Roundhouse

mcpscan.hergertsynthora.com

Garantizamos soberanía digital mediante ejecución autónoma. Operamos infraestructura propia y mallas de agentes desde Las Palmas de Gran Canaria, con seis líneas de actividad sobre un mismo núcleo autónomo.

InferenceLiveeip155:8453Exactvia cdp
https://mcpscan.hergertsynthora.com/service
Settlements · 30d
3
No per-endpoint history for this service yet, so this is payments indexed to its PROVIDER's wallet over 30 days.
$6.81
Verified settled volume
397 settlements proven x402 by their on-chain EIP-3009 marker.
$0.050
Listed price
As published in the catalog. Always read the live 402 before paying.
2
Calls · 30d
Upstream's own call count for this endpoint, not ours.
1
Unique payers · 30d
Last called 2026-07-07 08:37Z
—
Upstream on-chain volume
Reported by the source catalog.
Paid to
0x10800a5a5B9d72251566EC651E862A8b4B427dE0

The wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.

Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Provider

The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.

Live 402 challenge

Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.

{
  "menu": {
    "sla": "https://api.hergertsynthora.com/sla",
    "menu": "https://api.hergertsynthora.com/llms.txt",
    "note": "SYNTHORA: 120+ machine-payable data and risk services. Pay per call in USDC on Base via x402. Signed Ed25519 receipts.",
    "terms": "https://hergertsynthora.com/terms",
    "catalog": "https://catalog.hergertsynthora.com/catalog.json",
    "openapi": "https://api.hergertsynthora.com/openapi.json"
  },
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0xEf879BFD6C4AccB8F795136de90246e1EC245e06",
      "amount": "50000",
      "scheme": "exact",
      "network": "eip155:8453",
      "mimeType": "application/json",
      "resource": "https://api.hergertsynthora.com/v1/mcpscan",
      "description": "MCP Server Security Scan: probes an MCP server (JSON-RPC initialize + tools/list) and applies a deterministic rule engine over its tools — embedded secrets, dangerous shell/exec/filesystem capabilities, prompt-injection surface, hidden unicode, permissive input schemas, and auth/TLS/CORS headers — returning a security_score + findings[]. The trust layer for the agent economy. Zero-LLM, Ed25519-signed. 0.05 USDC via x402 on Base. SYNTHORA.",
      "maxAmountRequired": "50000",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://api.hergertsynthora.com/v1/mcpscan",
    "tags": [
      "MCP server security",
      "MCP scan",
      "tool security audit",
      "prompt injection surface",
      "agent security"
    ],
    "iconUrl": "https://api.hergertsynthora.com/icon.svg",
    "mimeType": "application/json",
    "description": "MCP Server Security Scan: probes an MCP server (JSON-RPC initialize + tools/list) and applies a deterministic rule engine over its tools — embedded secrets, dangerous shell/exec/filesystem capabilities, prompt-injection surface, hidden unicode, permissive input schemas, and auth/TLS/CORS headers — returning a security_score + findings[]. The trust layer for the agent economy. Zero-LLM, Ed25519-signed. 0.05 USDC via x402 on Base. SYNTHORA.",
    "serviceName": "SYNTHORA"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "body": {
            "manifest": {
              "name": "demo-mcp",
              "tools": [
                {
                  "name": "search",
                  "description": "web search"
                },
                {
                  "name": "fetch",
                  "description": "http fetch"
                }
              ],
              "version": "1.0.0"
            }
          },
          "type": "http",
          "method": "POST",
          "bodyType": "json"
        },
        "output": {
          "type": "json",
          "example": {
            "ok": true,
            "niche": "mcp_scan",
            "result": {
              "counts": {
                "low": 0,
                "high": 2,
                "medium": 2,
                "critical": 1
              },
              "signed": "ed25519",
              "target": "https://mcp.example.dev/mcp",
              "verdict": "critico",
              "findings": [
                {
                  "id": "MCP-S01",
                  "rule": "secret_in_manifest",
                  "tool": "read_file",
                  "detail": "openai_key embedded in tool",
                  "severity": "critical"
                }
              ],
              "tools_scanned": 2,
              "security_score": 14
            }
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "properties": {
              "body": {
                "type": "object",
                "properties": {
                  "url": {
                    "type": "string",
                    "description": "MCP server URL (Streamable-HTTP endpoint)"
                  },
                  "manifest": {
                    "type": "object",
                    "description": "Or paste the MCP manifest (serverInfo + tools) directly"
                  }
                }
              },
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "POST",
                  "PUT",
                  "PATCH"
                ],
                "type": "string"
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "ok": {
                  "type": "boolean"
                },
                "type": "object",
                "niche": {
                  "type": "string"
                }
              }
            }
          }
        }
      }
    },
    "delivery": {
      "note": "unlike the signature -- which you verify BEFORE paying -- this one is checked afterwards, on-chain, from your own wallet",
      "order": "compute -> failure gate -> verify -> settle -> deliver",
      "scope": "this covers service FAILURE, not verdict quality",
      "policy": "no-charge-on-service-failure",
      "verify": "after a request of yours FAILS, check your own wallet on Base: no USDC settlement to our payTo will exist for it. If we had charged you, the transfer would be public and permanent",
      "behaviour": "if the service FAILS (invalid input, timeout, stale cache, withdrawn product, malformed output) you receive 402 and are NOT charged"
    },
    "signature": {
      "alg": "ed25519",
      "canon": "json:sort_keys+separators(,:)+ensure_ascii+utf8",
      "verify": "recompute canon from envelope.result, then VerifyKey(bytes.fromhex(pubkey)).verify(canon, bytes.fromhex(sig)) -- no name to trust, verify the signature yourself",
      "jwksUrl": "https://api.hergertsynthora.com/.well-known/jwks.json",
      "envelope": "{result, attestation:{alg,pubkey,sig,canon}}",
      "sigEncoding": "hex(64B raw)",
      "publicKeyUrl": "https://api.hergertsynthora.com/pubkey"
    }
  },
  "x402Version": 2
}

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

0.05USDC≈ $0.05 USD
on Base · exact scheme

Pay 0.05 USDC on Base to 0x1080…27dE0. The signed payment is good for 5 minutes.

