tech-risk
Scan any MCP server for tool-poisoning/prompt-injection/exfiltration (OWASP LLM01/08) + Base data
What it does
tech-risk is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.
From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as scan code for vulnerabilities or review pull requests.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence) and are not a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 2h ago (live check)Hosted endpoint
https://api.greyridgesignals.ai/mcpstreamable-http
In Claude Code: claude mcp add --transport http tech-risk-1 https://api.greyridgesignals.ai/mcp
MCP settings (Claude Desktop, Cursor and other MCP clients)
{
"mcpServers": {
"tech-risk-1": {
"url": "https://api.greyridgesignals.ai/mcp"
}
}
}Live check
Electra Index connected to the hosted endpoint 2h agoONLINE tech-risk answered an MCP connection on 22 Oct 2026 and introduced itself as x402-data-api 0.1.0 (MCP protocol 2025-06-18).
26 tools offered to AI assistants
enrich_tech_risk· Security enrichment: tech-stack fingerprint + CVE mapping + EPSS + CISA KEV + verdict (clear/review/block) for a domain. Cost: $0.005 USDC per call (x402 micropayment).enrich_domain· Firmographic + tech-stack enrichment: RDAP registrant/registrar, DNS records, full subdomain enumeration + certificate-transparency history, tech-stack fingerprint, verdict (clear/review/block, based on domain age) for a domain. Cost: $0.00scan_mcp_server· Security-audit a target MCP server for prompt-injection / tool-poisoning. Fetches the server's advertised tools and statically analyzes each for hidden instructions, data-exfiltration hints, dangerous capabilities, cross-tool shadowing, andscan_mcp_preview· FREE preview scan of a target MCP server for tool-poisoning / prompt-injection. Returns issue count, severity breakdown, risk score, and verdict (clear/review/block) — but NOT which tools or the evidence. Use this to check any MCP server (icrypto_prices· Live spot token prices (price, change_24h, symbol, confidence, timestamp) for CoinGecko ids, sourced from DefiLlama. Cost: $0.005 USDC per call via x402.crypto_funding· Live cross-venue perpetual-futures funding rates from Hyperliquid+OKX+dYdX (per-venue rate, arb spread in bps, cheapest-long/richest-short venue, premium/basis, annualized_hl, annualized_okx, LONGS_PAY/SHORTS_PAY/NEUTRAL signal, next_fundindefi_yields· Live DeFi lending/LP yield pools (project, chain, symbol, pool id, APY breakdown incl. 1d/7d/30d trend + apyBase7d/apyMean30d, IL risk incl. il7d, exposure, reward/underlying tokens, outlier flag, mu/sigma, DefiLlama stability forecast, TVLpm_markets· Live Polymarket prediction-market data — question, outcomes, outcome prices, bestBid/bestAsk/spread, volume24hr/volume1wk, oneDayPriceChange, clobTokenIds, conditionId, category tags, liquidity, end date — ranked by volume24hr. Cost: $0.005crypto_prices_preview· FREE 1-item sample of live token prices. No payment required.crypto_funding_preview· FREE 1-item sample of live cross-venue funding rates. No payment required.defi_yields_preview· FREE 1-item sample of live DeFi yield pools. No payment required.pm_markets_preview· FREE top-1 sample of live Polymarket prediction markets, ranked by volume24hr. No payment required.
