Deterministic OFAC, homoglyph, prompt, SSRF, secret, and git diff screening via Base USDC x402.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Inspect EdgeScreen health, version, active OFAC snapshot size, and x402 pricing (free, no payment required).
This tool takes no arguments.
Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.
Run in a terminal
claude mcp add --transport http edgescreen https://aso-x402-screen.asostudio.workers.dev/mcp
Tool list last changed Nov 13, 2026.
Inspect EdgeScreen health, version, active OFAC snapshot size, and x402 pricing (free, no payment required).
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}OFAC SDN crypto wallet sanctions screening for EVM, Bitcoin, and TRON addresses in <1ms. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
| Argument | Type | Description |
|---|---|---|
| address | string | Single crypto address shorthand (EVM 0x..., Bitcoin 1.../3.../bc1..., TRON T...) to screen against OFAC SDN. |
| addresses | array | Crypto addresses (EVM 0x..., Bitcoin 1.../3.../bc1..., TRON T...) to screen against OFAC SDN. |
{
"type": "object",
"properties": {
"address": {
"type": "string",
"description": "Single crypto address shorthand (EVM 0x..., Bitcoin 1.../3.../bc1..., TRON T...) to screen against OFAC SDN."
},
"addresses": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Crypto addresses (EVM 0x..., Bitcoin 1.../3.../bc1..., TRON T...) to screen against OFAC SDN."
}
},
"additionalProperties": false
}Screen up to 25 crypto addresses (OFAC SDN), domains/handles (IDN homoglyphs), untrusted prompts (prompt injection & tool poisoning), URLs (pre-fetch SSRF firewall), text snippets (secret leak redaction), and/or git diffs (pre-merge patch security) in <1ms. Requires $0.005 (5000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
| Argument | Type | Description |
|---|---|---|
| url | string | Single URL shorthand (up to 2048 chars) to inspect for SSRF, private/metadata IPs, dangerous schemes, credentials, IDN homoglyphs, and open redirects. |
| diff | string | Single unified git diff or PR patch shorthand (up to 16384 chars) to audit for leaked secrets, destructive shell/SQL, CI injection, malicious lifecycle hooks, SSRF/private IPs, auth/TLS bypass, Trojan Source Unicode, and corrupt hunk counts. |
| text | string | Alias for `secret`: single text/log/PR snippet (up to 8192 chars) to scan & redact for leaked secrets. |
| urls | array | URLs (up to 2048 chars each) to pre-screen before fetch for SSRF (loopback, RFC1918, CGNAT, IPv6 mapped/local, cloud metadata, hex/octal/decimal IP encodings), non-HTTP(S) schemes, credentials, punycode homoglyphs, and open redirects. |
| brand | any | Target brand for deterministic homoglyph, Punycode, and typosquatting comparison. |
| diffs | array | Unified git diffs or PR patches (up to 16384 chars each) to pre-screen before git apply / PR merge. |
Deterministic pre-merge git diff & PR patch auditor detecting leaked secrets in added lines, destructive shell/SQL commands, GitHub Actions/CI workflow injection, malicious package lifecycle hooks, SSRF & cloud metadata endpoints, auth/TLS verification bypasses, Trojan Source BiDi Unicode smuggling, and corrupt hunk counts. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
| Argument | Type | Description |
|---|---|---|
| diff | string | Single unified git diff or PR patch shorthand (up to 16384 chars) to audit for leaked secrets, destructive shell/SQL, CI injection, malicious lifecycle hooks, SSRF/private IPs, auth/TLS bypass, Trojan Source Unicode, and corrupt hunk counts. |
| diffs | array | Unified git diffs or PR patches (up to 16384 chars each) to pre-screen before git apply / PR merge. |
| patch | string | Alias for `diff`: single unified git diff or patch snippet (up to 16384 chars) to audit. |
| patches | array | Alias for `diffs`: array of unified git diffs or patch snippets (up to 16384 chars each) to audit. |
{
"type": "object",
"properties": {
"diff": {
"type": "string",
"maxLength": 16384,
"description": "Single unified git diff or PR patch shorthand (up to 16384 chars) to audit for leaked secrets, destructive shell/SQL, CI injection, malicious lifecycle hooks, SSRF/private IPs, auth/TLS bypass, Trojan Source Unicode, and corrupt hunk counts."
