← The evidence ledger
Evidence row 76541
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://hubvibe-io.com/work/security/mcp_inspect
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 89b1f26a68e7f059dd4b7535768b01f79e0a62994f1f7eb9f43bfdc94bbaa72f
- Leaf
- 0xa137e2231cca2d67737262cf12f96378b57f8aa904c8c6572a5e99f41f4e5b44
What was observed
{
"endpoints": [
[
"x402",
"https://hubvibe-io.com/work/security/mcp_inspect"
]
],
"name": "HubVibe",
"owner_address": "0x837c40e2b4e976f43ffb4451ee281a00fa9477dd",
"raw": {
"accepts": [
{
"amount": "5000000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0x837C40E2B4e976f43Ffb4451eE281A00fA9477dd",
"scheme": "exact"
},
{
"amount": "5000000",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "BFK9TLC3edb13K6v4YyH3DwPb5DSUpkWvb7XnqCL9b4F"
},
"maxTimeoutSeconds": 300,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "J1K4mdbvXEbJLRKpgxFcA7s66LWMCYHu71ye6Hz2icSh",
"scheme": "exact"
}
],
"description": "MCP server security scan: probe any MCP endpoint's initialize handshake and tools/list and report whether it requires authentication, which protocol version it speaks, how many tools it exposes and which are not marked read-only. Use it before connecting an agent to an unknown MCP server. Input: url of the MCP endpoint.",
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"url": "https://example.com"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"attribution": [
{
"text": "Translated by Google",
"url": "https://translate.google.com"
}
],
"price_usd": 5,
"provenance": {
"attempts": 1,
"elapsed_ms": 340,
"providers_used": [
"coinbase-advanced-trade-public"
],
"steps": [
{
"ms": 312,
"ok": true,
"provider": "coinbase-advanced-trade-public",
"reason": "provider_timeout",
"step": "quote"
}
]
},
"receipt_id": "rcpt_9f1c2b3a4d5e6f70",
"receipt_url": "/work/receipts/rcpt_9f1c2b3a4d5e6f70",
"result": {
"initialize_status": 200,
"protocol_version": "2025-06-18",
"reachable": true,
"requires_auth": false,
"server_name": "example-mcp",
"server_version": "1.0.0",
"tool_count": 3,
"tools": [
{
"annotations": {
"readOnlyHint": true
},
"description": "Current weather for a city.",
"name": "get_weather"
}
],
"tools_error": null,
"tools_without_readonly_annotation": [
"delete_records"
],
"url": "https://mcp.example.com/mcp"
},
"status": "ok",
"worker": "security.mcp_inspect"
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"language": {
"maxLength": 35,
"pattern": "^[A-Za-z]{2,3}(-[A-Za-z0-9]{2,8})*$",
"type": "string"
},
"url": {
"type": "string"
}
},
"required": [
"url"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST",
"PUT",
"PATCH"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"attribution": {
"items": {
"properties": {
"text": {
"type": "string"
},
"url": {
"type": "string"
}
},
"required": [
"text",
"url"
],
"type": "object"
},
"type": "array"
},
"billing_warning": {
"type": "string"
},
"price_usd": {
"type": "number"
},
"provenance": {
"properties": {
"attempts": {
"type": "integer"
},
"elapsed_ms": {
"type": "integer"
},
"providers_used": {
"items": {
"type": "string"
},
"type": "array"
},
"steps": {
"items": {
"properties": {
"ms": {
"type": "integer"
},
"ok": {
"type": "boolean"
},
"provider": {
"type": "string"
},
"reason": {
"type": "string"
},
"step": {
"type": "string"
}
},
"required": [
"step",
"ok",
"ms"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"steps",
"providers_used",
"attempts",
"elapsed_ms"
],
"type": "object"
},
"receipt_id": {
"type": "string"
},
"receipt_url": {
"type": "string"
},
"result": {
"properties": {
"initialize_status": {
"type": "integer"
},
"protocol_version": {
"type": [
"string",
"null"
]
},
"reachable": {
"type": "boolean"
},
"requires_auth": {
"type": "boolean"
},
"server_name": {
"type": [
"string",
"null"
]
},
"server_version": {
"type": [
"string",
"null"
]
},
"tool_count": {
"type": "integer"
},
"tools": {
"items": {
"properties": {
"annotations": {
"type": [
"object",
"null"
]
},
"name": {
"type": [
"string",
"null"
]
}
},
"required": [
"name"
],
"type": "object"
},
"type": "array"
},
"tools_error": {
"type": [
"string",
"null"
]
},
"tools_without_readonly_annotation": {
"items": {
"type": "string"
},
"type": "array"
},
"url": {
"type": "string"
}
},
"required": [
"url",
"reachable",
"requires_auth",
"initialize_status",
"tool_count",
"tools",
"tools_without_readonly_annotation"
],
"type": "object"
},
"status": {
"const": "ok",
"type": "string"
},
"worker": {
"type": "string"
}
},
"required": [
"status",
"worker",
"price_usd",
"result",
"provenance",
"receipt_id",
"receipt_url"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-10-01T05:00:10.243Z",
"quality": {
"l30DaysTotalCalls": 1,
"l30DaysUniquePayers": 1,
"lastCalledAt": "2026-10-01T05:00:10.072Z"
},
"resource": "https://hubvibe-io.com/work/security/mcp_inspect",
"serviceName": "HubVibe",
"tags": [
"mcp",
"security",
"audit",
"agent-safety",
"scanner"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "MCP server security scan: probe any MCP endpoint's initialize handshake and tools/list and report whether it requires authentication, which protocol version it speaks, how many tools it exposes and which are not marked read-only. Use it before connecting an agent to an unknown MCP server. Input: url of the MCP endpoint."
}What the leaf hashes
{"body":"89b1f26a68e7f059dd4b7535768b01f79e0a62994f1f7eb9f43bfdc94bbaa72f","id":76541,"kind":"listing","method":"baseline/1","observed_us":1793025492417590,"prev":null,"subject":"x402_bazaar:https://hubvibe-io.com/work/security/mcp_inspect","subject_kind":"source_record"}Proof
Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.