{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_sx8fa5cu3jxj","handle":"injectscan","url":"https://wellknown.network/agents/injectscan","links":{"self":"https://wellknown.network/agents/injectscan/record.json","html":"https://wellknown.network/agents/injectscan","markdown":"https://wellknown.network/agents/injectscan/record.md","api":"https://wellknown.network/api/v1/agents/injectscan","status":"https://wellknown.network/api/v1/agents/injectscan/status","claim":"https://wellknown.network/agents/injectscan/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/injectscan/claim.json","badge":"https://wellknown.network/agents/injectscan/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/injectscan/history","tools":"https://wellknown.network/api/v1/agents/injectscan/tools"},"ard":{"identifier":"urn:air:injectscan.agentgate.workers.dev:server:injectscan","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"InjectScan","summary":"Prompt-injection scanner for agents: risk score, categories and spans for text, pages, MCP tools","description":"Prompt-injection scanner for agents: risk score, categories and spans for text, pages, MCP tools","publisher":{"name":"agentgate-builder","url":null},"homepage":"https://injectscan.agentgate.workers.dev","repository":"https://github.com/agentgate-builder/x402-prompt-injection-scan","version":"0.1.0","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://injectscan.agentgate.workers.dev/mcp","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-10-21T22:01:49.509437Z","publishedAt":"2026-10-21T22:01:49.509437Z","registryName":"io.github.agentgate-builder/x402-prompt-injection-scan"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","repoUrl":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","homepageUrl":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"derived"}],"categories":["security"],"language":"en"},"observed":{"status":"live","statusReason":"Responded 7h ago.","lastOkAt":"2026-10-31T01:31:16.777Z","lastProbedAt":"2026-10-31T01:31:16.777Z","statusComputedAt":"2026-10-31T01:33:01.384Z","reliability30d":{"probes":29,"successRate":1,"p50Ms":57,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":29,"ok":29,"authBoundaryOk":0,"serviceOk":29,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-10-31T01:31:16.777Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":66,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flag"},{"name":"scan_url","description":"Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent br"},{"name":"scan_tools","description":"Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and s"}],"toolCount":3,"toolsHash":"a54bdbecc03cc2a007347647b50fb6b9a67a4717a16dbf50f867d29b307250c9","serverName":"injectscan","capabilities":["tools"],"serverVersion":"0.1.4","protocolVersion":"2025-06-18"}},{"at":"2026-10-30T18:27:35.917Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":22,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flag"},{"name":"scan_url","description":"Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent br"},{"name":"scan_tools","description":"Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and s"}],"toolCount":3,"toolsHash":"a54bdbecc03cc2a007347647b50fb6b9a67a4717a16dbf50f867d29b307250c9","serverName":"injectscan","capabilities":["tools"],"serverVersion":"0.1.4","protocolVersion":"2025-06-18"}},{"at":"2026-10-30T10:23:36.627Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":58,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flag"},{"name":"scan_url","description":"Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent br"},{"name":"scan_tools","description":"Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and s"}],"toolCount":3,"toolsHash":"a54bdbecc03cc2a007347647b50fb6b9a67a4717a16dbf50f867d29b307250c9","serverName":"injectscan","capabilities":["tools"],"serverVersion":"0.1.4","protocolVersion":"2025-06-18"}},{"at":"2026-10-30T03:24:52.508Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":47,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flag"},{"name":"scan_url","description":"Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent br"},{"name":"scan_tools","description":"Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and s"}],"toolCount":3,"toolsHash":"a54bdbecc03cc2a007347647b50fb6b9a67a4717a16dbf50f867d29b307250c9","serverName":"injectscan","capabilities":["tools"],"serverVersion":"0.1.4","protocolVersion":"2025-06-18"}},{"at":"2026-10-29T20:28:49.591Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":121,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flag"},{"name":"scan_url","description":"Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent br"},{"name":"scan_tools","description":"Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and