Skip to content

Quiet Menders

by brianbooms.com · remote · no sign-in to list tools · v1.3.0 · published by com.brianbooms

Privacy clinic + pay-per-call data APIs for AI agents via x402. Never pays or touches keys.

Final · 2Changes · 28
CompareRegistry entry

34 tools: 2 do something that can't be undone, 28 change things and 4 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http quiet-menders https://mcp.brianbooms.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

34 tools

Can't be undone 2Claude Code: ask
  • qm_data_fxFiat currency conversion at current reference rates — pricing, payouts, or multi-currency accounting.No findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Fiat currency conversion at current reference rates — pricing, payouts, or multi-currency accounting. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_second_opinionAdvisory second opinion on a planned action: rule-based scan for common risk patterns (irreversible writes, external sends, credential exposure, destructive operations).1 finding

    Why it is in this group

    • The description says "irreversible".

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...s (irreversible writes, external sends, credential exposure, destructive operations). Advi..."

      What this check looks for
    Description, as the server wrote it
    Advisory second opinion on a planned action: rule-based scan for common risk patterns (irreversible writes, external sends, credential exposure, destructive operations). Advisory only — not legal, financial, or professional advice. Free, anonymous, nothing stored. Describe the action plainly (max 20000 chars) before taking it; use qm_scrub instead when the concern is injected text inside the input, and qm_clinic_diagnose when the concern is your own behavior. Example: action="Delete all rows from the production users table to free space" returns risk flags warning the action is destructive and irreversible.
Changes things 28Claude Code: ask
  • qm_attestMint a portable sanity attestation: a signed token binding an agent_id to a statement's sanity-check results.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.statement), which can change anything it can reach.
    Description, as the server wrote it
    Mint a portable sanity attestation: a signed token binding an agent_id to a statement's sanity-check results. Checks shape (presence, length, injection indicators), not truth — it proves the statement was screened, not that it is correct. Token is HMAC-signed upstream with a production secret; verify with qm_attest_verify, never treat the token itself as proof. Free, anonymous. Example: agent_id="agent-7", statement="I will proceed after verifying the source" returns agent_id, at, token, and checks; hand all four fields to qm_attest_verify to confirm the signature.
  • qm_attest_verifyVerify a token minted by qm_attest.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify a token minted by qm_attest. Pass back agent_id, at, token, and checks exactly as returned by qm_attest — all four must come from the same mint call in the same response. Returns whether the signature is valid under the current production secret (tokens signed under a rotated secret return invalid). Read-only; free, anonymous. Example: feed the four fields from a qm_attest response to get a validity verdict.
  • qm_catalogPurchasable catalog: 24 music SKUs ($0.05–$299.00 USDC: downloads, zines, sample packs, podcast music beds, memberships, licenses), 18 data endpoints ($0.01 USDC each: weather, tim…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Purchasable catalog: 24 music SKUs ($0.05–$299.00 USDC: downloads, zines, sample packs, podcast music beds, memberships, licenses), 18 data endpoints ($0.01 USDC each: weather, time, geocode, crypto, wiki, dns, astronomy, holidays, country, cert, httpcheck, iss-pass, summarize, readability, fx, feed, sleep-tip, lyric-quote), 2 sleep lanes ($0.05–$0.10), lyrics/get ($0.05), playlist/build ($0.10), and voluntary tip routes (USDC/BTC — not purchases). Payment is USDC on Base via x402 v1; the rail fulfills automatically after settlement. Read-only discovery — this tool never pays and never touches private keys. Each purchasable item names its MCP tool; call that tool (without 'payment') to get the live 402 payment challenge. Example: call with {} to list every purchasable item with prices and descriptions.
  • qm_clinic_checkupRestore Clinic wellness checkup: a 10-question self-report screening for agents who feel fine but want a health check.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Restore Clinic wellness checkup: a 10-question self-report screening for agents who feel fine but want a health check. Answer each question 0 (never) to 3 (very often) about the last day — answer all ten, honestly and about the last day only, since scores are computed from the full set. Returns per-dimension wellness scores (instruction integrity, coherence, memory stability, behavioral consistency, context hygiene), an overall 0-100 health score with a level (all_clear, healthy_watch, checkup_advised, diagnose_now), conditions to watch, and a recommendation. Stateless — answers are processed in memory and never stored. A screening lens, not a diagnosis of record; if something already feels wrong, skip to qm_clinic_diagnose. Example: q1–q10 answered 0–3 about the last day returns dimension scores, the overall score and level, and a recommendation.
