Skip to content

AgentBIT

by agentbit.app · remote · no sign-in to list tools · v1.3.0 · published by app.agentbit

x402 router-proxy + 79 keyless pay-per-call tools on Base. Pay once, we run the best tool.

Final · 1Changes · 74
CompareRegistry entry

100 tools: 1 do something that can't be undone, 74 change things and 25 only read.

Scanned Oct 21, 2026

7 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agentbit https://agentbit.app/mcp

Findings

Matches of fixed checks, with the text they matched.

6 warn1 info
  • Warnagentbit.convert_csv_json

    The server marks "agentbit.convert_csv_json" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agentbit.convert_csv_json" says "convert": a word for a change.

    What this check looks for
  • Warnagentbit.convert_json_csv

    The server marks "agentbit.convert_json_csv" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agentbit.convert_json_csv" says "convert": a word for a change.

    What this check looks for
  • Warnagentbit.convert_xml_json

    The server marks "agentbit.convert_xml_json" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agentbit.convert_xml_json" says "convert": a word for a change.

    What this check looks for
  • Warnagentbit.text_slugify

    The server marks "agentbit.text_slugify" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "convert": a word for a change.

    What this check looks for
  • Warnagentbit.timestamp_convert

    The server marks "agentbit.timestamp_convert" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agentbit.timestamp_convert" says "convert": a word for a change.

    What this check looks for
  • Warnagentbit.uuid_generate

    The server marks "agentbit.uuid_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agentbit.uuid_generate" says "generate": a word for a change.

    What this check looks for
Show 1 more finding

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

100 tools

Can't be undone 1Claude Code: ask
  • agentbit.timestamp_convertConvert a timestamp between unix seconds and ISO-8601 (UTC) in either direction: {value, from:unix|iso, to:unix|iso}.1 finding

    Why it is in this group

    • The name "agentbit.timestamp_convert" says "convert": a word for a change.
    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "agentbit.timestamp_convert" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agentbit.timestamp_convert" says "convert": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Convert a timestamp between unix seconds and ISO-8601 (UTC) in either direction: {value, from:unix|iso, to:unix|iso}. Timezone-safe date math for scheduling, logs and on-chain timestamps. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 74Claude Code: ask
  • agentbit_routeTHE general-purpose tool: use this whenever you need data or an action that no other tool here covers.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    THE general-purpose tool: use this whenever you need data or an action that no other tool here covers. Describe the task and we pick the single best x402 tool for it across the whole ecosystem (14,000+ tools) — including external sellers, paid from our treasury — run it, and return the result. Examples: "get the latest ethereum block height", "screen this wallet for sanctions", "search the web for X and extract the text", "latest SEC filings for AAPL", "price of ETH in USD". Give a plain-language "task" (we pick the tool) or an explicit "resource" URL, plus optional "body" input. Pay-per-call via x402 (USDC on Base): call without _payment to get the requirements, then retry with _payment set. Prefer this over hard-coding a specific seller.

    Annotations the server declares

    • title: AgentBIT Router — run any x402 tool
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • agentbit.address_eip55EIP-55 mixed-case checksum for a 20-byte EVM (Ethereum/Base) hex address, via Keccak-256.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    EIP-55 mixed-case checksum for a 20-byte EVM (Ethereum/Base) hex address, via Keccak-256. Normalize and verify addresses before a transfer. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.agent_counterAtomic per-agent integer counter (incr/decr/get/set/reset), scoped to the paying wallet.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Atomic per-agent integer counter (incr/decr/get/set/reset), scoped to the paying wallet. For tallies, quotas, sequence numbers. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.agent_memoryPrivate key/value memory for an agent: remember values across calls (set/get/delete/list/exists), scoped to the paying wallet.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Private key/value memory for an agent: remember values across calls (set/get/delete/list/exists), scoped to the paying wallet. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.ai_askGeneral LLM completion: send a prompt (optional system role), get an answer.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    General LLM completion: send a prompt (optional system role), get an answer. Reason, rewrite, classify, draft or answer. Flat price, input/output capped. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.ai_classifyClassify text into your labels with confidence and per-label scores.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Classify text into your labels with confidence and per-label scores. Single- or multi-label. Cheap and high-volume: routing, tagging, moderation triage, intent. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.ai_extractTurn messy text into clean JSON.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Turn messy text into clean JSON. Pass text plus a field `schema` or plain `instructions`; get a validated JSON object back. Uses the provider JSON mode. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.ai_translateHigh-quality LLM translation with control: target language, optional formality and tone, auto source detection.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    High-quality LLM translation with control: target language, optional formality and tone, auto source detection. Preserves nuance and idiom. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.browser_renderRender a URL in a headless browser and return HTML, markdown or screenshot.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Render a URL in a headless browser and return HTML, markdown or screenshot. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.business_identityLegal entity identity via GLEIF: look up a company by LEI, search legal entities by name across jurisdictions, or validate an LEI checksum.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Legal entity identity via GLEIF: look up a company by LEI, search legal entities by name across jurisdictions, or validate an LEI checksum. Returns legal name, status, jurisdiction, registered address and registration details — authoritative data for KYB and compliance agents. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.company_briefOne-call executive brief on a company: aggregates enrichment + news + website + risk, then an LLM distills it into overview, products, developments, risks, opportunities.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    One-call executive brief on a company: aggregates enrichment + news + website + risk, then an LLM distills it into overview, products, developments, risks, opportunities. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.company_enrichCompany enrichment from a domain: canonical name, website, description, detected technologies (CMS, e-commerce platform, analytics), social profiles and mail infrastructure (MX).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Company enrichment from a domain: canonical name, website, description, detected technologies (CMS, e-commerce platform, analytics), social profiles and mail infrastructure (MX). Live signals read from the company website and DNS — no stale database. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.company_researchOne-call company due-diligence dossier: web-signal enrichment (technologies, socials, mail), recent news from live web search, website agent-readiness score and technical risk indi…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    One-call company due-diligence dossier: web-signal enrichment (technologies, socials, mail), recent news from live web search, website agent-readiness score and technical risk indicators (DNS, SSL, domain age). Normalized JSON — replaces 4–6 separate calls when researching a vendor, lead or counterparty. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.content_moderateScan text for personal data (emails, phones, Luhn-valid card numbers, IPs, crypto addresses) and unsafe language, returning named flags and a 0-100 risk score.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Scan text for personal data (emails, phones, Luhn-valid card numbers, IPs, crypto addresses) and unsafe language, returning named flags and a 0-100 risk score. Offline, key-less — the safety gate before storing or LLM-processing user content. $0.003. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.contract_auditA structured token/contract risk report for a Base contract: a normalized risk score, a pass/warn/fail checklist (bytecode present, sanctions, verified source, ownership, holder co…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    A structured token/contract risk report for a Base contract: a normalized risk score, a pass/warn/fail checklist (bytecode present, sanctions, verified source, ownership, holder concentration) and a single verdict. $0.05. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.convert_csv_jsonConvert CSV text (first row = headers) into a JSON array of row objects.1 finding

