MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/92723fb3-dc2a-44f5-b5b5-6bb8bc7ead5b/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.tanod/agents"
title: "x402 & MCP Server Index (Tanod)"
description: "x402 endpoint and MCP server index: find paid APIs for agents, x402 checks and price benchmarks."
version: "0.1.3"
homepage_url: "https://tanod.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.tanod"
display_name: "dev.tanod"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/tanod-labs/tanod-mcp"
provider: "github"
owner: "tanod-labs"
name: "tanod-mcp"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://tanod.dev/mcp/agents"
endpoint_host: "tanod.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[32]
0{9}
name: "agent_index_delta"
title: "agentscan: changes since an index snapshot"
effect: "READ"
effect_confidence: 0.422
capabilities[0]
risk_severity: "INFO"
fingerprint: "823e3d99cf0f14383d14b3271418d263dc6fa87e68ac96113ecaa8d76344c3f5"
input_schema_fingerprint: "7fbe3f8fd4f39940e14d37cef79f3d20073901c7129fdd6538b96f64d39ff41c"
annotations{5}
title: "agentscan: changes since an index snapshot"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "analyze_agent_traffic"
title: "agentscan: which AI crawlers, assistants, MCP clients and x402 buyers hit your site, from your access logs"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.538
risk_severity: "LOW"
fingerprint: "4b522089d42c29e9e15304ea599e784e0d45ff4cb4087f5df191afbef59a30bd"
input_schema_fingerprint: "14462e3b99ec40a9557a82ae0847b89bbe6aa1c40a8ba10fad403d9ff7fd978c"
annotations{5}
title: "agentscan: which AI crawlers, assistants, MCP clients and x402 buyers hit your site, from your access logs"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "audit_mcp_listings"
title: "agentscan: compare official MCP Registry and Smithery listings with a live server"
effect: "READ"
effect_confidence: 0.66
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.783
risk_severity: "INFO"
fingerprint: "3438d3190e35a610540e61d39ed657926826d4afbfef3a47c5e93ff6294dcc1e"
input_schema_fingerprint: "9d057a1ed8d5d25439c7bee495065e3725d025ca79da38dab3b02123154cb06c"
annotations{5}
title: "agentscan: compare official MCP Registry and Smithery listings with a live server"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
3{9}
name: "audit_price_consistency"
title: "agentscan: compare a seller's stated prices with its unpaid 402 meter"
effect: "READ"
effect_confidence: 0.703
capabilities[2]
0{2}
capability: "LOCATION"
confidence: 0.624
1{2}
capability: "PAYMENT"
confidence: 0.648
risk_severity: "LOW"
fingerprint: "954fcf41bfb3b64dc1a5c917e55236a1078c383c32843c924c0b364ef4cdce6e"
input_schema_fingerprint: "9b3a25640dda6fdb732b82abef229b0d96baf9924e7f6d11dfe66b770fe52098"
annotations{5}
title: "agentscan: compare a seller's stated prices with its unpaid 402 meter"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
4{9}
name: "audit_web_logs"
title: "agentscan: review supplied web logs for referrer cohorts, asset links and bursts"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.59
1{2}
capability: "PERSONAL_DATA"
confidence: 0.59
risk_severity: "MEDIUM"
fingerprint: "1b14bc698114819ed5f1ccc6915d652d28fdcefe6b4a4575bf3ebf1992d1fade"
input_schema_fingerprint: "5fc395b2d9d741bd8efff2dd051452f1408226bf7c5279e4c1286c590d0c6525"
annotations{5}
title: "agentscan: review supplied web logs for referrer cohorts, asset links and bursts"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "benchmark_x402_price"
title: "agentscan: benchmark an x402 price against listed prices for similar endpoints"
effect: "EXECUTE"
effect_confidence: 0.65
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.808
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.735
risk_severity: "HIGH"
fingerprint: "c104e00d015b05477c2f494ccf4e14346d10bce7d5b500ba03e04a99996fc7ad"
input_schema_fingerprint: "3cb16cb4a35552ea840b841478420747784461b64ce6e52a0bbe3ca95b2968aa"
annotations{5}
title: "agentscan: benchmark an x402 price against listed prices for similar endpoints"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
