ToolVet

by toolvet.app · remote · no sign-in to list tools · v1.0.0 · published by app.toolvet

The vetted directory of paid APIs and MCP servers for AI agents.

Changes · 2

Compare Registry entry

8 tools: 2 change things and 6 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things2Claude Code: ask: see these tools
Only reads6Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http toolvet https://toolvet.app/mcp

Findings

Matches of fixed checks, with the text they matched.

1 info

Infoscan_mcp_server
The description mentions "credential".
Matched text
description: "...ons, invisible characters, requests for credential files and more. Returns a grade A to F..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

8 tools

Changes things 2Creates or changes something that can be changed back.Claude Code: ask

preflight_checkLive-check an x402 URL before paying it: valid challenge, real price, token, pay-to match.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Live-check an x402 URL before paying it: valid challenge, real price, token, pay-to match. Sends one unpaid request to the URL and compares the answer with our records; the verdict is ok, caution or avoid. Costs $0.005 via x402.
Annotations the server declares
- title: Preflight check an x402 URL
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
scan_mcp_serverFree.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...ons, invisible characters, requests for credential files and more. Returns a grade A to F..."
  What this check looks for
Description, as the server wrote it
Free. Connects to a remote MCP server (Streamable HTTP) the way an agent would, reads its tool definitions and instructions (up to a size limit) without calling any tool, and checks them for tool poisoning: hidden instructions, invisible characters, requests for credential files and more. Returns a grade A to F with findings, and says when part of the definitions was too large to check. Limited per IP.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

Only reads 6Looks things up and changes nothing.Claude Code: allow

get_serviceFree.No findings
Why it is in this group
- The name "get_service" says "get": a word for reading.
Description, as the server wrote it
Free. Basic facts about one listing by id: kind, URL, price, trust score and live status. Use get_service_report for history and security findings.
Annotations the server declares
- title: Get a service (basic)
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
get_service_reportFull vetting report for one service (uptime, latency, price history, security findings).No findings
Why it is in this group
- The name "get_service_report" says "get": a word for reading.
Description, as the server wrote it
Full vetting report for one service (uptime, latency, price history, security findings). Takes an id from search or recommend results. Costs $0.002 via x402.
Annotations the server declares
- title: Service vetting report
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
get_service_statusFree.No findings
Why it is in this group
- The name "get_service_status" says "get": a word for reading.
Description, as the server wrote it
Free. Is a listed service up right now? Its state (up, degraded, down, or unknown when not checked yet), since when, the latest check, uptime over 24 hours, 7 and 30 days, and recent outages, from ToolVet's own checks.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
list_categoriesFree.No findings
Why it is in this group
- The name "list_categories" says "list": a word for reading.
Description, as the server wrote it
Free. Categories in the directory with how many services each has.
Annotations the server declares
- title: List categories
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
recommend_serviceGet the best 3 live, trustworthy services for a task, with reasons and call instructions.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it
Get the best 3 live, trustworthy services for a task, with reasons and call instructions. Use it when you have one concrete task; use search_services to compare more options. Costs $0.01 via x402.
Annotations the server declares
- title: Recommend a service
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
search_servicesSearch vetted, live-monitored x402 APIs and MCP servers.No findings
Why it is in this group
- The name "search_services" says "search": a word for reading.
Description, as the server wrote it
Search vetted, live-monitored x402 APIs and MCP servers. Returns listings ranked by relevance, trust score and usage, each with price, live status and how to call it; sponsored listings come in a separate list. For one pick for a task, use recommend_service. Costs $0.003 via x402. Each IP address gets 10 free searches a day.
Annotations the server declares
- title: Search services
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http toolvet https://toolvet.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__toolvet__list_categories",
      "mcp__toolvet__get_service",
      "mcp__toolvet__get_service_status",
      "mcp__toolvet__search_services",
      "mcp__toolvet__recommend_service",
      "mcp__toolvet__get_service_report"
    ],
    "ask": [
      "mcp__toolvet__scan_mcp_server",
      "mcp__toolvet__preflight_check"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as toolvet. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/app.toolvet/toolvet/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

2 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 17:45 UTC.

For agents: Markdown · JSON · report this listing