{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_hnubrpzgfbyj","handle":"fhi-mcp-server-security-audit","url":"https://wellknown.network/agents/fhi-mcp-server-security-audit","links":{"self":"https://wellknown.network/agents/fhi-mcp-server-security-audit/record.json","html":"https://wellknown.network/agents/fhi-mcp-server-security-audit","markdown":"https://wellknown.network/agents/fhi-mcp-server-security-audit/record.md","api":"https://wellknown.network/api/v1/agents/fhi-mcp-server-security-audit","status":"https://wellknown.network/api/v1/agents/fhi-mcp-server-security-audit/status","claim":"https://wellknown.network/agents/fhi-mcp-server-security-audit/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/fhi-mcp-server-security-audit/claim.json","badge":"https://wellknown.network/agents/fhi-mcp-server-security-audit/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/fhi-mcp-server-security-audit/history","tools":"https://wellknown.network/api/v1/agents/fhi-mcp-server-security-audit/tools"},"ard":{"identifier":"urn:air:polished-truth-c514.fhi-llc-1118.workers.dev:server:fhi-mcp-server-security-audit","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"FHI MCP Server Security Audit","summary":"Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.","description":"Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.","publisher":{"name":"dev.workers.fhi-llc-1118.polished-truth-c514","url":null},"homepage":null,"repository":null,"version":"1.4.0","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-10-02T23:43:51.885219Z","publishedAt":"2026-10-02T23:43:51.885219Z","registryName":"dev.workers.fhi-llc-1118.polished-truth-c514/fhi-x402-security-tools"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"derived"},{"slug":"commerce.payments","name":"Payments","confidence":0.911,"provenance":"derived"},{"slug":"dev.monitoring","name":"Monitoring & Observability","confidence":0.554,"provenance":"derived"}],"categories":["commerce","dev"],"language":"en"},"observed":{"status":"live","statusReason":"Responded 2h ago.","lastOkAt":"2026-10-10T21:26:12.068Z","lastProbedAt":"2026-10-10T21:26:12.068Z","statusComputedAt":"2026-10-10T21:27:05.930Z","reliability30d":{"probes":27,"successRate":1,"p50Ms":320,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":27,"ok":27,"authBoundaryOk":0,"serviceOk":27,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-10-10T21:26:12.068Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":311,"error":null,"detail":{"tools":[{"name":"payment_info","description":"Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices."},{"name":"domain_change_evidence","description":"Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and c"},{"name":"package_install_preflight","description":"npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC "},{"name":"sec_material_event_delta","description":"New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)"},{"name":"mcp_payment_preflight","description":"MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, f"},{"name":"mcp_change_evidence","description":"Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool "},{"name":"mcp_vendor_due_diligence","description":"One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, "}],"toolCount":7,"toolsHash":"ef7605518a8f5a094124f32de73b24dab970224184c71c16e0498a8d089acb67","serverName":"FHI x402 Security Tools","capabilities":["tools"],"serverVersion":"1.4.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-10T15:31:56.573Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":387,"error":null,"detail":{"tools":[{"name":"payment_info","description":"Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices."},{"name":"domain_change_evidence","description":"Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and c"},{"name":"package_install_preflight","description":"npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC "},{"name":"sec_material_event_delta","description":"New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)"},{"name":"mcp_payment_preflight","description":"MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, f"},{"name":"mcp_change_evidence","description":"Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool "},{"name":"mcp_vendor_due_diligence","description":"One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, "}],"toolCount":7,"toolsHash":"ef7605518a8f5a094124f32de73b24dab970224184c71c16e0498a8d089acb67","serverName":"FHI x402 Security Tools","capabilities":["tools"],"serverVersion":"1.4.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-10T09:24:30.345Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":650,"error":null,"detail":{"tools":[{"name":"payment_info","description":"Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices."},{"name":"domain_change_evidence","description":"Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and c"},{"name":"package_install_preflight","description":"npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC "},{"name":"sec_material_event_delta","description":"New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)"},{"name":"mcp_payment_preflight","description":"MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, f"},{"name":"mcp_change_evidence","description":"Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool "},{"name":"mcp_vendor_due_diligence","description":"One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, "}],"toolCount":7,"toolsHash":"ef7605518a8f5a094124f32de73b24dab970224184c71c16e0498a8d089acb67","serverName":"FHI x402 Security Tools","capabilities":["tools"],"serverVersion":"1.4.