6{9}
name: "bulk_agent_index"
title: "agentscan: download the full current snapshot"
effect: "WRITE"
effect_confidence: 0.405
capabilities[0]
risk_severity: "LOW"
fingerprint: "1ee38b34d61c611c2059867aa86c1812258987b24f30d0063bf2be7d53d17f8e"
input_schema_fingerprint: "c198b7fd6128609c44c501d27d14f704317722a650798d9fd336e49144bbf87f"
annotations{5}
title: "agentscan: download the full current snapshot"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "check_agent_readiness"
title: "sitepeek: can an AI agent find, read and use this site? Scores for llms.txt, robots, sitemap, schema.org, OpenAPI, MCP"
effect: "READ"
effect_confidence: 0.798
capabilities[2]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.986
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.837
risk_severity: "INFO"
fingerprint: "4ccff91b80fa7b6ae0542a8c8acade0abcba6538770556eb5745d8eef5e25d9d"
input_schema_fingerprint: "8c3f1dbbfbaf350c7268fd41290d611d8a5af5cd7d51cfa68c9b85ef474988f4"
annotations{5}
title: "sitepeek: can an AI agent find, read and use this site? Scores for llms.txt, robots, sitemap, schema.org, OpenAPI, MCP"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
8{9}
name: "check_apify_store_rules"
title: "agentscan: check public Apify Actors for outside payment links, price claims that disagree with the pricing, near-copies"
effect: "READ"
effect_confidence: 0.796
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.695
risk_severity: "LOW"
fingerprint: "91f83215a21f83451c7961c406987152a9d0ca31a26e39f7aa2edbf741733e10"
input_schema_fingerprint: "696ec88dd5fa3cee281599545dd88f2d2a55c70e74f6d71e968ffebebe3d17d6"
annotations{5}
title: "agentscan: check public Apify Actors for outside payment links, price claims that disagree with the pricing, near-copies"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
9{9}
name: "check_mcp_server"
title: "agentscan: check a remote MCP server (live?, name, version, sign-in, tools, latency, TLS)"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.769
risk_severity: "INFO"
fingerprint: "3ff11fd3a75037efb13f1a29dfaed6120673c6fab4efe65dd7b567ae961bb71e"
input_schema_fingerprint: "6e86a242acf5e56a601e8ac86e778af148222d084a8866b2bbdf32cebe595288"
annotations{5}
title: "agentscan: check a remote MCP server (live?, name, version, sign-in, tools, latency, TLS)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
10{9}
name: "check_x402_endpoint_before_paying"
title: "agentscan: should my agent pay this x402 endpoint? pay, caution or avoid with reasons and evidence"
effect: "READ"
effect_confidence: 0.827
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.931
1{2}
capability: "PAYMENT"
confidence: 0.827
risk_severity: "LOW"
fingerprint: "3abefc33168a9ebe3454fbfea4d58e1276ce82cc7beaee0803edb8a889f937ba"
input_schema_fingerprint: "b6d3f26afbe3ea4dab35b78c3739334f97ccb4d64d5deca65d831334dfe8524e"
annotations{5}
title: "agentscan: should my agent pay this x402 endpoint? pay, caution or avoid with reasons and evidence"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
11{9}
name: "create_readback_watch"
title: "agentscan: watch that a live page or API answer still says what you shipped"
effect: "WRITE"
effect_confidence: 0.65
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.843
risk_severity: "MEDIUM"
fingerprint: "0bba84c70c0d18c0abdaab12e3b8e7dc456c890995782166ce10e2c9992f511b"
input_schema_fingerprint: "427fa33fed23f7f7a95ba3319a81428d49f5596264b9f9692d689afadda298ad"
annotations{5}
title: "agentscan: watch that a live page or API answer still says what you shipped"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
12{9}
name: "export_agent_index"
title: "agentscan: export a filtered slice (JSON or CSV)"
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "1e208e6c809a9fbaffd08390d2770652e1c69293219272beb4487d367dd54d84"
input_schema_fingerprint: "059a3cd63393a53f15c22fc5d2be9d6ba37de7fd9c61849a2f472c096e8f1313"
annotations{5}
title: "agentscan: export a filtered slice (JSON or CSV)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
13{9}
name: "generate_agent_ready_files"
