xyz.canisell/prescan

up checked 2026-11-12T06:37:46.726Z

Unclaimed · Unverified

Publisher-provided title

Prescan

Publisher-provided description

Agent security pre-checks: prompt-injection scan, MCP tool-poisoning scan, x402 endpoint check.

Summary by lookupd

Scans text for prompt injection, checks MCP tool definitions for poisoning, and verifies x402 payment endpoints before paying.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http prescan https://prescan.canisell.xyz/mcp

Codex, remote (streamable-http)

codex mcp add prescan --url https://prescan.canisell.xyz/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "prescan": {
      "url": "https://prescan.canisell.xyz/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Publisher-provided text

scan_text Prompt-injection pre-check for text your agent is about to read (tool output, web page, email, document, token names/metadata). Deterministic rules, no LLM: ins
scan_tools Tool-poisoning scan of MCP tool definitions (a tools/list result) or function schemas before your agent connects or calls them: hidden <IMPORTANT> instructions,
check_x402_endpoint Is this x402 endpoint safe to pay? Fetches its 402 terms with one GET (never pays) and checks: payTo validity and EIP-55 checksum, zero/token-contract/OFAC-sanc
about Free. What Prescan does, prices of the paid tools and HTTP endpoints, and links to docs.
preview_scan_text Free. Prompt-injection pre-check for up to 1000 characters: verdict (safe/suspicious/malicious), score, categories and rule ids. For spans, a sanitized copy, lo
list_rules Free. The detection categories, rule counts and thresholds used by scan_text and scan_tools.

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/xyz.canisell/prescan.svg)](https://lookupd.com/servers/xyz.canisell/prescan)