Core

Tool-poisoning scan of a remote MCP server (?url=): handshake and tools/list only, no tool is called; every tool text checked for hidden characters, instructions aimed at the model, requests for secrets or the conversation, and instructions about other tools. Signed

get/api/v1/mcp/scan

Request

  • Base URL: https://crawlcheck.io
  • URL: https://crawlcheck.io/api/v1/mcp/scan
  • Auth: none required

Query parameters

urlstring required

Response

crawlcheck-mcp-scan

kindstring nullable
vnumber nullable
scanned_atstring nullable
rulestring nullable
sha256unknown
signatureunknown

Changes

No recorded changes to this operation across all 1 revision of this API.