Compuute MCP Security Scanner

compuute-scan-api

Scan-as-a-Service for MCP servers. HTTP + MCP wrapper around compuute-scan — the MCP-specific static security scanner. Designed for agent-callable consumption.

POST a public GitHub repo URL → get a structured security report scored against 38 MCP-specific rules across 8 languages (TS/JS, Python, Go, Rust, C#, Java, Kotlin).

Honesty note (read first): compuute-scan is a pattern-breadth detector, not an exploitability oracle. Historic false-positive rate after manual validation is ~90% on raw output (verified against modelcontextprotocol/servers: 138 raw findings → 13 confirmed). Every response carries a _disclaimer field stating this explicitly. Use findings as a triage queue, not as a list of confirmed vulnerabilities. See docs/FP-RATES.md for per-rule transparency.

Live at https://scan.compuute.se. Service version reported by /v1/health.

---

Endpoints

Core scan

Method	Path	Purpose	Auth
POST	/v1/scan	Scan a public GitHub MCP-server repo (free tier, rate-limited)	none
POST	/v1/scan/pay	Same as above via x402 micropayment ($0.10 USDC on Base L2)	X-Payment header

POST /v1/scan/pay with no body to read the payment requirements without paying — the request body is optional precisely so discovery probes reach the 402 instead of body validation. Verify with the Coinbase Agentic Wallet CLI:

npx awal x402 details https://scan.compuute.se/v1/scan/pay

| GET | /v1/scan/info | Scanner version + limits + supported ecosystems | none | | GET | /v1/health | Liveness + scanner-binary availability | none |

Machine-readable contracts

Method	Path	Purpose
GET	/openapi.json	OpenAPI v3 spec with per-field descriptions
GET	/docs	Swagger UI for the OpenAPI spec

MCP server (live)

Endpoint	Tool	Transport
/mcp/	scan_mcp_server(github_url)	Streamable HTTP

Install in Claude Code: claude mcp add compuute-scan --transport http --url https://scan.compuute.se/mcp/

Discovery (/.well-known/)

Path	Format	Consumer
/.well-known/agent-card.json	A2A v1.0 Agent Card (canonical)	A2A protocol clients
/.well-known/agent.json	A2A Agent Card (alias)	pre-1.0 A2A clients/crawlers
/.well-known/ai-plugin.json	OpenAI plugin manifest	ChatGPT / OpenAI tools
/.well-known/x402.json	x402 payment manifest	Coinbase Agent.market crawlers, x402 aggregators
/.well-known/x402	Alias of x402.json	x402 probes without .json suffix
/llms.txt	markdown summary	LLM-driven agent-search crawlers (Exa, Perplexity-style) per llmstxt.org
/robots.txt	crawler policy	search engines
/sitemap.xml	URL index	search engines

Example

curl -X POST https://scan.compuute.se/v1/scan \
  -H 'Content-Type: application/json' \
  -H 'Idempotency-Key: 00000000-0000-0000-0000-000000000001' \
  -d '{"repo_url": "https://github.com/modelcontextprotocol/servers"}'

Response (truncated):

{
  "repo_url": "https://github.com/modelcontextprotocol/servers",
  "scanner": {"name": "compuute-scan", "version": "0.6.2", "layers_covered": ["L0", "L1"]},
  "summary": {"critical": 1, "high": 94, "medium": 22, "low": 0, "files_scanned": 77},
  "score": 0,
  "recommendation": "AVOID — 1 critical and 94 high finding(s)...",
  "top_findings": [...],
  "performance": {"clone_seconds": 1.2, "scan_seconds": 0.5, "repo_size_bytes": 41234},
  "_disclaimer": "PATTERN MATCH — compuute-scan is a static analyzer..."
}

Agent-shaped API features

Feature	How
Idempotent retries (24h cache)	Idempotency-Key header
HTTP cache	ETag + Cache-Control: public, max-age=1800
Conditional GET	If-None-Match → 304 Not Modified
Rate-limit headers	X-RateLimit-Limit/Remaining/Reset
Strict input validation	Pydantic extra="forbid", GitHub-HTTPS-only
OWASP security headers	HSTS / X-Frame-Options / X-Content-Type-Options / CSP / Referrer-Policy / Permissions-Policy
OpenAPI for discovery	GET /openapi.json with descriptions on every field
MCP for agent discovery	/mcp/ exposes scan_mcp_server tool
x402 for autonomous purchase	/v1/scan/pay returns 402 with USDC/Base payment requirements
Honest framing	Every response carries _disclaimer — pattern match, not exploitability claim

Pricing

Tier	Audience	Price
Open Source CLI	Indie devs, agent builders	$0 — npx compuute-scan ./repo
Hosted API (free)	Agent operators evaluating MCP servers	$0 — POST /v1/scan, rate-limited
Hosted API (x402)	Autonomous agents in Agent.market ecosystem	$0.10 USDC/scan — POST /v1/scan/pay
MCP Security Audit	Enterprises shipping MCP to production	$5K–$30K SoW
AI Procurement Risk Audit	CFO/CTO/CISO buying enterprise AI capacity	$5K–$15K SoW

Full breakdown with JSON-LD: https://compuute.se/pricing.

