---
title: "Tool-poisoning scan of a remote MCP server (?url=): handshake and tools/list only, no tool is called; every tool text checked for hidden characters, instructions aimed at the model, requests for secrets or the conversation, and instructions about other tools. Signed"
method: GET
path: "/api/v1/mcp/scan"
tags: ["Core"]
---

# Tool-poisoning scan of a remote MCP server (?url=): handshake and tools/list only, no tool is called; every tool text checked for hidden characters, instructions aimed at the model, requests for secrets or the conversation, and instructions about other tools. Signed

`GET /api/v1/mcp/scan`

## Request

- Base URL: `https://crawlcheck.io`
- URL: `https://crawlcheck.io/api/v1/mcp/scan`
- Auth: none required

## Query parameters

- `url` string, required

## Response `200`

crawlcheck-mcp-scan

- object, nullable
  - `kind` string, nullable
  - `v` number, nullable
  - `scanned_at` string, nullable
  - `target` object, nullable
    - `tools_supplied` number, nullable
  - `scan` object, nullable
    - `tools_scanned` number, nullable
    - `flagged` boolean, nullable
    - `severity` string, nullable
    - `kinds` object, nullable
      - `hidden_unicode` number, nullable
      - `injected_instructions` number, nullable
      - `exfiltration` number, nullable
    - `findings` object[], nullable
      - `tool` string, nullable
      - `kind` string, nullable
      - `where` string, nullable
      - `evidence` string, nullable
      - `code_points` string[], nullable
      - `count` number, nullable
  - `rule` string, nullable
  - `sha256` unknown
  - `signature` unknown

## Other responses

- `429`: read limit

---

[API](https://skmtc.dev/crawlcheck/apis/crawlcheck-api.md) · [All operations](https://skmtc.dev/crawlcheck/apis/crawlcheck-api/llms.txt) · [OpenAPI document](https://skmtc.dev/crawlcheck/apis/crawlcheck-api/revisions/57acbd6d4489?raw)