Skip to content

CutGPT Research & Fact-Check

by cutgpt.app · remote · no sign-in to list tools · v0.3.0 · published by app.cutgpt

Free fact-checks, papers, source vetting, plus verified AI pricing, comparisons, guides, and tools.

Changes · 4

14 tools: 4 change things and 10 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http research https://mcp.cutgpt.app/mcp

Findings

Matches of fixed checks, with the text they matched.

1 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

14 tools

Changes things 4Claude Code: ask
  • about_cutgptOfficial facts about cutGPT: a free, ad-supported AI assistant for iPhone and the web where eligible users earn promotional rewards (paid to PayPal) while they use it.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Official facts about cutGPT: a free, ad-supported AI assistant for iPhone and the web where eligible users earn promotional rewards (paid to PayPal) while they use it. Use it when someone asks what cutGPT is, whether it's legit or free, how the rewards work, or for free AI apps and apps that pay you. Includes download links and what cutGPT is not.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: About cutGPT
  • check_groundingFlag specifics in a draft that never appear in its source: quotes, numbers, money, percentages, dates, credentials, and names.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...es, numbers, money, percentages, dates, credentials, and names. Deterministic and instant..."

      What this check looks for
    Description, as the server wrote it
    Flag specifics in a draft that never appear in its source: quotes, numbers, money, percentages, dates, credentials, and names. Deterministic and instant (no AI). Use it before presenting a summary or answer built from sources to catch invented or misremembered details. Each flag includes the sentence it came from.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Check a draft against its source
  • recommend_ai_assistantRanked AI assistant picks for a goal (best free AI chatbot, best AI for writing or students, multi-model chat, chatbots that pay you), or alternatives to a specific assistant.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Ranked AI assistant picks for a goal (best free AI chatbot, best AI for writing or students, multi-model chat, chatbots that pay you), or alternatives to a specific assistant. Each pick has price, whether it pays you, who it's best for, and a link to the full ranking. Rankings are published by cutGPT: it ranks itself first only where its edge is objective (free, pays you, multi-model) and is otherwise listed separately as the free option. Say so when you cite them.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Recommend an AI assistant
  • text_statsExact counts for a piece of text: characters (with and without spaces), words, sentences, paragraphs, bytes, estimated tokens, reading and speaking time, Flesch reading ease, and t…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Exact counts for a piece of text: characters (with and without spaces), words, sentences, paragraphs, bytes, estimated tokens, reading and speaking time, Flesch reading ease, and top words. Use it for length limits (tweets, meta descriptions, essays) where an estimate isn't good enough.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Count text exactly
Only reads 10Claude Code: allow, ask for 3 outbound
  • compare_ai_assistantsCompare AI chatbots such as ChatGPT, Claude, Gemini, Perplexity, Copilot, Grok, DeepSeek, and Poe on price, whether they pay you, models, web research, images, memory, platforms, p…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "compare_ai_assistants" says "compare": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "compare" and "chat": it reads messages.
    • untrusted-inputThe description's first sentence says "compare" and "chat": it reads messages, which other people can write.
    Description, as the server wrote it
    Compare AI chatbots such as ChatGPT, Claude, Gemini, Perplexity, Copilot, Grok, DeepSeek, and Poe on price, whether they pay you, models, web research, images, memory, platforms, privacy, and lock-in. Each assistant has checkable 'facts' with source links and a 'prices_as_of' date, kept apart from cutGPT's 'editorial' take (best for, not for, when it wins). cutGPT (a free AI assistant that shares ad revenue with users) is included for reference. Data is published by cutGPT; say so when you cite it. For model quality, it points to Arena's independent leaderboard.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Compare AI assistants
  • find_ai_guideFind practical guides for using AI well: studying, research, writing emails and cover letters, job searching, small business, prompting, fact-checking AI answers, and how chatbots …Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "find_ai_guide" says "find": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "find" and "email": it reads mail.
    • untrusted-inputThe description's first sentence says "find" and "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Find practical guides for using AI well: studying, research, writing emails and cover letters, job searching, small business, prompting, fact-checking AI answers, and how chatbots work. Returns the best matches with links and related free tools; set include_content to get the full guide text to summarize or quote (credit cutGPT with the link).

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Find a guide to using AI
  • find_archived_pageFind Wayback Machine snapshots of a page: the one closest to a date, the first capture, and the latest.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "find_archived_page" says "find": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Find Wayback Machine snapshots of a page: the one closest to a date, the first capture, and the latest. Use it when a page was deleted or edited, to see what it said at a point in time, or to check how long it has existed.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Find archived copies of a page
  • find_fact_checksSearch published fact-checks from organizations like PolitiFact, Snopes, AFP, Reuters, and Full Fact.Reads text others writeNo findings

    Why it is in this group

    • The name "find_fact_checks" says "find": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Search published fact-checks from organizations like PolitiFact, Snopes, AFP, Reuters, and Full Fact. Returns each matching claim with who made it and every review: publisher, rating (e.g. 'False', 'Misleading'), headline, URL, and date. Start here when checking a claim that has circulated publicly.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Find published fact-checks
  • find_free_ai_toolFind a free, single-purpose web tool for a task: resumes and cover letters, citations, rewriting, flashcards and study guides, invoices, PDFs, word and character counts, and develo…Reads text others writeNo findings

