INDIVIDUAL MCP TOOL
scan_text
Scans untrusted text (web page text, emails, documents, tool results, another agent's message) for prompt injection before your agent acts on it: instruction overrides, jailbreak personas, system-prompt extraction, fake delimiters, exfiltration URLs, tool hijacking, hidden Unicode, encoded payloads.
LIVE ENDPOINT
https://api.youraitools.co/mcp/hub
Connect to this endpoint to inspect the live schema for scan_text and invoke it with your own arguments.
Indexed input schema
{}Risk classification
Potential side effects detected · medium confidence · heuristic, not a guarantee.
- A tool name or description suggests sending messages.
Parent server
CONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.youraitools-hub]
url = "https://api.youraitools.co/mcp/hub"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"youraitools-hub": {
"type": "http",
"url": "https://api.youraitools.co/mcp/hub"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: youraitools-hub
Remote MCP URL: https://api.youraitools.co/mcp/hub
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"youraitools-hub": {
"url": "https://api.youraitools.co/mcp/hub"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"youraitools-hub": {
"type": "http",
"url": "https://api.youraitools.co/mcp/hub"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "youraitools-hub",
"transport": "streamable-http",
"url": "https://api.youraitools.co/mcp/hub"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
Related tools
check_agent— Check whether an AI agent is registered in the Concordium Agent Registry (CIS-8004), Active (not revoked), and Verified by Concordium (its Agent Card hash matches the on-chain metadata_hash).read_url— Fetches one public web page and returns its main content as clean Markdown (boilerplate removed, links absolute) plus title and metadata.scan_url— Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection before your agent browses or summarizes it.scan_tools— Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and schemas) before your agent installs or calls them.check_domain— Check a domain before your agent trusts a link, a sender or a counterparty: does it exist, where does its mail go, SPF and DMARC policy, nameservers, DNSSEC.check_email— Check an email address an agent is about to store, email or trust: syntax, disposable / throwaway provider, role account, free webmail.screen_address— Use for ONE wallet: is this address on the US Treasury OFAC SDN sanctions list (digital currency addresses, refreshed daily)?screen_batch— Use for a LIST of 1-50 wallets in one request (billed as one call): payee lists, counterparties, transaction inputs/outputs.