shieldapi.full_scan
Read-onlyIdempotent
Run comprehensive security checks on URLs, domains, IP addresses, or emails to identify vulnerabilities and threats.
Instructions
Run all security checks on a target (URL, domain, IP, or email). Most comprehensive scan.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target | Yes | Target to scan — URL, domain, IP address, or email |
Implementation Reference
- src/index.ts:190-196 (handler)The registration and execution logic for the 'shieldapi.full_scan' tool, which calls `callShieldApi` with the 'full-scan' endpoint.
server.tool( 'shieldapi.full_scan', 'Run all security checks on a target (URL, domain, IP, or email). Most comprehensive scan.', { target: z.string().describe('Target to scan — URL, domain, IP address, or email') }, { title: 'Full Security Scan', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async ({ target }) => formatResult(await callShieldApi('full-scan', detectTargetType(target))) ); - src/index.ts:101-116 (helper)The `callShieldApi` function responsible for making the underlying HTTP request to the ShieldAPI service.
async function callShieldApi(endpoint: string, params: Record<string, string>): Promise<unknown> { const url = new URL(`${SHIELDAPI_URL}/api/${endpoint}`); for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); } if (demoMode) { url.searchParams.set('demo', 'true'); } const response = await paymentFetch(url.toString()); if (!response.ok) { const body = await response.text(); throw new Error(`ShieldAPI ${endpoint} failed (${response.status}): ${body.substring(0, 200)}`); } return response.json(); }