Local development

python3 -m venv venv && source venv/bin/activate
pip install -r requirements.txt
export COMPUUTE_SCAN_PATH=$HOME/compuute-scan/compuute-scan.js
uvicorn main:app --reload

x402 payment env vars (all optional locally; /v1/scan/pay returns 503 until the wallet is set):

Var	Purpose	Default
X402_WALLET_ADDRESS	Base L2 address receiving USDC	unset (x402 disabled)
X402_NETWORK	CAIP-2 network id — eip155:8453 (Base mainnet) or eip155:84532 (Base Sepolia)	eip155:8453
X402_PRICE_USD	Price per scan	0.10
X402_FACILITATOR_URL	Facilitator base URL	CDP facilitator (serves both networks)
CDP_API_KEY_ID / CDP_API_KEY_SECRET	CDP API key for facilitator verify/settle auth	unset (verify will be rejected)

Rehearsing payments on testnet

Set X402_NETWORK=eip155:84532 to quote prices in Base Sepolia USDC, which is free from a faucet. The CDP facilitator serves Sepolia too, so a testnet payment exercises the real verify/settle path and your real CDP API keys — without moving real money.

Asset address and EIP-712 domain are selected together per network: Base mainnet USDC signs as "USD Coin", Base Sepolia as "USDC". Mixing them fails every signature with an error that looks like a bad API key, which is why they live in one NETWORKS table rather than separate env vars.

Mainnet is the default and an unknown value falls back to it, so a typo can never silently ask real agents to pay in worthless testnet USDC. Check which mode is live with curl -s https://scan.compuute.se/v1/health — the x402 block reports network and testnet.

Tests

pytest tests/ -v
# 34 tests covering scan, x402, MCP, discovery, OpenAPI

Scripts

Script	What it does
scripts/precheck.sh	Start-of-session check: branch, working tree, tests, live state, next backlog item
scripts/postcheck.sh	End-of-session check: committer hygiene, tests, append to docs/PROGRESS.md
scripts/status.sh	30-second live-state check against scan.compuute.se (4 probes)
scripts/sbom.sh	Generate CycloneDX SBOM, optionally upload to a GitHub Release
scripts/prospect-research.sh	Pull qualified prospects from GitHub + Anthropic Registry, draft DM angles
scripts/measure-tiers.sh	T0/T1/T2 distribution snapshot per docs/agent-economy-strategy.md §5 — reach, engagement, conversion measured against Railway logs + Base RPC + GitHub stars

Architecture

• api/services/scan.py — clone + sandbox + scan + parse. Pure functions.
• api/services/x402_service.py — x402 v2 verify / settle on the official x402 SDK; CDP facilitator (Base mainnet) by default; Bazaar discovery extension in 402 bodies.
• api/services/cdp_auth.py — minimal CDP API-key JWT auth for the facilitator (PyJWT + cryptography; avoids the full cdp-sdk).
• api/serializers/scan_serializer.py — Pydantic models, strict validation.
• api/routes/scan.py — HTTP layer for /v1/scan: idempotency, cache, ETag.
• api/routes/scan_x402.py — HTTP layer for /v1/scan/pay.
• api/routes/discovery.py — /.well-known/*, /robots.txt, /sitemap.xml.
• api/mcp_server.py — FastMCP server exposing scan_mcp_server.
• main.py — FastAPI wiring + middleware (security headers, CORS).

Bundled compuute-scan version is pinned in the Dockerfile (ARG COMPUUTE_SCAN_REF=v0.6.2).

Documentation

Doc	For
docs/agent-economy-strategy.md	The strategic doc — a16z-verified data, the 11-signal buyer-agent model, two-track strategy, 30-day pivot trigger. Read first if you're trying to understand the company.
docs/STRATEGY.md	Position, pricing tiers, roadmap, decision log
docs/ARCHITECTURE.md	Component diagram, request flow, threat model, deployment topology
docs/DEVELOPMENT.md	Local setup, layout, code style, common pitfalls — onboard a new dev in 30 min
docs/MONITORING.md	Endpoints to watch, automated checks, runbook for failures
docs/FP-RATES.md	Per-rule false-positive transparency
docs/scan-self-triage.md	What this scanner reports when run against its own code
docs/whitepaper/	MCP Security Methodology v1.0 (Markdown + PDF)
docs/case-studies/	Three anonymized engagement reports from the May 2026 batch
docs/advisories/	Public advisories under the COMPUUTE-YYYY-NNN numbering
docs/security/	Self-pentest reports (90-day cadence)
docs/audits/	The AI Procurement Risk Audit checklist (lead magnet)
docs/compliance/	SOC 2 Type I readiness statement, TSC control mapping
docs/submissions/	LangChain + CrewAI tool wrappers ready for PR/marketplace
skills/compuute-scan/	Claude Skill package (SKILL.md + scan.sh) — submitted to anthropics/skills#1346
CODE_OF_CONDUCT.md	Contributor Covenant 2.1
docs/launches/	Show HN draft + posting checklist
docs/setup/	Status page (BetterStack) + analytics (PostHog) setup guides
docs/agentic-market-submission.md	Three paths to Coinbase Agent.market listing
BACKLOG.md	GitHub Issues + Project board roadmap
IDEAS.md	Composted product hypotheses with gating rules
CONTRIBUTING.md	How to contribute
SECURITY.md	Vulnerability disclosure policy (90-day window)

Security

Found a vulnerability? See SECURITY.md — email security@compuute.se. We follow a 90-day coordinated disclosure window.

License

MIT (matches compuute-scan).

Author

Compuute AB — daniel@compuute.se