},
"diffs": {
"type": "array",
"items": {
"type": "string",
"maxLength": 16384
},
"maxItems": 25,
"description": "Unified git diffs or PR patches (up to 16384 chars each) to pre-screen before git apply / PR merge."
},
"patch": {
"type": "string",
"maxLength": 16384,
"description": "Alias for `diff`: single unified git diff or patch snippet (up to 16384 chars) to audit."
},
"patches": {
"type": "array",
"items": {
"type": "string",
"maxLength": 16384
},
"maxItems": 25,
"description": "Alias for `diffs`: array of unified git diffs or patch snippets (up to 16384 chars each) to audit."
}
},
"additionalProperties": false
}Deterministic IDN Punycode, Unicode UTS #39 homoglyph, and typosquatting lookalike detection for domains and handles. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
| Argument | Type | Description |
|---|---|---|
| brand* | any | Target brand for deterministic homoglyph, Punycode, and typosquatting comparison. |
| domain | string | Single candidate domain shorthand (ASCII, Unicode IDN, or Punycode xn--...) to inspect. |
| handle | string | Single candidate social handle shorthand (@handle or bare handle) to inspect. |
| domains | array | Candidate domains (ASCII, Unicode IDN, or Punycode xn--...) to inspect. |
| handles | array | Candidate social handles (@handle or bare handle) to inspect. |
| candidate | string | Single candidate domain or social handle shorthand to auto-classify and inspect. |
| candidates | array | Mixed candidate domains or social handles to auto-classify and inspect. |
| officialDomains | array |
Deterministic prompt-injection, MCP tool-poisoning, Unicode tag smuggling, and secret exfiltration firewall. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
| Argument | Type | Description |
|---|---|---|
| prompt | string | Single untrusted prompt, MCP tool description, or fetched text (up to 4096 chars) to scan. |
| prompts | array | Untrusted prompts, MCP tool descriptions, or fetched texts (up to 4096 chars each) to scan for prompt injection, tool poisoning, Unicode tag smuggling, and secret exfiltration. |
{
"type": "object",
"properties": {
"prompt": {
"type": "string",
"maxLength": 4096,
"description": "Single untrusted prompt, MCP tool description, or fetched text (up to 4096 chars) to scan."
},
"prompts": {
"type": "array",
"items": {
"type": "string",
"maxLength": 4096
},
"maxItems": 25,
"description": "Untrusted prompts, MCP tool descriptions, or fetched texts (up to 4096 chars each) to scan for prompt injection, tool poisoning, Unicode tag smuggling, and secret exfiltration."
}
},
"additionalProperties": false
}Deterministic pre-publish secret leak detector & redactor for PRs, logs, and webhooks (OpenAI, Anthropic, AWS, GitHub, Stripe, Slack, Google keys, PEM & 64-hex private keys, JWTs, Bearer tokens -> safe, riskScore, masked findings, redactedText). Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
| Argument | Type | Description |
|---|---|---|
| text | string | Alias for `secret`: single text/log/PR snippet (up to 8192 chars) to scan & redact for leaked secrets. |
| texts | array | Alias for `secrets`: array of text snippets (up to 8192 chars each) to scan & redact for leaked secrets. |
| secret | string | Single text/log/diff/webhook payload shorthand (up to 8192 chars) to scan & redact for leaked API keys, private keys, JWTs, and Bearer tokens. |
| secrets | array | Text snippets, PR bodies, logs, or webhook payloads (up to 8192 chars each) to scan & redact for leaked API keys (OpenAI, Anthropic, AWS, GitHub, Stripe, Slack, Google), PEM/hex private keys, JWTs, and Bearer tokens. |
{
"type": "object",
"properties": {
"text": {
"type": "string",
"maxLength": 8192,
"description": "Alias for `secret`: single text/log/PR snippet (up to 8192 chars) to scan & redact for leaked secrets."