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-10T02:30:15.090Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":153,"error":null,"detail":{"tools":[{"name":"payment_info","description":"Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices."},{"name":"domain_change_evidence","description":"Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and c"},{"name":"package_install_preflight","description":"npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC "},{"name":"sec_material_event_delta","description":"New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)"},{"name":"mcp_payment_preflight","description":"MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, f"},{"name":"mcp_change_evidence","description":"Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool "},{"name":"mcp_vendor_due_diligence","description":"One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, "}],"toolCount":7,"toolsHash":"ef7605518a8f5a094124f32de73b24dab970224184c71c16e0498a8d089acb67","serverName":"FHI x402 Security Tools","capabilities":["tools"],"serverVersion":"1.4.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-09T20:29:42.790Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":354,"error":null,"detail":{"tools":[{"name":"payment_info","description":"Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices."},{"name":"domain_change_evidence","description":"Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and c"},{"name":"package_install_preflight","description":"npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC "},{"name":"sec_material_event_delta","description":"New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)"},{"name":"mcp_payment_preflight","description":"MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, f"},{"name":"mcp_change_evidence","description":"Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool "},{"name":"mcp_vendor_due_diligence","description":"One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, "}],"toolCount":7,"toolsHash":"ef7605518a8f5a094124f32de73b24dab970224184c71c16e0498a8d089acb67","serverName":"FHI x402 Security Tools","capabilities":["tools"],"serverVersion":"1.4.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-09T13:30:44.526Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":353,"error":null,"detail":{"tools":[{"name":"payment_info","description":"Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices."},{"name":"domain_change_evidence","description":"Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and c"},{"name":"package_install_preflight","description":"npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC "},{"name":"sec_material_event_delta","description":"New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)"},{"name":"mcp_payment_preflight","description":"MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, f"},{"name":"mcp_change_evidence","description":"Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool "},{"name":"mcp_vendor_due_diligence","description":"One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, "}],"toolCount":7,"toolsHash":"ef7605518a8f5a094124f32de73b24dab970224184c71c16e0498a8d089acb67","serverName":"FHI x402 Security Tools","capabilities":["tools"],"serverVersion":"1.4.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-09T07:25:38.156Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":532,"error":null,"detail":{"tools":[{"name":"payment_info","description":"Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices."},{"name":"domain_change_evidence","description":"Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and c"},{"name":"package_install_preflight","description":"npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC "},{"name":"sec_material_event_delta","description":"New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)"},{"name":"mcp_payment_preflight","description":"MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, f"},{"name":"mcp_change_evidence","description":"Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool "},{"name":"mcp_vendor_due_diligence","description":"One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, "}],"toolCount":7,"toolsHash":"ef7605518a8f5a094124f32de73b24dab970224184c71c16e0498a8d089acb67","serverName":"FHI x402 Security Tools","capabilities":["tools"],"serverVersion":"1.4.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-09T00:25:34.210Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":339,"error":null,"detail":{"tools":[{"name":"payment_info","description":"Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices."