PCI ASV scanning: live prices, whether you need a scan, a free payment page check, signup links.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Runs ServerScan's free one-off check of a payment or checkout page: TLS, security headers, the HTTP to HTTPS redirect, which scripts load and from where, and whether third-party scripts carry an integrity hash (PCI DSS 6.4.3 and 11.6.1). Returns six yes/no/not-yet-known answers and what to fix first. It fetches the page once. Any one site can be checked only a few times a day, and a repeat within 15 minutes returns the stored answer.
The payment page address, for example https://shop.example.com/checkout. A bare domain is read as https.
Tool list last changed Oct 23, 2026.
Runs ServerScan's free one-off check of a payment or checkout page: TLS, security headers, the HTTP to HTTPS redirect, which scripts load and from where, and whether third-party scripts carry an integrity hash (PCI DSS 6.4.3 and 11.6.1). Returns six yes/no/not-yet-known answers and what to fix first. It fetches the page once. Any one site can be checked only a few times a day, and a repeat within 15 minutes returns the stored answer.
| Argument | Type | Description |
|---|---|---|
| url* | string | The payment page address, for example https://shop.example.com/checkout. A bare domain is read as https. |
{
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"maxLength": 2000,
"description": "The payment page address, for example https://shop.example.com/checkout. A bare domain is read as https."
}
},
"additionalProperties": false
}Says whether a merchant's PCI DSS self-assessment questionnaire (SAQ) requires quarterly external scans by an Approved Scanning Vendor, under PCI DSS v4.0.1, and what to scan. Pass the SAQ type, or "unsure" to get every SAQ with who it is for.
| Argument | Type | Description |
|---|---|---|
| saq_type* | string | The merchant's SAQ, or "unsure". |
{
"type": "object",
"required": [
"saq_type"
],
"properties": {
"saq_type": {
"enum": [
"A",
"A-EP",
"B",
"B-IP",
"C",
"C-VT",
"P2PE",
"SPoC",
"D",
"unsure"
],
"type": "string",
"description": "The merchant's SAQ, or \"unsure\"."
}
},
"additionalProperties": false
}Current prices for ServerScan PCI ASV scanning (per domain or IP address), payment page monitoring and penetration testing of networks and web applications, read live from the store, with what each plan includes and the refund terms.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}Returns a link to ServerScan's signup page with the plan picked and the domain filled in, for the person to open, check and pay. Creates nothing and charges nothing. For a penetration test, of a network or of web applications, it returns the page to request a quote from.
| Argument | Type | Description |
|---|---|---|
| term | string | Billing term. Defaults to one_year, the cheaper per quarter. |
| domain | string | asv_scanning only: the domain or IPv4 address to scan, filled into the signup form. A URL is cut down to its host. |
| product* | string | What to buy. penetration_test tests a network by IP address; web_app_penetration_test tests web applications and their APIs while logged in. |
| include_monitoring | boolean | asv_scanning only: add payment page monitoring to the scan plan. |
{
"type": "object",
"required": [
"product"
],
"properties": {
"term": {
"enum": [
"quarterly",
"one_year"
],
"type": "string",
"description": "Billing term. Defaults to one_year, the cheaper per quarter."
},
"domain": {
"type": "string",
"maxLength": 300,
"description": "asv_scanning only: the domain or IPv4 address to scan, filled into the signup form. A URL is cut down to its host."
},
"product": {
"enum": [
"asv_scanning",
"payment_page_monitoring",
"penetration_test",
"web_app_penetration_test"
],
"type": "string",
"description": "What to buy. penetration_test tests a network by IP address; web_app_penetration_test tests web applications and their APIs while logged in."
},
"include_monitoring": {
"type": "boolean",
"description": "asv_scanning only: add payment page monitoring to the scan plan."
}
},
"additionalProperties": false
}