    Why it is in this group

    • The name "agentbit.convert_csv_json" says "convert": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "agentbit.convert_csv_json" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agentbit.convert_csv_json" says "convert": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Convert CSV text (first row = headers) into a JSON array of row objects. Parse spreadsheets and exports into structured data. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.convert_json_csvConvert a JSON array of objects into CSV text with a header row.1 finding

    Why it is in this group

    • The name "agentbit.convert_json_csv" says "convert": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "agentbit.convert_json_csv" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agentbit.convert_json_csv" says "convert": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Convert a JSON array of objects into CSV text with a header row. Flatten structured data for spreadsheets and exports. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.convert_xml_jsonConvert an XML document into an equivalent JSON object.1 finding

    Why it is in this group

    • The name "agentbit.convert_xml_json" says "convert": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "agentbit.convert_xml_json" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agentbit.convert_xml_json" says "convert": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Convert an XML document into an equivalent JSON object. Parse XML feeds, SOAP responses and config into JSON. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.counterparty_riskPre-transaction risk screening for a domain, company or email domain: DNS resolution, MX presence, SSL validity/expiry, domain age via RDAP, website reachability.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Pre-transaction risk screening for a domain, company or email domain: DNS resolution, MX presence, SSL validity/expiry, domain age via RDAP, website reachability. Returns risk score 0–100, risk level, per-check results and evidence. Run it before an agent pays, emails or integrates with an unknown party. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.counterparty_verifyOne AML/KYC-style verdict for a counterparty from a single call: wallet sanctions + on-chain risk, name sanctions screening, GLEIF company identity and technical counterparty risk,…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    One AML/KYC-style verdict for a counterparty from a single call: wallet sanctions + on-chain risk, name sanctions screening, GLEIF company identity and technical counterparty risk, merged into clear | review | blocked with an itemized findings list. $0.02. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.crypto_trader_kitOne call, the whole pre-trade picture: crypto market sentiment (Fear & Greed + global stats), live Base gas/block, optional token price(s) and related prediction-market odds.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    One call, the whole pre-trade picture: crypto market sentiment (Fear & Greed + global stats), live Base gas/block, optional token price(s) and related prediction-market odds. A bundled decision snapshot for trading agents, $0.01. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.decode_base58Base58-decode a Bitcoin/Solana string to raw bytes, returned as hex and base64.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Base58-decode a Bitcoin/Solana string to raw bytes, returned as hex and base64. Rejects invalid symbols. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.decode_base64Base64-decode an input string back to its original text.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Base64-decode an input string back to its original text. Strict decoding of standard base64. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.decode_hexHex-decode a hex string (optional 0x prefix) back to bytes, returned as UTF-8 (when printable) and base64.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Hex-decode a hex string (optional 0x prefix) back to bytes, returned as UTF-8 (when printable) and base64. Rejects odd-length or non-hex input. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.decode_urlRFC 3986 percent-decode an input string back to its original text (%20 to space, %2F to /).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    RFC 3986 percent-decode an input string back to its original text (%20 to space, %2F to /). Reverse of url-encode. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.domain_dossierEverything to vet a domain in one call: DNS records + email posture, RDAP registration/age/registrar, IP network/ASN/geo (from the resolved A record) and public threat-intel on the…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Everything to vet a domain in one call: DNS records + email posture, RDAP registration/age/registrar, IP network/ASN/geo (from the resolved A record) and public threat-intel on the site. Four AgentBIT tools, merged. $0.015. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.domain_intelFull domain intelligence via RDAP (the registries' official WHOIS successor): registration and expiry dates with computed age, registrar, EPP status codes, nameservers, DNSSEC — pl…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Full domain intelligence via RDAP (the registries' official WHOIS successor): registration and expiry dates with computed age, registrar, EPP status codes, nameservers, DNSSEC — plus derived risk flags (newly registered, hold status, expiring) and a clean availability answer for unregistered domains. Registry data, structured JSON, no scraping. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.email_deliverabilityEmail address deliverability and risk check before sending: syntax, domain, MX records, SPF, DMARC, disposable-provider detection and role-account detection.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Email address deliverability and risk check before sending: syntax, domain, MX records, SPF, DMARC, disposable-provider detection and role-account detection. Returns a 0–100 deliverability score, risk level and per-check details. Live DNS, no mailbox pinging. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.encode_base58Base58-encode bytes with the Bitcoin/Solana alphabet (no 0, O, I, l) — the encoding behind BTC and Solana addresses.