Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Scout Packs

REMOTE · SCOUT-PACKS-PRODUCTION.UP.RAILWAY.APP

B2B data for AI agents: lead lookup, deliverability scoring, domain intel. x402 $0.01-$0.03/call.

– Trust /100
Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

No category breakdown is available for this channel yet.

Install

How do I install the Scout Packs MCP server?

Scout Packs is a hosted endpoint at https://scout-packs-production.up.railway.app/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · scout-packs-production.up.railway.app

# add to Claude Code
claude mcp add --transport http tigerops-win-scout-packs 'https://scout-packs-production.up.railway.app/mcp'
// .cursor/mcp.json
{
  "mcpServers": {
    "tigerops-win-scout-packs": {
      "url": "https://scout-packs-production.up.railway.app/mcp"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "tigerops-win-scout-packs": {
      "type": "http",
      "url": "https://scout-packs-production.up.railway.app/mcp"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.tigerops-win-scout-packs]
url = "https://scout-packs-production.up.railway.app/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "tigerops-win-scout-packs": {
      "type": "remote",
      "url": "https://scout-packs-production.up.railway.app/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add tigerops-win-scout-packs --url 'https://scout-packs-production.up.railway.app/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  tigerops-win-scout-packs:
    url: "https://scout-packs-production.up.railway.app/mcp"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "tigerops-win-scout-packs": {
      "Transport": "http",
      "Url": "https://scout-packs-production.up.railway.app/mcp"
    }
  }
}
# add to Vellum
assistant mcp add tigerops-win-scout-packs -t streamable-http -u 'https://scout-packs-production.up.railway.app/mcp'
// mcp.json
{
  "mcpServers": {
    "tigerops-win-scout-packs": {
      "type": "http",
      "url": "https://scout-packs-production.up.railway.app/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

We have not recorded any changes for this component yet

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 9 Oct 2026 · Probed https://scout-packs-production.up.railway.app/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=*.up.railway.app CN=YE2,O=Let's Encrypt,C=US 27 Sept 2026 26 Dec 2026 ECDSA 256 ECDSA-SHA384 618edc56941aa1165ddb080bf9f799eb7c1
SANs: *.up.railway.app, up.railway.app
CN=YE2,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 4df3b15dd6c0784c507cd37b58e6f115
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of scout-packs-production.up.railway.app. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
app. present 23684 8 Verified
railway.app. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://scout-packs-production.up.railway.app/mcp Verified 200
http (plaintext) http://scout-packs-production.up.railway.app/mcp HTTPS enforced 301 https://scout-packs-production.up.railway.app/mcp
MCP tools · 15 exposed · ~1,268 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
buy_pack ~72

Get the exact x402 payment requirements and step-by-step buying flow for a Scout Pack. pack: "25", "50", or "100". Returns what the buying agent must do; the agent's own wallet executes the USDC payment against the endpoint.

NameTypeReqDescription
packstringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

contact_page ~84

Extract a company's published contact surface from its own public website: emails (role vs personal), phone numbers, contact-form presence, address and social links. $0.02 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: contact_page(domain="acme.com")

NameTypeReqDescription
domainstringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

deliverability ~109

Score an email address or domain for deliverability: MX/SPF/DMARC checks, disposable-domain and role-account detection, bounce-risk score 0-100 with a send/caution/do_not_send verdict. $0.03 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: deliverability(target="jane@acme.com") or deliverability(target="acme.com")

NameTypeReqDescription
targetstringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

dns ~83

Dump a domain's DNS records (A, AAAA, MX, TXT, NS, CNAME) via DNS-over-HTTPS, plus SPF presence signal. $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: dns(domain="acme.com")

NameTypeReqDescription
domainstringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

domain_intel ~79

Domain intelligence: RDAP registration data (registrar, creation/expiry dates) plus DNS infrastructure signals for any domain. $0.02 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: domain_intel(domain="acme.com")

NameTypeReqDescription
domainstringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

email_pattern ~89

Find the most likely corporate email address patterns for a domain (first.last@, first@, flast@, ...) plus MX verification that the domain can receive mail. $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: email_pattern(domain="acme.com")

NameTypeReqDescription
domainstringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

headers ~84

Audit a domain's HTTP security headers (HSTS, CSP, X-Frame-Options and more) with a 0-100 score and A-F grade. $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: headers(domain="acme.com")

NameTypeReqDescription
domainstringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

list_packs ~43

B2B lead packs for sale: sizes, prices, and a redacted sample. Free. Verified business lead enrichment batches (company, contact, verified email).

Input schema present but exposes no named parameters.

NameTypeReqDescription
resultstringyes–

No examples provided.

lookup_lead ~92

B2B lead enrichment: contact lookup by company name or domain. Enrich one lead with a verified business email + source URL. $0.01 USDC per lookup. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: lookup_lead(query="Acme Corp") or lookup_lead(query="acme.com")

NameTypeReqDescription
querystringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

mail_provider ~95

Identify a domain's email provider: mailbox host (Google Workspace, Microsoft 365, Zoho, Proton and more) plus gateway detection (Mimecast, Proofpoint, Barracuda) from MX records. $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: mail_provider(domain="acme.com")

NameTypeReqDescription
domainstringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

packsize ~93

Pack-size resolver: parse a product title (and optional package price) into pack count, unit size and unit price. $0.02 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: packsize(title="Acme Protein Powder 2lb", price="$29.99")

NameTypeReqDescription
pricestring––
titlestringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

repo_health ~81

Check a public GitHub repo's health: stars, forks, open issues, license, archive status and 90-day commit velocity. $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: repo_health(repo="octocat/hello-world")

NameTypeReqDescription
repostringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

ssl_check ~87

Check a domain's SSL/TLS certificate: issuer, expiry date, days remaining, TLS version, and risk flags (expired, expiring soon, self-signed). $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: ssl_check(domain="acme.com")

NameTypeReqDescription
domainstringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

subdomains ~91

Map a domain's live subdomain footprint from Certificate Transparency logs, classified into intent categories (api/dev, commerce, careers, docs/support, marketing, status/infra, staging/test). $0.02 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: subdomains(domain="acme.com")

NameTypeReqDescription
domainstringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

tech_stack ~86

Detect the web technologies powering a domain (CMS, frameworks, analytics, CDNs) from HTTP headers and page markup, with per-technology confidence and evidence. $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: tech_stack(domain="acme.com")

NameTypeReqDescription
domainstringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

Common questions

What is the Scout Packs MCP server?

Scout Packs is an MCP server listed in the public MCP registry as io.github.tigerops-win/scout-packs. B2B data for AI agents: lead lookup, deliverability scoring, domain intel. x402 $0.01-$0.03/call. This page covers its hosted endpoint (https://scout-packs-production.up.railway.app/mcp).

What tools does the Scout Packs MCP server expose?

Scout Packs exposes 15 tools: list_packs, buy_pack, lookup_lead, tech_stack, email_pattern, and 10 more. Their descriptions and schemas cost roughly 1,268 tokens of context every time the server is loaded.

Does the Scout Packs MCP server require authentication?

No. We connected to Scout Packs without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.