MCP 服务器

FHI MCP Server Security Audit

dev.workers.fhi-llc-1118.polished-truth-c514/fhi-x402-security-tools
开发者工具 安全 公开且可连接 MCP 2025-11-25

此 MCP 可以做什么

Audits MCP servers, packages, domains, and public-company filings for security, supply-chain, and operational risks.

domain_change_evidence
Domain Change Evidence
Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and certificate-expiry signals. ($0.01 USDC on Base)
输入模式
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'minLength': 1}}, 'additionalProperties': False}
mcp_payment_preflight
MCP Payment & Tool Preflight
MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, filesystem, or wallet capabilities; prompt-injection or data-exfiltration signals; permissive JSON-schema inputs; missing HSTS; and a large tool surface. Does not execute tools. ($0.01 USDC on Base)
输入模式
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['serverUrl'], 'properties': {'serverUrl': {'type': 'string', 'format': 'uri'}}, 'additionalProperties': False}
mcp_vendor_due_diligence
MCP Vendor Due Diligence Dossier
One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, plus optional SEC material-filing evidence for a public company. Does not execute vendor tools or certify safety. ($0.10 USDC on Base)
输入模式
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['mcpUrl'], 'properties': {'cik': {'type': 'string'}, 'since': {'type': 'string'}, 'mcpUrl': {'type': 'string', 'format': 'uri'}, 'ticker': {'type': 'string'}}, 'additionalProperties': False}
package_install_preflight
Package Install Preflight
npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.01 USDC on Base)
输入模式
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['ecosystem', 'name'], 'properties': {'name': {'type': 'string', 'minLength': 1}, 'version': {'type': 'string'}, 'ecosystem': {'enum': ['npm', 'PyPI'], 'type': 'string'}, 'expectedName': {'type': 'string'}}, 'additionalProperties': False}
payment_info
Payment & Tool Guide
Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices.
输入模式
{'type': 'object', 'properties': {}}
sec_material_event_delta
SEC Filing Delta
New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)
输入模式
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['since'], 'properties': {'cik': {'type': 'string'}, 'since': {'type': 'string', 'minLength': 1}, 'ticker': {'type': 'string'}}, 'additionalProperties': False}
已添加
mcp_vendor_due_diligence
2026年10月4日 02:40
已添加
mcp_payment_preflight
2026年10月4日 02:40
已添加
sec_material_event_delta
2026年10月4日 02:40
已添加
package_install_preflight
2026年10月4日 02:40
已添加
domain_change_evidence
2026年10月4日 02:40
已添加
payment_info
2026年10月4日 02:40

hyperion

com.thetempleofdoom.hyperion/hyperion

Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…

Vee3

io.github.Vee3io/vee3

Manages Clerk authentication infrastructure, including users, organizations, domains, sessions, tokens, OAuth, SSO, machines, per…

IA-QA — 130+ QA & Dev Tools for AI Agents

io.github.JcJamet/ia-qa-toolbox

Provides deterministic QA, evaluation, testing, code analysis, prompt and RAG checks, model comparison, and web security diagnost…

validoria-mcp

com.validoria/validoria-mcp

Runs continuous website, API, and webshop tests covering security, SEO, performance, accessibility, browser journeys, and inciden…

HubVibe: Pay-per-Call Tools for AI Agents: Web Search, Email Verify, KYC, Stocks, Crypto, News, Data

io.github.Its-fortunatefolly/hubvibe

Offers paid utilities for web audits, HTTP fetching and extraction, BigQuery analysis, LLM processing, code execution, blockchain…

developer-tools

net.programmes/developer-tools

Provides general-purpose developer utilities for encoding, hashing, encryption, JSON, HTML, CSS, networking, and related data tra…

Qiniso

io.github.qinisolabs/qiniso

Provides deterministic formatting, parsing, holiday and tax lookups, address handling, and checksum or structure validation for i…

ContrastAPI

com.contrastcyber/api

Provides security research and assessment tools covering CVEs, IOCs, dependencies, secrets, injection risks, HTTP headers, domain…