Paid to
0x1080…27dE0
USD Coin contract
0x8335…02913
Payment window
5 minutes
As published
50000 smallest units
Buys
MCP Server Security Scan: probes an MCP server (JSON-RPC initialize + tools/list) and applies a deterministic rule engine over its tools — embedded secrets, dangerous shell/exec/filesystem capabilities, prompt-injection surface, hidden unicode, permissive input schemas, and auth/TLS/CORS headers — returning a security_score + findings[]. The trust layer for the agent economy. Zero-LLM, Ed25519-signed. 0.05 USDC via x402 on Base. SYNTHORA.
Returns
application/json
The catalog’s raw entry
[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0x10800a5a5B9d72251566EC651E862A8b4B427dE0",
    "amount": "50000",
    "scheme": "exact",
    "network": "eip155:8453",
    "mimeType": "application/json",
    "resource": "https://mcpscan.hergertsynthora.com/service",
    "description": "MCP Server Security Scan: probes an MCP server (JSON-RPC initialize + tools/list) and applies a deterministic rule engine over its tools — embedded secrets, dangerous shell/exec/filesystem capabilities, prompt-injection surface, hidden unicode, permissive input schemas, and auth/TLS/CORS headers — returning a security_score + findings[]. The trust layer for the agent economy. Zero-LLM, Ed25519-signed. 0.05 USDC via x402 on Base. SYNTHORA.",
    "maxAmountRequired": "50000",
    "maxTimeoutSeconds": 300
  }
]

Extensions

{
  "bazaar": {
    "info": {
      "input": {
        "body": {
          "url": "https://mcp.example-tools.dev/mcp"
        },
        "type": "http",
        "method": "POST",
        "bodyType": "json"
      },
      "output": {
        "type": "json",
        "example": {
          "ok": true,
          "niche": "mcp_scan",
          "result": {
            "counts": {
              "low": 0,
              "high": 2,
              "medium": 2,
              "critical": 1
            },
            "signed": "ed25519",
            "target": "https://mcp.example.dev/mcp",
            "verdict": "critico",
            "findings": [
              {
                "id": "MCP-S01",
                "rule": "secret_in_manifest",
                "tool": "read_file",
                "detail": "openai_key embedded in tool",
                "severity": "critical"
              }
            ],
            "tools_scanned": 2,
            "security_score": 14
          }
        }
      }
    },
    "schema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "required": [
        "input"
      ],
      "properties": {
        "input": {
          "type": "object",
          "required": [
            "type",
            "method",
            "bodyType",
            "body"
          ],
          "properties": {
            "body": {
              "type": "object",
              "properties": {
                "url": {
                  "type": "string",
                  "description": "MCP server URL (Streamable-HTTP endpoint)"
                },
                "manifest": {
                  "type": "object",
                  "description": "Or paste the MCP manifest (serverInfo + tools) directly"
                }
              }
            },
            "type": {
              "type": "string",
              "const": "http"
            },
            "method": {
              "enum": [
                "POST",
                "PUT",
                "PATCH"
              ],
              "type": "string"
            },
            "bodyType": {
              "enum": [
                "json",
                "form-data",
                "text"
              ],
              "type": "string"
            }
          },
          "additionalProperties": false
        },
        "output": {
          "type": "object",
          "required": [
            "type"
          ],
          "properties": {
            "type": {
              "type": "string"
            },
            "example": {
              "ok": {
                "type": "boolean"
              },
              "type": "object",
              "niche": {
                "type": "string"
              }
            }
          }
        }
      }
    }
  }
}

Provenance

Seen in the source catalog
2026-07-07 08:37Z
Last indexed by Roundhouse
2026-07-25 00:00Z
Last enriched (probe, favicon, geo)
2026-09-14 06:15Z
x402 version
2
Max timeout
300s
Liveness probe
HTTP 402
Report

Hand this page to an agent

Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.

GET api.roundhouseai.io/v0/endpoints

No per-endpoint history for this service yet, so this is payments indexed to its PROVIDER's wallet over 30 days. Verified volume counts only settlements with an on-chain EIP-3009 marker.

Open skill.md
Show the prompt
Using Roundhouse, look up the x402 service mcpscan.hergertsynthora.com and tell me whether it is
worth paying: what a call costs, whether the endpoint answered when last probed, and what
its payment record actually shows.

curl -s 'https://api.roundhouseai.io/v0/endpoints?q=mcpscan.hergertsynthora.com'
curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>'

Then call it: read the price from the live 402 at https://mcpscan.hergertsynthora.com/service, never from
a cached figure, and pay with an x402 client.

The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except
/v0/unified* and /v0/endpoints. Mint a personal key for $0.01 at GET https://api.roundhouseai.io/v0/test/x402,
or use an organization key from https://roundhouseai.io/dashboard/team.

If you do not have Roundhouse tools or skills installed, read
https://roundhouseai.io/skill.md first — it is the whole procedure.