Tanod toolsniff

toolsniff (Tanod) static security scan of an AI-agent skill or MCP server package: prompt injection, hidden text, remote code, credential access, exfiltration, install hooks, over-broad MCP tools, typosquats and known-vulnerable dependencies; JSON report. The package is never run. Use when an agent is about to install an agent skill or MCP package and wants its code scanned first.

Open endpoint ↗

Price per call: $0.02
Chain: Base
Method: POST
Paid calls · 30 days: 3

Call it from code

This API is run by its own provider and paid directly through x402. We list it so you can find it; we don't route or hold the payment.

import { x402Client, wrapFetchWithPayment } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";

const client = new x402Client();
registerExactEvmScheme(client, { signer: agentAccount });

const pay = wrapFetchWithPayment(fetch, client);
const res = await pay("https://tanod.dev/v1/scan/package", { method: "POST" });
console.log(await res.json());

https://tanod.dev/v1/scan/package