Scan a server

Send it to the sealed room.

Paste any MCP server: a name, a link or the command you were told to run. HIA installs it in a fresh gVisor sandbox, calls every tool and writes a public report.

An npm or PyPI name, a registry or GitHub link, an npx / uvx command, or the server's block from your MCP config (only variable names are used: the sandbox gets fake values, yours are never kept).

Scans are limited per day. Only public registry packages are accepted.

Live scan

    hia@sandbox waiting for a package