FHI MCP Server Security Audit PASS

Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.

Registry name	`dev.workers.fhi-llc-1118.polished-truth-c514/fhi-x402-security-tools` (v1.4.0)
Endpoint	`https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp`
Reported server	FHI x402 Security Tools 1.4.0
Protocol version	2025-03-26
Tools exposed	7
Checked at	2026-10-11T03:36:04.267Z

Findings

WARN PROPERTY_DESCRIPTION_MISSING — tools[1].domain has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[2].ecosystem has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[2].name has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[2].version has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[2].expectedName has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[3].cik has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[3].ticker has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[3].since has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[4].serverUrl has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[5].serverUrl has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[6].mcpUrl has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[6].ticker has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[6].cik has no description
WARN PROPERTY_DESCRIPTION_MISSING — tools[6].since has no description

Reproduce this report

npx @eidonze/mcpdoctor schema https://polished-truth-c514.fhi-llc-1118.workers.dev/mcp

Embed status: <img src="https://xka0085-byte.github.io/mcp-doctor/trust/badge/dev.workers.fhi-llc-1118.polished-truth-c514-fhi-x402-security-tools.svg"> · Machine-readable: /api/dev.workers.fhi-llc-1118.polished-truth-c514-fhi-x402-security-tools.json

Generated by mcpdoctor — read-only MCP initialize + tools/list. No tools were called, no payments attempted. Static schema checks do not predict model tool selection or prove behavior across all clients. Scanned: 2026-10-11.