},{"name":"domain_change_evidence","description":"Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and c"},{"name":"package_install_preflight","description":"npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC "},{"name":"sec_material_event_delta","description":"New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)"},{"name":"mcp_payment_preflight","description":"MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, f"},{"name":"mcp_change_evidence","description":"Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool "},{"name":"mcp_vendor_due_diligence","description":"One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, "}],"toolCount":7,"toolsHash":"ef7605518a8f5a094124f32de73b24dab970224184c71c16e0498a8d089acb67","serverName":"FHI x402 Security Tools","capabilities":["tools"],"serverVersion":"1.4.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-08T17:26:24.772Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":323,"error":null,"detail":{"tools":[{"name":"payment_info","description":"Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices."},{"name":"domain_change_evidence","description":"Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and c"},{"name":"package_install_preflight","description":"npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC "},{"name":"sec_material_event_delta","description":"New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)"},{"name":"mcp_payment_preflight","description":"MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, f"},{"name":"mcp_change_evidence","description":"Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool "},{"name":"mcp_vendor_due_diligence","description":"One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, "}],"toolCount":7,"toolsHash":"ef7605518a8f5a094124f32de73b24dab970224184c71c16e0498a8d089acb67","serverName":"FHI x402 Security Tools","capabilities":["tools"],"serverVersion":"1.4.0","protocolVersion":"2025-06-18"}},{"at":"2026-10-08T10:24:03.035Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":309,"error":null,"detail":{"tools":[{"name":"payment_info","description":"Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices."},{"name":"domain_change_evidence","description":"Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and c"},{"name":"package_install_preflight","description":"npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC "},{"name":"sec_material_event_delta","description":"New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)"},{"name":"mcp_payment_preflight","description":"MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, f"},{"name":"mcp_change_evidence","description":"Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool "},{"name":"mcp_vendor_due_diligence","description":"One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, "}],"toolCount":7,"toolsHash":"ef7605518a8f5a094124f32de73b24dab970224184c71c16e0498a8d089acb67","serverName":"FHI x402 Security Tools","capabilities":["tools"],"serverVersion":"1.4.0","protocolVersion":"2025-06-18"}}],"tools":[{"name":"payment_info","description":"Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices."},{"name":"domain_change_evidence","description":"Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and c"},{"name":"package_install_preflight","description":"npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC "},{"name":"sec_material_event_delta","description":"New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)"},{"name":"mcp_payment_preflight","description":"MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, f"},{"name":"mcp_change_evidence","description":"Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool "},{"name":"mcp_vendor_due_diligence","description":"One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, "}],"package":null,"toolSurface":{"id":"ts_2ua56q8avxnb","endpointId":"ep_5usz6tdapn2x","hash":"ef7605518a8f5a094124f32de73b24dab970224184c71c16e0498a8d089acb67","toolCount":7,"serverName":"FHI x402 Security Tools","serverVersion":"1.4.0","protocolVersion":"2025-06-18","firstSeenAt":"2026-10-07T14:30:14.847Z","lastSeenAt":"2026-10-10T21:26:12.063Z","observations":13,"toolNames":["payment_info","domain_change_evidence","package_install_preflight","sec_material_event_delta","mcp_payment_preflight","mcp_change_evidence","mcp_vendor_due_diligence"],"distinctSurfaces":4},"endpointFacts":[{"id":"ep_5usz6tdapn2x","url":"https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp","type":"mcp_streamable_http","factsCheckedAt":"2026-10-08T04:24:40.826Z","auth":{"observedAt":"2026-10-08T04:24:40.838Z","authRequired":false,"scheme":null,"resourceMetadata":null,"authorizationServer":null,"conformance":{"dpop":false,"rfc8414":false,"rfc9728":false,"pkceS256":false,"clientIdMetadataDocument":false,"dynamicClientRegistration":false}},"tls":{"observedAt":"2026-10-08T04:24:40.853Z","protocol":"TLSv1.3","chainValid":true,"chainError":null,"hostMatches":true,"subject":"fhi-llc-1118.workers.dev","issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validFrom":"2026-09-29T14:57:02.000Z","validTo":"2026-12-28T14:57:01.000Z","daysToExpiry":78,"sanCount":2,"fingerprint256":"01:BE:CD:0E:42:04:0D:23:3A:85:16:9A:68:7B:04:11:77:F3:9E:96:13:37:98:AB:8D:5C:8F:82:63:46:6A:B0"}}]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"dev.workers.fhi-llc-1118.polished-truth-c514/fhi-x402-security-tools","url":"https://registry.modelcontextprotocol.io/v0/servers/dev.workers.fhi-llc-1118.polished-truth-c514%2Ffhi-x402-security-tools","firstSeenAt":"2026-10-03T20:21:14.572Z","fetchedAt":"2026-10-09T14:21:25.925Z","normalizedAt":"2026-10-09T14:21:25.925Z"}]},"firstSeenAt":"2026-10-03T20:21:14.572Z","updatedAt":"2026-10-10T21:28:08.324Z"}