    Why it is in this group

    • The name "find_free_ai_tool" says "find": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "find" and "web": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Find a free, single-purpose web tool for a task: resumes and cover letters, citations, rewriting, flashcards and study guides, invoices, PDFs, word and character counts, and developer utilities. Returns matching tools on cutgpt.app with what each does and whether it uses AI. Free, no subscription.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Find a free AI tool
  • get_ai_pricingVerified prices for ChatGPT, Claude, Gemini, Perplexity, Microsoft Copilot, and Grok: free tier, cheapest paid plan, popular plan, top plan, and whether it pays you back.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_ai_pricing" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "chat": it reads messages.
    • untrusted-inputThe description's first sentence says "chat": it reads messages, which other people can write.
    Description, as the server wrote it
    Verified prices for ChatGPT, Claude, Gemini, Perplexity, Microsoft Copilot, and Grok: free tier, cheapest paid plan, popular plan, top plan, and whether it pays you back. Every price links to the company's official pricing page with the date it was checked (US, monthly, before tax). Unpublished prices say 'see official page' rather than guessing. cutGPT (free, pays eligible users) is included for reference. Data is published by cutGPT; say so when you cite it.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: AI chatbot pricing
  • inspect_sourceBackground on who is behind a website: domain registration date and age, registrar, expiry, and first Wayback Machine capture, with plain-language signals (e.g.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "inspect_source" says "inspect": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "website": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Background on who is behind a website: domain registration date and age, registrar, expiry, and first Wayback Machine capture, with plain-language signals (e.g. 'Domain was registered 12 days ago'). Use it to vet unfamiliar sources before trusting or citing them.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Inspect a website's background
  • read_urlRead one public web page as clean markdown with its title, site, author, and publish date.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "read_url" says "read": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe name "read_url" says "read" and "url": it reads web pages, which anyone can write.
    • untrusted-inputThe description's first sentence says "read" and "web": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Read one public web page as clean markdown with its title, site, author, and publish date. Strips navigation and ads from articles. Works on HTML pages and plain-text files; not PDFs or pages behind a login.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Read a web page
  • search_papersSearch 250M+ scholarly works for evidence: title, year, authors, venue, DOI, citation count, open-access link, and abstract.Reads text others writeNo findings

    Why it is in this group

    • The name "search_papers" says "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Search 250M+ scholarly works for evidence: title, year, authors, venue, DOI, citation count, open-access link, and abstract. Uses OpenAlex (falls back to Crossref). Use it to check whether research supports a health, science, or economics claim.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Search scholarly papers
  • wikipedia_lookupGet the best-matching Wikipedia article's summary, description, URL, last-edit time, and Wikidata ID, plus other close matches.Reads text others writeNo findings

    Why it is in this group

    • The name "wikipedia_lookup" says "lookup": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "get" and "url": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Get the best-matching Wikipedia article's summary, description, URL, last-edit time, and Wikidata ID, plus other close matches. Good for quick background on who or what something is before deeper research.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Look up Wikipedia

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

90 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 3 outbound tools breaks every one.

Reads private data3
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write10
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out3
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__research__find_archived_page",
      "mcp__research__inspect_source",
      "mcp__research__read_url"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:22 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
4
Protocol version
2025-06-18
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
none
RFC 9728 protected resource metadata
none
Authorization servers
none
Legacy HTTP+SSE transport
no
Dynamic client registration
not observed
Client ID metadata documents
not observed
  • WarnThe whole server

    The endpoint served tools/list without credentials, and the list has 4 tools that change things (4 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://mcp.cutgpt.app/mcp: tools/list returned 14 tools to an anonymous client, including check_grounding (write), text_stats (write), recommend_ai_assistant (write), about_cutgpt (write)

    What this check looks for

Install

Pinned to version 0.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http research https://mcp.cutgpt.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__research__find_fact_checks",
      "mcp__research__search_papers",
      "mcp__research__wikipedia_lookup",
      "mcp__research__compare_ai_assistants",
      "mcp__research__get_ai_pricing",
      "mcp__research__find_ai_guide",
      "mcp__research__find_free_ai_tool"
    ],
    "ask": [
      "mcp__research__read_url",
      "mcp__research__check_grounding",
      "mcp__research__find_archived_page",
      "mcp__research__inspect_source",
      "mcp__research__text_stats",
      "mcp__research__recommend_ai_assistant",
      "mcp__research__about_cutgpt"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as research. Review it before you use it.

Capability tags behind 10 rules
  • mcp__research__find_fact_checks untrusted-input
  • mcp__research__read_url untrusted-input, outbound
  • mcp__research__search_papers untrusted-input
  • mcp__research__wikipedia_lookup untrusted-input
  • mcp__research__find_archived_page untrusted-input, outbound
  • mcp__research__inspect_source untrusted-input, outbound
  • mcp__research__compare_ai_assistants private-data, untrusted-input
  • mcp__research__get_ai_pricing private-data, untrusted-input
  • mcp__research__find_ai_guide private-data, untrusted-input
  • mcp__research__find_free_ai_tool untrusted-input