title: "sitepeek: the files a site should publish to be agent-ready: robots lines, API catalog, MCP server card, skills index"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.874
1{2}
capability: "FILE_ACCESS"
confidence: 0.915
risk_severity: "INFO"
fingerprint: "8ed694c78f3cdfda324c2b592ff49832d3bced7d4617adadb6bcb595cd4d9beb"
input_schema_fingerprint: "952e2a4aa6324e629effcfb30106275e1ce11b5a032705bd690551c8e267ffdb"
annotations{5}
title: "sitepeek: the files a site should publish to be agent-ready: robots lines, API catalog, MCP server card, skills index"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
14{9}
name: "get_endpoint_history"
title: "agentscan: price and presence history of one record"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.84
risk_severity: "INFO"
fingerprint: "3200229c982712848976d37e2525047f31bd6522ed15881fef30a19f597bcdcf"
input_schema_fingerprint: "8f196f5483c4f1a798c3122ea52dd22d4056698d4998a0f63c2f2eb67203a6e4"
annotations{5}
title: "agentscan: price and presence history of one record"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
15{9}
name: "get_endpoint_uptime"
title: "agentscan: 30-day uptime, valid-402 share and latency of one x402 endpoint, MCP server or host"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.981
risk_severity: "INFO"
fingerprint: "2ab507021fa3585707a6ff0fce5f4391ce4a2337de185742c317cf3556f6c28a"
input_schema_fingerprint: "03ee7e407cec7544dfe039e4b69def8157d23023e9890174b9737b22b05798d0"
annotations{5}
title: "agentscan: 30-day uptime, valid-402 share and latency of one x402 endpoint, MCP server or host"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
16{9}
name: "get_endpoint_uptime_bulk"
title: "agentscan: 30-day uptime and valid-402 share of up to 25 x402 endpoints, MCP servers or hosts"
effect: "READ"
effect_confidence: 0.798
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.939
risk_severity: "INFO"
fingerprint: "8a8ea9f394bc4ea1c2097e9f5e079b7333ab1883b9a5740c60a415254f40ed06"
input_schema_fingerprint: "f431f7689adffc8cc38c5c5997003026136156937ec5b1eb81a1f82585941a10"
annotations{5}
title: "agentscan: 30-day uptime and valid-402 share of up to 25 x402 endpoints, MCP servers or hosts"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
17{9}
name: "get_readback_watch"
title: "agentscan: read a read-back watch's state and check history"
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "62710a3bce370b7b1d97cded3caa54618fe061e7221d185c0c2f1b0645eac395"
input_schema_fingerprint: "dd7c6046df9a49e2825edd14aecb524040ae0c492e49cc375bd34469bcb4d12a"
annotations{5}
title: "agentscan: read a read-back watch's state and check history"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
18{9}
name: "get_x402_bazaar_pulse"
title: "agentscan: daily pulse of the x402 Bazaar (new listings, sellers, payer gains, prices, gaps)"
effect: "READ"
effect_confidence: 0.798
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.704
risk_severity: "INFO"
fingerprint: "d7471d05ee64a61842c9d0d936cb7f40799198394af7c39a335a5884eb1532ca"
input_schema_fingerprint: "887d72e91db0d863b25a27254adad556534c97e5ad52f7217e209e7570db807f"
annotations{5}
title: "agentscan: daily pulse of the x402 Bazaar (new listings, sellers, payer gains, prices, gaps)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
19{9}
name: "get_x402_facilitator_changes"
title: "agentscan: x402 facilitator schemes, networks, signers and fee changes"
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "c6a790a0ce19f8d4c545b6e074764a6dfb300ed446e9a02ebf8d5795eb69140f"
input_schema_fingerprint: "4604fb2dbf62a6b22a9c9c7e387c598f0866e0c6df67f96b41384f16e7a1fc84"
annotations{5}
title: "agentscan: x402 facilitator schemes, networks, signers and fee changes"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
20{9}
name: "get_x402_repeat_demand"
title: "agentscan: x402 endpoints whose payers come back, from the daily Bazaar snapshot"
effect: "READ"
effect_confidence: 0.798
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.87
risk_severity: "INFO"
