APIShield WAF v4.0 MCP

50-vector prompt-injection, llms.txt poisoning, SSRF & OpenAPI scanner ($1 USDC).

Install

Remote server: your requests and data go to apishield-waf.run402.com. Claude Code: claude mcp add --transport http apishield-waf-v4-0-mcp https://apishield-waf.run402.com/api/mcp · Claude app: Settings → Connectors → Add custom connector.

What it can do

The tools this server listed when we connected to it, in its own words.

• audit_domain — 6-Agent SaaS Contract, GDPR Art. 28 DPA & EU AI Act Auditor — scans any public HTTPS domain and returns deterministic readiness scores and r
• get_package_manifest — Returns SHA-256 checksums, byte sizes, and file trees for all turnkey SaaS source .ZIP archives and Executive Digital Pack documents.
• verify_payment_and_unlock — Verifies a Base USDC/USDT or Tonkeeper TON/USDT-TON payment (by tx_hash, wallet address, or order reference) and returns the full unredacted
• submit_buyer_offer — Creates an instant $1 Flash Trial or custom buyout settlement link (Tonkeeper TON / Base USDC).

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• ponytail-audit 190,451 ★
  Quality audit of the whole repo: bugs, security, real load, missing tests, speed, and what to delete. Most imp
• ponytail-debt 190,451 ★
  Harvest every shortcut: comment into one debt ledger, so deferrals get tracked instead of forgotten. One-shot
• security-and-hardening 117,221 ★
  Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling us
• deal-with-security-advisory 113,505 ★
  Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, pr
• html-ppt-knowledge-arch-blueprint