FHI MCP Server Security Audit
dev.workers.fhi-llc-1118.polished-truth-c514/fhi-x402-security-tools
Tools
Exactly what the server advertised in the scan completed . Effects and capabilities are classified by Squatch from each tool's metadata. Squatch never runs tools.
- Effect: Write 2
- Effect: Execute 1
- Effect: Unknown effect 4
Showing 7 of 7 tools
| Details | ||
|---|---|---|
| package_install_preflight npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advi… | Effect: Execute | |
| mcp_change_evidence Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed… | Effect: Write | |
| sec_material_event_delta New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base) | Effect: Write | |
| domain_change_evidence Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return e… | Effect: Unknown effect | |
| mcp_payment_preflight MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk… | Effect: Unknown effect | |
| mcp_vendor_due_diligence One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/c… | Effect: Unknown effect | |
| payment_info Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices. | Effect: Unknown effect |