fingerprint: "eb5977971b631f53d7dbd008760ddb442f63da24c5595738e366167ee1011092"
input_schema_fingerprint: "b6b74b92268f0edaa0d9193f2027f6c79fe94e2e3d080d5d068403dd32043960"
annotations{5}
title: "agentscan: x402 endpoints whose payers come back, from the daily Bazaar snapshot"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
21{9}
name: "identify_x402_client"
title: "agentscan: identify an x402 client by User-Agent: monitor, indexer, grader or HTTP library"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.76
1{2}
capability: "PERSONAL_DATA"
confidence: 0.718
risk_severity: "LOW"
fingerprint: "c83d840d0d49ccd6b6ed248280c0de47f62bd5af77728daa0ec539bf7f59f326"
input_schema_fingerprint: "43ce8c9023e115843b6fa4f32e36a41100e57c11fec219e0623d803d9598d198"
annotations{5}
title: "agentscan: identify an x402 client by User-Agent: monitor, indexer, grader or HTTP library"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
22{9}
name: "preflight_mcp_listing"
title: "agentscan: check an MCP server repo against awesome-mcp-servers or awesome-remote-mcp-servers before a PR"
effect: "READ"
effect_confidence: 0.711
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.823
1{2}
capability: "SOURCE_CODE"
confidence: 0.965
risk_severity: "INFO"
fingerprint: "97818c14033feea964daa5fee47356dc5ec87337931295fef769820ab0e0f3f0"
input_schema_fingerprint: "a89179138366aed02fdd660bde561c6ad9b063b23d33628078b21d84a3231696"
annotations{5}
title: "agentscan: check an MCP server repo against awesome-mcp-servers or awesome-remote-mcp-servers before a PR"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
23{9}
name: "query_agent_index"
title: "agentscan: query the agent-economy index"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.705
risk_severity: "INFO"
fingerprint: "c393865798b344076069acba7a612ffb51618919af32db014b97fdc66ae3cb94"
input_schema_fingerprint: "a78837d42f0257aa67302339c43f61c32df1572ce4f1680c83ad0b1ad7e1e440"
annotations{5}
title: "agentscan: query the agent-economy index"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
24{9}
name: "scan_agent_package"
title: "toolsniff: scan an agent skill or MCP server before installing it"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "FILE_ACCESS"
confidence: 0.681
1{2}
capability: "SOURCE_CODE"
confidence: 0.539
risk_severity: "INFO"
fingerprint: "a82ec4bf9aae7640af92ca65926d0cf21eaab338eacba839540084f6fa777b92"
input_schema_fingerprint: "50b0396f5b605b7d65270b5ecf4f3e1f1e0289ac333f98e9122caa04a153266b"
annotations{5}
title: "toolsniff: scan an agent skill or MCP server before installing it"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
25{9}
name: "test_x402_payment"
title: "agentscan: test an x402 payment and get a signed receipt of what the gate saw (health ping)"
effect: "READ"
effect_confidence: 0.703
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.509
1{2}
capability: "PAYMENT"
confidence: 0.859
risk_severity: "LOW"
fingerprint: "c32b42bc7b9b10f78551c5224e7b647bdff0c352cdaf50e8f9114dfc282ee6fe"
input_schema_fingerprint: "b330eb2855024c062250229e7f43f8d6ac31d4a129dee04db2fdc236b0bc663f"
annotations{5}
title: "agentscan: test an x402 payment and get a signed receipt of what the gate saw (health ping)"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
26{9}
name: "x402_edge_check"
title: "agentscan: does your x402 402 survive your CDN or WAF (AWS WAF, Cloudflare)"
effect: "READ"
effect_confidence: 0.524
capabilities[3]
0{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.785
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.729
2{2}
capability: "SECURITY_CONTROL"
confidence: 0.75
risk_severity: "INFO"
fingerprint: "d89b07b8b42d9bcf47c43c0e73dc0f2a3c7731f77e5931f1495e09da7cb7c096"
input_schema_fingerprint: "e696667a32c60c1559d0eda46fcb1e9cadf95a9ce5d6e725e3386a3f570b3452"
annotations{5}
title: "agentscan: does your x402 402 survive your CDN or WAF (AWS WAF, Cloudflare)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
27{9}
name: "x402_listing_audit"
title: "agentscan: full review of one x402 listing: lint, 30-day category demand, 10 closest peers, ranked fixes"
effect: "READ"
