Prescan

xyz.canisell/prescan · v0.1.0 · crypto-web3

Prescan is healthy: it completed an MCP handshake in 1384 ms and exposes 6 tools.

Agent security pre-checks: prompt-injection scan, MCP tool-poisoning scan, x402 endpoint check.

Endpoint: https://prescan.canisell.xyz/mcp (streamable-http)

No repository listed · Website · JSON · Add to my inventory

Facts

Users (last 30 days)0
HandshakeHealthy
Auth neededNone
Tool count6
Latency1384 ms
Last checked (UTC)2026-11-02T20:10:33.333Z

Health history

Checked (UTC)StatusLatencyError
2026-11-02T20:10:33.333ZHealthy1384

Tools (6)

scan_textPrompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: instruction override (EN/DE/FR/ES/IT/PT/PL/RU), role hijack, jailbreaks, system-prompt extraction, fake chat delimiters, text addressed to the
scan_toolsTool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions, cross-tool shadowing, side-channel parameters that ask for file/conversation contents, recipient/payee overrides, instructions hidden in pa
check_x402_endpointIs this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanctioned payTo, asset is canonical USDC for the network, amount vs your budget, price vs the price advertised in its OpenAPI and on x402scan,
aboutFree. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs.
preview_scan_textFree. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, long texts or batches use scan_text (paid).
list_rulesFree. The detection categories, rule counts and thresholds used by scan_text and scan_tools.