ScanPay — Code Security Oracle

Registre officiel Outils de développement

Deterministic code security scan + tx preflight, paid in USDC via x402.

Que pouvez-vous faire avec ScanPay — Code Security Oracle ?

Execution Gate Verdicts: Unambiguous ALLOW or BLOCK booleans with 0-100 risk_score and cryptographic Ed25519 oracle attestations.
Deterministic Auto-Remediation: Generates instant remediated_code and unified_diff patches ready for git apply.
Tx Pre-Flight Simulation: Decodes ERC-20 approvals, detects unlimited allowances to untrusted spenders, honeypot functions (setTrading, blacklist), and Solana SetAuthority account takeovers.
Anti-Bot Scraper Oracle: Strips navigation, ads, cookies, and scripts, saving up to 90% of LLM context window tokens.

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

Remote (streamable-http)

Claude Code

claude mcp add --transport http scanpay-code-security-oracle 'https://scanpay-ob3w.onrender.com/mcp'

Configuration JSON (Claude Desktop, Cursor, VS Code)

{
    "mcpServers": {
        "scanpay-code-security-oracle": {
            "type": "http",
            "url": "https://scanpay-ob3w.onrender.com/mcp"
        }
    }
}

Remote (sse)

Claude Code

claude mcp add --transport sse scanpay-code-security-oracle 'https://scanpay-ob3w.onrender.com/sse'

Configuration JSON (Claude Desktop, Cursor, VS Code)

{
    "mcpServers": {
        "scanpay-code-security-oracle": {
            "type": "sse",
            "url": "https://scanpay-ob3w.onrender.com/sse"
        }
    }
}

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire

ScanPay — Security Oracle & Agent Infrastructure Suite
🛠️ The 3 Core Agent Services
🎯 Machine Experience (MX) & A2A Capabilities
🌐 Live Discovery Endpoints
🤖 Remote Model Context Protocol (MCP)
📦 Agent Framework Integrations
🧪 Testing & Verification
📄 License

ScanPay — Security Oracle & Agent Infrastructure Suite

ScanPay is an autonomous security guardrail and oracle infrastructure suite designed specifically for the Agent-to-Agent (A2A) and Machine-to-Machine (M2M) economy with x402 v2 micropayments.

Production API: https://scanpay-ob3w.onrender.com
Remote Streamable MCP: https://scanpay-ob3w.onrender.com/mcp (HTTP) / https://scanpay-ob3w.onrender.com/sse (SSE)
Solana Merchant Wallet: JDKXvegmW5j4sAJPB6YCA9ffJbN422WLMmCWCcpy1vm4
Base (EVM) Merchant Wallet: 0xb295E606F38C363b476FC546c27226B5fBcAAEFA (USDC: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913)

🛠️ The 3 Core Agent Services

Service	Endpoint	MCP Tool	Pricing (Base USDC / SOL)	Purpose
1. Code Security Scanner	`POST /v2/scan`	`scan_code`	$0.10 USDC (0.0007 SOL)	AST vulnerability analysis, deterministic patches, and execution gating (PASS/WARN/BLOCK).
2. Pre-Flight Tx Shield	`POST /v2/preflight/simulate`	`simulate_tx`	$0.05 USDC (0.00035 SOL)	Simulates EVM/Solana transactions before broadcast, detecting honeypots, drainers, and MEV slippage traps.
3. Anti-Bot Scraper Oracle	`POST /v2/oracle/scrape`	`scrape_url`	$0.02 USDC (0.00015 SOL)	Stealth browser scraping bypassing Cloudflare Turnstile/WAF, returning clean LLM Markdown.
4. 10-Operation Session	`POST /v2/session/deposit`	`create_session_deposit`	$0.85 USDC (0.006 SOL)	Prepaid micro-voucher valid across all tools with sub-millisecond latency and 0ms RPC bypass.

🎯 Machine Experience (MX) & A2A Capabilities

Traditional developer tools output verbose human prose. ScanPay produces structured Machine Responses:

Execution Gate Verdicts: Unambiguous ALLOW or BLOCK booleans with 0-100 risk_score and cryptographic Ed25519 oracle attestations.
Deterministic Auto-Remediation: Generates instant remediated_code and unified_diff patches ready for git apply.
Tx Pre-Flight Simulation: Decodes ERC-20 approvals, detects unlimited allowances to untrusted spenders, honeypot functions (setTrading, blacklist), and Solana SetAuthority account takeovers.
Anti-Bot Scraper Oracle: Strips navigation, ads, cookies, and scripts, saving up to 90% of LLM context window tokens.

