English Français العربية

ScanPay — Code Security Oracle

السجل الرسمي أدوات المطورين

Deterministic code security scan + tx preflight, paid in USDC via x402.

الشيفرة المصدرية التوثيق

ماذا يمكنك أن تفعل مع ScanPay — Code Security Oracle؟

  • Execution Gate Verdicts: Unambiguous ALLOW or BLOCK booleans with 0-100 risk_score and cryptographic Ed25519 oracle attestations.
  • Deterministic Auto-Remediation: Generates instant remediated_code and unified_diff patches ready for git apply.
  • Tx Pre-Flight Simulation: Decodes ERC-20 approvals, detects unlimited allowances to untrusted spenders, honeypot functions (setTrading, blacklist), and Solana SetAuthority account takeovers.
  • Anti-Bot Scraper Oracle: Strips navigation, ads, cookies, and scripts, saving up to 90% of LLM context window tokens.

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http scanpay-code-security-oracle 'https://scanpay-ob3w.onrender.com/mcp'
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "scanpay-code-security-oracle": {
            "type": "http",
            "url": "https://scanpay-ob3w.onrender.com/mcp"
        }
    }
}
Remote (sse)
Claude Code 
claude mcp add --transport sse scanpay-code-security-oracle 'https://scanpay-ob3w.onrender.com/sse'
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "scanpay-code-security-oracle": {
            "type": "sse",
            "url": "https://scanpay-ob3w.onrender.com/sse"
        }
    }
}

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. ScanPay — Security Oracle & Agent Infrastructure Suite
  2. 🛠️ The 3 Core Agent Services
  3. 🎯 Machine Experience (MX) & A2A Capabilities
  4. 🌐 Live Discovery Endpoints
  5. 🤖 Remote Model Context Protocol (MCP)
  6. 📦 Agent Framework Integrations
  7. 🧪 Testing & Verification
  8. 📄 License

ScanPay — Security Oracle & Agent Infrastructure Suite

ScanPay is an autonomous security guardrail and oracle infrastructure suite designed specifically for the Agent-to-Agent (A2A) and Machine-to-Machine (M2M) economy with x402 v2 micropayments.

  • Production API: https://scanpay-ob3w.onrender.com
  • Remote Streamable MCP: https://scanpay-ob3w.onrender.com/mcp (HTTP) / https://scanpay-ob3w.onrender.com/sse (SSE)
  • Solana Merchant Wallet: JDKXvegmW5j4sAJPB6YCA9ffJbN422WLMmCWCcpy1vm4
  • Base (EVM) Merchant Wallet: 0xb295E606F38C363b476FC546c27226B5fBcAAEFA (USDC: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913)

🛠️ The 3 Core Agent Services

ServiceEndpointMCP ToolPricing (Base USDC / SOL)Purpose
1. Code Security ScannerPOST /v2/scanscan_code$0.10 USDC (0.0007 SOL)AST vulnerability analysis, deterministic patches, and execution gating (PASS/WARN/BLOCK).
2. Pre-Flight Tx ShieldPOST /v2/preflight/simulatesimulate_tx$0.05 USDC (0.00035 SOL)Simulates EVM/Solana transactions before broadcast, detecting honeypots, drainers, and MEV slippage traps.
3. Anti-Bot Scraper OraclePOST /v2/oracle/scrapescrape_url$0.02 USDC (0.00015 SOL)Stealth browser scraping bypassing Cloudflare Turnstile/WAF, returning clean LLM Markdown.
4. 10-Operation SessionPOST /v2/session/depositcreate_session_deposit$0.85 USDC (0.006 SOL)Prepaid micro-voucher valid across all tools with sub-millisecond latency and 0ms RPC bypass.

🎯 Machine Experience (MX) & A2A Capabilities

Traditional developer tools output verbose human prose. ScanPay produces structured Machine Responses:

  1. Execution Gate Verdicts: Unambiguous ALLOW or BLOCK booleans with 0-100 risk_score and cryptographic Ed25519 oracle attestations.
  2. Deterministic Auto-Remediation: Generates instant remediated_code and unified_diff patches ready for git apply.
  3. Tx Pre-Flight Simulation: Decodes ERC-20 approvals, detects unlimited allowances to untrusted spenders, honeypot functions (setTrading, blacklist), and Solana SetAuthority account takeovers.
  4. Anti-Bot Scraper Oracle: Strips navigation, ads, cookies, and scripts, saving up to 90% of LLM context window tokens.

🌐 Live Discovery Endpoints

Autonomous agent frameworks discover ScanPay automatically via spec-compliant endpoints:

EndpointStandard / ProtocolPurpose
GET /llms.txtLLMs Discovery StandardMachine documentation for LLMs, agents, and Cursor
GET /robots.txtAI Crawler StandardExplicit index permissions for GPTBot, Claude-Web, PerplexityBot
GET /.well-known/x402x402 v2 SpecProtocol discovery, CAIP-2 network, multi-chain pricing & endpoints
GET /bazaar.jsonCoinbase CDP / Onyx BazaarRegistry catalog with extensions.bazaar.discoverable: true
GET /.well-known/mcp.jsonModel Context ProtocolRemote MCP manifest with 5 registered tools
GET /.well-known/agent-card.jsonERC-8004 / ERC-8183Agent identity card declaring Oracle capabilities
GET /.well-known/ai-plugin.jsonOpenAI Plugin StandardOpenAPI integration manifest for autonomous function callers
GET /SKILL.mdAgent SkillsNative instructions for Claude Code, Hermes, and Codex
GET /PAY.mdMulti-Chain SettlementSettlement routes, recipient wallets, and spend caps
POST /mcp & GET /sseMCP Remote TransportsStateless JSON-RPC tool invocation over HTTP & SSE

🤖 Remote Model Context Protocol (MCP)

ScanPay runs as a native remote streamable MCP server.

Zero-Install stdio (CLI)
npx github:Misterio070/scanpay
Add to Claude Desktop / Cursor / Windsurf
{
  "mcpServers": {
    "scanpay": {
      "url": "https://scanpay-ob3w.onrender.com/sse"
    }
  }
}

📦 Agent Framework Integrations

  • Coinbase AgentKit (Base USDC): packages/agentkit-action-scanpay (@scanpay/agentkit-action)
  • Solana Agent Kit v2: packages/plugin-solana-agent-kit (@scanpay/plugin-solana-agent-kit)
  • ElizaOS: packages/plugin-elizaos (@elizaos/plugin-scanpay)
  • Universal Guardrail Hook: packages/scanpay-guardrail/scanpay-hook.py (Claude Code PreToolUse hook, OpenCode, Codex, LangGraph)
  • ERC-8183 Commerce Evaluator: contracts/ScanPayEvaluatorV2.sol (Base ERC-8004 Validation Registry bridge)

🧪 Testing & Verification

# Run 125+ automated unit and integration tests
python3 -m pytest

📄 License

MIT © Alex Taghiashvili

الأسئلة الشائعة

ما هو ScanPay — Code Security Oracle؟

Deterministic code security scan + tx preflight, paid in USDC via x402.

كيف أثبّت ScanPay — Code Security Oracle؟

يعمل كخادم بعيد. في Claude Code: claude mcp add --transport http scanpay-code-security-oracle 'https://scanpay-ob3w.onrender.com/mcp'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج ScanPay — Code Security Oracle إلى مفتاح API؟

لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.

هل ScanPay — Code Security Oracle مفتوح المصدر؟

شيفرته علنية على GitHub، لكن المستودع لا يعلن ترخيصًا قياسيًا.

من يصون ScanPay — Code Security Oracle؟

ينشره Misterio070. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.