{"serverId":"mcp-registry/us.secscan/secscan","tools":[{"name":"add_monitor","fixed":{"name":"add_monitor","description":"Put a site the user owns under continuous monitoring: hourly uptime checks, CVE matching, certificate alerts and regular rescans. Runs a full baseline scan straight away, which uses one of the user's scans exactly as in the app (free for plan holders). Returns the baseline scan_id for get_scan_status.","inputSchema":{"type":"object","$schema":"http://json-schema.org/draft-07/schema#","required":["url"],"properties":{"url":{"type":"string","maxLength":2048,"minLength":1,"description":"The site to monitor, e.g. https://example.com"}},"additionalProperties":false},"annotations":{"openWorldHint":true,"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false},"title":"Monitor a site"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: false, destructiveHint: false, idempotentHint: false (inferred from the name).","verify":true}],"tokensBefore":169,"tokensAfter":169},{"name":"check_domain_verification","fixed":{"name":"check_domain_verification","description":"Check whether the file or DNS record from start_domain_verification is live. On success the domain is verified and its next scan includes active tests. DNS changes can take a few minutes.","inputSchema":{"type":"object","$schema":"http://json-schema.org/draft-07/schema#","required":["domain"],"properties":{"domain":{"type":"string","maxLength":253,"minLength":1,"description":"The domain passed to start_domain_verification"}},"additionalProperties":false},"annotations":{"openWorldHint":true,"idempotentHint":true,"readOnlyHint":true},"title":"Check a domain verification"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":142,"tokensAfter":142},{"name":"start_domain_verification","fixed":{"name":"start_domain_verification","description":"Begin proving the user owns a domain, which unlocks active tests (injection, XSS, SSRF, access control) on its scans. Returns a file to publish on the site, or a DNS TXT record — an editor can usually add the file to the codebase and deploy it. Then call check_domain_verification. Calling it again returns the same token, so a record already published stays valid.","inputSchema":{"type":"object","$schema":"http://json-schema.org/draft-07/schema#","required":["domain"],"properties":{"domain":{"type":"string","maxLength":253,"minLength":1,"description":"The domain, e.g. example.com or https://example.com"}},"additionalProperties":false},"annotations":{"idempotentHint":false,"readOnlyHint":false,"destructiveHint":false},"title":"Start verifying a domain"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: false, destructiveHint: false, idempotentHint: false (inferred from the name).","verify":true}],"tokensBefore":193,"tokensAfter":193}],"toolsChanged":3,"tokensSaved":0,"todo":[{"tool":"list_recent_scans","params":["limit"]}],"note":"Deterministic fixes. Changes marked verify need a human look before shipping (renames, inferred annotations, inferred types, removed text). Parameter descriptions in `todo` need to be written by someone who knows the API."}