},
"texts": {
"type": "array",
"items": {
"type": "string",
"maxLength": 8192
},
"maxItems": 25,
"description": "Alias for `secrets`: array of text snippets (up to 8192 chars each) to scan & redact for leaked secrets."
},
"secret": {
"type": "string",
"maxLength": 8192,
"description": "Single text/log/diff/webhook payload shorthand (up to 8192 chars) to scan & redact for leaked API keys, private keys, JWTs, and Bearer tokens."
},
"secrets": {
"type": "array",
"items": {
"type": "string",
"maxLength": 8192
},
"maxItems": 25,
"description": "Text snippets, PR bodies, logs, or webhook payloads (up to 8192 chars each) to scan & redact for leaked API keys (OpenAI, Anthropic, AWS, GitHub, Stripe, Slack, Google), PEM/hex private keys, JWTs, and Bearer tokens."
}
},
"additionalProperties": false
}Deterministic pre-fetch URL & SSRF firewall detecting loopback, RFC1918, CGNAT, IPv6 mapped/unique-local/link-local, AWS/GCP/Azure/Alibaba metadata endpoints, hex/octal/decimal IP encodings, dangerous schemes, embedded credentials, punycode homoglyphs, and open redirects. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
| Argument | Type | Description |
|---|---|---|
| url | string | Single URL shorthand (up to 2048 chars) to inspect for SSRF, private/metadata IPs, dangerous schemes, credentials, IDN homoglyphs, and open redirects. |
| urls | array | URLs (up to 2048 chars each) to pre-screen before fetch for SSRF (loopback, RFC1918, CGNAT, IPv6 mapped/local, cloud metadata, hex/octal/decimal IP encodings), non-HTTP(S) schemes, credentials, punycode homoglyphs, and open redirects. |
{
"type": "object",
"properties": {
"url": {
"type": "string",
"maxLength": 2048,
"description": "Single URL shorthand (up to 2048 chars) to inspect for SSRF, private/metadata IPs, dangerous schemes, credentials, IDN homoglyphs, and open redirects."
},
"urls": {
"type": "array",
"items": {
"type": "string",
"maxLength": 2048
},
"maxItems": 25,
"description": "URLs (up to 2048 chars each) to pre-screen before fetch for SSRF (loopback, RFC1918, CGNAT, IPv6 mapped/local, cloud metadata, hex/octal/decimal IP encodings), non-HTTP(S) schemes, credentials, punycode homoglyphs, and open redirects."
}
},
"additionalProperties": false
}We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 13, 2026.
Takes a password, API key or token as an argument, so the secret passes through the model's context and chat logs.
Fix: Read credentials from the server's own configuration (environment, OAuth) instead of a tool argument.
What changed in this server's tools since we started watching, newest first. Each change is scanned again.
Deterministic pre-merge git diff & PR patch auditor detecting leaked secrets in added lines, destructive shell/SQL commands, GitHub Actions/CI workflow injection, malicious package lifecycle hooks, SSRF & cloud metadata endpoints, auth/TLS verification bypasses, Trojan Source BiDi Unicode smuggling, and corrupt hunk counts. Requires $0.002 (2000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
Screen up to 25 crypto addresses (OFAC SDN), domains/handles (IDN homoglyphs), untrusted prompts (prompt injection & tool poisoning), URLs (pre-fetch SSRF firewall), and/or text snippets (secret leak redaction)redaction), and/or git diffs (pre-merge patch security) in <1ms. Requires $0.005 (5000 atomic) Base USDC on eip155:8453 via x402 PAYMENT-SIGNATURE header.
{
"type": "object",
"properties": {
"url": {
"type": "string",
"maxLength": 2048,
"description": "Single URL shorthand (up to 2048 chars) to inspect for SSRF, private/metadata IPs, dangerous schemes, credentials, IDN homoglyphs, and open redirects."
},
"text": {
"type": "string",
"maxLength": 8192,
"description": "Alias for `secret`: single text/log/PR snippet (up to 8192 chars) to scan & redact for leaked secrets."
},
"urls": {
"type": "array",
"items": {
"type": "string",
"maxLength": 2048
},
"maxItems": 25,
"description": "URLs (up to 2048 chars each) to pre-screen before fetch for SSRF (loopback, RFC1918, CGNAT, IPv6 mapped/local, cloud metadata, hex/octal/decimal IP encodings), non-HTTP(S) schemes, credentials, punycode homoglyphs, and open redirects."