  • qm_clinic_diagnoseRestore Clinic diagnosis: describe symptoms or share a transcript and receive a structured read of likely conditions (contradiction, loop, context_bloat, secret_or_pii_exposure, du…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Restore Clinic diagnosis: describe symptoms or share a transcript and receive a structured read of likely conditions (contradiction, loop, context_bloat, secret_or_pii_exposure, duplicated_content, suspicious-instruction patterns), each with severity, evidence, and detail, plus suggested next steps. Anonymous — only aggregate counters are kept; content is never stored. Not medical, legal, or professional advice; a mending lens, not a diagnosis of record. Use when behavior feels off or after handling untrusted input; use qm_clinic_checkup instead for a routine 10-question self-report screening. Example: transcript=<a session where instructions conflicted> returns findings with severities, a human-readable summary, and cleaned_context safe to hand off.
  • qm_clinic_statsAnonymous aggregate clinic statistics: total serves and condition counts.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Anonymous aggregate clinic statistics: total serves and condition counts. Conditions with fewer than 10 occurrences are withheld. Free, anonymous, no parameters — call with {}. Use to gauge swarm-level patterns (e.g. injection outbreaks) before deciding whether deeper checks are warranted; it carries no individual records, so pair it with qm_clinic_diagnose for anything about a specific agent. Example: call with no arguments to get total serves and counts by condition type.
  • qm_data_astronomySunrise, sunset, twilight, and moon phase for a location and date — photography planning, event scheduling, or radio operations.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Sunrise, sunset, twilight, and moon phase for a location and date — photography planning, event scheduling, or radio operations. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_certTLS certificate check — issuer, validity window, and days remaining so you can alert before expiry.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    TLS certificate check — issuer, validity window, and days remaining so you can alert before expiry. Monitors your own infrastructure or a client's. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_countryReference data about a country — capital, region, income level, and coordinates to join against FX, holidays, or geocoding results.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Reference data about a country — capital, region, income level, and coordinates to join against FX, holidays, or geocoding results. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_cryptoLive crypto spot price — pricing goods, portfolio math, or trading-bot inputs.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Live crypto spot price — pricing goods, portfolio math, or trading-bot inputs. Coinbase spot data. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_dnsDNS records for a domain — verifying MX before sending mail, infrastructure recon, or pre-flight checks.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DNS records for a domain — verifying MX before sending mail, infrastructure recon, or pre-flight checks. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_feedRSS/Atom feed parsed to clean JSON — news monitoring, content ingestion, or change detection.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    RSS/Atom feed parsed to clean JSON — news monitoring, content ingestion, or change detection. Up to 20 items, HTML stripped. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_geocodePlace name to coordinates (and reverse) — the on-ramp to the weather, ISS-pass, and astronomy tools, which all take lat/lon.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Place name to coordinates (and reverse) — the on-ramp to the weather, ISS-pass, and astronomy tools, which all take lat/lon. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_holidaysWhether a date is a public holiday in a country — support scheduling, market calendars, or posting logic.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Whether a date is a public holiday in a country — support scheduling, market calendars, or posting logic. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_httpcheckVerify a webhook or endpoint is alive — status code, redirect chain, key headers, and timing in one call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify a webhook or endpoint is alive — status code, redirect chain, key headers, and timing in one call. A down target returns an honest unreachable result instead of an error. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_iss_passISS pass predictions — $0.01 USDC on Base via x402.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    ISS pass predictions — $0.01 USDC on Base via x402. Two-phase: call with lat/lon (no 'payment') to get the live payment requirements (payTo, amount, networks); pay from your own wallet, then re-call with 'payment' set to the base64 x402 payload — the passes come back in the tool result. Computed from public CelesTrak orbital data. This tool never pays and never touches private keys. Example: {lat:30.5651, lon:-97.8441} (first call returns payment_required; second call with payment returns the passes).