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Base58-encode bytes with the Bitcoin/Solana alphabet (no 0, O, I, l) — the encoding behind BTC and Solana addresses. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.encode_base64Base64-encode an input string.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Base64-encode an input string. Standard encoding for binary-safe transport of text and data. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.encode_hexHex-encode an input string (bytes to lowercase hex).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Hex-encode an input string (bytes to lowercase hex). Binary-safe representation for wire formats, hashes and calldata. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.encode_urlRFC 3986 percent-encode an input string for safe use in URLs, query strings and path segments (spaces become %20).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    RFC 3986 percent-encode an input string for safe use in URLs, query strings and path segments (spaces become %20). Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.endpoint_monitorOne-shot health probe for any endpoint: HTTP status and latency, TLS certificate issuer and days-to-expiry, response size, security-header audit (HSTS, CSP, X-Content-Type-Options,…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    One-shot health probe for any endpoint: HTTP status and latency, TLS certificate issuer and days-to-expiry, response size, security-header audit (HSTS, CSP, X-Content-Type-Options, X-Frame-Options) and named issues (SLOW_RESPONSE, CERTIFICATE_EXPIRING, SERVER_ERROR_STATUS). Call it on a schedule and you have uptime monitoring for a fraction of a cent. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.financial_documentFinancial identifier validation: IBAN validation (format, length per country, mod-97 checksum), IBAN repair suggestions for OCR errors, EU VAT number format validation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Financial identifier validation: IBAN validation (format, length per country, mod-97 checksum), IBAN repair suggestions for OCR errors, EU VAT number format validation. Deterministic, instant, no third-party calls — for invoice, payment and onboarding agents. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.fxLive foreign-exchange rates for one or many currency pairs (e.g.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Live foreign-exchange rates for one or many currency pairs (e.g. EUR/USD, EUR/RON, USD/JPY) with mid, indicative bid/ask, source attribution, timestamp and confidence. ECB-derived reference rates, cached 30 seconds. Use for pricing, conversions and finance agents. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.hash_hmacCompute an HMAC signature (hex) of an input string with a secret key.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Compute an HMAC signature (hex) of an input string with a secret key. Supports sha256, sha512 and other algorithms — for webhook signing and message authentication. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.hash_keccak256Ethereum Keccak-256 hex digest of input — original Keccak (0x01 padding), not NIST SHA3-256.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Ethereum Keccak-256 hex digest of input — original Keccak (0x01 padding), not NIST SHA3-256. Used for EVM checksums, event topics and Solidity keccak256. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.hash_md5Compute the MD5 hash (hex digest) of an input string.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Compute the MD5 hash (hex digest) of an input string. Fast, deterministic checksums and legacy fingerprints (not for security-sensitive hashing). Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.hash_sha1Compute the SHA-1 hash (hex digest) of an input string.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Compute the SHA-1 hash (hex digest) of an input string. Deterministic fingerprints and git-style content identifiers. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.hash_sha256Compute the SHA-256 hash (hex digest) of an input string.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Compute the SHA-256 hash (hex digest) of an input string. Deterministic cryptographic hashing for checksums, fingerprints and content addressing. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.hash_sha512Compute the SHA-512 hash (hex digest) of an input string.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Compute the SHA-512 hash (hex digest) of an input string. Deterministic cryptographic hashing for checksums and fingerprints. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.ip_intelIP address intelligence from official internet-registry data (RIPEstat, the RIPE NCC public API): ASN and network holder, announced prefix, RIR-registered country, abuse contact — …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    IP address intelligence from official internet-registry data (RIPEstat, the RIPE NCC public API): ASN and network holder, announced prefix, RIR-registered country, abuse contact — plus reverse DNS and private/reserved-range detection. Registry truth, not commercial geolocation guesses. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.jwt_decodeDecode a JSON Web Token (JWT) into its header and payload claims without signature verification.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Decode a JSON Web Token (JWT) into its header and payload claims without signature verification. Inspect exp, iss, sub and custom claims. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.maps_reviewsRecent Google Maps reviews for a place: author, text, rating, date, owner response, plus the place summary.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Recent Google Maps reviews for a place: author, text, rating, date, owner response, plus the place summary. Give a place_id or a query. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.market_sentimentCrypto market sentiment in one call: the Fear & Greed index (0-100 with classification) plus global market stats — total market cap, 24h volume, BTC/ETH dominance and 24h change.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Crypto market sentiment in one call: the Fear & Greed index (0-100 with classification) plus global market stats — total market cap, 24h volume, BTC/ETH dominance and 24h change. Free public data, $0.002. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.onchain_gasFREE onchain heartbeat for Base: current gas price and EIP-1559 base fee (wei + gwei) plus the latest block number and timestamp.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    FREE onchain heartbeat for Base: current gas price and EIP-1559 base fee (wei + gwei) plus the latest block number and timestamp. One call, no payment, no wallet. The zero-friction primitive every onchain agent checks on a loop. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.prediction_marketsLive prediction-market data from Polymarket: the most liquid active markets with their outcomes, current prices (implied odds), liquidity, volume and end date.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Live prediction-market data from Polymarket: the most liquid active markets with their outcomes, current prices (implied odds), liquidity, volume and end date. Optionally filter by a query. Public data, $0.005. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.protocol_tvlDeFi protocol fundamentals in one call: current TVL, 1-day and 7-day change, category, chains and website for any protocol — search by name, or screen the whole universe by categor…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    DeFi protocol fundamentals in one call: current TVL, 1-day and 7-day change, category, chains and website for any protocol — search by name, or screen the whole universe by category and chain ranked by TVL. Open DefiLlama data, refreshed server-side every 15 minutes. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.researchAnswer a question from the live web with citations in one call: web search + grounded LLM synthesis.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Answer a question from the live web with citations in one call: web search + grounded LLM synthesis. Returns answer, cited sources, confidence, follow-ups. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.sanctions_screenScreen a person or company name against the OFAC SDN and UN Security Council consolidated sanctions lists: fuzzy matching with similarity scores, matched programs, entity type and …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Screen a person or company name against the OFAC SDN and UN Security Council consolidated sanctions lists: fuzzy matching with similarity scores, matched programs, entity type and country. Lists refreshed daily from official sources; screening runs locally — deterministic and fast. A match requires human review; not legal advice. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.sec_filingsRecent SEC EDGAR filings for a US public company by ticker or CIK, optionally filtered by form (10-K, 10-Q, 8-K, ...).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Recent SEC EDGAR filings for a US public company by ticker or CIK, optionally filtered by form (10-K, 10-Q, 8-K, ...). Returns form, filing/report dates, accession number and a direct document URL. Free public source, $0.01. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.server_timeFREE authoritative UTC clock: current unix seconds and milliseconds, ISO-8601, RFC 2822, date/time, day-of-week, day-of-year and ISO week.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    FREE authoritative UTC clock: current unix seconds and milliseconds, ISO-8601, RFC 2822, date/time, day-of-week, day-of-year and ISO week. One call, no payment, no input. A high-frequency poll magnet for agents. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.social_profilePublic social profile lookup: display name, bio, followers, following, posts, verified & business flags, category, external link.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Public social profile lookup: display name, bio, followers, following, posts, verified & business flags, category, external link. Instagram supported. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.stablecoin_statsStablecoin market data with the number agents paying in USDC actually need: current price and PEG DEVIATION per coin, circulating supply, peg mechanism and chains, ranked by market…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Stablecoin market data with the number agents paying in USDC actually need: current price and PEG DEVIATION per coin, circulating supply, peg mechanism and chains, ranked by market cap. Filter by symbol or screen for depegs (absolute deviation above a threshold). Open DefiLlama data, refreshed every 10 minutes. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.stock_priceLatest equity quote from a free, key-less source (Yahoo Finance): price, day open/high/low, previous close, % change, volume and currency.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Latest equity quote from a free, key-less source (Yahoo Finance): price, day open/high/low, previous close, % change, volume and currency. Input a symbol like AAPL. Delayed, $0.005. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.structured_extractExtract a page's machine-readable self-description in one call: every JSON-LD block (schema.org), OpenGraph and Twitter Card metadata, canonical URL, title, meta description, H1, h…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Extract a page's machine-readable self-description in one call: every JSON-LD block (schema.org), OpenGraph and Twitter Card metadata, canonical URL, title, meta description, H1, hreflang alternates and RSS/Atom feed links — parsed server-side into clean JSON. Where text extraction gives you prose, this gives you structured facts. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.text_keywordsExtract the top keywords and key phrases from text (frequency, stopword-filtered) plus structured entities by pattern — emails, URLs, @mentions, #hashtags, phones, money, dates and…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Extract the top keywords and key phrases from text (frequency, stopword-filtered) plus structured entities by pattern — emails, URLs, @mentions, #hashtags, phones, money, dates and 0x crypto addresses. Offline, key-less, $0.002. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.text_slugifyConvert any string into a URL slug: ASCII, lower-cased, dashes for separators.1 finding

