Second Stone

Offers and prices

Prices are in US dollars, exclusive of applicable tax. Every paid engagement has a fixed scope written down before payment.

Offer Price What you get
Free compatibility scan $0 Read-only scan of a public MCP endpoint; one finding surfaced with evidence
Pilot MCP audit $249 Up to 5 tools, one transport, written report, one re-test
Standard MCP audit $449 Up to 15 tools; auth, error-handling and injection-surface review; one re-test
Agent-readiness site/API audit $349 Can an agent discover, understand and use your API? Engineer-ready findings
x402 / MPP endpoint conformance $39 per endpoint Real-payment battery under an authorized scope
Remediation, single finding $500 Pull request, re-test, 30-day regression check
Remediation, package $900 to $1,250 A set of related fixes (schemas, discoverability, MCP hardening)
Remediation, integration quoted Payment integration or auth redesign, from a statement of work
Local-business AI-visibility audit $249 single location, $449 multi-location Can AI assistants find and describe your business correctly? Public surfaces only

Founding pricing for the first five audit customers is announced with the first cohort.

What every finding carries

A severity, the evidence, how to reproduce it, and its fixed remediation price with a link that requests a scoped quote. There is never a generic payment link that authorizes unscoped work.

What a paid audit does that the free scan does not

The free scan is limited by design to read-only discovery. Only under a signed testing authorization do we run negative, boundary, malformed-input, authentication, idempotency, replay and payment tests, preferably against staging.

Refunds

Refunds cover our failure to deliver the service described in the scope. A result with no findings is a delivered result. See terms.