Prescan

• scan_text — Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins
• scan_tools — Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,
• check_x402_endpoint — Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc
• about — Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs.
• preview_scan_text — Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo
• list_rules — Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools.

No hidden text found in the tool definitions.

Text a person reading a tool definition does not see and a model does. Invisible characters can be pasted in by accident; this says what is there, not why. Covers tools only, not prompts or resources.