# ServerScan Muse connector

From musedirectory.ai, the independent directory of Meta Muse connectors. Not affiliated with Meta.

## ServerScan

Check if you need PCI scanning, scan your payment page for free, and buy compliance scans.

- Record: https://musedirectory.ai/connector/serverscan
- Category: Finance & Bills
- Developer: ServerScan (https://www.serverscan.com)
- Muse status: Extra setup. Not in Muse's Connectors list yet. Muse can still use it: its page gives you a request to paste into Muse.
- Health: Working, 493ms, checked 2026-10-29T20:27:00Z
- Endpoint: https://www.serverscan.com/api/mcp
- Auth: No account needed; Pricing: unknown
- Screening: Screened, no issues found (2026-10-29T20:27:00Z)
- Source: Found in the official MCP Registry (com.serverscan/mcp) https://registry.modelcontextprotocol.io/v0/servers?search=com.serverscan%2Fmcp

ServerScan helps merchants meet PCI DSS requirements. Check whether your business needs quarterly external scans, run a free security check on your payment page for TLS and headers, get current pricing for ASV scans and penetration tests, and start an order.

Example request: "Tell me if my online store needs a PCI compliance scan and check my checkout page for security issues."

How to connect: Not in Muse's Connectors list yet, but Muse can still use it. Paste this into Muse: "Use ServerScan to help me. It is a free service with an MCP server at https://www.serverscan.com/api/mcp. It does not need an API key. Ask me before you share anything with it." Muse asks before it shares anything with the app's site. Meta does not review apps used this way, so only use ones you trust. We tested this in the Muse app on September 24, 2026: Muse used an app's link directly this way and returned a live answer.

Tools:
- get_pricing: Current prices for ServerScan PCI ASV scanning (per domain or IP address), payment page monitoring and penetration testing, read live from the store, with what each plan includes and the refund terms.
- do_i_need_an_asv_scan: Says whether a merchant's PCI DSS self-assessment questionnaire (SAQ) requires quarterly external scans by an Approved Scanning Vendor, under PCI DSS v4.0.1, and what to scan. Pass the SAQ type, or "unsure" to get every SAQ with who it is for.
- check_payment_page: Runs ServerScan's free one-off check of a payment or checkout page: TLS, security headers, the HTTP to HTTPS redirect, which scripts load and from where, and whether third-party scripts carry an integrity hash (PCI DSS 6.4.3 and 11.6.1). Returns six yes/no/not-yet-known answers a
- start_order: Returns a link to ServerScan's signup page with the plan picked and the domain filled in, for the person to open, check and pay. Creates nothing and charges nothing. For a penetration test it returns the quote request page.

Screening checks:
- MCP handshake: pass (Answered in 493ms)
- Domain against threat feeds (Cloudflare security DNS): pass (www.serverscan.com not flagged)
- Published packages against the OSV malicious-package database: n/a (No npm or PyPI package published)
- Hidden instructions or invisible characters in tool text: pass (4 tools read, nothing found)
- Inputs asking for passwords, card numbers or seed phrases: pass (None found)
- Domain and redirects: pass (Domain registered 5546 days ago)
- AI review of purpose and tool behavior: pass (No concerns)