Skip to content

AI Tool Directory

by tooldirectory.ai · remote · no sign-in to list tools · v1.1.0 · published by ai.tooldirectory

Search 2,000+ AI tools: pricing, alternatives, comparisons, and live, dead or acquired status.

Read only
CompareRegistry entry

6 tools: 6 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http catalog https://tooldirectory.ai/api/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Only reads 6Claude Code: allow
  • check_tool_statusCheck whether an AI tool is still alive.Reads text others writeNo findings

    Why it is in this group

    • The name "check_tool_status" says "status": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Check whether an AI tool is still alive. Returns active, deceased, or acquired — with the date and cause if it shut down, and live alternatives if it did. Use this before recommending a tool to avoid suggesting one that no longer exists.

    Annotations the server declares

    • title: Check if a tool is still active
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • compare_toolsCompare two AI tools side by side by their directory slugs.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "compare_tools" says "compare": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "compare" and "directory": it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Compare two AI tools side by side by their directory slugs. Returns each tool’s profile (pricing, rating, editorial verdict, lifecycle) plus the editor’s head-to-head verdict and bottom line when one exists for the pair.

    Annotations the server declares

    • title: Compare two tools
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • find_alternativesFind curated alternatives to a given AI tool by its directory slug.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "find_alternatives" says "find": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "find" and "directory": it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Find curated alternatives to a given AI tool by its directory slug. If the tool has shut down, returns live replacements. Good for "what should I use instead of X" questions.

    Annotations the server declares

    • title: Find tool alternatives
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_toolGet the full profile of one AI tool by its directory slug: description, pricing, key features, editorial verdict and rating, the date it was last human-verified, lifecycle status, …Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_tool" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "directory": it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "get" and "url": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Get the full profile of one AI tool by its directory slug: description, pricing, key features, editorial verdict and rating, the date it was last human-verified, lifecycle status, and the official site URL.

    Annotations the server declares

    • title: Get tool details
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_toolsList the top-rated active AI tools in a category or for a job role, optionally filtered by pricing.Reads text others writeNo findings

    Why it is in this group

    • The name "list_tools" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List the top-rated active AI tools in a category or for a job role, optionally filtered by pricing. Good for "what are the best AI tools for sales" or "free tools in <category>".

    Annotations the server declares

    • title: List tools by category or role
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_toolsSearch the AI Tool Directory catalog (2,000+ AI tools) by keyword, use case, or category using hybrid semantic search.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "search_tools" says "search": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "search" and "directory": it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Search the AI Tool Directory catalog (2,000+ AI tools) by keyword, use case, or category using hybrid semantic search. Returns ranked tools with slug, one-line description, pricing model, and rating. Use this to discover tools, then get_tool for full detail.

    Annotations the server declares

    • title: Search AI tools
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data4
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write6
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http catalog https://tooldirectory.ai/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__catalog__search_tools",
      "mcp__catalog__get_tool",
      "mcp__catalog__check_tool_status",
      "mcp__catalog__find_alternatives",
      "mcp__catalog__compare_tools",
      "mcp__catalog__list_tools"
    ],
    "ask": [],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as catalog. Review it before you use it.

Capability tags behind 6 rules
  • mcp__catalog__search_tools private-data, untrusted-input
  • mcp__catalog__get_tool private-data, untrusted-input
  • mcp__catalog__check_tool_status untrusted-input
  • mcp__catalog__find_alternatives private-data, untrusted-input
  • mcp__catalog__compare_tools private-data, untrusted-input
  • mcp__catalog__list_tools untrusted-input