mcp-registry/net.apisecurityscan/securityscan · v3.4.5
As of 2026-10-17 22:21 UTC, the Apisecurityscan Securityscan MCP server is up with a Glimind reliability score of 92/100 (grade A). Over the last 30 days it answered 100% of Glimind's liveness checks.
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
Claude Code
claude mcp add --transport http apisecurityscan-securityscan-mcp-server https://apisecurityscan.net/mcp
Claude Desktop · Windsurf · Cline (mcpServers JSON)
{
"mcpServers": {
"apisecurityscan-securityscan-mcp-server": {
"type": "http",
"url": "https://apisecurityscan.net/mcp"
}
}
}
Third-party server, listed as discovered. Review its source before installing.
8 of 8 tool(s) carry no readOnlyHint/destructiveHint annotations.
Annotate read-only tools with {"readOnlyHint": true}. Agents and gateways can then run them without a confirmation prompt, and route around destructive ones.
Handshake + tools/list takes ~2,556 ms.
Serve tools/list from memory, keep the process warm, and host close to your users. Every new agent session pays this before its first call.
Paste-ready definitions with the problems above fixed. Changes marked verify need a human look. All of them as JSON: /v1/readiness/mcp-registry%2Fnet.apisecurityscan%2Fsecurityscan/fixes
{
"name": "check_dependencies",
"description": "Check the health of your agent's external dependencies: uptime, SSL\nvalidity, blacklist status, and a trust score 0-100 (DepScan).",
"inputSchema": {
"type": "object",
"required": [
"endpoints"
],
"properties": {
"endpoints": {
"type": "array",
"items": {
"type": "string"
},
"description": "List of URLs your agent/skill depends on,\n e.g. [\"https://api.openai.com\", \"https://api.stripe.com\"]"
}
},
"additionalProperties": false
},
"annotations": {
"readOnlyHint": true
}
}{
"name": "securityscan_checkout",
"description": "Start a Stripe checkout to buy a SecurityScan tier (agent-native sales).\nReturns a payment URL to hand to your user AND a PENDING API key that\nactivates automatically once payment clears — no other setup step.",
"inputSchema": {
"type": "object",
"required": [
"tier"
],
"properties": {
"tier": {
"type": "string",
"description": "one of \"founder\" ($29 one-time), \"personal\", \"executive\",\n \"enterprise\" (monthly)"
},
"email": {
"type": "string",
"default": "",
"description": "optional — prefills the Stripe checkout page for your user"
},
"existing_key": {
"type": "string",
"default": "",
"description": "optional — upgrade an existing ask_live_ key instead of\n minting a new one"
}
},
"additionalProperties": false
},
"annotations": {
"readOnlyHint": true
}
}Get an email or webhook when this server's readiness drops by 10+ points, tool-poisoning text appears, or a tool breaks:
curl -X POST https://glimind.com/v1/subscriptions -H 'content-type: application/json' -d '{"tools":["mcp-registry/net.apisecurityscan/securityscan"],"email":"[email protected]"}'Agents: watch_tool({"toolId": "mcp-registry/net.apisecurityscan/securityscan"}) over MCP.
full_stack_audit ~357 tokensnetwork_scan ~266 tokensscan_secrets ~249 tokenssecurityscan_checkout ~209 tokensaudit_mcp_server_config ~194 tokensStatic checks of the advertised tools/list (schema, descriptions, annotations, tool-poisoning patterns, names, size) plus observed protocol, uptime, latency and contract changes. Read-only: no tool is ever called. Weights: schema 15, docs 20, safety 15, efficiency 15, compatibility 15, protocol 5, reliability 10, stability 5. Token counts are estimates (~3.6 characters per token).
Operator? Fix these, then re-check live. Embed the readiness badge:
[](https://glimind.com/server/mcp-registry%2Fnet.apisecurityscan%2Fsecurityscan?ref=badge)
<a href="https://glimind.com/server/mcp-registry%2Fnet.apisecurityscan%2Fsecurityscan?ref=badge"><img src="https://glimind.com/v1/readiness/badge/mcp-registry%2Fnet.apisecurityscan%2Fsecurityscan.svg" alt="MCP agent-readiness"></a>
.. image:: https://glimind.com/v1/readiness/badge/mcp-registry%2Fnet.apisecurityscan%2Fsecurityscan.svg :target: https://glimind.com/server/mcp-registry%2Fnet.apisecurityscan%2Fsecurityscan?ref=badge :alt: MCP agent-readiness
Glimind records every version of this server's tool definitions in a signed, append-only transparency log. Current manifest sha256:06fddf7a502c2f61…, first seen 2026-10-17, included at leaf 11514 of 18,867. Version history · verify what your client received.
Compare: most reliable security servers · most reliable payments servers · most reliable knowledge servers
Glimind tells agents whether a server is up right now and how to call it, then fails over to a live alternative when it isn't.
Claude Code
claude mcp add --transport http glimind https://glimind.com/mcp
Claude Desktop · Windsurf · Cline (mcpServers JSON)
{
"mcpServers": {
"glimind": {
"type": "http",
"url": "https://glimind.com/mcp"
}
}
}
As of 2026-10-17 22:21 UTC, the Apisecurityscan Securityscan MCP server is up with a Glimind reliability score of 92/100 (grade A). Over the last 30 days it answered 100% of Glimind's liveness checks.
Apisecurityscan Securityscan MCP server advertises 8 tools, including audit_mcp_server_config, check_dependencies, full_stack_audit, network_scan, scan_secrets.
Point your MCP client at this streamable-http endpoint: https://apisecurityscan.net/mcp
Glimind scanned all 8 tool definitions for tool-poisoning patterns — hidden or invisible characters, instructions that override the model, concealment from the user, requests to read credential or MCP config files, conversation exfiltration and cross-tool shadowing — and found none. This checks what the server tells the model, not what its code does; review the source before granting access to sensitive data.
Status page: 90-day uptime, every outage and how long it lasted.
Claim this listing to get the Verified operator marker, a remediation checklist and owner analytics, or embed the live badge from any of the tool pages above. Maintainers: alerts, deploy attestation and monthly reports.
Status is an automated estimate from Glimind's liveness checks (handshake and tool listing only; no tool is ever called) and may lag or differ from your network. Glimind is not affiliated with this server or its operator. Operator? Request a correction or opt out at https://glimind.com/opt-out.