Skip to main content
POST
Scan Mcp Manifest

Authorizations

X-API-Key
string
header
required

PromptGuard API key for developer endpoints. Keys start with pg_live_ and are created in the dashboard.

Headers

x-api-key
string | null

Body

application/json
tools
McpTool · object[]
required

The server's tools/list result: the tools array, sent as the server returned it. At most 500 tools, and 131072 characters of canonical JSON together with every name in other_servers.

Maximum array length: 500
pin
string | null

The sha256 an earlier scan of this server returned. Omit it the first time; when it differs from this list's sha256, the response carries a E301 finding.

Pattern: ^[0-9a-f]{64}$
other_servers
McpOtherServer · object[]

The agent's other MCP servers, for shadowing: a tool here whose name one of them already has is a E002 finding. Only their tool names are read, and they are not scanned themselves.

Maximum array length: 50

Response

Successful Response

sha256
string
required

This tool list's pin: send it as pin on the next scan of this server. Treat it as opaque.

ok
boolean
required

False when any finding's severity is high, or the scan is incomplete

findings
ManifestFinding · object[]
required
tools
ToolHash · object[]
required

Each tool's own hash, in the order sent, so a caller that keeps them can tell which tool changed. Not part of sha256. Opaque, like it.

incomplete
boolean
required

True when the scan ran out of its detection budget before its last tool. The tools it did not reach are in unscanned_tools; sha256 and the rug-pull comparison are still complete.

unscanned_tools
string[]
required

Names of the tools not scanned, in the order sent