Prescan

Agent security pre-checks: prompt-injection scan, MCP tool-poisoning scan, x402 endpoint check.

Install

Remote server: your requests and data go to prescan.canisell.xyz. Claude Code: claude mcp add --transport http prescan https://prescan.canisell.xyz/mcp · Claude app: Settings → Connectors → Add custom connector.

What it can do

The tools this server listed when we connected to it, in its own words.

• scan_text — Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministi
• scan_tools — Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPO
• check_x402_endpoint — Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/toke
• about — Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs.
• preview_scan_text — Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans,
• list_rules — Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools.

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• ponytail-audit 190,451 ★
  Quality audit of the whole repo: bugs, security, real load, missing tests, speed, and what to delete. Most imp
• ponytail-debt 190,451 ★
  Harvest every shortcut: comment into one debt ledger, so deferrals get tracked instead of forgotten. One-shot
• security-and-hardening 117,221 ★
  Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling us
• deal-with-security-advisory 113,505 ★
  Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, pr
• html-ppt-knowledge-arch-blueprint