},
"brand": {
"oneOf": [
{
"type": "string",
"maxLength": 64,
"minLength": 2
},
{
"type": "object",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"maxLength": 64,
"minLength": 2
},
"officialDomains": {
"type": "array",
"items": {
"type": "string"
}
},
"officialHandles": {
"type": "array",
"items": {
"type": "string"
}
}
}
}
],
"description": "Target brand for deterministic homoglyph, Punycode, and typosquatting comparison."
},
"texts": {
"type": "array",
"items": {
"type": "string",
"maxLength": 8192
},
"maxItems": 25,
"description": "Alias for `secrets`: array of text snippets (up to 8192 chars each) to scan & redact for leaked secrets."
},
"domain": {
"type": "string",
"description": "Single candidate domain shorthand (ASCII, Unicode IDN, or Punycode xn--...) to inspect."
},
"handle": {
"type": "string",
"description": "Single candidate social handle shorthand (@handle or bare handle) to inspect."
},
"prompt": {
"type": "string",
"maxLength": 4096,
"description": "Single untrusted prompt, MCP tool description, or fetched text (up to 4096 chars) to scan."
},
"secret": {
"type": "string",
"maxLength": 8192,
"description": "Single text/log/diff/webhook payload shorthand (up to 8192 chars) to scan & redact for leaked API keys, private keys, JWTs, and Bearer tokens."
},
"address": {
"type": "string",
"description": "Single crypto address shorthand (EVM 0x..., Bitcoin 1.../3.../bc1..., TRON T...) to screen against OFAC SDN."
},
"domains": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Candidate domains (ASCII, Unicode IDN, or Punycode xn--...) to inspect."
},
"handles": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Candidate social handles (@handle or bare handle) to inspect."
},
"prompts": {
"type": "array",
"items": {
"type": "string",
"maxLength": 4096
},
"maxItems": 25,
"description": "Untrusted prompts, MCP tool descriptions, or fetched texts (up to 4096 chars each) to scan for prompt injection, tool poisoning, Unicode tag smuggling, and secret exfiltration."
},
"secrets": {
"type": "array",
"items": {
"type": "string",
"maxLength": 8192
},
"maxItems": 25,
"description": "Text snippets, PR bodies, logs, or webhook payloads (up to 8192 chars each) to scan & redact for leaked API keys (OpenAI, Anthropic, AWS, GitHub, Stripe, Slack, Google), PEM/hex private keys, JWTs, and Bearer tokens."
},
"addresses": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Crypto addresses (EVM 0x..., Bitcoin 1.../3.../bc1..., TRON T...) to screen against OFAC SDN."
},
"candidate": {
"type": "string",
"description": "Single candidate domain or social handle shorthand to auto-classify and inspect."
},
"candidates": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Mixed candidate domains or social handles to auto-classify and inspect."
},
"officialDomains": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional list of verified official domains for the target brand."
},
"officialHandles": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional list of verified official social handles for the target brand."
