InjectScan MCP Server

by youraitools Your server? Claim it

answering

InjectScan is answering right now. Last checked 3 min ago. It exposes 3 tools.

Scan text for prompt injection: risk score, verdict, matched spans. Built by Crypto Money Maker

Uptime history 4 days of history

4 days agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

81 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 16

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 23 October 2026. No other catalogue keeps this.

24 Oct 3 tool descriptions were rewritten scan_text, scan_tools, scan_url

23 Oct 3 tool descriptions were rewritten7 times that day scan_text, scan_tools, scan_url

23 Oct 3 tools changed the parameters they ask for4 times that day scan_text, scan_tools, scan_url

23 Oct 2 tools appeared scan_tools, scan_url

and 5 more, back to 23 October 2026

Nothing serious here today

Today is the operative word: we check InjectScan every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 3 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add injectscan --transport http https://api.youraitools.co/injectscan/mcp

Settings → Connectors → Add custom connector, then paste this address

https://api.youraitools.co/injectscan/mcp

~/.codex/config.toml

[mcp_servers.injectscan]
url = "https://api.youraitools.co/injectscan/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "injectscan": {
      "url": "https://api.youraitools.co/injectscan/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "injectscan": {
      "type": "http",
      "url": "https://api.youraitools.co/injectscan/mcp"
    }
  }
}

Available tools 3

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

scan

scan_text

Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flags instruction overrides, jailbreak personas, system-prompt extraction, fake delimiters, exfiltration URLs, tool hijacking, hidden Unicode and encoded payloads (deterministic rules). Use scan_url when you only have a link (it also checks hidden HTML) and scan_tools for MCP tool definitions. Text up to 100000 characters. Free: 30 calls/day per IP shared by scan_text, scan_url and scan_tools, with full results (max 10/min; invalid input is not counted). After that the tool returns an error with the x402 pay URL ($0.003 USDC on Base, Polygon, Arbitrum One or Solana per call at https://api.youraitools.co/injectscan/v1/scan) or prepaid credits. Returns risk_score (0-100), verdict (safe | suspicious | malicious), flagged, categories[] {category, score, description}, findings[] {rule, category, start, end, text} and free_tier usage. Read-only safety signal, not a guarantee.

scan_tools

Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and schemas) before your agent installs or calls them. Use scan_text for ordinary content and scan_url for web pages. Up to 100 tools per call. Free: 30 calls/day per IP shared by scan_text, scan_url and scan_tools, with full results (max 10/min; invalid input is not counted). After that the tool returns an error with the x402 pay URL ($0.003 USDC on Base, Polygon, Arbitrum One or Solana per call at https://api.youraitools.co/injectscan/v1/scan) or prepaid credits. Returns the worst risk_score/verdict, flagged, tools_scanned, tools_flagged and tools[] {index, name, risk_score, verdict, categories, findings[] {field, rule, text}}. Read-only safety signal, not a guarantee.

scan_url

Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent browses or summarizes it. Use scan_text if you already have the content and scan_tools for MCP tool definitions. Respects robots.txt and refuses private/internal hosts. Free: 30 calls/day per IP shared by scan_text, scan_url and scan_tools, with full results (max 10/min; invalid input is not counted). After that the tool returns an error with the x402 pay URL ($0.003 USDC on Base, Polygon, Arbitrum One or Solana per call at https://api.youraitools.co/injectscan/v1/scan) or prepaid credits. Returns risk_score (0-100), verdict (safe | suspicious | malicious), flagged, categories[] {category, score, description}, findings[] with location (visible or hidden), url, finalUrl, title, hidden_html {segments_checked, flagged} and page {status, contentType}. Read-only safety signal, not a guarantee.

Endpoints

URL	Transport	State	Latency	Checked
https://api.youraitools.co/injectscan/mcp	streamable-http	answering	93 ms	3 min ago

Alternatives to InjectScan

same job, measured the same way

SolVerdict

by youraitools

Safety check for Solana SPL/Token-2022 mints: SAFE/CAUTION/DANGER + reasons. By Crypto Money Maker

185 installs/wk 1 tools answering

Coin Signal

by airblockfz

Crypto bottom/top signals: verdict + score per coin, market scans. Pay-per-call x402.

6 tools answering

AgentGate

by youraitools

Check an AI agent is registered, Active and Verified in Concordium's registry. By Crypto Money Maker

1 tools answering

AgentReady

by youraitools

Is your website ready for AI agents? 0-100 score, A-F grade and fixes. By Crypto Money Maker

167 installs/wk 1 tools answering

PayGuard

by youraitools

OFAC SDN sanctions screen for crypto addresses, for agents that send payments. By Crypto Money Maker

2 tools answering

WebRead

by youraitools

Turn any public web page into clean Markdown for LLMs; respects robots.txt. By Crypto Money Maker

1 tools answering

TokenVerdict

by youraitools

Base token safety check: simulated buy/transfer/sell, owner powers, liquidity. By Crypto Money Maker

179 installs/wk 1 tools answering

SignCheck

by youraitools

Pre-sign safety check for agent wallets: tx, EIP-712, EIP-7702, x402. By Crypto Money Maker

359 installs/wk 1 tools answering

InjectScan — questions

Answers built from our own checks of this server.

What can InjectScan do?

It exposes 3 tools, read directly from the server on our last check. Among them: scan_text, scan_tools, scan_url. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is InjectScan working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 81 ms. The bar chart above shows every period we have measured.

How do I connect InjectScan?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does InjectScan need an API key?

No. InjectScan completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 3 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is InjectScan?

It answers our handshake in 81 ms on average, which is faster than 97% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.