{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_5wscyqgg3zkv","handle":"prescan","url":"https://wellknown.network/agents/prescan","links":{"self":"https://wellknown.network/agents/prescan/record.json","html":"https://wellknown.network/agents/prescan","markdown":"https://wellknown.network/agents/prescan/record.md","api":"https://wellknown.network/api/v1/agents/prescan","status":"https://wellknown.network/api/v1/agents/prescan/status","claim":"https://wellknown.network/agents/prescan/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/prescan/claim.json","badge":"https://wellknown.network/agents/prescan/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/prescan/history","tools":"https://wellknown.network/api/v1/agents/prescan/tools"},"ard":{"identifier":"urn:air:prescan.canisell.xyz:server:prescan","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"Prescan","summary":"Agent security pre-checks: prompt-injection scan, MCP tool-poisoning scan, x402 endpoint check.","description":"Agent security pre-checks: prompt-injection scan, MCP tool-poisoning scan, x402 endpoint check.","publisher":{"name":"xyz.canisell","url":null},"homepage":"https://prescan.canisell.xyz","repository":null,"version":"0.1.0","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://prescan.canisell.xyz/mcp","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-11-02T19:09:03.184519Z","publishedAt":"2026-11-02T19:09:03.184519Z","registryName":"xyz.canisell/prescan"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","homepageUrl":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"derived"},{"slug":"documents.contracts","name":"Contracts & Legal","confidence":0.525,"provenance":"derived"}],"categories":["documents","security"],"language":"en"},"observed":{"status":"live","statusReason":"Responded 7h ago.","lastOkAt":"2026-11-07T13:29:24.526Z","lastProbedAt":"2026-11-07T13:29:24.526Z","statusComputedAt":"2026-11-07T13:32:42.938Z","reliability30d":{"probes":10,"successRate":1,"p50Ms":60,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":10,"ok":10,"authBoundaryOk":0,"serviceOk":10,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-11-07T13:29:24.526Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":62,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins"},{"name":"scan_tools","description":"Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,"},{"name":"check_x402_endpoint","description":"Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc"},{"name":"about","description":"Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs."},{"name":"preview_scan_text","description":"Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo"},{"name":"list_rules","description":"Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools."}],"toolCount":6,"toolsHash":"2d63495336bc27592b9b1a8bcfea4925d30f768f6e70fac62cfa0dc5a4265e36","serverName":"prescan","capabilities":["tools"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-11-07T04:28:27.338Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":28,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins"},{"name":"scan_tools","description":"Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,"},{"name":"check_x402_endpoint","description":"Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc"},{"name":"about","description":"Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs."},{"name":"preview_scan_text","description":"Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo"},{"name":"list_rules","description":"Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools."}],"toolCount":6,"toolsHash":"2d63495336bc27592b9b1a8bcfea4925d30f768f6e70fac62cfa0dc5a4265e36","serverName":"prescan","capabilities":["tools"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-11-06T20:26:52.546Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":103,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins"},{"name":"scan_tools","description":"Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,"},{"name":"check_x402_endpoint","description":"Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc"},{"name":"about","description":"Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs."},{"name":"preview_scan_text","description":"Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo"},{"name":"list_rules","description":"Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools."}],"toolCount":6,"toolsHash":"2d63495336bc27592b9b1a8bcfea4925d30f768f6e70fac62cfa0dc5a4265e36","serverName":"prescan","capabilities":["tools"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-11-06T12:24:20.137Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":61,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins"},{"name":"scan_tools","description":"Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,"},{"name":"check_x402_endpoint","description":"Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc"},{"name":"about","description":"Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs."},{"name":"preview_scan_text","description":"Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo"},{"name":"list_rules","description":"Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools."}],"toolCount":6,"toolsHash":"2d63495336bc27592b9b1a8bcfea4925d30f768f6e70fac62cfa0dc5a4265e36","serverName":"prescan","capabilities":["tools"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-11-06T03:27:09.702Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":67,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins"},{"name":"scan_tools","description":"Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,"},{"name":"check_x402_endpoint","description":"Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc"},{"name":"about","description":"Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs."},{"name":"preview_scan_text","description":"Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo"},{"name":"list_rules","description":"Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools."}],"toolCount":6,"toolsHash":"2d63495336bc27592b9b1a8bcfea4925d30f768f6e70fac62cfa0dc5a4265e36","serverName":"prescan","capabilities":["tools"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-11-05T18:25:46.776Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":55,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins"},{"name":"scan_tools","description":"Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,"},{"name":"check_x402_endpoint","description":"Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc"},{"name":"about","description":"Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs."},{"name":"preview_scan_text","description":"Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo"},{"name":"list_rules","description":"Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools."}],"toolCount":6,"toolsHash":"2d63495336bc27592b9b1a8bcfea4925d30f768f6e70fac62cfa0dc5a4265e36","serverName":"prescan","capabilities":["tools"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-11-05T09:26:31.457Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":95,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins"},{"name":"scan_tools","description":"Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,"},{"name":"check_x402_endpoint","description":"Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc"},{"name":"about","description":"Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs."},{"name":"preview_scan_text","description":"Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo"},{"name":"list_rules","description":"Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools."}],"toolCount":6,"toolsHash":"2d63495336bc27592b9b1a8bcfea4925d30f768f6e70fac62cfa0dc5a4265e36","serverName":"prescan","capabilities":["tools"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-11-05T01:27:45.406Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":31,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins"},{"name":"scan_tools","description":"Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,"},{"name":"check_x402_endpoint","description":"Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc"},{"name":"about","description":"Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs."},{"name":"preview_scan_text","description":"Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo"},{"name":"list_rules","description":"Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools."}],"toolCount":6,"toolsHash":"2d63495336bc27592b9b1a8bcfea4925d30f768f6e70fac62cfa0dc5a4265e36","serverName":"prescan","capabilities":["tools"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-11-04T16:24:55.126Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":48,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins"},{"name":"scan_tools","description":"Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,"},{"name":"check_x402_endpoint","description":"Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc"},{"name":"about","description":"Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs."},{"name":"preview_scan_text","description":"Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo"},{"name":"list_rules","description":"Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools."}],"toolCount":6,"toolsHash":"2d63495336bc27592b9b1a8bcfea4925d30f768f6e70fac62cfa0dc5a4265e36","serverName":"prescan","capabilities":["tools"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}},{"at":"2026-11-04T08:28:22.526Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":60,"error":null,"detail":{"tools":[{"name":"scan_text","description":"Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins"},{"name":"scan_tools","description":"Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,"},{"name":"check_x402_endpoint","description":"Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc"},{"name":"about","description":"Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs."},{"name":"preview_scan_text","description":"Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo"},{"name":"list_rules","description":"Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools."}],"toolCount":6,"toolsHash":"2d63495336bc27592b9b1a8bcfea4925d30f768f6e70fac62cfa0dc5a4265e36","serverName":"prescan","capabilities":["tools"],"serverVersion":"1.0.0","protocolVersion":"2025-06-18"}}],"tools":[{"name":"scan_text","description":"Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins"},{"name":"scan_tools","description":"Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,"},{"name":"check_x402_endpoint","description":"Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc"},{"name":"about","description":"Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs."},{"name":"preview_scan_text","description":"Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo"},{"name":"list_rules","description":"Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools."}],"package":null,"toolSurface":{"id":"ts_8my4f73ykabt","endpointId":"ep_ku8739mshec6","hash":"2d63495336bc27592b9b1a8bcfea4925d30f768f6e70fac62cfa0dc5a4265e36","toolCount":6,"serverName":"prescan","serverVersion":"1.0.0","protocolVersion":"2025-06-18","firstSeenAt":"2026-11-04T08:28:22.537Z","lastSeenAt":"2026-11-07T13:29:24.530Z","observations":10,"hiddenText":{"level":"none","total":0,"tools":0,"kinds":[],"findings":[]},"toolNames":["scan_text","scan_tools","check_x402_endpoint","about","preview_scan_text","list_rules"],"distinctSurfaces":1,"surfacesWithHiddenText":0},"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"xyz.canisell/prescan","url":"https://registry.modelcontextprotocol.io/v0/servers/xyz.canisell%2Fprescan","firstSeenAt":"2026-11-04T06:21:53.990Z","fetchedAt":"2026-11-04T06:21:53.990Z","normalizedAt":"2026-11-04T06:21:53.990Z"}]},"firstSeenAt":"2026-11-04T06:21:53.990Z","updatedAt":"2026-11-07T13:34:13.580Z"}