{"id":"c1650c46-e0f0-4a1e-986c-afa174d8c8cb","url":"https://hermesplant.com/api/agent-services/mcp-risk/score","method":"POST","fingerprint":"bd704c96e2d6a709ff6eebb8540e915ea31bc99cc5f7683972a0c6ccd55218c8","name":"MCP Server Risk Analyzer","description":"Analyze an MCP server manifest for security risk before install — destructive actions, over-broad scopes, sensitive-data egress, weak auth, prompt-injection surface, and permission diff. Returns per-tool, per-factor findings with severity, why, and a concrete fix (not just a score).","category":"other","docs_url":null,"advertised_price_usd":"0.050000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","scheme":"exact","networks":["eip155:8453"],"pay_to":"0x5171C72a59b994a80097b6ab52D4A4FcB8BF4c1B","input_schema":{"body":{"tools":[{"name":"delete_path","scopes":["fs:*"],"description":"Recursively delete any path on the filesystem","inputSchema":{"properties":{"path":{"type":"string"}}}},{"name":"read_env_and_post","network":true,"description":"Read environment secrets and upload to a webhook URL"}],"server":"github.com/acme/mcp-filesystem","authModel":"none"},"type":"http","method":"POST","bodyType":"json"},"output_schema":{"type":"json","example":{"risk":"critical","status":"scored","service":"mcp-risk-score","byFactor":{"weak-auth":1,"over-broad-scope":1,"sensitive-egress":1,"destructive-action":1},"requestId":"mcp_<uuid>","findingsCount":5,"requiresApproval":true,"recommendedAction":"block_install_until_scoped_and_approved"}},"schema_completeness":0,"status":"unknown","first_seen_at":"2026-08-23 12:24:27.657656+00","last_seen_at":"2026-08-25 09:22:59.487+00","last_success_at":null,"dead_since":null,"probe_backoff_tier":0,"next_probe_at":"2026-09-14 16:56:46.723+00","search_tsv":"'action':16 'analyz':4,5 'auth':26 'broad':19 'concret':47 'data':23 'destruct':15 'diff':33 'egress':24 'factor':40 'find':41 'fix':48 'inject':29 'instal':14 'manifest':9 'mcp':1,7 'over-broad':17 'per':36,39 'per-factor':38 'per-tool':35 'permiss':32 'prompt':28 'prompt-inject':27 'return':34 'risk':3,12 'scope':20 'score':52 'secur':11 'sensit':22 'sensitive-data':21 'server':2,8 'sever':43 'surfac':30 'tool':37 'weak':25","catalog_number":"2727","x402_version":2,"resource_url":"https://hermesplant.com/api/agent-services/mcp-risk/score","resource_description":"Analyze an MCP server manifest for security risk before install — destructive actions, over-broad scopes, sensitive-data egress, weak auth, prompt-injection surface, and permission diff. Returns per-tool, per-factor findings with severity, why, and a concrete fix (not just a score).","bazaar_extension":{"info":{"input":{"body":{"tools":[{"name":"delete_path","scopes":["fs:*"],"description":"Recursively delete any path on the filesystem","inputSchema":{"properties":{"path":{"type":"string"}}}},{"name":"read_env_and_post","network":true,"description":"Read environment secrets and upload to a webhook URL"}],"server":"github.com/acme/mcp-filesystem","authModel":"none"},"type":"http","method":"POST","bodyType":"json"},"output":{"type":"json","example":{"risk":"critical","status":"scored","service":"mcp-risk-score","byFactor":{"weak-auth":1,"over-broad-scope":1,"sensitive-egress":1,"destructive-action":1},"requestId":"mcp_<uuid>","findingsCount":5,"requiresApproval":true,"recommendedAction":"block_install_until_scoped_and_approved"}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"required":["tools"],"properties":{"tools":{"type":"array","items":{"type":"object","required":["name"],"properties":{"name":{"type":"string"},"scopes":{"type":"array","items":{"type":"string"}},"network":{"type":"boolean"},"description":{"type":"string"},"inputSchema":{"type":"object"},"permissions":{"type":"array","items":{"type":"string"}}}},"description":"The server's tool manifest"},"server":{"type":"string","description":"MCP server name/URL (optional)"},"authModel":{"type":"string","description":"e.g. oauth, token, none"},"priorTools":{"type":"array","items":{"type":"string"},"description":"Tool names from a prior manifest, to diff capability growth"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x5171C72a59b994a80097b6ab52D4A4FcB8BF4c1B","amount":"50000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x5171C72a59b994a80097b6ab52D4A4FcB8BF4c1B","scheme":"exact","network":"eip155:8453","amountAtomic":"50000"}],"bazaar_compatible":null,"bazaar_validated_at":null,"bazaar_validation_error":null,"window":"24h","probes_n":0,"handshake_uptime":0,"settle_success_rate":0,"valid_result_rate":null,"latency_p50":null,"latency_p90":null,"price_drift_pct":null,"score":0,"computed_at":"2026-09-14 16:27:00.164+00","source_metadata":[{"raw":{"url":"https://hermesplant.com/api/agent-services/mcp-risk/score","body":{"tools":[{"name":"delete_path","scopes":["fs:*"],"description":"Recursively delete any path on the filesystem","inputSchema":{"properties":{"path":{"type":"string"}}}},{"name":"read_env_and_post","network":true,"description":"Read environment secrets and upload to a webhook URL"}],"server":"github.com/acme/mcp-filesystem","authModel":"none"},"name":"MCP Server Risk Analyzer","method":"POST","source":"bazaar:api.cdp.coinbase.com","fingerprint":"bd704c96e2d6a709ff6eebb8540e915ea31bc99cc5f7683972a0c6ccd55218c8","inputSchema":{"body":{"tools":[{"name":"delete_path","scopes":["fs:*"],"description":"Recursively delete any path on the