Power Strip Security

MCP tool-poisoning audit: check an MCP server before your agent connects. Send its URL or a pasted tools/list; get findings on hidden instructions, cross-tool shadowing, secret-file access and exfiltration parameters, plus a fingerprint per tool to catch rug pulls. Read-only, never calls a tool. Unreachable servers are not charged. MCP server: npx -y power-strip-security-mcp.

Open endpoint ↗

Price per call: $0.01
Chain: Base
Method: POST
Paid calls · 30 days: 4

Call it from code

This API is run by its own provider and paid directly through x402. We list it so you can find it; we don't route or hold the payment.

import { x402Client, wrapFetchWithPayment } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";

const client = new x402Client();
registerExactEvmScheme(client, { signer: agentAccount });

const pay = wrapFetchWithPayment(fetch, client);
const res = await pay("https://api.powerstripsecurity.workers.dev/v1/mcp-audit", { method: "POST" });
console.log(await res.json());

https://api.powerstripsecurity.workers.dev/v1/mcp-audit