AgentAegis scan_mcp_pluginGET /x402/scan-mcp-plugin · x402 API by agentaegis-mcp-production
AgentAegis scan_mcp_plugin — supply-chain trust scan of an MCP server or agent skill BEFORE you install/trust it. Clones a git repo (or takes a code snippet) and flags exfiltration (secrets/env to the network), prompt-injection sinks (hijack phrases + hidden unicode), dangerous capabilities (eval/shell/dynamic exec), npm install hooks, and obfuscation → one PROCEED/CAUTION/BLOCK verdict with findings.
What does this x402 API do?
AgentAegis scan_mcp_plugin. This is an x402-gated GET API resource from agentaegis-mcp-production. The latest safe exact-route check returned HTTP 404 on 2026-08-15. The listing records $5 USD-denominated per request on Base. No settled paid call has been verified.
- Published price
- $5 USD-denominated per request
- Networks
- Base
- Latest evidence
- The latest safe exact-route check returned HTTP 404 on 2026-08-15
- Resource ID
- eb49f0e5496e2a6c72ced4fc
Start with a quote-only recipe. Payment signing stays in your project.
const response = await fetch("https://agentaegis-mcp-production.up.railway.app/x402/scan-mcp-plugin", {
method: "GET",
});
console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));
// A valid 402 is a quote, not a completed paid call.This sends no payment. Inspect the 402 response before adding a wallet-enabled client.
- Exact route checked
non 402
- Origin reachable
HEAD https://agentaegis-mcp-production.up.railway.app/ returned 404.
- Observed in 402-index
Discovered through bazaar.
- Registry record checked
Registry health: degraded.
What evidence supports this listing?
Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call. Read the discovery and verification methodology →
Which networks and payment options does it accept?
The normalized listing price is $5 USD-denominated per request. Raw protocol requirements remain visible below for implementation and audit use.