filesystem","inputSchema":{"properties":{"path":{"type":"string"}}}},{"name":"read_env_and_post","network":true,"description":"Read environment secrets and upload to a webhook URL"}],"server":"github.com/acme/mcp-filesystem","authModel":"none"},"type":"http","method":"POST","bodyType":"json"},"resourceUrl":"https://hermesplant.com/api/agent-services/mcp-risk/score","serviceName":"MCP Server Risk Analyzer","x402Version":2,"outputSchema":{"type":"json","example":{"risk":"critical","status":"scored","service":"mcp-risk-score","byFactor":{"weak-auth":1,"over-broad-scope":1,"sensitive-egress":1,"destructive-action":1},"requestId":"mcp_<uuid>","findingsCount":5,"requiresApproval":true,"recommendedAction":"block_install_until_scoped_and_approved"}},"acceptedAssets":["0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"],"bazaarExtension":{"info":{"input":{"body":{"tools":[{"name":"delete_path","scopes":["fs:*"],"description":"Recursively delete any path on the filesystem","inputSchema":{"properties":{"path":{"type":"string"}}}},{"name":"read_env_and_post","network":true,"description":"Read environment secrets and upload to a webhook URL"}],"server":"github.com/acme/mcp-filesystem","authModel":"none"},"type":"http","method":"POST","bodyType":"json"},"output":{"type":"json","example":{"risk":"critical","status":"scored","service":"mcp-risk-score","byFactor":{"weak-auth":1,"over-broad-scope":1,"sensitive-egress":1,"destructive-action":1},"requestId":"mcp_<uuid>","findingsCount":5,"requiresApproval":true,"recommendedAction":"block_install_until_scoped_and_approved"}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"required":["tools"],"properties":{"tools":{"type":"array","items":{"type":"object","required":["name"],"properties":{"name":{"type":"string"},"scopes":{"type":"array","items":{"type":"string"}},"network":{"type":"boolean"},"description":{"type":"string"},"inputSchema":{"type":"object"},"permissions":{"type":"array","items":{"type":"string"}}}},"description":"The server's tool manifest"},"server":{"type":"string","description":"MCP server name/URL (optional)"},"authModel":{"type":"string","description":"e.g. oauth, token, none"},"priorTools":{"type":"array","items":{"type":"string"},"description":"Tool names from a prior manifest, to diff capability growth"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"supportedNetworks":["eip155:8453"],"advertisedPriceUsd":0.05,"paymentRequirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x5171C72a59b994a80097b6ab52D4A4FcB8BF4c1B","amount":"50000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x5171C72a59b994a80097b6ab52D4A4FcB8BF4c1B","scheme":"exact","network":"eip155:8453","amountAtomic":"50000"}],"resourceDescription":"Analyze an MCP server manifest for security risk before install — destructive actions, over-broad scopes, sensitive-data egress, weak auth, prompt-injection surface, and permission diff. Returns per-tool, per-factor findings with severity, why, and a concrete fix (not just a score).","acceptedPaymentMethods":["exact"]},"source_id":1,"external_id":null}],"live_endpoint_metadata":{"x402_version":2,"resource_url":"https://hermesplant.com/api/agent-services/mcp-risk/score","resource_description":"Analyze an MCP server manifest for security risk before install — destructive actions, over-broad scopes, sensitive-data egress, weak auth, prompt-injection surface, and permission diff. Returns per-tool, per-factor findings with severity, why, and a concrete fix (not just a score).","bazaar_extension":{"info":{"input":{"body":{"tools":[{"name":"delete_path","scopes":["fs:*"],"description":"Recursively delete any path on the filesystem","inputSchema":{"properties":{"path":{"type":"string"}}}},{"name":"read_env_and_post","network":true,"description":"Read environment secrets and upload to a webhook URL"}],"server":"github.com/acme/mcp-filesystem","authModel":"none"},"type":"http","method":"POST","bodyType":"json"},"output":{"type":"json","example":{"risk":"critical","status":"scored","service":"mcp-risk-score","byFactor":{"weak-auth":1,"over-broad-scope":1,"sensitive-egress":1,"destructive-action":1},"requestId":"mcp_<uuid>","findingsCount":5,"requiresApproval":true,"recommendedAction":"block_install_until_scoped_and_approved"}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"required":["tools"],"properties":{"tools":{"type":"array","items":{"type":"object","required":["name"],"properties":{"name":{"type":"string"},"scopes":{"type":"array","items":{"type":"string"}},"network":{"type":"boolean"},"description":{"type":"string"},"inputSchema":{"type":"object"},"permissions":{"type":"array","items":{"type":"string"}}}},"description":"The server's tool manifest"},"server":{"type":"string","description":"MCP server name/URL (optional)"},"authModel":{"type":"string","description":"e.g. oauth, token, none"},"priorTools":{"type":"array","items":{"type":"string"},"description":"Tool names from a prior manifest, to diff capability growth"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x5171C72a59b994a80097b6ab52D4A4FcB8BF4c1B","amount":"50000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x5171C72a59b994a80097b6ab52D4A4FcB8BF4c1B","scheme":"exact","network":"eip155:8453","amountAtomic":"50000"}],"bazaar_compatible":null,"bazaar_validated_at":null,"bazaar_validation_error":null},"sonar_metrics":{"score":0,"uptime":0,"paid_success_rate":0,"valid_result_rate":null,"latency_p50":null,"latency_p90":null,"price_drift_pct":null},"cdp_indexed":false,"confidence":"low"}