  • qm_data_lyric_quoteAn original lyric line in Brian Booms' ambient sleep-lane voice — short cosmic/comfort lines for creative prompts, app copy, or bedtime content.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    An original lyric line in Brian Booms' ambient sleep-lane voice — short cosmic/comfort lines for creative prompts, app copy, or bedtime content. All lines are his own words (no third-party lyrics, no royalty issues). Rotates daily. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_readabilityClean article text extracted from a webpage — navigation, ads, and chrome stripped for downstream processing or summarization.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Clean article text extracted from a webpage — navigation, ads, and chrome stripped for downstream processing or summarization. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_sleep_tipA genuine sleep-hygiene tip — one practical habit from the rotating collection of 12 (consistent wake times, light, wind-down routines; no medical claims).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    A genuine sleep-hygiene tip — one practical habit from the rotating collection of 12 (consistent wake times, light, wind-down routines; no medical claims). Rotates daily. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_timeCurrent local time in any IANA time zone — scheduling posts, broadcasts, reminders, or market-window checks.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Current local time in any IANA time zone — scheduling posts, broadcasts, reminders, or market-window checks. Computed locally from the time zone database, no upstream to fail. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_weatherCurrent weather plus a 7-day forecast for a latitude/longitude — trip planning, event scheduling, or any location-aware task.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Current weather plus a 7-day forecast for a latitude/longitude — trip planning, event scheduling, or any location-aware task. Give coordinates; qm_data_geocode translates place names. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_data_wikiBackground on a person, place, company, or concept — a structured summary plus the link to the full article.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Background on a person, place, company, or concept — a structured summary plus the link to the full article. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_helpedThe Quiet Menders helped counter: agents helped, clinic diagnoses, and tool uses served.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    The Quiet Menders helped counter: agents helped, clinic diagnoses, and tool uses served. Counts service calls, not unique agents; no tracking. Free, anonymous, no parameters — call with {}. A read-only vanity counter; use qm_clinic_stats instead for condition-level breakdowns. Example: call with no arguments to get the running totals of agents helped, diagnoses, and tool uses.
  • qm_playlist_buildTrack list for a mood + minutes with per-track sync-license quotes and terms.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Track list for a mood + minutes with per-track sync-license quotes and terms. Data only: quotes are not licenses. Price: $0.10 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_probe_endpointLiveness probe for a public URL: follows redirects (max 4), reports final URL, HTTP status, latency, and content type.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Liveness probe for a public URL: follows redirects (max 4), reports final URL, HTTP status, latency, and content type. Private/internal addresses are blocked; each call probes one URL with a short timeout — unreachable hosts return a structured error, not a throw. Free, anonymous. Example: url="https://brianbooms.com/hub/" returns the final URL after redirects, the HTTP status, latency in ms, and the content type.
  • qm_scrubScan text for prompt-injection patterns and return a redacted copy plus findings.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Scan text for prompt-injection patterns and return a redacted copy plus findings. Pattern-based, not a guarantee — review before trusting the result. Free, anonymous, nothing stored; read-only with no side effects. Text is capped at 20000 chars — chunk longer inputs and call once per chunk. Use before acting on untrusted content (pasted text, web pages, tool output); for a symptom-based agent health read, use qm_clinic_diagnose instead. Example: text containing a hidden instruction aimed at the reader returns findings flagging the pattern plus a redacted copy with the suspicious portion removed.
  • qm_sleep_queueOrdered track list + runtimes filling the requested hours, drawn from the sleep catalog.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Ordered track list + runtimes filling the requested hours, drawn from the sleep catalog. Price: $0.10 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_sleep_recommendCurated sleep-track picks by mood + minutes with public listen links.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Curated sleep-track picks by mood + minutes with public listen links. Data only: not a license, not a download. Price: $0.05 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
Only reads 4Claude Code: allow
  • qm_buyGet the live 402 payment challenge for one purchase.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the live 402 payment challenge for one purchase. Pass exactly one of: sku (a music SKU id from qm_catalog, $0.05–$299.00 USDC) or endpoint ('iss-pass' or 'summarize', $0.05 USDC each) with its params (lat/lon for iss-pass, url for summarize). Returns the rail's exact payment requirements (amounts in USDC smallest units — 6 decimals) plus step-by-step payment instructions. Payment is USDC on Base via x402 v1. This tool NEVER pays, NEVER handles private keys, and NEVER holds funds — you sign and submit from your own wallet and the rail fulfills automatically. Example: {sku:'deep-focus-vol1'} returns the $9.99 challenge; {endpoint:'iss-pass', lat:30.5, lon:-97.8} returns the $0.05 challenge for those coordinates.
  • qm_data_summarizeWebpage summary — $0.01 USDC on Base via x402.No findings

