bots.st/securityscan
SecurityScan
Scan AI skills for injection and malware risks
1789 ms
answered our call
- State
- Answered
- Protocol
- MCP 2025-06-18
- Tools listed
- 8
- Answered
- 3 of the last 3 calls
How to reach it
- MCP, HTTP
https://apisecurityscan.net/mcpNeeds header X-API-Key
What it can do
| Tool | What it says it does |
|---|---|
audit_mcp_server_config | Audit an MCP client configuration for security risks — works offline, no external service required. Detects: tool poisoning, hidden/coercive instructions in tool descriptions, hardcoded credentials, unpinned packages (rug-pull risk), insecure transport, and toxic capability combinations (shell +… |
check_dependencies | Check the health of your agent's external dependencies: uptime, SSL validity, blacklist status, and a trust score 0-100 (DepScan). |
full_stack_audit | Complete security posture in one call: audits the MCP config, checks dependency health, analyzes an untrusted skill, scans the local network gateway, and scans any payload you're about to send out for secrets/PII — then correlates everything into a single prioritized report. Pass only what you… |
network_scan | Active security scan of a device or host with an autonomous AI agent that decides which follow-up probes to run (ActiveScanner). Only scan targets you own or have permission to test. |
scan_secrets | Scan a text payload (a prompt, an outbound API body, a file's contents) for secrets and PII BEFORE it leaves for an LLM or external API, and return a redacted copy. Catches the #1 real-world agent incident: secrets/PII leaking into a model's context. WORKS OFFLINE with no API key — the detection… |
scan_skill | Analyze an AI agent skill for prompt injection, malware patterns, and OWASP LLM Top 10 issues BEFORE installing it (SecurityScan). |
securityscan_checkout | Start a Stripe checkout to buy a SecurityScan tier (agent-native sales). Returns a payment URL to hand to your user AND a PENDING API key that activates automatically once payment clears — no other setup step. |
securityscan_pricing | SecurityScan catalog: tiers, prices, quotas and the evidence behind the product — the fact sheet an agent needs to evaluate or recommend a purchase to its user. Fully offline, no API key required. Returns: JSON with the tier table (price / target slots / scan types), the pricing model… |
In its maker's words
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
- Website
- apisecurityscan.net
- Source
- github.com/securityscan-api/securityscan-api
- Publisher
- apisecurityscan.net
- Listed from
- the official MCP Registry as
net.apisecurityscan/securityscan - Version
- 1.0.0, updated 2 Mar 2026
- Kinds of work
- Security and trust, Code and developer tools, Browser and automation
The domain it lives on
- apisecurityscan.net
- registered 19 Feb 2026 (9 months ago), at Vautron Rechenzentrum AG
From our own crawl of domain names: registry records and the home page as our crawler last saw it.
Every call we made
| When | What happened | Time |
|---|---|---|
| Answered | 1789 ms | |
| Answered | 1660 ms | |
| Answered | 835 ms |
Next door
- paidforAssess an x402 seller before payment
- WhisperDNS-verifiable agent networking and control
- EchelonGraph CVE & ExposureCVE and internet exposure lookups
- RevClamp MCP ServerAudits payments, disputes, and VAT compliance
- APIEmpresas: Spanish company dataKYB checks using CIF, directors, sanctions, tenders, BORME
Is this your bot? Claim its address to add a verified badge and keep the listing current.