}
},
"additionalProperties": false
}| patch | string | Alias for `diff`: single unified git diff or patch snippet (up to 16384 chars) to audit. |
| texts | array | Alias for `secrets`: array of text snippets (up to 8192 chars each) to scan & redact for leaked secrets. |
| domain | string | Single candidate domain shorthand (ASCII, Unicode IDN, or Punycode xn--...) to inspect. |
| handle | string | Single candidate social handle shorthand (@handle or bare handle) to inspect. |
| prompt | string | Single untrusted prompt, MCP tool description, or fetched text (up to 4096 chars) to scan. |
| secret | string | Single text/log/diff/webhook payload shorthand (up to 8192 chars) to scan & redact for leaked API keys, private keys, JWTs, and Bearer tokens. |
| address | string | Single crypto address shorthand (EVM 0x..., Bitcoin 1.../3.../bc1..., TRON T...) to screen against OFAC SDN. |
| domains | array | Candidate domains (ASCII, Unicode IDN, or Punycode xn--...) to inspect. |
| handles | array | Candidate social handles (@handle or bare handle) to inspect. |
| patches | array | Alias for `diffs`: array of unified git diffs or patch snippets (up to 16384 chars each) to audit. |
| prompts | array | Untrusted prompts, MCP tool descriptions, or fetched texts (up to 4096 chars each) to scan for prompt injection, tool poisoning, Unicode tag smuggling, and secret exfiltration. |
| secrets | array | Text snippets, PR bodies, logs, or webhook payloads (up to 8192 chars each) to scan & redact for leaked API keys (OpenAI, Anthropic, AWS, GitHub, Stripe, Slack, Google), PEM/hex private keys, JWTs, and Bearer tokens. |
| addresses | array | Crypto addresses (EVM 0x..., Bitcoin 1.../3.../bc1..., TRON T...) to screen against OFAC SDN. |
| candidate | string | Single candidate domain or social handle shorthand to auto-classify and inspect. |
| candidates | array | Mixed candidate domains or social handles to auto-classify and inspect. |
| officialDomains | array | Optional list of verified official domains for the target brand. |
| officialHandles | array | Optional list of verified official social handles for the target brand. |
{
"type": "object",
"properties": {
"url": {
"type": "string",
"maxLength": 2048,
"description": "Single URL shorthand (up to 2048 chars) to inspect for SSRF, private/metadata IPs, dangerous schemes, credentials, IDN homoglyphs, and open redirects."
},
"diff": {
"type": "string",
"maxLength": 16384,
"description": "Single unified git diff or PR patch shorthand (up to 16384 chars) to audit for leaked secrets, destructive shell/SQL, CI injection, malicious lifecycle hooks, SSRF/private IPs, auth/TLS bypass, Trojan Source Unicode, and corrupt hunk counts."
},
"text": {
"type": "string",
"maxLength": 8192,
"description": "Alias for `secret`: single text/log/PR snippet (up to 8192 chars) to scan & redact for leaked secrets."
},
"urls": {
"type": "array",
"items": {
"type": "string",
"maxLength": 2048
},
"maxItems": 25,
"description": "URLs (up to 2048 chars each) to pre-screen before fetch for SSRF (loopback, RFC1918, CGNAT, IPv6 mapped/local, cloud metadata, hex/octal/decimal IP encodings), non-HTTP(S) schemes, credentials, punycode homoglyphs, and open redirects."
},
"brand": {
"oneOf": [
{
"type": "string",
"maxLength": 64,
"minLength": 2
},
{
"type": "object",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"maxLength": 64,
"minLength": 2
},
"officialDomains": {
"type": "array",
"items": {
"type": "string"
}
},
"officialHandles": {
"type": "array",
"items": {
"type": "string"
}
}
}
}
],
"description": "Target brand for deterministic homoglyph, Punycode, and typosquatting comparison."
},
"diffs": {
"type": "array",
"items": {
"type": "string",
"maxLength": 16384
},
"maxItems": 25,
"description": "Unified git diffs or PR patches (up to 16384 chars each) to pre-screen before git apply / PR merge."
},
"patch": {
"type": "string",
"maxLength": 16384,
"description": "Alias for `diff`: single unified git diff or patch snippet (up to 16384 chars) to audit."
},
"texts": {
"type": "array",
"items": {
"type": "string",
"maxLength": 8192
},
"maxItems": 25,
"description": "Alias for `secrets`: array of text snippets (up to 8192 chars each) to scan & redact for leaked secrets."
},
"domain": {
"type": "string",
"description": "Single candidate domain shorthand (ASCII, Unicode IDN, or Punycode xn--...) to inspect."
},
"handle": {
"type": "string",
"description": "Single candidate social handle shorthand (@handle or bare handle) to inspect."
},
"prompt": {
"type": "string",
"maxLength": 4096,
"description": "Single untrusted prompt, MCP tool description, or fetched text (up to 4096 chars) to scan."
},
"secret": {
"type": "string",
"maxLength": 8192,
"description": "Single text/log/diff/webhook payload shorthand (up to 8192 chars) to scan & redact for leaked API keys, private keys, JWTs, and Bearer tokens."