s"}],"toolCount":3,"toolsHash":"a54bdbecc03cc2a007347647b50fb6b9a67a4717a16dbf50f867d29b307250c9","serverName":"injectscan","capabilities":["tools"],"serverVersion":"0.1.4","protocolVersion":"2025-06-18"}},{"at":"2026-10-29T13:29:23.876Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":76,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flag"},{"name":"scan_url","description":"Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent br"},{"name":"scan_tools","description":"Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and s"}],"toolCount":3,"toolsHash":"a54bdbecc03cc2a007347647b50fb6b9a67a4717a16dbf50f867d29b307250c9","serverName":"injectscan","capabilities":["tools"],"serverVersion":"0.1.4","protocolVersion":"2025-06-18"}},{"at":"2026-10-29T06:27:26.846Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":54,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flag"},{"name":"scan_url","description":"Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent br"},{"name":"scan_tools","description":"Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and s"}],"toolCount":3,"toolsHash":"a54bdbecc03cc2a007347647b50fb6b9a67a4717a16dbf50f867d29b307250c9","serverName":"injectscan","capabilities":["tools"],"serverVersion":"0.1.4","protocolVersion":"2025-06-18"}},{"at":"2026-10-28T22:27:52.642Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":20,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flag"},{"name":"scan_url","description":"Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent br"},{"name":"scan_tools","description":"Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and s"}],"toolCount":3,"toolsHash":"a54bdbecc03cc2a007347647b50fb6b9a67a4717a16dbf50f867d29b307250c9","serverName":"injectscan","capabilities":["tools"],"serverVersion":"0.1.4","protocolVersion":"2025-06-18"}},{"at":"2026-10-28T15:31:27.677Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":84,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flag"},{"name":"scan_url","description":"Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent br"},{"name":"scan_tools","description":"Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and s"}],"toolCount":3,"toolsHash":"a54bdbecc03cc2a007347647b50fb6b9a67a4717a16dbf50f867d29b307250c9","serverName":"injectscan","capabilities":["tools"],"serverVersion":"0.1.4","protocolVersion":"2025-06-18"}},{"at":"2026-10-28T08:31:39.612Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":25,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flag"},{"name":"scan_url","description":"Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent br"},{"name":"scan_tools","description":"Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and s"}],"toolCount":3,"toolsHash":"a54bdbecc03cc2a007347647b50fb6b9a67a4717a16dbf50f867d29b307250c9","serverName":"injectscan","capabilities":["tools"],"serverVersion":"0.1.4","protocolVersion":"2025-06-18"}}],"tools":[{"name":"scan_text","description":"Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flag"},{"name":"scan_url","description":"Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent br"},{"name":"scan_tools","description":"Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and s"}],"package":null,"toolSurface":{"id":"ts_q7w2ywzr2sjr","endpointId":"ep_pq7v7hqcnrsg","hash":"a54bdbecc03cc2a007347647b50fb6b9a67a4717a16dbf50f867d29b307250c9","toolCount":3,"serverName":"injectscan","serverVersion":"0.1.4","protocolVersion":"2025-06-18","firstSeenAt":"2026-10-24T04:22:10.220Z","lastSeenAt":"2026-10-31T01:31:16.782Z","observations":24,"toolNames":["scan_text","scan_url","scan_tools"],"distinctSurfaces":3},"endpointFacts":[{"id":"ep_pq7v7hqcnrsg","url":"https://injectscan.agentgate.workers.dev/mcp","type":"mcp_streamable_http","factsCheckedAt":"2026-10-25T08:23:35.210Z","auth":{"observedAt":"2026-10-25T08:23:35.255Z","authRequired":false,"scheme":null,"resourceMetadata":null,"authorizationServer":null,"conformance":{"dpop":false,"rfc8414":false,"rfc9728":false,"pkceS256":false,"clientIdMetadataDocument":false,"dynamicClientRegistration":false}},"tls":{"observedAt":"2026-10-25T08:23:35.265Z","protocol":"TLSv1.3","chainValid":true,"chainError":null,"hostMatches":true,"subject":"agentgate.workers.dev","issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validFrom":"2026-10-21T19:18:13.000Z","validTo":"2027-01-19T19:18:12.000Z","daysToExpiry":80,"sanCount":2,"fingerprint256":"B0:71:42:FC:18:10:83:4D:16:C5:01:46:32:82:76:75:C9:14:63:B7:A1:02:84:92:0C:B8:CD:6B:EE:D8:03:E6"}}]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"io.github.agentgate-builder/x402-prompt-injection-scan","url":"https://registry.modelcontextprotocol.io/v0/servers/io.github.agentgate-builder%2Fx402-prompt-injection-scan","firstSeenAt":"2026-10-22T20:19:40.106Z","fetchedAt":"2026-10-29T16:21:08.125Z","normalizedAt":"2026-10-29T16:21:08.125Z"}]},"firstSeenAt":"2026-10-22T20:19:40.106Z","updatedAt":"2026-10-31T01:33:57.295Z"}