Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
作者提供的说明(英文原文)
Deterministic code security scan + tx preflight, paid in USDC via x402.
这三项永远不会合并成一个分数:意见、测量和人气是不同的东西。
我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。
选择你使用的 AI 应用,然后复制设置。
你需要
你用的是哪个应用?
在上方选择你的应用。我们会记住它,下次按钮会显示“安装到 …”。
适用于网页版、桌面版和手机版 Claude:
https://scanpay-ob3w.onrender.com/mcp在终端中运行这条命令
claude mcp add --transport http scanpay https://scanpay-ob3w.onrender.com/mcp粘贴到项目中的 .cursor/mcp.json,或 ~/.cursor/mcp.json
{
"mcpServers": {
"scanpay": {
"url": "https://scanpay-ob3w.onrender.com/mcp"
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
粘贴到项目中的 .vscode/mcp.json
{
"servers": {
"scanpay": {
"type": "http",
"url": "https://scanpay-ob3w.onrender.com/mcp"
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
ChatGPT 只能连接互联网上的服务器:
https://scanpay-ob3w.onrender.com/mcp菜单名称可能因套餐和版本不同而略有差异。
你的选择通过 Cookie 保存在这台设备上,无需账户。
这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同,请以 README 为准。
工具名称和描述与服务器在 2026年11月7日 报告的完全一致。这些内容由作者撰写,不是我们写的;我们以纯文本形式显示。
scan_codeUse before shipping or executing agent-generated code. Deterministic AST scan for Python, JavaScript and TypeScript with 65 rules (36 Python, 29 JS/TS) covering injection, hardcoded secrets, wallet key exfiltration, SSRF, infinite x402 payment loops and unsimulated Solana transac
scan_quickCheapest way to check a snippet before running it: one deterministic AST pass over Python, JavaScript or TypeScript, returning severity-ranked findings and a PASS/WARN/BLOCK verdict without patches or diffs. 65 rules, about 0.2 ms. Pay per call: 0.02 Base USDC or 0.00015 SOL over
simulate_txPre-flight transaction & drainer shield for AI agents. Simulates and inspects EVM (Base/Ethereum) and Solana transactions before signing or broadcasting. Detects unlimited approvals, known drainers, honeypots, MEV sandwich exposure (min_output=0), and unauthorized Solana authorit
audit_tokenLive on-chain token & smart contract rug-pull / honeypot shield for Base, Ethereum, and Solana. Inspects live EVM bytecode (blacklist selectors, mutable tax fees, pause toggles, unverified proxies) and Solana SPL / Token-2022 mint accounts (active mint authority, freeze authority
scrape_urlAnti-bot web access & scraper oracle for AI agents. Fetches web pages with stealth headers to bypass Cloudflare Turnstile, WAFs, and anti-bot challenges. Purifies HTML by removing scripts, stylesheets, tracking pixels, ads, and navigation boilerplate, returning clean, token-effic
create_session_depositActivate a prepaid session voucher (0.006 SOL or 0.85 Base USDC for 10 operations). Eliminates per-request payment prompts and RPC latency in autonomous agent loops.
health_checkCheck ScanPay engine health, available AST rules, and x402 payment configurations.
我们检查的是任何人都能看到的信息;我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月7日
注册名称已通过 GitHub 账户 Misterio070 验证,该账户拥有此仓库
我们还没有从 GitHub 读取这个仓库
我们还没有从 GitHub 读取这个仓库
在 468 毫秒内响应(HTTP 200)
无需登录
已读取 7 个工具描述,未发现针对 AI 的隐藏指令
与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时,星标数才计入。
它在 3 项适用的基础检查中通过了 3 项。我们没有阅读代码。在添加密钥或令牌之前,请先看看这个服务器要求哪些权限,并使用只具备所需权限的密钥。
注册中心没有列出必需的密钥,不过有些服务器会在首次使用时要求你登录。
它在作者的云端运行。通过互联网连接,无需安装,但你发送的内容会经过作者的服务器。
GitHub 仓库最后更新于–,最新版本(1.2.0)于10天前进入注册中心。
支持 MCP 的应用,例如 Claude Desktop、Claude Code、Cursor 和 VS Code。它通过 URL 连接,所以接受远程 MCP 服务器的应用也可以使用,例如开启开发者模式的 ChatGPT。
同一分类中有:Spec Driven Development, Remote Desktop Commander, Starreel
同一分类中其他作者的服务器,按星标数排序。
如何看卡片:★ GitHub 星标i三大支柱:评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Turn a script into a finished, downloadable short-drama episode — via MCP or REST.
