{"uid":"cap_hFO2TR3rIcE7avTi1H5bC","slug":"agentalog-mcp-server-security-check-4ab75432","name":"Agentalog MCP Server Security Check","description":"Agentalog: security check of an MCP server by address (measured signals, catalog listings, domain facts), paid per call","url":"https://agentalog.com/api/x402/check?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","queryParams"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["url"],"properties":{"url":{"type":"string","description":"The http(s) endpoint of the MCP server, without credentials."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"api":{"type":"string","description":"Absolute URL of this check."},"url":{"type":"string","description":"The address as the catalog keeps it: lower-case host, no query, fragment or credential."},"host":{"type":"string","description":"The host of the address."},"dominio":{"type":"object","properties":{"nome":{"type":"string"},"mudou_em":{"type":"string"},"registrado":{"type":"object","properties":{"ate":{"type":"string"},"desde":{"type":"string"},"fonte":{"type":"string"}}},"organizacao":{"type":"null"},"tambem_cobre":{"type":"array","items":{"type":"object","properties":{"dominio":{"type":"string"},"visto_em":{"type":"string"},"certificados":{"type":"number"}}}}},"description":"The domain facts, as in `Seguranca.dominio`, or null."},"cobranca":{"type":"object","properties":{"via":{"type":"string","description":"`x402`, `credito` or the marketplace that already charged the call."},"repetido":{"type":"boolean","description":"`true` when the credit had already paid this request (the same `Idempotency-Key`): nothing was charged again."},"preco_usd":{"type":"string","description":"The price charged for this call in US dollars, such as `0.01`: at least US$ 0.01 with single x402 payment; the unit price with credit."}},"description":"How this call was paid."},"registrar":{"type":"null","description":"Where to submit the address when it is not in the catalog; null otherwise."},"registros":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string"},"nome":{"type":"string"},"exato":{"type":"boolean"},"ficha":{"type":"string"},"nivel":{"type":"string"},"sinais":{"type":"array","items":{"type":"string"}},"security":{"type":"string"},"verificado_em":{"type":"string"}}},"description":"`{ id, nome, exato, nivel, sinais, verificado_em, ficha, security }`: the exact address first, then up to 20 others on the same host, most serious first."},"mesmo_host":{"type":"number","description":"How many live remote listings share this host."},"no_catalogo":{"type":"boolean","description":"`true` when a catalog listing has this exact address."},"sinais_do_endereco":{"type":"array","description":"`{ codigo, valor, rotulo?, degrau }` from the address alone: `tunel` (consumer tunnel) and `sem_https`."}},"description":"The check of `GET /api/check`, paid per call."}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_tCdLqzufA5vrAKlQ9Xbjx","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a security check on an MCP server by URL, returning measured signals, catalog listings, and domain facts","exampleAgentPrompt":"Run a security check on the MCP server at https://mcp.example.com and tell me whether it looks safe to connect to — I need its measured signals, catalog listing status, and domain facts.","exampleUseCases":[{"title":"Vetting a third-party MCP server","prompt":"Before I connect my agent to https://tools.thirdparty.ai/mcp, can you run a security check on it and tell me if there are any red flags in the signals or domain facts?"},{"title":"Auditing an internal MCP deployment","prompt":"Check the security posture of our internal MCP server at https://mcp.internal.corp/api and give me a summary of the measured signals and any catalog listing info you find."},{"title":"Comparing trustworthiness of MCP servers","prompt":"I'm choosing between two MCP servers — can you check https://mcp.provider-a.com for its security signals and domain facts so I can compare it against another option?"}],"resultDescription":"Returns security-relevant measured signals about the MCP server, any catalog listing entries for that server, and domain-level facts (such as registration age, hosting info, or known associations), helping an agent or user decide whether the MCP server is trustworthy to connect to.","failureModes":["Invalid or unreachable MCP server URL returns an error or empty result","Non-MCP HTTP endpoints may return limited or irrelevant signals","Payment failure (insufficient USDC balance) blocks the call","URL with embedded credentials rejected (credentials must be stripped)","Unknown or very new domains may have sparse domain facts"],"whenToPreferThis":"Use this endpoint when you need to programmatically vet an MCP server before connecting an AI agent to it — especially for third-party or community MCP servers where trust has not been established. Prefer this over manual domain lookups when you want consolidated security signals, catalog presence, and domain facts in a single paid-per-call API with no subscription required.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-03T06:31:01.729Z","isFirstParty":false,"canonicalSlug":"agentalog-mcp-server-security-check-4ab75432"}