FHI MCP Server Security Audit
Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.
사용해야 할까요
품질 및 안전성
발견 사항 (2)
- LOWTool 'payment_info' description lacks action verbpayment_info에서
- LOWTool 'sec_material_event_delta' description lacks action verbsec_material_event_delta에서
도구 정의와 프로토콜 준수에 대한 자동 분석을 기반으로 합니다.
컨텍스트 비용
이는 서버의 도구가 모델의 컨텍스트에 로드될 때마다 소비되는 대략적인 토큰 수입니다. 수치가 높을수록 다른 작업에 사용할 수 있는 주의가 줄어듭니다.
설치
원클릭 설치
`claude_desktop_config.json` 파일에 다음을 추가하세요:
{
"mcpServers": {
"fhi-x402-security-tools": {
"url": "https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp"
}
}
}원격 엔드포인트
https://polished-truth-c514.fhi-llc-1118.workers.dev/mcpstreamable-http할 수 있는 일
도구 목록
도구 (6)
⚪payment_info
Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices.
입력 스키마
{
"type": "object",
"properties": {}
}🟡domain_change_evidence(domain)
Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and certificate-expiry signals. ($0.01 USDC on Base)
입력 스키마
{
"type": "object",
"properties": {
"domain": {
"type": "string",
"minLength": 1
}
},
"required": [
"domain"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}⚪package_install_preflight(ecosystem, name, version, expectedName)
npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.01 USDC on Base)
입력 스키마
{
"type": "object",
"properties": {
"ecosystem": {
"type": "string",
"enum": [
"npm",
"PyPI"
]
},
"name": {
"type": "string",
"minLength": 1
},
"version": {
"type": "string"
},
"expectedName": {
"type": "string"
}
},
"required": [
"ecosystem",
"name"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}⚪sec_material_event_delta(cik, ticker, since)
New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)
입력 스키마
{
"type": "object",
"properties": {
"cik": {
"type": "string"
},
"ticker": {
"type": "string"
},
"since": {
"type": "string",
"minLength": 1
}
},
"required": [
"since"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}⚪mcp_payment_preflight(serverUrl)
MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, filesystem, or wallet capabilities; prompt-injection or data-exfiltration signals; permissive JSON-schema inputs; missing HSTS; and a large tool surface. Does not execute tools. ($0.01 USDC on Base)
입력 스키마
{
"type": "object",
"properties": {
"serverUrl": {
"type": "string",
"format": "uri"
}
},
"required": [
"serverUrl"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}⚪mcp_vendor_due_diligence(mcpUrl, ticker, cik, since)
One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, plus optional SEC material-filing evidence for a public company. Does not execute vendor tools or certify safety. ($0.10 USDC on Base)
입력 스키마
{
"type": "object",
"properties": {
"mcpUrl": {
"type": "string",
"format": "uri"
},
"ticker": {
"type": "string"
},
"cik": {
"type": "string"
},
"since": {
"type": "string"
}
},
"required": [
"mcpUrl"
],
"additionalProperties": false,
"$schema": "http://json-schema.org/draft-07/schema#"
}커뮤니티
증거