},
"address": {
"type": "string",
"description": "Single crypto address shorthand (EVM 0x..., Bitcoin 1.../3.../bc1..., TRON T...) to screen against OFAC SDN."
},
"domains": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Candidate domains (ASCII, Unicode IDN, or Punycode xn--...) to inspect."
},
"handles": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Candidate social handles (@handle or bare handle) to inspect."
},
"patches": {
"type": "array",
"items": {
"type": "string",
"maxLength": 16384
},
"maxItems": 25,
"description": "Alias for `diffs`: array of unified git diffs or patch snippets (up to 16384 chars each) to audit."
},
"prompts": {
"type": "array",
"items": {
"type": "string",
"maxLength": 4096
},
"maxItems": 25,
"description": "Untrusted prompts, MCP tool descriptions, or fetched texts (up to 4096 chars each) to scan for prompt injection, tool poisoning, Unicode tag smuggling, and secret exfiltration."
},
"secrets": {
"type": "array",
"items": {
"type": "string",
"maxLength": 8192
},
"maxItems": 25,
"description": "Text snippets, PR bodies, logs, or webhook payloads (up to 8192 chars each) to scan & redact for leaked API keys (OpenAI, Anthropic, AWS, GitHub, Stripe, Slack, Google), PEM/hex private keys, JWTs, and Bearer tokens."
},
"addresses": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Crypto addresses (EVM 0x..., Bitcoin 1.../3.../bc1..., TRON T...) to screen against OFAC SDN."
},
"candidate": {
"type": "string",
"description": "Single candidate domain or social handle shorthand to auto-classify and inspect."
},
"candidates": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Mixed candidate domains or social handles to auto-classify and inspect."
},
"officialDomains": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional list of verified official domains for the target brand."
},
"officialHandles": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional list of verified official social handles for the target brand."
}
},
"additionalProperties": false
}| Optional list of verified official domains for the target brand. |
| officialHandles | array | Optional list of verified official social handles for the target brand. |
{
"type": "object",
"required": [
"brand"
],
"properties": {
"brand": {
"oneOf": [
{
"type": "string",
"maxLength": 64,
"minLength": 2
},
{
"type": "object",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"maxLength": 64,
"minLength": 2
},
"officialDomains": {
"type": "array",
"items": {
"type": "string"
}
},
"officialHandles": {
"type": "array",
"items": {
"type": "string"
}
}
}
}
],
"description": "Target brand for deterministic homoglyph, Punycode, and typosquatting comparison."
},
"domain": {
"type": "string",
"description": "Single candidate domain shorthand (ASCII, Unicode IDN, or Punycode xn--...) to inspect."
},
"handle": {
"type": "string",
"description": "Single candidate social handle shorthand (@handle or bare handle) to inspect."
},
"domains": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Candidate domains (ASCII, Unicode IDN, or Punycode xn--...) to inspect."
},
"handles": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Candidate social handles (@handle or bare handle) to inspect."
},
"candidate": {
"type": "string",
"description": "Single candidate domain or social handle shorthand to auto-classify and inspect."
},
"candidates": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Mixed candidate domains or social handles to auto-classify and inspect."
},
"officialDomains": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional list of verified official domains for the target brand."
},
"officialHandles": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional list of verified official social handles for the target brand."
}
},
"additionalProperties": false
}{
"type": "object",
"properties": {
"url": {
"type": "string",
"maxLength": 2048,
"description": "Single URL shorthand (up to 2048 chars) to inspect for SSRF, private/metadata IPs, dangerous schemes, credentials, IDN homoglyphs, and open redirects."
},
"diff": {
"type": "string",
"maxLength": 16384,
"description": "Single unified git diff or PR patch shorthand (up to 16384 chars) to audit for leaked secrets, destructive shell/SQL, CI injection, malicious lifecycle hooks, SSRF/private IPs, auth/TLS bypass, Trojan Source Unicode, and corrupt hunk counts."
},
"text": {
"type": "string",
"maxLength": 8192,
"description": "Alias for `secret`: single text/log/PR snippet (up to 8192 chars) to scan & redact for leaked secrets."