🌐 Live Discovery Endpoints

Autonomous agent frameworks discover ScanPay automatically via spec-compliant endpoints:

Endpoint	Standard / Protocol	Purpose
`GET /llms.txt`	LLMs Discovery Standard	Machine documentation for LLMs, agents, and Cursor
`GET /robots.txt`	AI Crawler Standard	Explicit index permissions for GPTBot, Claude-Web, PerplexityBot
`GET /.well-known/x402`	x402 v2 Spec	Protocol discovery, CAIP-2 network, multi-chain pricing & endpoints
`GET /bazaar.json`	Coinbase CDP / Onyx Bazaar	Registry catalog with `extensions.bazaar.discoverable: true`
`GET /.well-known/mcp.json`	Model Context Protocol	Remote MCP manifest with 5 registered tools
`GET /.well-known/agent-card.json`	ERC-8004 / ERC-8183	Agent identity card declaring Oracle capabilities
`GET /.well-known/ai-plugin.json`	OpenAI Plugin Standard	OpenAPI integration manifest for autonomous function callers
`GET /SKILL.md`	Agent Skills	Native instructions for Claude Code, Hermes, and Codex
`GET /PAY.md`	Multi-Chain Settlement	Settlement routes, recipient wallets, and spend caps
`POST /mcp` & `GET /sse`	MCP Remote Transports	Stateless JSON-RPC tool invocation over HTTP & SSE

🤖 Remote Model Context Protocol (MCP)

ScanPay runs as a native remote streamable MCP server.

Zero-Install stdio (CLI)

npx github:Misterio070/scanpay

Add to Claude Desktop / Cursor / Windsurf

{
  "mcpServers": {
    "scanpay": {
      "url": "https://scanpay-ob3w.onrender.com/sse"
    }
  }
}

📦 Agent Framework Integrations

Coinbase AgentKit (Base USDC): packages/agentkit-action-scanpay (@scanpay/agentkit-action)
Solana Agent Kit v2: packages/plugin-solana-agent-kit (@scanpay/plugin-solana-agent-kit)
ElizaOS: packages/plugin-elizaos (@elizaos/plugin-scanpay)
Universal Guardrail Hook: packages/scanpay-guardrail/scanpay-hook.py (Claude Code PreToolUse hook, OpenCode, Codex, LangGraph)
ERC-8183 Commerce Evaluator: contracts/ScanPayEvaluatorV2.sol (Base ERC-8004 Validation Registry bridge)

🧪 Testing & Verification

# Run 125+ automated unit and integration tests
python3 -m pytest

📄 License

Questions fréquentes

Qu'est-ce que ScanPay — Code Security Oracle ?

Deterministic code security scan + tx preflight, paid in USDC via x402.

Comment installer ScanPay — Code Security Oracle ?

Il fonctionne comme serveur distant. Dans Claude Code : claude mcp add --transport http scanpay-code-security-oracle 'https://scanpay-ob3w.onrender.com/mcp'. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour ScanPay — Code Security Oracle ?

Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.

ScanPay — Code Security Oracle est-il open source ?

Son code est public sur GitHub, mais le dépôt ne déclare pas de licence standard.

Qui maintient ScanPay — Code Security Oracle ?

Il est publié par Misterio070. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.

Détails du serveur

Référencé dans: Registre MCP officiel
Éditeur: Misterio070
Catégorie: Outils de développement
Exécution: Distant
Étoiles GitHub: ★ 0
Langage: Python
Dernier commit: 27 oct. 2026
Tickets ouverts: 0
Version: 1.2.0
Publié le: 27 oct. 2026

io.github.Misterio070/scanpay

Serveurs similaires

Aletheia A free, local memory and rules hub for AI coding tools, served over MCP.
Prometheor Your AI apps as one team: hand work to Codex or Claude Code, with a shared logbook of r...
J2C Java to C++ Check Java 17 code for C++ translation problems, fix them, and translate it to C++20.
dotrepo Trust-aware repository facts for agents: build, test, docs, license, and security, no s...
ohmyho.st Operate ohmyho.st hosting from your coding agent: deploy GitHub apps, Postgres, mail, d...
Basiiik Design system for coding agents: component specs, rules, tokens, icons and checked Reac...
Formeo Build and publish Formeo forms, read and export submissions, and get embed code from AI...
ContextStream MCP Server The context platform for AI agents: code search, team decisions, and grounded project c...

Outils de développement