FHI MCP Server Security Audit

by workers-fhi-llc-1118-polished-truth-c514 Your server? Claim it

answering

FHI MCP Server Security Audit is answering right now. Last checked 14 min ago. It exposes 7 tools.

Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.

Uptime history 10 days of history

10 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

286 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 4

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 6 October 2026. No other catalogue keeps this.

7 Oct 2 tool descriptions were rewritten mcp_change_evidence, package_install_preflight

6 Oct a tool appeared mcp_change_evidence

6 Oct a tool description was rewritten mcp_change_evidence

Nothing serious here today

Today is the operative word: we check FHI MCP Server Security Audit every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 14 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add fhi-x402-security-tools --transport http https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "fhi-x402-security-tools": {
      "url": "https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.fhi-x402-security-tools]
url = "https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "fhi-x402-security-tools": {
      "url": "https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "fhi-x402-security-tools": {
      "url": "https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp"
    }
  }
}

Available tools 7

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

mcp

mcp_change_evidence

Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool descriptions, risk-score changes, and newly observed high-risk capability signals before an agent reconnects or pays. Unlike a manifest diff, it fetches the live endpoint and retains the prior observation. ($0.003 USDC on Base)

mcp_payment_preflight

MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, filesystem, or wallet capabilities; prompt-injection or data-exfiltration signals; permissive JSON-schema inputs; missing HSTS; and a large tool surface. Does not execute tools. ($0.01 USDC on Base)

mcp_vendor_due_diligence

One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, plus optional SEC material-filing evidence for a public company. Does not execute vendor tools or certify safety. ($0.10 USDC on Base)

domain

domain_change_evidence

Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and certificate-expiry signals. ($0.01 USDC on Base)

package

package_install_preflight

npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC on Base)

payment

payment_info

Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices.

sec

sec_material_event_delta

New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)

Endpoints

URL	Transport	State	Latency	Checked
https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp	streamable-http	answering	195 ms	14 min ago

Alternatives to FHI MCP Server Security Audit

same job, measured the same way

Tollbooth

by huwhitememes

37 paid x402 MCP tools for OSINT, prediction markets, web intel, and agent security on Base USDC.

104 tools answering

Osv MCP

by mrfentmen

Use this MCP server to OSV open source vulnerability data and package security checks. Tools...

76 installs/wk local only

Bridgeguard MCP

by kota1026

BridgeGuard MCP Server - Cross-chain bridge security audit tools for AI coding agents. Scan bri...

31 installs/wk local only

Apimesh

by mbeato

74 paid web-analysis APIs (SEO, security, TLS, DNS, email) as MCP tools. USDC via x402.

42 installs/wk local only

DomainDNA

by workers-cybermax-tools-cybermax

Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.

4 tools answering

mcp-toolbelt

by papacasper

29 pay-per-call DNS, SEO, SSL, security, and dev tools for AI agents. x402, no API key.

29 tools answering

npm MCP

by alisaitteke

MCP server for npm package management, security analysis, and compatibility checking

34 installs/wk local only

MCP Security Guard

by petrovicistefan

Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).

600 installs/wk local only

FHI MCP Server Security Audit — questions

Answers built from our own checks of this server.

What can FHI MCP Server Security Audit do?

It exposes 7 tools, read directly from the server on our last check. Among them: domain_change_evidence, mcp_change_evidence, mcp_payment_preflight, mcp_vendor_due_diligence, package_install_preflight, payment_info and 1 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is FHI MCP Server Security Audit working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 286 ms. The bar chart above shows every period we have measured.

How do I connect FHI MCP Server Security Audit?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does FHI MCP Server Security Audit need an API key?

No. FHI MCP Server Security Audit completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 7 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is FHI MCP Server Security Audit?

It answers our handshake in 286 ms on average, which is faster than 49% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.