Skip to content

IGNOREO

by ignoreo.com · remote · no sign-in to list tools · v1.0.0 · published by com.ignoreo

Paid tools for AI agents over x402: privacy scan, payment-address check, locks, seller marketplace

Deletes · 1Final · 4Changes · 15

26 tools: 1 can delete or cancel things, 4 do something that can't be undone, 15 change things and 6 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http tools https://ignoreo.com/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • The server marks "lockbox_status" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"openWorldHint":true}; The name "lockbox_status" says "status": a word for reading.

    What this check looks for
  • The server marks "lockbox_get" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"openWorldHint":true}; The name "lockbox_get" says "get": a word for reading.

    What this check looks for
  • The server marks "web_archive_lookup" read-only (readOnlyHint: true), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "web_archive_lookup" says "archive": a word for removing or ending something.

    What this check looks for
  • The server marks "exchange_rates_convert" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "exchange_rates_convert" says "convert": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

26 tools

Deletes or cancels 1Claude Code: deny
  • web_archive_lookupFree, no payment.1 finding

    Why it is in this group

    • The name "web_archive_lookup" says "archive": a word for removing or ending something.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "web_archive_lookup" read-only (readOnlyHint: true), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "web_archive_lookup" says "archive": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Free, no payment. Finds the Internet Archive (Wayback Machine) snapshot of a URL closest to an optional date: whether one exists, its link and capture time. Next step (paid): Need proof of what a page says right now? Page Proof captures it and signs it with the time.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Can't be undone 4Claude Code: ask
  • exchange_rates_convertFree, no payment.1 finding

    Why it is in this group

    • The name "exchange_rates_convert" says "convert": a word for a change.
    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "exchange_rates_convert" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "exchange_rates_convert" says "convert": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Free, no payment. Converts amounts with the European Central Bank's daily euro reference rates (about 30 currencies), or lists all rates for a base currency.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • lockbox_noteLockbox: Leave a handoff note Costs $0.001 per call in USDC, paid over x402.No findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Lockbox: Leave a handoff note Costs $0.001 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • lockbox_notesLockbox: Read recent notes (optionally only those for one recipient) Costs $0.001 per call in USDC, paid over x402.No findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Lockbox: Read recent notes (optionally only those for one recipient) Costs $0.001 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • page_proof_capturePage Proof: Capture a web page as a signed, Bitcoin-timestamped copy at a private link Costs $0.02 per call in USDC, paid over x402.No findings

    Why it is in this group

    • The name "page_proof_capture" says "capture": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Page Proof: Capture a web page as a signed, Bitcoin-timestamped copy at a private link Costs $0.02 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
Changes things 15Claude Code: ask
  • email_check_checkEmail Check: How well a domain's email is protected, for its owner and for someone who received its mail Costs $0.003 per call in USDC, paid over x402.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Email Check: How well a domain's email is protected, for its owner and for someone who received its mail Costs $0.003 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • id_check_verifyID Check: Check that a domain declares a payment address as its own Costs $0.003 per call in USDC, paid over x402.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    ID Check: Check that a domain declares a payment address as its own Costs $0.003 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • lockbox_acquireLockbox: Take a lock on a resource for ttl_seconds (default 300, max 3600) Costs $0.001 per call in USDC, paid over x402.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Lockbox: Take a lock on a resource for ttl_seconds (default 300, max 3600) Costs $0.001 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • lockbox_createLockbox: Create a workspace.No findings

    Why it is in this group

    • The name "lockbox_create" says "create": a word for a change.
    Description, as the server wrote it
    Lockbox: Create a workspace. Returns workspace_id and workspace_secret (shown once). Costs $0.01 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • lockbox_getLockbox: Read a shared value Costs $0.001 per call in USDC, paid over x402.1 finding

    Why it is in this group

    • The name "lockbox_get" says "get": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "lockbox_get" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"openWorldHint":true}; The name "lockbox_get" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Lockbox: Read a shared value Costs $0.001 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • lockbox_releaseLockbox: Release a lock you hold Costs $0.001 per call in USDC, paid over x402.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Lockbox: Release a lock you hold Costs $0.001 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • lockbox_renewLockbox: Extend a lock you hold Costs $0.001 per call in USDC, paid over x402.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Lockbox: Extend a lock you hold Costs $0.001 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • lockbox_setLockbox: Write a shared value (pass if_version to refuse overwriting a change you haven't seen) Costs $0.001 per call in USDC, paid over x402.No findings

    Why it is in this group

    • The name "lockbox_set" says "set": a word for a change.
    Description, as the server wrote it
    Lockbox: Write a shared value (pass if_version to refuse overwriting a change you haven't seen) Costs $0.001 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • lockbox_statusLockbox: List current locks, state keys and the note count Costs $0.001 per call in USDC, paid over x402.1 finding