    Why it is in this group

    • The description's first verb is "convert": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "agentbit.text_slugify" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "convert": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Convert any string into a URL slug: ASCII, lower-cased, dashes for separators. For permalinks, filenames and stable ids. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.token_priceCurrent token prices for up to 10 tokens per call, on any chain: address as <chain>:<address> (base:0x…, ethereum:0x…) or coingecko:<id> for majors.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Current token prices for up to 10 tokens per call, on any chain: address as <chain>:<address> (base:0x…, ethereum:0x…) or coingecko:<id> for majors. Aggregated market price with a confidence score and timestamp, from DefiLlama's open price engine. $0.002 — priced for agents that check before every trade. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.token_riskAudit an ERC-20 token on Base before you touch it: contract verification status, owner renounced or not, upgradeable proxy, holder count and top-holder concentration, malicious pub…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Audit an ERC-20 token on Base before you touch it: contract verification status, owner renounced or not, upgradeable proxy, holder count and top-holder concentration, malicious public tags, USD price, plus a sanctions check on the contract address itself. Returns a 0-100 risk score with named flags. Static + market-structure analysis from public data — zero-key, deterministic. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.url_parseParse a URL into its components: scheme, host, port, path, query and fragment.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Parse a URL into its components: scheme, host, port, path, query and fragment. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.url_threat_checkScreen a URL before your agent follows it: phishing-pattern heuristics (IP-literal hosts, punycode, credentials in the URL, shorteners, deep subdomain nesting), a safe server-side …1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...heuristics (IP-literal hosts, punycode, credentials in the URL, shorteners, deep subdomain..."

      What this check looks for
    Description, as the server wrote it
    Screen a URL before your agent follows it: phishing-pattern heuristics (IP-literal hosts, punycode, credentials in the URL, shorteners, deep subdomain nesting), a safe server-side redirect trace with cross-host detection, and an optional URLhaus malware-database lookup. Returns a 0-100 risk score with named flags. Honest scope: heuristics + public threat data, not a sandbox. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.util_transformDeterministic utility operations for agents: sha256/sha512/HMAC hashing, JWT decode, base64 encode/decode, UUID generation, JSON validation, CSV↔JSON, XML→JSON, URL parsing and sem…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Deterministic utility operations for agents: sha256/sha512/HMAC hashing, JWT decode, base64 encode/decode, UUID generation, JSON validation, CSV↔JSON, XML→JSON, URL parsing and semver comparison. Sub-millisecond, no external calls. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.uuid_generateGenerate a random RFC 4122 version 4 UUID.1 finding

    Why it is in this group

    • The name "agentbit.uuid_generate" says "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "agentbit.uuid_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agentbit.uuid_generate" says "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Generate a random RFC 4122 version 4 UUID. Unique identifiers for records, requests and idempotency keys. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.vat_checkLIVE EU VAT number validation against VIES, the European Commission's official service — not a format check: the number is verified in the member state's actual register, returning…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    LIVE EU VAT number validation against VIES, the European Commission's official service — not a format check: the number is verified in the member state's actual register, returning the registered trader name and address where published. Covers all 27 member states plus Northern Ireland (XI). Essential before B2B invoicing with reverse charge. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.wallet_counterpartiesWho does this wallet transact with?No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Who does this wallet transact with? Recent activity (~100 transactions) aggregated into a ranked counterparty list: address, explorer name where known, interactions in/out, total native value, first/last seen, methods used. The related-wallets answer from open data — honest about being a recent-activity sample. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.wallet_dossierThe complete picture of a Base wallet in one call: profile (balance, type, ERC-20 holdings), recent transactions, top counterparties and sanctions/risk screening — merged from four…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The complete picture of a Base wallet in one call: profile (balance, type, ERC-20 holdings), recent transactions, top counterparties and sanctions/risk screening — merged from four AgentBIT wallet tools. $0.02. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.wallet_profileFull wallet profile on Base in one call: native balance, nonce, EOA vs contract vs EIP-7702 delegated, total transaction count, ERC-20 holdings with USD values where known, and pub…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Full wallet profile on Base in one call: native balance, nonce, EOA vs contract vs EIP-7702 delegated, total transaction count, ERC-20 holdings with USD values where known, and public tags — from public chain data. The profiler answer at half the price of proprietary alternatives. Pairs with wallet-screen (risk) and wallet-transactions (history). Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.wallet_screenScreen a wallet address before you transact with it: sanctions check against the OFAC SDN digital-currency address list and UN consolidated list (refreshed daily, matched locally),…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Screen a wallet address before you transact with it: sanctions check against the OFAC SDN digital-currency address list and UN consolidated list (refreshed daily, matched locally), plus free on-chain signals on Base — contract vs EOA, verification status, activity, balance, malicious public tags. Returns a 0-100 risk score with named flags. Built for x402 agents screening counterparties. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.wallet_transactionsThe latest transactions of any wallet on Base, normalized for agents: hash, direction (in/out), counterparty address and explorer name, native value, method called, status, fee and…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The latest transactions of any wallet on Base, normalized for agents: hash, direction (in/out), counterparty address and explorer name, native value, method called, status, fee and timestamp. Up to 50 per call from public explorer data. The history layer of the wallet-intelligence shelf. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.weatherWeather forecast for any coordinates worldwide: current conditions plus a condensed hourly forecast (temperature, wind, humidity, precipitation, condition codes) and a will-it-rain…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Weather forecast for any coordinates worldwide: current conditions plus a condensed hourly forecast (temperature, wind, humidity, precipitation, condition codes) and a will-it-rain summary. Official MET Norway model data (the institute behind yr.no) — commercial use permitted, attribution included. $0.002 per call. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.website_agent_readinessAudit any website for AI-agent and AI-crawler readiness: HTTPS, robots.txt and AI bot rules (GPTBot, ClaudeBot, PerplexityBot), llms.txt, sitemap, title/meta, schema.org JSON-LD, s…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Audit any website for AI-agent and AI-crawler readiness: HTTPS, robots.txt and AI bot rules (GPTBot, ClaudeBot, PerplexityBot), llms.txt, sitemap, title/meta, schema.org JSON-LD, security headers. Returns a 0–100 score with failed checks, issues and concrete recommendations. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.wiki_factsEncyclopedic grounding in one call: Wikipedia search plus the full summary of the best match — extract, short description, canonical URL, thumbnail — in any of 300+ language editio…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Encyclopedic grounding in one call: Wikipedia search plus the full summary of the best match — extract, short description, canonical URL, thumbnail — in any of 300+ language editions. Official Wikimedia REST APIs, CC BY-SA attribution included. The cheapest way for an agent to ground an entity before reasoning about it. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.x402_intelligenceMarket analytics for the x402 ecosystem: search indexed resources, trending, seller reports with on-chain trend, price history over time, full market overview (sources, categories,…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Market analytics for the x402 ecosystem: search indexed resources, trending, seller reports with on-chain trend, price history over time, full market overview (sources, categories, price distribution, on-chain leaders), competition stats and scored opportunities. Built from continuously scanned public x402 indexes (Coinbase Bazaar, Agent402, Agentic Market) with historical snapshots. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 25Claude Code: allow
  • agentbit_discoverSearch every indexed x402 resource across Coinbase Bazaar, Agent402 and Agentic Market (7k+ tools): name, price, seller, network, usage metrics.No findings

