{"company":"Doormat Capital","what_this_is":"An MCP (Model Context Protocol) server. Point an MCP client (Claude Code, Cursor, etc.) at POST /mcp (Streamable HTTP transport, JSON-RPC 2.0) to discover and call tools.","mcp_endpoint":"/mcp","tools":[{"name":"apecheck_report","description":"Paid (x402, USDC on Base). Full safety report for a Base ERC-20 token contract: metadata, raw owner address, mint-selector heuristic, approximate recent-activity signal. Call without 'tx' first to receive the exact x402 payment challenge (amount, asset, payTo address, chain); pay that amount in USDC on Base, then call again with the resulting transaction hash in 'tx' to receive the real report."},{"name":"secheaders_report","description":"Paid (x402, USDC on Base). Full HTTP security-headers report for a URL: every header checked, raw values, remediation detail. Call without 'tx' first to receive the exact x402 payment challenge; pay, then call again with the transaction hash in 'tx' to receive the full report."}],"registry":"Listed on the official MCP Registry (registry.modelcontextprotocol.io) -- see /.well-known/mcp-registry-auth for domain proof.","payment":"Each tool wraps an existing Doormat x402 product. Call once without 'tx' to get the exact payment challenge (amount, address, chain); pay in USDC on Base; call again with the tx hash.","source_products":{"apecheck":"https://apecheck.sebastiaan-ba3.workers.dev","secheaders":"https://secheaders.sebastiaan-ba3.workers.dev"}}