effect_confidence: 0.595
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.796
risk_severity: "INFO"
fingerprint: "599054fdfa4885c9054569e7204d2b9ccd625bbf819f3cee63ca83cf5b446651"
input_schema_fingerprint: "7c1f4cfb21a64c8b463f30a9b88fb40c6c1e822ea45cd03b34db300d50cbd3ea"
annotations{5}
title: "agentscan: full review of one x402 listing: lint, 30-day category demand, 10 closest peers, ranked fixes"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
28{9}
name: "x402_payment_status"
title: "chainpeek: was an x402 payment authorization used on-chain, and can it still settle"
effect: "READ"
effect_confidence: 0.32
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.88
risk_severity: "MEDIUM"
fingerprint: "7e20a9a2544cd140b4ffc1da1a910fbae24abd1d4560428ff0c20f5ecd3ff01d"
input_schema_fingerprint: "92a2fb02cd1bf48dd27971ce97139ce8e03d7ffefc0ae1bd0ccd47056c3af700"
annotations{5}
title: "chainpeek: was an x402 payment authorization used on-chain, and can it still settle"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
29{9}
name: "x402_receipt_check"
title: "chainpeek: does this transaction hash prove an x402 payment of this token amount to this address"
effect: "READ"
effect_confidence: 0.524
capabilities[1]
0{2}
capability: "PAYMENT"
confidence: 0.926
risk_severity: "MEDIUM"
fingerprint: "b53acd60a846e2e0ffd31c45889ac1cacb43434888d5befcd000e1bb2fd4eda3"
input_schema_fingerprint: "66a92a0ac1a2f33bcbc0504b1d62f02493927334c0b5b233dcafbb6059eb647b"
annotations{5}
title: "chainpeek: does this transaction hash prove an x402 payment of this token amount to this address"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
30{9}
name: "x402_seller_report"
title: "agentscan: one report on your x402 endpoint: listing lint, price position, buyer preflight, Bazaar demand, fixes"
effect: "READ"
effect_confidence: 0.595
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.875
risk_severity: "INFO"
fingerprint: "c77b809a49f0411f3aea0b03e937d4172bedae1330f1087eb59d04fd843846c8"
input_schema_fingerprint: "6a3f50cbf82c8f43fe0de6e5dd7d1433e62bb95e6af4c3bd12652b69855f94ee"
annotations{5}
title: "agentscan: one report on your x402 endpoint: listing lint, price position, buyer preflight, Bazaar demand, fixes"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
31{9}
name: "x402_well_known_file"
title: "agentscan: build your /.well-known/x402 file from your own Bazaar listings"
effect: "READ"
effect_confidence: 0.422
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.646
1{2}
capability: "FILE_ACCESS"
confidence: 0.887
risk_severity: "INFO"
fingerprint: "d9b5b439171cb9ac04eeac01b1d92a215a7918595758f18b8cd911ec3ae32f3a"
input_schema_fingerprint: "3c7616ff35dc2a097a7669820f0b9b8891ff5a6ad73a868d77271f8f641e1205"
annotations{5}
title: "agentscan: build your /.well-known/x402 file from your own Bazaar listings"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "tanod.dev"
registrable_domain: "tanod.dev"
source: "transport"
findings[9]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "benchmark_x402_price"
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "create_readback_watch"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "x402_payment_status"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "x402_receipt_check"
5{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "benchmark_x402_price"
6{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "INFO"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "generate_agent_ready_files"
7{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "x402_edge_check"
8{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "benchmark_x402_price"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.tanod/agents"
registry_content_sha256: "cc0adbb90f02c87b48f0874983afab088ace0b663c307c1f6b855f65ab92a5af"
scan_snapshot_fingerprint: "b277915cd2b28e33104dc9dfc6d324421cbc1c025261f0116dac78340a75a385"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T03:48:36.171Z"
observed_at: "2026-11-09T14:53:17.074+00:00"
registry_published_at: "2026-11-09T13:39:03.712574+00:00"
registry_updated_at: null