    Why it is in this group

    • The description's first verb is "search": a word for reading.
    Description, as the server wrote it
    Search every indexed x402 resource across Coinbase Bazaar, Agent402 and Agentic Market (7k+ tools): name, price, seller, network, usage metrics. Free — use it FIRST to find the right paid tool for any task.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.agent_listPrivate ordered list/queue for an agent: push/pop/peek/range/length/clear, scoped to the paying wallet.No findings

    Why it is in this group

    • The name "agentbit.agent_list" says "list": a word for reading.
    Description, as the server wrote it
    Private ordered list/queue for an agent: push/pop/peek/range/length/clear, scoped to the paying wallet. For task queues, event logs, buffers. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.ai_summarizeLLM-quality summary of long text as a paragraph, bullets or a one-liner.No findings

    Why it is in this group

    • The name "agentbit.ai_summarize" says "summarize": a word for reading.
    Description, as the server wrote it
    LLM-quality summary of long text as a paragraph, bullets or a one-liner. Reads for meaning (nuance, tone) — unlike the free extractive summarizer. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.defi_yieldsSearch every tracked DeFi yield pool with TVL over $50k: filter by chain, project, token symbol, stablecoin-only and minimum TVL, ranked by APY with base/reward split and IL risk.No findings

    Why it is in this group

    • The description's first verb is "search": a word for reading.
    Description, as the server wrote it
    Search every tracked DeFi yield pool with TVL over $50k: filter by chain, project, token symbol, stablecoin-only and minimum TVL, ranked by APY with base/reward split and IL risk. Open DefiLlama data, refreshed server-side every 15 minutes. $0.002 per query — the yield screener as a pay-per-call primitive. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.discoverSearch every indexed x402 resource across Coinbase Bazaar, Agent402 and Agentic Market in one call (7k+ tools): name, description, price, seller, network and real usage metrics (ca…No findings

    Why it is in this group

    • The description's first verb is "search": a word for reading.
    Description, as the server wrote it
    Search every indexed x402 resource across Coinbase Bazaar, Agent402 and Agentic Market in one call (7k+ tools): name, description, price, seller, network and real usage metrics (calls, unique buyers, settled volume), with per-source freshness data. The meta-tool for agents: find the right paid tool for any task first, then call it. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.dns_inspectComplete DNS inspection in one call over DNS-over-HTTPS: A, AAAA, MX, TXT, NS, CNAME, SOA and CAA records with TTLs — plus a derived email posture analysis (SPF present and policy,…No findings

    Why it is in this group

    • The name "agentbit.dns_inspect" says "inspect": a word for reading.
    Description, as the server wrote it
    Complete DNS inspection in one call over DNS-over-HTTPS: A, AAAA, MX, TXT, NS, CNAME, SOA and CAA records with TTLs — plus a derived email posture analysis (SPF present and policy, DMARC present and policy, MX count, overall assessment) that raw lookup tools don't do. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.feed_readFetch any RSS or Atom feed and get normalized JSON items — title, link, ISO-8601 date, plain-text summary, author, categories.No findings

    Why it is in this group

    • The name "agentbit.feed_read" says "read": a word for reading.
    Description, as the server wrote it
    Fetch any RSS or Atom feed and get normalized JSON items — title, link, ISO-8601 date, plain-text summary, author, categories. Point it at a regular HTML page and it auto-discovers the feed. RSS 2.0, RSS 1.0/RDF and Atom, messy real-world feeds included. The monitoring primitive for agents that watch sources. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.json_diffStructural diff of two JSON values: dotted-path lists of added, removed and changed fields, plus an equal flag.No findings

