Skip to content

FHI MCP Server Security Audit

by polished-truth-c514.fhi-llc-1118.workers.dev · remote · no sign-in to list tools · v1.4.0 · published by dev.workers.fhi-llc-1118.polished-truth-c514

Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.

Final · 2Changes · 5
CompareRegistry entry

7 tools: 2 do something that can't be undone and 5 change things.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http fhi-x402-security-tools https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Can't be undone 2Claude Code: ask
  • mcp_payment_preflightMCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, filesystem, or wallet…No findings

    Why it is in this group

    • The name "mcp_payment_preflight" says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    MCP server security audit before an agent connects or pays: probes initialize and tools/list, then returns an ALLOW, CAUTION, or BLOCK risk score for command, filesystem, or wallet capabilities; prompt-injection or data-exfiltration signals; permissive JSON-schema inputs; missing HSTS; and a large tool surface. Does not execute tools. ($0.01 USDC on Base)
  • payment_infoFree guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices.No findings

    Why it is in this group

    • The name "payment_info" says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Free guide to the FHI MCP tools, Base-USDC x402 payment flow, and per-tool prices.
Changes things 5Claude Code: ask
  • domain_change_evidenceStateful DNS, CAA, and certificate-transparency monitoring for a public domain.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Stateful DNS, CAA, and certificate-transparency monitoring for a public domain. The first call establishes a baseline; later calls return evidence changes and certificate-expiry signals. ($0.01 USDC on Base)
  • mcp_change_evidenceStateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Stateful live remote-MCP monitor for tool-rug-pull and tool-poisoning risk. Establishes an endpoint baseline, then detects added or removed tools, altered tool descriptions, risk-score changes, and newly observed high-risk capability signals before an agent reconnects or pays. Unlike a manifest diff, it fetches the live endpoint and retains the prior observation. ($0.003 USDC on Base)
  • mcp_vendor_due_diligenceOne decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, plus optional SEC ma…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    One decision-ready due-diligence dossier before an agent adopts or pays an MCP vendor: live MCP metadata and tool-risk preflight, DNS/CAA/certificate evidence, plus optional SEC material-filing evidence for a public company. Does not execute vendor tools or certify safety. ($0.10 USDC on Base)
  • package_install_preflightnpm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories.No findings

    Why it is in this group

    • The name "package_install_preflight" says "install": a word for a change.
    Description, as the server wrote it
    npm or PyPI install preflight: blocks missing packages, detects near-name typosquats when an expected name is supplied, and checks OSV advisories. ($0.003 USDC on Base)
  • sec_material_event_deltaNew SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    New SEC 8-K, 6-K, and late-filing evidence since a cursor date; accepts a ticker or CIK. ($0.01 USDC on Base)

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.4.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http fhi-x402-security-tools https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [],
    "ask": [
      "mcp__fhi-x402-security-tools__payment_info",
      "mcp__fhi-x402-security-tools__domain_change_evidence",
      "mcp__fhi-x402-security-tools__package_install_preflight",
      "mcp__fhi-x402-security-tools__sec_material_event_delta",
      "mcp__fhi-x402-security-tools__mcp_payment_preflight",
      "mcp__fhi-x402-security-tools__mcp_change_evidence",
      "mcp__fhi-x402-security-tools__mcp_vendor_due_diligence"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as fhi-x402-security-tools. Review it before you use it.