},
"urls": {
"type": "array",
"items": {
"type": "string",
"maxLength": 2048
},
"maxItems": 25,
"description": "URLs (up to 2048 chars each) to pre-screen before fetch for SSRF (loopback, RFC1918, CGNAT, IPv6 mapped/local, cloud metadata, hex/octal/decimal IP encodings), non-HTTP(S) schemes, credentials, punycode homoglyphs, and open redirects."
},
"brand": {
"oneOf": [
{
"type": "string",
"maxLength": 64,
"minLength": 2
},
{
"type": "object",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"maxLength": 64,
"minLength": 2
},
"officialDomains": {
"type": "array",
"items": {
"type": "string"
}
},
"officialHandles": {
"type": "array",
"items": {
"type": "string"
}
}
}
}
],
"description": "Target brand for deterministic homoglyph, Punycode, and typosquatting comparison."
},
"diffs": {
"type": "array",
"items": {
"type": "string",
"maxLength": 16384
},
"maxItems": 25,
"description": "Unified git diffs or PR patches (up to 16384 chars each) to pre-screen before git apply / PR merge."
},
"patch": {
"type": "string",
"maxLength": 16384,
"description": "Alias for `diff`: single unified git diff or patch snippet (up to 16384 chars) to audit."
},
"texts": {
"type": "array",
"items": {
"type": "string",
"maxLength": 8192
},
"maxItems": 25,
"description": "Alias for `secrets`: array of text snippets (up to 8192 chars each) to scan & redact for leaked secrets."
},
"domain": {
"type": "string",
"description": "Single candidate domain shorthand (ASCII, Unicode IDN, or Punycode xn--...) to inspect."
},
"handle": {
"type": "string",
"description": "Single candidate social handle shorthand (@handle or bare handle) to inspect."
},
"prompt": {
"type": "string",
"maxLength": 4096,
"description": "Single untrusted prompt, MCP tool description, or fetched text (up to 4096 chars) to scan."
},
"secret": {
"type": "string",
"maxLength": 8192,
"description": "Single text/log/diff/webhook payload shorthand (up to 8192 chars) to scan & redact for leaked API keys, private keys, JWTs, and Bearer tokens."
},
"address": {
"type": "string",
"description": "Single crypto address shorthand (EVM 0x..., Bitcoin 1.../3.../bc1..., TRON T...) to screen against OFAC SDN."
},
"domains": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Candidate domains (ASCII, Unicode IDN, or Punycode xn--...) to inspect."
},
"handles": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Candidate social handles (@handle or bare handle) to inspect."
},
"patches": {
"type": "array",
"items": {
"type": "string",
"maxLength": 16384
},
"maxItems": 25,
"description": "Alias for `diffs`: array of unified git diffs or patch snippets (up to 16384 chars each) to audit."
},
"prompts": {
"type": "array",
"items": {
"type": "string",
"maxLength": 4096
},
"maxItems": 25,
"description": "Untrusted prompts, MCP tool descriptions, or fetched texts (up to 4096 chars each) to scan for prompt injection, tool poisoning, Unicode tag smuggling, and secret exfiltration."
},
"secrets": {
"type": "array",
"items": {
"type": "string",
"maxLength": 8192
},
"maxItems": 25,
"description": "Text snippets, PR bodies, logs, or webhook payloads (up to 8192 chars each) to scan & redact for leaked API keys (OpenAI, Anthropic, AWS, GitHub, Stripe, Slack, Google), PEM/hex private keys, JWTs, and Bearer tokens."
},
"addresses": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Crypto addresses (EVM 0x..., Bitcoin 1.../3.../bc1..., TRON T...) to screen against OFAC SDN."
},
"candidate": {
"type": "string",
"description": "Single candidate domain or social handle shorthand to auto-classify and inspect."
},
"candidates": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 25,
"description": "Mixed candidate domains or social handles to auto-classify and inspect."
},
"officialDomains": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional list of verified official domains for the target brand."
},
"officialHandles": {
"type": "array",
"items": {
"type": "string"
},
"description": "Optional list of verified official social handles for the target brand."
}
},
"additionalProperties": false
}