ServerScan MCP Server

by serverscan Your server? Claim it

answering

ServerScan is answering right now. Last checked moments ago. It exposes 6 tools.

PCI ASV scan prices, SAQ check, free payment page check, PCI guides and scan-failure fixes.

Uptime history 12 days of history

12 days agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

316 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 6

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 23 October 2026. No other catalogue keeps this.

30 Oct 2 tools appeared fix_failed_scan, search_guides

30 Oct a tool changed version

23 Oct 2 tool descriptions were rewritten get_pricing, start_order

23 Oct a tool changed the parameters it asks for start_order

Nothing serious here today

Today is the operative word: we check ServerScan every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 0 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp --transport http https://www.serverscan.com/api/mcp

Settings → Connectors → Add custom connector, then paste this address

https://www.serverscan.com/api/mcp

~/.codex/config.toml

[mcp_servers.mcp]
url = "https://www.serverscan.com/api/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://www.serverscan.com/api/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "mcp": {
      "type": "http",
      "url": "https://www.serverscan.com/api/mcp"
    }
  }
}

Available tools 6

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

fix

fix_failed_scan

Explains a failed PCI ASV scan finding and how to fix it, for the ten most common causes: certificates, old TLS, unpatched software, open ports, default credentials, version banners, missing headers, insecure remote access, DNS and mail, and injection flaws. Pass the finding text from the scan report, or an issue name, or neither to list all ten.

guides

search_guides

Searches ServerScan's published guides on PCI DSS requirements, ASV scanning, scan failures, payment page monitoring and penetration testing. Returns up to five matching guides with a short excerpt and a link each. Use it to answer a PCI question from our own pages, then cite the link.

need

do_i_need_an_asv_scan

Says whether a merchant's PCI DSS self-assessment questionnaire (SAQ) requires quarterly external scans by an Approved Scanning Vendor, under PCI DSS v4.0.1, and what to scan. Pass the SAQ type, or "unsure" to get every SAQ with who it is for.

payment

check_payment_page

Runs ServerScan's free one-off check of a payment or checkout page: TLS, security headers, the HTTP to HTTPS redirect, which scripts load and from where, and whether third-party scripts carry an integrity hash (PCI DSS 6.4.3 and 11.6.1). Returns six yes/no/not-yet-known answers and what to fix first. It fetches the page once. Any one site can be checked only a few times a day, and a repeat within 15 minutes returns the stored answer.

pricing

get_pricing

Current prices for ServerScan PCI ASV scanning (per domain or IP address), payment page monitoring and penetration testing of networks and web applications, read live from the store, with what each plan includes and the refund terms.

start

start_order

Returns a link to ServerScan's signup page with the plan picked and the domain filled in, for the person to open, check and pay. Creates nothing and charges nothing. For a penetration test, of a network or of web applications, it returns the page to request a quote from.

Endpoints

URL	Transport	State	Latency	Checked
https://www.serverscan.com/api/mcp	streamable-http	answering	266 ms	0 min ago

Alternatives to ServerScan

same job, measured the same way

PCI DSS v4.0.1 Compliance Checker

by shyshlakov

PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server

local only

SendCheck — EVM address verification (x402)

by pennyforge-api

Pre-send EVM address checks: free pre-check, $0.01 check, $0.05 deep scan. x402: payment is auth.

3 tools answering

FHI MCP Server Security Audit

by workers-fhi-llc-1118-polished-truth-c514

Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.

7 tools answering

Aml

by oceanalt

Pre-payment checks for AI agents: sanctions and AML screening of payees, payment pages and requests.

218 installs/wk 13 tools answering

Verantis MCP

by m9labs-railscope

Verified directory for machine payments (x402 & MPP): check services and wallets before agents pay.

109 installs/wk 4 tools answering

Veterical Vet Clinic

by veterical

See your vet clinic's free slots, vets, service prices, payments and how busy each day is.

11 tools answering

Agent Deals

by gmahar82-stack

Pay less for x402 APIs: free pre-payment checks, cheapest working service finder, web/PDF reader.

5 tools answering

AgentIndex

by cognivis

Trust scores and on-chain payment receipts for x402 services.

4 tools answering

ServerScan — questions

Answers built from our own checks of this server.

What can ServerScan do?

It exposes 6 tools, read directly from the server on our last check. Among them: check_payment_page, do_i_need_an_asv_scan, fix_failed_scan, get_pricing, search_guides, start_order. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is ServerScan working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 316 ms. The bar chart above shows every period we have measured.

How do I connect ServerScan?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does ServerScan need an API key?

No. ServerScan completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 6 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is ServerScan?

It answers our handshake in 316 ms on average, which is faster than 45% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.