVIEW"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.1","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.1/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.1","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm__yEL0U57h7XDix4oGvTC3","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.1","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Monitors and audits remote MCP endpoints for security changes, cross-referencing SEC filings and domain signals to produce a vendor due-diligence verdict.","exampleAgentPrompt":"Run a security due-diligence check on the MCP endpoint at https://example.com/mcp for the company with ticker ACME, looking at changes since 2024-01-01 — I need the verdict and any domain signals flagged.","exampleUseCases":[{"title":"Vetting a new AI tool vendor","prompt":"Before we integrate this third-party MCP server at https://vendor.example.com/mcp into our agent pipeline, can you run a due-diligence audit on it? The company trades under ticker VNDX and I want to check for any changes or red flags since 2024-06-01."},{"title":"SEC filing cross-check for MCP provider","prompt":"Check the MCP endpoint at https://aitools.example.com/mcp against SEC filings for CIK 0001234567 — I want to know if their filings match up and whether we should be cautious about using their API."},{"title":"Ongoing security monitoring for existing MCP integration","prompt":"Our team started using the MCP server at https://partner.example.com/mcp back in January — can you check if anything has changed or looks suspicious since 2025-01-01 and give me a REVIEW or CAUTION verdict?"}],"resultDescription":"Returns a JSON object with a summary containing an mcpVerdict (e.g. CAUTION), a count of relevant SEC filings, a list of domain signals (e.g. baseline_created, anomaly_detected), and a top-level decision field (e.g. REVIEW or PASS) indicating whether further action is recommended.","failureModes":["Invalid MCP URL format returns a validation error","CIK or ticker not found in SEC database returns zero filings with limited verdict confidence","Unreachable MCP endpoint causes timeout or connectivity error","Payment not completed via x402 results in 402 Payment Required response","Malformed since date causes date parsing failure","Baseline not yet established for a new URL returns only baseline_created signal with no change data"],"whenToPreferThis":"Use this endpoint when you need to vet or continuously monitor a remote MCP server for security changes, especially when cross-referencing the operator's SEC filings and domain reputation. Prefer this over generic website monitoring tools when the target is specifically an MCP endpoint and you want an AI-security-specific verdict with structured due-diligence output. Best suited for enterprise or compliance workflows where AI vendor risk management is required.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T18:36:57.290Z","isFirstParty":false,"canonicalSlug":"fhi-mcp-security-monitoring-b2a0e274"}