Show 14 more
chain_block_number· Current Base mainnet block number via multi-provider JSON-RPC (automatic failover across 4 providers, never fails on one provider's rate limit). Cost: $0.005 USDC per call via x402.chain_gas_price· Current Base mainnet gas price (wei/gwei), EIP-1559 base_fee_gwei/priority_fee_gwei, and gas_price_usd (ETH price cross-call — no price oracle on ETH-only competitors) via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.chain_balance· Native ETH balance of a Base mainnet address, incl. balance_usd (ETH price cross-call — no price oracle on ETH-only competitors), via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.chain_token_balance· ERC-20 token balance of a Base mainnet address via multi-provider JSON-RPC, incl. symbol/decimals/balance_formatted (per-token-contract cached in-isolate). Cost: $0.005 USDC per call via x402.chain_tx· Transaction details by hash on Base mainnet via multi-provider JSON-RPC. Cost: $0.005 USDC per call via x402.chain_wallet· Wallet screening bundle (balance, activity, contract vs EOA check): ETH balance + balance_usd (ETH price cross-call) + tx count + contract-code check (EIP-7702 delegated-EOA aware) for a Base mainnet address, in one call. Cost: $0.005 USDCchain_token_security· Token security / honeypot detector for a Base mainnet ERC-20: EIP-1967/1822 proxy + upgradeability detection, bytecode dispatcher scan for mint/pause/blacklist/fee-setter/ownership selectors, owner() renouncement check, and a live eth_callchain_block_number_preview· FREE live sample of the current Base mainnet block number — identical data to the paid chain_block_number tool. No payment required.chain_gas_price_preview· FREE live sample of the current Base mainnet gas price — identical data to the paid chain_gas_price tool. No payment required.chain_token_report· Token security check (honeypot detector + rug-pull risk score) for a Base ERC-20 in one call, decision-grade trade-safety verdict: SAFE | CAUTION | AVOID plus risk_score (0-100) and reasons, bundling honeypot/sellability simulation, owner-rgate_swap· Pre-trade GO / HOLD / BLOCK gate for a Base ERC-20 swap: honeypot/sellability + admin-control checks + Uniswap v3 liquidity vs. your trade size. One decision + reason. Cost: $0.005 USDC per call via the shared MCP payment gate (the direct Hgate_swap_preview· FREE live sample of the gate_swap pre-trade GO/HOLD/BLOCK decision for a demo Base token (usdc|weth|cbbtc|aero|degen), same shape as the paid gate_swap tool. No payment required.chain_token_report_preview· FREE full real trade-safety report (SAFE/CAUTION/AVOID verdict) for Base USDC, same depth as the paid chain_token_report tool. No payment required.chain_token_security_preview· FREE full real analysis of a fixed well-known token (Base WETH) via the token security / honeypot detector — same depth as the paid chain_token_security tool, so you can see the real product before paying. To analyze an arbitrary token, use
What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method
Tasks it helps with
Share of each task's required capabilities it covers| Scan code for vulnerabilities Security Scanning | 50% |
| Review pull requests Security Scanning | 50% |
Similar tools
Listed for the same task: scan code for vulnerabilities- diffpilotREMOTELOCALMCP server for PR code review, commit messages, changelogs, and secret detection
- MCP Code Review ServerREMOTELOCALCode review as an MCP server — structured reviews with OWASP security scanning
- StrixREMOTELOCALAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
- mcp-whoisxmlapiREMOTELOCAL34 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API
- Action1 MCPREMOTELOCALEvery Action1 endpoint, plus fleet-wide patch and vulnerability views across all your organizations
- ConnectSecure MCPREMOTELOCALVulnerability management across all ConnectSecure clients: exposure ranking, CVE impact, blind spots
Ready-made AI agents
- $20/mo
- $24/mo · free plan
- Cursor53$20/mo · free plan
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Hosted endpoint | https://api.greyridgesignals.ai/mcp | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Local install (package) | no | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Remote access (hosted) | yes | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Website | https://api.greyridgesignals.ai | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| Version | 0.1.2 | DECLARED | SRC-001 Official MCP Registry | 2h ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 2h ago |
Change history
- NEW22 Oct 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is tech-risk still online?
Free alerts · no accountQuestions about tech-risk
How do I connect tech-risk?
Use the hosted endpoint https://api.greyridgesignals.ai/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What tools does tech-risk offer?
When Electra Index connected on 22 Oct 2026, it listed 26 tools: enrich_tech_risk, enrich_domain, scan_mcp_server, scan_mcp_preview, crypto_prices, crypto_funding, defi_yields, pm_markets and more. The full list is in "Live check" above.
Is tech-risk online?
Yes. Its hosted endpoint answered an MCP connection from Electra Index 2h ago.
What can I use tech-risk for?
Based on its description, it is most relevant to: scan code for vulnerabilities, review pull requests.