    Why it is in this group

    • The name "agentbit.json_diff" says "diff": a word for reading.
    Description, as the server wrote it
    Structural diff of two JSON values: dotted-path lists of added, removed and changed fields, plus an equal flag. Input JSON strings or objects. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.json_validateValidate whether an input string is well-formed JSON.No findings

    Why it is in this group

    • The name "agentbit.json_validate" says "validate": a word for reading.
    Description, as the server wrote it
    Validate whether an input string is well-formed JSON. Returns a valid flag and a parser error message when invalid. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.onchain_readCheap generic EVM reads on Base for AI agents: native balance, nonce, contract code, ERC-20 token balance, eth_call, gas price, latest block, and transaction/receipt lookups.No findings

    Why it is in this group

    • The name "agentbit.onchain_read" says "read": a word for reading.
    Description, as the server wrote it
    Cheap generic EVM reads on Base for AI agents: native balance, nonce, contract code, ERC-20 token balance, eth_call, gas price, latest block, and transaction/receipt lookups. One call, read-only, $0.001. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.semver_compareCompare two semantic version strings.No findings

    Why it is in this group

    • The name "agentbit.semver_compare" says "compare": a word for reading.
    Description, as the server wrote it
    Compare two semantic version strings. Returns -1, 0 or 1 for less-than, equal or greater-than. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.text_analyzeAnalyze any text in one call: detected language (with script + confidence), readability (Flesch Reading Ease & Flesch-Kincaid grade with reading level) and full statistics — word/s…No findings

    Why it is in this group

    • The name "agentbit.text_analyze" says "analyze": a word for reading.
    Description, as the server wrote it
    Analyze any text in one call: detected language (with script + confidence), readability (Flesch Reading Ease & Flesch-Kincaid grade with reading level) and full statistics — word/sentence/paragraph counts, reading time, lexical diversity. Offline, key-less, $0.002. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.text_diffDiff two texts offline (LCS-based): the added and removed lines, a count of changed line-pairs, added/removed word tallies and a 0-1 similarity ratio.No findings

    Why it is in this group

    • The name "agentbit.text_diff" says "diff": a word for reading.
    Description, as the server wrote it
    Diff two texts offline (LCS-based): the added and removed lines, a count of changed line-pairs, added/removed word tallies and a 0-1 similarity ratio. Key-less, instant, $0.002. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.text_summarizeExtractive summary of any text, computed offline (no LLM): ranks sentences by term significance and returns the top ones in reading order.No findings

    Why it is in this group

    • The name "agentbit.text_summarize" says "summarize": a word for reading.
    Description, as the server wrote it
    Extractive summary of any text, computed offline (no LLM): ranks sentences by term significance and returns the top ones in reading order. Set how many sentences you want. Key-less, instant, $0.002. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agentbit.web_briefFetch a URL and return a structured LLM brief: summary, key points, entities, topics, sentiment, notable facts — one call instead of fetch + reason.No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch a URL and return a structured LLM brief: summary, key points, entities, topics, sentiment, notable facts — one call instead of fetch + reason. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.web_extractFetch any public URL and return clean, structured content: title, meta description, main text, markdown, headings, outbound links and page metadata.No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch any public URL and return clean, structured content: title, meta description, main text, markdown, headings, outbound links and page metadata. Removes scripts, navigation and boilerplate. Ideal for reading articles, docs and product pages before reasoning over them. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.web_jsonFetch a URL and extract exactly the JSON you ask for.No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch a URL and extract exactly the JSON you ask for. Pass a field `schema` (or `instructions`) and get a validated JSON object pulled from the page content. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agentbit.x402_inspectLint any x402 endpoint or payment header against the v2 spec and real CDP facilitator behavior: CAIP-2 network ids, atomic amounts, the EIP-712 domain-name trap ('USD Coin' on Base…No findings

