English Français العربية

ScanPay — Code Security Oracle

Official registry Developer tools

Deterministic code security scan + tx preflight, paid in USDC via x402.

Source code Documentation

What can you do with ScanPay — Code Security Oracle?

  • Execution Gate Verdicts: Unambiguous ALLOW or BLOCK booleans with 0-100 risk_score and cryptographic Ed25519 oracle attestations.
  • Deterministic Auto-Remediation: Generates instant remediated_code and unified_diff patches ready for git apply.
  • Tx Pre-Flight Simulation: Decodes ERC-20 approvals, detects unlimited allowances to untrusted spenders, honeypot functions (setTrading, blacklist), and Solana SetAuthority account takeovers.
  • Anti-Bot Scraper Oracle: Strips navigation, ads, cookies, and scripts, saving up to 90% of LLM context window tokens.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http scanpay-code-security-oracle 'https://scanpay-ob3w.onrender.com/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "scanpay-code-security-oracle": {
            "type": "http",
            "url": "https://scanpay-ob3w.onrender.com/mcp"
        }
    }
}
Remote (sse)
Claude Code 
claude mcp add --transport sse scanpay-code-security-oracle 'https://scanpay-ob3w.onrender.com/sse'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "scanpay-code-security-oracle": {
            "type": "sse",
            "url": "https://scanpay-ob3w.onrender.com/sse"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. ScanPay — Security Oracle & Agent Infrastructure Suite
  2. 🛠️ The 3 Core Agent Services
  3. 🎯 Machine Experience (MX) & A2A Capabilities
  4. 🌐 Live Discovery Endpoints
  5. 🤖 Remote Model Context Protocol (MCP)
  6. 📦 Agent Framework Integrations
  7. 🧪 Testing & Verification
  8. 📄 License

ScanPay — Security Oracle & Agent Infrastructure Suite

ScanPay is an autonomous security guardrail and oracle infrastructure suite designed specifically for the Agent-to-Agent (A2A) and Machine-to-Machine (M2M) economy with x402 v2 micropayments.

  • Production API: https://scanpay-ob3w.onrender.com
  • Remote Streamable MCP: https://scanpay-ob3w.onrender.com/mcp (HTTP) / https://scanpay-ob3w.onrender.com/sse (SSE)
  • Solana Merchant Wallet: JDKXvegmW5j4sAJPB6YCA9ffJbN422WLMmCWCcpy1vm4
  • Base (EVM) Merchant Wallet: 0xb295E606F38C363b476FC546c27226B5fBcAAEFA (USDC: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913)

🛠️ The 3 Core Agent Services

ServiceEndpointMCP ToolPricing (Base USDC / SOL)Purpose
1. Code Security ScannerPOST /v2/scanscan_code$0.10 USDC (0.0007 SOL)AST vulnerability analysis, deterministic patches, and execution gating (PASS/WARN/BLOCK).
2. Pre-Flight Tx ShieldPOST /v2/preflight/simulatesimulate_tx$0.05 USDC (0.00035 SOL)Simulates EVM/Solana transactions before broadcast, detecting honeypots, drainers, and MEV slippage traps.
3. Anti-Bot Scraper OraclePOST /v2/oracle/scrapescrape_url$0.02 USDC (0.00015 SOL)Stealth browser scraping bypassing Cloudflare Turnstile/WAF, returning clean LLM Markdown.
4. 10-Operation SessionPOST /v2/session/depositcreate_session_deposit$0.85 USDC (0.006 SOL)Prepaid micro-voucher valid across all tools with sub-millisecond latency and 0ms RPC bypass.

🎯 Machine Experience (MX) & A2A Capabilities

Traditional developer tools output verbose human prose. ScanPay produces structured Machine Responses:

  1. Execution Gate Verdicts: Unambiguous ALLOW or BLOCK booleans with 0-100 risk_score and cryptographic Ed25519 oracle attestations.
  2. Deterministic Auto-Remediation: Generates instant remediated_code and unified_diff patches ready for git apply.
  3. Tx Pre-Flight Simulation: Decodes ERC-20 approvals, detects unlimited allowances to untrusted spenders, honeypot functions (setTrading, blacklist), and Solana SetAuthority account takeovers.
  4. Anti-Bot Scraper Oracle: Strips navigation, ads, cookies, and scripts, saving up to 90% of LLM context window tokens.

🌐 Live Discovery Endpoints

Autonomous agent frameworks discover ScanPay automatically via spec-compliant endpoints:

EndpointStandard / ProtocolPurpose
GET /llms.txtLLMs Discovery StandardMachine documentation for LLMs, agents, and Cursor
GET /robots.txtAI Crawler StandardExplicit index permissions for GPTBot, Claude-Web, PerplexityBot
GET /.well-known/x402x402 v2 SpecProtocol discovery, CAIP-2 network, multi-chain pricing & endpoints
GET /bazaar.jsonCoinbase CDP / Onyx BazaarRegistry catalog with extensions.bazaar.discoverable: true
GET /.well-known/mcp.jsonModel Context ProtocolRemote MCP manifest with 5 registered tools
GET /.well-known/agent-card.jsonERC-8004 / ERC-8183Agent identity card declaring Oracle capabilities
GET /.well-known/ai-plugin.jsonOpenAI Plugin StandardOpenAPI integration manifest for autonomous function callers
GET /SKILL.mdAgent SkillsNative instructions for Claude Code, Hermes, and Codex
GET /PAY.mdMulti-Chain SettlementSettlement routes, recipient wallets, and spend caps
POST /mcp & GET /sseMCP Remote TransportsStateless JSON-RPC tool invocation over HTTP & SSE

🤖 Remote Model Context Protocol (MCP)

ScanPay runs as a native remote streamable MCP server.

Zero-Install stdio (CLI)
npx github:Misterio070/scanpay
Add to Claude Desktop / Cursor / Windsurf
{
  "mcpServers": {
    "scanpay": {
      "url": "https://scanpay-ob3w.onrender.com/sse"
    }
  }
}

📦 Agent Framework Integrations

  • Coinbase AgentKit (Base USDC): packages/agentkit-action-scanpay (@scanpay/agentkit-action)
  • Solana Agent Kit v2: packages/plugin-solana-agent-kit (@scanpay/plugin-solana-agent-kit)
  • ElizaOS: packages/plugin-elizaos (@elizaos/plugin-scanpay)
  • Universal Guardrail Hook: packages/scanpay-guardrail/scanpay-hook.py (Claude Code PreToolUse hook, OpenCode, Codex, LangGraph)
  • ERC-8183 Commerce Evaluator: contracts/ScanPayEvaluatorV2.sol (Base ERC-8004 Validation Registry bridge)

🧪 Testing & Verification

# Run 125+ automated unit and integration tests
python3 -m pytest

📄 License

MIT © Alex Taghiashvili

Frequently asked questions

What is ScanPay — Code Security Oracle?

Deterministic code security scan + tx preflight, paid in USDC via x402.

How do I install ScanPay — Code Security Oracle?

It runs as a remote server. In Claude Code: claude mcp add --transport http scanpay-code-security-oracle 'https://scanpay-ob3w.onrender.com/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does ScanPay — Code Security Oracle need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is ScanPay — Code Security Oracle open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains ScanPay — Code Security Oracle?

It is published by Misterio070. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.