Scout Packs
REMOTE · SCOUT-PACKS-PRODUCTION.UP.RAILWAY.APP
B2B data for AI agents: lead lookup, deliverability scoring, domain intel. x402 $0.01-$0.03/call.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
No category breakdown is available for this channel yet.
How do I install the Scout Packs MCP server?
Scout Packs is a hosted endpoint at https://scout-packs-production.up.railway.app/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · scout-packs-production.up.railway.app
claude mcp add --transport http tigerops-win-scout-packs 'https://scout-packs-production.up.railway.app/mcp'
{
"mcpServers": {
"tigerops-win-scout-packs": {
"url": "https://scout-packs-production.up.railway.app/mcp"
}
}
} {
"servers": {
"tigerops-win-scout-packs": {
"type": "http",
"url": "https://scout-packs-production.up.railway.app/mcp"
}
}
} [mcp_servers.tigerops-win-scout-packs] url = "https://scout-packs-production.up.railway.app/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"tigerops-win-scout-packs": {
"type": "remote",
"url": "https://scout-packs-production.up.railway.app/mcp",
"enabled": true
}
}
} openclaw mcp add tigerops-win-scout-packs --url 'https://scout-packs-production.up.railway.app/mcp' --transport streamable-http
mcp_servers:
tigerops-win-scout-packs:
url: "https://scout-packs-production.up.railway.app/mcp" {
"McpServers": {
"tigerops-win-scout-packs": {
"Transport": "http",
"Url": "https://scout-packs-production.up.railway.app/mcp"
}
}
} assistant mcp add tigerops-win-scout-packs -t streamable-http -u 'https://scout-packs-production.up.railway.app/mcp'
{
"mcpServers": {
"tigerops-win-scout-packs": {
"type": "http",
"url": "https://scout-packs-production.up.railway.app/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
We have not recorded any changes for this component yet
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 9 Oct 2026 · Probed https://scout-packs-production.up.railway.app/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.up.railway.app | CN=YE2,O=Let's Encrypt,C=US | 27 Sept 2026 | 26 Dec 2026 | ECDSA 256 | ECDSA-SHA384 | 618edc56941aa1165ddb080bf9f799eb7c1 |
| SANs: *.up.railway.app, up.railway.app | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of scout-packs-production.up.railway.app. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| app. | present | 23684 | 8 | Verified |
| railway.app. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://scout-packs-production.up.railway.app/mcp | Verified | 200 | |
| http (plaintext) | http://scout-packs-production.up.railway.app/mcp | HTTPS enforced | 301 | https://scout-packs-production.up.railway.app/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
buy_pack ~72
Get the exact x402 payment requirements and step-by-step buying flow for a Scout Pack. pack: "25", "50", or "100". Returns what the buying agent must do; the agent's own wallet executes the USDC payment against the endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| pack | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
contact_page ~84
Extract a company's published contact surface from its own public website: emails (role vs personal), phone numbers, contact-form presence, address and social links. $0.02 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: contact_page(domain="acme.com")
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
deliverability ~109
Score an email address or domain for deliverability: MX/SPF/DMARC checks, disposable-domain and role-account detection, bounce-risk score 0-100 with a send/caution/do_not_send verdict. $0.03 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: deliverability(target="jane@acme.com") or deliverability(target="acme.com")
| Name | Type | Req | Description |
|---|---|---|---|
| target | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
dns ~83
Dump a domain's DNS records (A, AAAA, MX, TXT, NS, CNAME) via DNS-over-HTTPS, plus SPF presence signal. $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: dns(domain="acme.com")
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
domain_intel ~79
Domain intelligence: RDAP registration data (registrar, creation/expiry dates) plus DNS infrastructure signals for any domain. $0.02 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: domain_intel(domain="acme.com")
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
email_pattern ~89
Find the most likely corporate email address patterns for a domain (first.last@, first@, flast@, ...) plus MX verification that the domain can receive mail. $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: email_pattern(domain="acme.com")
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
headers ~84
Audit a domain's HTTP security headers (HSTS, CSP, X-Frame-Options and more) with a 0-100 score and A-F grade. $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: headers(domain="acme.com")
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
list_packs ~43
B2B lead packs for sale: sizes, prices, and a redacted sample. Free. Verified business lead enrichment batches (company, contact, verified email).
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
lookup_lead ~92
B2B lead enrichment: contact lookup by company name or domain. Enrich one lead with a verified business email + source URL. $0.01 USDC per lookup. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: lookup_lead(query="Acme Corp") or lookup_lead(query="acme.com")
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
mail_provider ~95
Identify a domain's email provider: mailbox host (Google Workspace, Microsoft 365, Zoho, Proton and more) plus gateway detection (Mimecast, Proofpoint, Barracuda) from MX records. $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: mail_provider(domain="acme.com")
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
packsize ~93
Pack-size resolver: parse a product title (and optional package price) into pack count, unit size and unit price. $0.02 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: packsize(title="Acme Protein Powder 2lb", price="$29.99")
| Name | Type | Req | Description |
|---|---|---|---|
| price | string | – | – |
| title | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
repo_health ~81
Check a public GitHub repo's health: stars, forks, open issues, license, archive status and 90-day commit velocity. $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: repo_health(repo="octocat/hello-world")
| Name | Type | Req | Description |
|---|---|---|---|
| repo | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
ssl_check ~87
Check a domain's SSL/TLS certificate: issuer, expiry date, days remaining, TLS version, and risk flags (expired, expiring soon, self-signed). $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: ssl_check(domain="acme.com")
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
subdomains ~91
Map a domain's live subdomain footprint from Certificate Transparency logs, classified into intent categories (api/dev, commerce, careers, docs/support, marketing, status/infra, staging/test). $0.02 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: subdomains(domain="acme.com")
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
tech_stack ~86
Detect the web technologies powering a domain (CMS, frameworks, analytics, CDNs) from HTTP headers and page markup, with per-technology confidence and evidence. $0.01 USDC per call. Returns the x402 payment requirements; your agent's wallet executes the payment. Example: tech_stack(domain="acme.com")
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
What is the Scout Packs MCP server?
Scout Packs is an MCP server listed in the public MCP registry as io.github.tigerops-win/scout-packs. B2B data for AI agents: lead lookup, deliverability scoring, domain intel. x402 $0.01-$0.03/call. This page covers its hosted endpoint (https://scout-packs-production.up.railway.app/mcp).
What tools does the Scout Packs MCP server expose?
Scout Packs exposes 15 tools: list_packs, buy_pack, lookup_lead, tech_stack, email_pattern, and 10 more. Their descriptions and schemas cost roughly 1,268 tokens of context every time the server is loaded.
Does the Scout Packs MCP server require authentication?
No. We connected to Scout Packs without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.