MCP security scanner: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + Base data. Connect the official Tech Risk MCP server to Claude, ChatGPT, or Cursor through gate — one gateway URL, no config files, security-checked.
Free to start · No credit card · No hosting needed
Pick your client. Copy, paste, done — or let gate handle sign-ins and policies for you.
claude mcp add --transport http tech-risk-x402-data-api https://x402-data-api.sigrunner.workers.dev/sseRun in your terminal, then restart Claude Code.
Tech Risk · https://x402-data-api.sigrunner.workers.dev/sse
Real prompts you can type the moment it's connected — no setup, no docs to read.
“Use “enrich_tech_risk”: Security enrichment: tech-stack fingerprint + CVE mapping + EPSS + CISA KEV + verdict (clear/review/block) for a domain. Cost: $0.005 USDC p.”
“Use “enrich_domain”: Firmographic + tech-stack enrichment: RDAP registrant/registrar, DNS records, full subdomain enumeration + certificate-transparency history,.”
“Use “scan_mcp_server”: Security-audit a target MCP server for prompt-injection / tool-poisoning. Fetches the server's advertised tools and statically analyzes each.”
“Use “scan_mcp_preview”: FREE preview scan of a target MCP server for tool-poisoning / prompt-injection. Returns issue count, severity breakdown, risk score, and ver.”
Every server in the gate directory has to pass the same four checks before your AI can touch it. Here's how Tech Risk holds up.
Operated by Tech Risk (workers.dev) at its documented MCP endpoint — not a third-party mirror or community re-host.
This server only exposes public data — no account and no credentials are involved when you connect.
gate checks every tool for prompt injection, hidden instructions, data-exfiltration hints, and over-broad permissions before the server is available through your gateway.
If Tech Risk adds or changes tools later, gate re-scans and alerts you — before your AI acts on the change.
Add one gateway URL to Claude, ChatGPT, or any MCP client. One-time setup, about two minutes.
Choose Tech Risk in the gate directory. No sign-in needed.
Tech Risk's tools are live in every AI client you've connected — with rules and logging built in.
Free to start · No credit card · No hosting needed
Fetched live from the official endpoint and re-checked daily by gate — not marketing copy.
enrich_tech_risk — Security enrichment: tech-stack fingerprint + CVE mapping + EPSS + CISA KEV + verdict (clear/review/block) for a domain. Cost: $0.005 USDC p
enrich_domain — Firmographic + tech-stack enrichment: RDAP registrant/registrar, DNS records, full subdomain enumeration + certificate-transparency history,
scan_mcp_server — Security-audit a target MCP server for prompt-injection / tool-poisoning. Fetches the server's advertised tools and statically analyzes each
scan_mcp_preview — FREE preview scan of a target MCP server for tool-poisoning / prompt-injection. Returns issue count, severity breakdown, risk score, and ver
crypto_prices — Live spot token prices (price, change_24h, symbol, confidence, timestamp) for CoinGecko ids, sourced from DefiLlama. Cost: $0.005 USDC per c
crypto_funding — Live cross-venue perpetual-futures funding rates from Hyperliquid+OKX+dYdX (per-venue rate, arb spread in bps, cheapest-long/richest-short v
defi_yields — Live DeFi lending/LP yield pools (project, chain, symbol, pool id, APY breakdown incl. 1d/7d/30d trend + apyBase7d/apyMean30d, IL risk incl.
pm_markets — Live Polymarket prediction-market data — question, outcomes, outcome prices, bestBid/bestAsk/spread, volume24hr/volume1wk, oneDayPriceChange
+ 18 more tools once connected
https://x402-data-api.sigrunner.workers.dev/sseYes — Tech Risk operates its own remote MCP server at x402-data-api.sigrunner.workers.dev. gate connects you to that official endpoint and adds security scanning, per-tool access rules, and an activity log on top.
Add gate's gateway URL to your AI client once, then pick Tech Risk in the directory. No account or sign-in is needed. From then on, Tech Risk's tools are available in every client you've connected to gate.
No. Tech Risk runs the server, and gate is fully managed. You just connect one URL — there's nothing to install, deploy, or maintain.
It's the vendor's official endpoint, and gate scans its tools for prompt injection and hidden instructions before it goes live, re-checks it whenever it changes, and lets you allow, block, or require approval for every single tool.
Yes — you can get started with gate for free and connect Tech Risk in minutes. No credit card required.
Every server below works through the same gateway URL — connect once, add tools anytime.
Set up Tech Risk in: Claude · Claude Code · ChatGPT · Cursor · VS Code