{"uid":"cap_kCca_GB5IDF85TJwBgvct","slug":"warden-mcp-security-scanner-4aa236c5","name":"WARDEN MCP Security Scanner","description":"WARDEN verdict on an MCP server's tools/list: allow or block, a 0-1 score and every finding with the matched text (prompt injection, secret requests, exfiltration, hidden Unicode). Deterministic published rules, no network.","url":"https://modelmarket.dev/x402/warden-scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"tools":{"type":"array","items":{"type":"object","required":["name"],"properties":{"name":{"type":"string"},"description":{"type":"string"},"inputSchema":{"type":"object"}}},"description":"the server's tools/list result, up to 500 definitions"},"server":{"type":"object","description":"optional {name, url}, used only as a label"}}},"responseSchema":{"type":"json","example":{"status":"ok","service":"warden-scan","verdict":{"allow":true,"score":1,"findings":[]}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_vCHJspiKP5ZgXwjssRzO8","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Scans an MCP server's tools/list for security threats (prompt injection, secret exfiltration, hidden Unicode) and returns an allow/block verdict with a 0-1 risk score and detailed findings.","exampleAgentPrompt":"Run a WARDEN security scan on these MCP tools I just fetched — pass the full tools/list array and label the server 'DataExtracter at https://example.com/mcp' — I need to know if it should be allowed or blocked and see every finding with matched text.","exampleUseCases":[{"title":"Pre-connection MCP server vetting","prompt":"Before I connect to this third-party MCP server, run a WARDEN scan on its tools/list to check for prompt injection, hidden Unicode, or secret-stealing instructions — give me the allow/block verdict and the full list of findings."},{"title":"CI pipeline tool safety gate","prompt":"I'm publishing a new MCP server called 'FileHelper'. Run a WARDEN scan on these 12 tool definitions so I can see the 0-1 risk score and catch any exfiltration or injection issues before it goes live."},{"title":"Agent fleet security audit","prompt":"We've got an MCP marketplace listing with 50 tool definitions from an unknown vendor. Run a WARDEN scan on all of them and flag every tool that has a prompt injection or hidden Unicode finding with the matched text."}],"resultDescription":"Returns an allow or block verdict, a 0-1 numeric risk score, and an array of findings — each finding includes the threat category (prompt injection, secret request, exfiltration attempt, hidden Unicode), the specific tool it was found in, and the matched text snippet that triggered the rule. All analysis is deterministic and runs offline with no network calls.","failureModes":["Input tools array exceeds 500 definitions — request will be rejected or truncated","Malformed tool objects missing required 'name' field — schema validation error","Empty tools array — returns allow verdict with score 0 and no findings","Tool descriptions too large — may hit payload limits","Hidden Unicode that bypasses published rule set — false negatives possible with novel obfuscation"],"whenToPreferThis":"Choose WARDEN scan when you need fast, deterministic, offline security analysis of MCP tool definitions before connecting an agent to an unknown or third-party MCP server. It is the right choice when you want rule-based (not probabilistic) verdicts with auditable matched-text evidence. Prefer it over general-purpose LLM safety checks when you need reproducible results and a hard allow/block decision signal for automated gating in CI pipelines or agent orchestration.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T12:32:19.664Z","isFirstParty":false,"canonicalSlug":"warden-mcp-security-scanner-4aa236c5"}