ServerScan

{
  "mcpServers": {
    "com.serverscan/mcp": {
      "url": "https://www.serverscan.com/api/mcp"
    }
  }
}

Indexed tools

Tool metadata and schemas come from the remote server and are untrusted. Indexing only lists tools; it never calls them.

4 shown · authentication unknown

• Free payment page check

  check_payment_page

  Runs ServerScan's free one-off check of a payment or checkout page: TLS, security headers, the HTTP to HTTPS redirect, which scripts load and from where, and whether third-party scripts carry an integrity hash (PCI DSS 6.4.3 and 11.6.1). Returns six yes/no/not-yet-known answers and what to fix first. It fetches the page once. Any one site can be checked only a few times a day, and a repeat within 15 minutes returns the stored answer.

  Schema valid · SHA-256 8c5857cfec39…

  View input schema

  {
    "type": "object",
    "properties": {
      "url": {
        "type": "string",
        "description": "The payment page address, for example https://shop.example.com/checkout. A bare domain is read as https.",
        "maxLength": 2000
      }
    },
    "required": [
      "url"
    ],
    "additionalProperties": false
  }

• Does this merchant need quarterly ASV scans?

  do_i_need_an_asv_scan

  Says whether a merchant's PCI DSS self-assessment questionnaire (SAQ) requires quarterly external scans by an Approved Scanning Vendor, under PCI DSS v4.0.1, and what to scan. Pass the SAQ type, or "unsure" to get every SAQ with who it is for.

  Schema valid · SHA-256 61c92959a512…

  View input schema

  {
    "type": "object",
    "properties": {
      "saq_type": {
        "type": "string",
        "enum": [
          "A",
          "A-EP",
          "B",
          "B-IP",
          "C",
          "C-VT",
          "P2PE",
          "SPoC",
          "D",
          "unsure"
        ],
        "description": "The merchant's SAQ, or \"unsure\"."
      }
    },
    "required": [
      "saq_type"
    ],
    "additionalProperties": false
  }