Prescan

Reliability

Status and outage history · Atom feed · Watch with other listings

How to connect

Add it to any MCP client that supports remote servers.

{
  "mcpServers": {
    "prescan": {
      "type": "http",
      "url": "https://prescan.canisell.xyz/mcp"
    }
  }
}

6 tools

• scan_text

  Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: instruction override (EN/DE/FR/ES/IT/PT/PL/RU), role hijack, jailbreaks, system-prompt extraction, fake chat delimiters…

• scan_tools

  Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions, cross-tool shadowing, side-channel parameters that ask for file/conversation contents, recipient/payee overrides…

• check_x402_endpoint

  Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanctioned payTo, asset is canonical USDC for the network, amount vs your budget, price vs the price advertised in its…

• about

  Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs.

• preview_scan_text

  Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, long texts or batches use scan_text (paid).

• list_rules

  Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools.

Security scan

Recent checks