按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。
ScanPay is an autonomous security guardrail and oracle infrastructure suite designed specifically for the Agent-to-Agent (A2A) and Machine-to-Machine (M2M) economy with x402 v2 micropayments.
https://scanpay-ob3w.onrender.comhttps://scanpay-ob3w.onrender.com/mcp (HTTP) / https://scanpay-ob3w.onrender.com/sse (SSE)JDKXvegmW5j4sAJPB6YCA9ffJbN422WLMmCWCcpy1vm40xb295E606F38C363b476FC546c27226B5fBcAAEFA (USDC: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913)| Service | Endpoint | MCP Tool | Pricing (Base USDC / SOL) | Purpose |
|---|---|---|---|---|
| 1. Code Security Scanner | POST /v2/scan | scan_code | $0.10 USDC (0.0007 SOL) | AST vulnerability analysis, deterministic patches, and execution gating (PASS/WARN/BLOCK). |
| 2. Pre-Flight Tx Shield | POST /v2/preflight/simulate | simulate_tx | $0.05 USDC (0.00035 SOL) | Simulates EVM/Solana transactions before broadcast, detecting honeypots, drainers, and MEV slippage traps. |
| 3. Anti-Bot Scraper Oracle | POST /v2/oracle/scrape | scrape_url | $0.02 USDC (0.00015 SOL) | Stealth browser scraping bypassing Cloudflare Turnstile/WAF, returning clean LLM Markdown. |
| 4. 10-Operation Session | POST /v2/session/deposit | create_session_deposit | $0.85 USDC (0.006 SOL) | Prepaid micro-voucher valid across all tools with sub-millisecond latency and 0ms RPC bypass. |
Traditional developer tools output verbose human prose. ScanPay produces structured Machine Responses:
ALLOW or BLOCK booleans with 0-100 risk_score and cryptographic Ed25519 oracle attestations.remediated_code and unified_diff patches ready for git apply.setTrading, blacklist), and Solana SetAuthority account takeovers.Autonomous agent frameworks discover ScanPay automatically via spec-compliant endpoints:
| Endpoint | Standard / Protocol | Purpose |
|---|---|---|
GET /llms.txt | LLMs Discovery Standard | Machine documentation for LLMs, agents, and Cursor |
GET /robots.txt | AI Crawler Standard | Explicit index permissions for GPTBot, Claude-Web, PerplexityBot |
GET /.well-known/x402 | x402 v2 Spec | Protocol discovery, CAIP-2 network, multi-chain pricing & endpoints |
GET /bazaar.json | Coinbase CDP / Onyx Bazaar | Registry catalog with extensions.bazaar.discoverable: true |
GET /.well-known/mcp.json | Model Context Protocol | Remote MCP manifest with 5 registered tools |
GET /.well-known/agent-card.json | ERC-8004 / ERC-8183 | Agent identity card declaring Oracle capabilities |
GET /.well-known/ai-plugin.json | OpenAI Plugin Standard | OpenAPI integration manifest for autonomous function callers |
GET /SKILL.md | Agent Skills | Native instructions for Claude Code, Hermes, and Codex |
GET /PAY.md | Multi-Chain Settlement | Settlement routes, recipient wallets, and spend caps |
POST /mcp & GET /sse | MCP Remote Transports | Stateless JSON-RPC tool invocation over HTTP & SSE |
ScanPay runs as a native remote streamable MCP server.
npx github:Misterio070/scanpay
{
"mcpServers": { "scanpay": { "url": "https://scanpay-ob3w.onrender.com/sse" } } }
packages/agentkit-action-scanpay (@scanpay/agentkit-action)packages/plugin-solana-agent-kit (@scanpay/plugin-solana-agent-kit)packages/plugin-elizaos (@elizaos/plugin-scanpay)packages/scanpay-guardrail/scanpay-hook.py (Claude Code PreToolUse hook, OpenCode, Codex, LangGraph)contracts/ScanPayEvaluatorV2.sol (Base ERC-8004 Validation Registry bridge)# Run 125+ automated unit and integration tests
python3 -m pytest
MIT © Alex Taghiashvili