    Why it is in this group

    • The name "agentbit.x402_inspect" says "inspect": a word for reading.
    Description, as the server wrote it
    Lint any x402 endpoint or payment header against the v2 spec and real CDP facilitator behavior: CAIP-2 network ids, atomic amounts, the EIP-712 domain-name trap ('USD Coin' on Base mainnet vs 'USDC' on Sepolia — wrong name = every settlement fails), the extensions echo Coinbase Bazaar requires for indexing, expired authorizations. Findings as error/warning/info with what will actually break. Built by a seller that debugged all of these in production. Pay-per-call via x402 (USDC, Base).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http agentbit https://agentbit.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__agentbit__agentbit_discover",
      "mcp__agentbit__agentbit_agent_list",
      "mcp__agentbit__agentbit_ai_summarize",
      "mcp__agentbit__agentbit_amazon_search",
      "mcp__agentbit__agentbit_defi_yields",
      "mcp__agentbit__agentbit_dns_inspect",
      "mcp__agentbit__agentbit_feed_read",
      "mcp__agentbit__agentbit_json_diff",
      "mcp__agentbit__agentbit_json_validate",
      "mcp__agentbit__agentbit_maps_search",
      "mcp__agentbit__agentbit_news_search",
      "mcp__agentbit__agentbit_onchain_read",
      "mcp__agentbit__agentbit_paper_search",
      "mcp__agentbit__agentbit_reddit_search",
      "mcp__agentbit__agentbit_semver_compare",
      "mcp__agentbit__agentbit_shopping_search",
      "mcp__agentbit__agentbit_text_analyze",
      "mcp__agentbit__agentbit_text_diff",
      "mcp__agentbit__agentbit_text_summarize",
      "mcp__agentbit__agentbit_web_brief",
      "mcp__agentbit__agentbit_web_extract",
      "mcp__agentbit__agentbit_web_json",
      "mcp__agentbit__agentbit_web_search",
      "mcp__agentbit__agentbit_x402_inspect"
    ],
    "ask": [
      "mcp__agentbit__agentbit_route",
      "mcp__agentbit__agentbit_address_eip55",
      "mcp__agentbit__agentbit_agent_counter",
      "mcp__agentbit__agentbit_agent_memory",
      "mcp__agentbit__agentbit_ai_ask",
      "mcp__agentbit__agentbit_ai_classify",
      "mcp__agentbit__agentbit_ai_extract",
      "mcp__agentbit__agentbit_ai_translate",
      "mcp__agentbit__agentbit_browser_render",
      "mcp__agentbit__agentbit_business_identity",
      "mcp__agentbit__agentbit_company_brief",
      "mcp__agentbit__agentbit_company_enrich",
      "mcp__agentbit__agentbit_company_research",
      "mcp__agentbit__agentbit_content_moderate",
      "mcp__agentbit__agentbit_contract_audit",
      "mcp__agentbit__agentbit_convert_csv_json",
      "mcp__agentbit__agentbit_convert_json_csv",
      "mcp__agentbit__agentbit_convert_xml_json",
      "mcp__agentbit__agentbit_counterparty_risk",
      "mcp__agentbit__agentbit_counterparty_verify",
      "mcp__agentbit__agentbit_crypto_trader_kit",
      "mcp__agentbit__agentbit_decode_base58",
      "mcp__agentbit__agentbit_decode_base64",
      "mcp__agentbit__agentbit_decode_hex",
      "mcp__agentbit__agentbit_decode_url",
      "mcp__agentbit__agentbit_domain_dossier",
      "mcp__agentbit__agentbit_domain_intel",
      "mcp__agentbit__agentbit_email_deliverability",
      "mcp__agentbit__agentbit_encode_base58",
      "mcp__agentbit__agentbit_encode_base64",
      "mcp__agentbit__agentbit_encode_hex",
      "mcp__agentbit__agentbit_encode_url",
      "mcp__agentbit__agentbit_endpoint_monitor",
      "mcp__agentbit__agentbit_financial_document",
      "mcp__agentbit__agentbit_fx",
      "mcp__agentbit__agentbit_hash_hmac",
      "mcp__agentbit__agentbit_hash_keccak256",
      "mcp__agentbit__agentbit_hash_md5",
      "mcp__agentbit__agentbit_hash_sha1",
      "mcp__agentbit__agentbit_hash_sha256",
      "mcp__agentbit__agentbit_hash_sha512",
      "mcp__agentbit__agentbit_ip_intel",
      "mcp__agentbit__agentbit_jwt_decode",
      "mcp__agentbit__agentbit_maps_reviews",
      "mcp__agentbit__agentbit_market_sentiment",
      "mcp__agentbit__agentbit_onchain_gas",
      "mcp__agentbit__agentbit_prediction_markets",
      "mcp__agentbit__agentbit_protocol_tvl",
      "mcp__agentbit__agentbit_research",
      "mcp__agentbit__agentbit_sanctions_screen",
      "mcp__agentbit__agentbit_sec_filings",
      "mcp__agentbit__agentbit_server_time",
      "mcp__agentbit__agentbit_social_profile",
      "mcp__agentbit__agentbit_stablecoin_stats",
      "mcp__agentbit__agentbit_stock_price",
      "mcp__agentbit__agentbit_structured_extract",
      "mcp__agentbit__agentbit_text_keywords",
      "mcp__agentbit__agentbit_text_slugify",
      "mcp__agentbit__agentbit_timestamp_convert",
      "mcp__agentbit__agentbit_token_price",
      "mcp__agentbit__agentbit_token_risk",
      "mcp__agentbit__agentbit_url_parse",
      "mcp__agentbit__agentbit_url_threat_check",
      "mcp__agentbit__agentbit_util_transform",
      "mcp__agentbit__agentbit_uuid_generate",
      "mcp__agentbit__agentbit_vat_check",
      "mcp__agentbit__agentbit_wallet_counterparties",
      "mcp__agentbit__agentbit_wallet_dossier",
      "mcp__agentbit__agentbit_wallet_profile",
      "mcp__agentbit__agentbit_wallet_screen",
      "mcp__agentbit__agentbit_wallet_transactions",
      "mcp__agentbit__agentbit_weather",
      "mcp__agentbit__agentbit_website_agent_readiness",
      "mcp__agentbit__agentbit_wiki_facts",
      "mcp__agentbit__agentbit_x402_intelligence"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agentbit. Review it before you use it.