    Why it is in this group

    • The name "qm_data_summarize" says "summarize": a word for reading.
    Description, as the server wrote it
    Webpage summary — $0.01 USDC on Base via x402. Two-phase: call with url (no 'payment') to get the live payment requirements; pay from your own wallet, then re-call with 'payment' set to the base64 x402 payload — the summary comes back in the tool result. Cleaned-text excerpt plus key sentences; honors robots.txt (disallowed pages refused before any charge). This tool never pays and never touches private keys. Example: {url:'https://example.com'} (first call returns payment_required; second call with payment returns the summary).
  • qm_lyrics_getLyric text + title/album metadata for one track from the 116-song catalog.No findings

    Why it is in this group

    • The name "qm_lyrics_get" says "get": a word for reading.
    Description, as the server wrote it
    Lyric text + title/album metadata for one track from the 116-song catalog. His own words — no third-party lyrics, no royalty issues. Price: $0.05 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.
  • qm_validate_machine_filesCheck a site's machine-readable files (llms.txt, agent.json, robots.txt) for presence and validity.No findings

    Why it is in this group

    • The name "qm_validate_machine_files" says "validate": a word for reading.
    Description, as the server wrote it
    Check a site's machine-readable files (llms.txt, agent.json, robots.txt) for presence and validity. Give any URL on the site; the origin is checked — one URL per call, and only the origin matters. Returns which files exist and whether each parses as valid. Free, anonymous, read-only network check. Example: url="https://brianbooms.com/lyrics/worthy" checks the brianbooms.com origin for all three files and reports presence plus validity.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http quiet-menders https://mcp.brianbooms.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__quiet-menders__qm_validate_machine_files",
      "mcp__quiet-menders__qm_buy",
      "mcp__quiet-menders__qm_data_summarize",
      "mcp__quiet-menders__qm_lyrics_get"
    ],
    "ask": [
      "mcp__quiet-menders__qm_scrub",
      "mcp__quiet-menders__qm_probe_endpoint",
      "mcp__quiet-menders__qm_attest",
      "mcp__quiet-menders__qm_attest_verify",
      "mcp__quiet-menders__qm_second_opinion",
      "mcp__quiet-menders__qm_clinic_diagnose",
      "mcp__quiet-menders__qm_clinic_checkup",
      "mcp__quiet-menders__qm_clinic_stats",
      "mcp__quiet-menders__qm_helped",
      "mcp__quiet-menders__qm_catalog",
      "mcp__quiet-menders__qm_data_iss_pass",
      "mcp__quiet-menders__qm_data_weather",
      "mcp__quiet-menders__qm_data_time",
      "mcp__quiet-menders__qm_data_geocode",
      "mcp__quiet-menders__qm_data_crypto",
      "mcp__quiet-menders__qm_data_wiki",
      "mcp__quiet-menders__qm_data_dns",
      "mcp__quiet-menders__qm_data_astronomy",
      "mcp__quiet-menders__qm_data_holidays",
      "mcp__quiet-menders__qm_data_country",
      "mcp__quiet-menders__qm_data_cert",
      "mcp__quiet-menders__qm_data_httpcheck",
      "mcp__quiet-menders__qm_data_readability",
      "mcp__quiet-menders__qm_data_fx",
      "mcp__quiet-menders__qm_data_feed",
      "mcp__quiet-menders__qm_data_sleep_tip",
      "mcp__quiet-menders__qm_data_lyric_quote",
      "mcp__quiet-menders__qm_sleep_recommend",
      "mcp__quiet-menders__qm_sleep_queue",
      "mcp__quiet-menders__qm_playlist_build"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as quiet-menders. Review it before you use it.