---
title: "The same scan over a tools/list result you send ({tools:[...]}, up to 300) or a server URL ({url}). Signed"
method: POST
path: "/api/v1/mcp/scan"
---

# The same scan over a tools/list result you send ({tools:\[...\]}, up to 300) or a server URL ({url}). Signed

`POST /api/v1/mcp/scan`

## Request

- Base URL: `https://crawlcheck.io`
- URL: `https://crawlcheck.io/api/v1/mcp/scan`
- Auth: none required

## Request body

- object

## Response `200`

crawlcheck-mcp-scan

- object, nullable
  - `kind` string, nullable
  - `v` number, nullable
  - `scanned_at` string, nullable
  - `target` object, nullable
    - `tools_supplied` number, nullable
  - `scan` object, nullable
    - `tools_scanned` number, nullable
    - `flagged` boolean, nullable
    - `severity` string, nullable
    - `kinds` object, nullable
      - `hidden_unicode` number, nullable
      - `injected_instructions` number, nullable
      - `exfiltration` number, nullable
    - `findings` object[], nullable
      - `tool` string, nullable
      - `kind` string, nullable
      - `where` string, nullable
      - `evidence` string, nullable
      - `code_points` string[], nullable
      - `count` number, nullable
  - `rule` string, nullable
  - `sha256` unknown
  - `signature` unknown

## Other responses

- `400`: neither tools nor url

---

[API](https://skmtc.dev/crawlcheck/apis/crawlcheck-api.md) · [All operations](https://skmtc.dev/crawlcheck/apis/crawlcheck-api/llms.txt) · [OpenAPI document](https://skmtc.dev/crawlcheck/apis/crawlcheck-api/revisions/57acbd6d4489?raw)