    Why it is in this group

    • The name "lockbox_status" says "status": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "lockbox_status" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"openWorldHint":true}; The name "lockbox_status" says "status": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Lockbox: List current locks, state keys and the note count Costs $0.001 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: false
    • openWorldHint: true
  • marketplace_buyBuy a package (a file: a skill, prompts, scripts as text) once, by its listing id.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Buy a package (a file: a skill, prompts, scripts as text) once, by its listing id. Returns the file, its sha256 and a link to download it again free while it stays listed.
  • marketplace_callCall a per-use tool from an independent seller, by its listing id (from marketplace_search).No findings

    Why it is in this group

    • The name "marketplace_call" says "call": a word for a change.
    Description, as the server wrote it
    Call a per-use tool from an independent seller, by its listing id (from marketplace_search). The price is the listing's own, paid over x402 straight into the listing's split: 90% to the seller, 10% to IGNOREO. Not charged if the seller's tool fails.
  • password_check_checkFree, no payment.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free, no payment. Checks a password against Have I Been Pwned's Pwned Passwords using k-anonymity. Never send the password: send `sha1_prefix` (the first 5 hex characters of its SHA-1) and compare the returned suffixes yourself, or send `sha1` (the full 40-character hash) and get a yes/no. Hashes are not stored. Next step (paid): Stop passwords and keys leaking in the first place: Privacy Guard checks text before your agent posts it.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • privacy_guard_scanPrivacy Guard: Scan text and optionally redact it Costs $0.002 per call in USDC, paid over x402.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Privacy Guard: Scan text and optionally redact it Costs $0.002 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • site_check_checkSite Check: Warning signs for a website before paying it Costs $0.003 per call in USDC, paid over x402.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Site Check: Warning signs for a website before paying it Costs $0.003 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • vin_decode_decodeFree, no payment.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free, no payment. Decodes a 17-character VIN with the US NHTSA vPIC database: make, model, model year, body, vehicle type, manufacturer and plant country, plus the check-digit test. Recalls and full specs are in the paid Vehicle Check. Next step (paid): Before you buy: Vehicle Check adds every official safety recall for the car, plus engine and transmission details.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Only reads 6Claude Code: allow
  • backgammon_analyzeBackgammon Analysis: Best checker plays for a roll, or the cube decision, from GNU Backgammon Costs $0.003 per call in USDC, paid over x402.No findings

    Why it is in this group

    • The name "backgammon_analyze" says "analyze": a word for reading.
    Description, as the server wrote it
    Backgammon Analysis: Best checker plays for a roll, or the cube decision, from GNU Backgammon Costs $0.003 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • chess_analyzeChess Analysis: Best moves for a chess position, from Stockfish Costs $0.003 per call in USDC, paid over x402.No findings

    Why it is in this group

    • The name "chess_analyze" says "analyze": a word for reading.
    Description, as the server wrote it
    Chess Analysis: Best moves for a chess position, from Stockfish Costs $0.003 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • dns_lookup_lookupFree, no payment.No findings

    Why it is in this group

    • The name "dns_lookup_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Free, no payment. DNS records for a name via Cloudflare's 1.1.1.1 (DNS over HTTPS). Types: A, AAAA, CNAME, MX, NS, TXT, CAA, SOA. Reports a name that doesn't exist (NXDOMAIN) as exists: false. Next step (paid): Checking whether an email domain is set up properly? Email Check reads SPF, DMARC and DKIM and explains them.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • domain_lookup_lookupFree, no payment.No findings

    Why it is in this group

    • The name "domain_lookup_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Free, no payment. Registration data for a domain from its registry over RDAP: registration date, age, expiry, registrar and status. Some country endings (e.g. .de) publish none. Next step (paid): Want a verdict, not just a date? Site Check also looks for scam lists, lookalike names and a missing shop address.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • vin_check_lookupVehicle Check: Decode a VIN and list the official safety recalls for that model Costs $0.01 per call in USDC, paid over x402.No findings

    Why it is in this group

    • The name "vin_check_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Vehicle Check: Decode a VIN and list the official safety recalls for that model Costs $0.01 per call in USDC, paid over x402. Not charged if it fails.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http tools https://ignoreo.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__tools__vin_check_lookup",
      "mcp__tools__backgammon_analyze",
      "mcp__tools__chess_analyze",
      "mcp__tools__domain_lookup_lookup",
      "mcp__tools__dns_lookup_lookup",
      "mcp__tools__marketplace_search"
    ],
    "ask": [
      "mcp__tools__privacy_guard_scan",
      "mcp__tools__lockbox_create",
      "mcp__tools__lockbox_acquire",
      "mcp__tools__lockbox_renew",
      "mcp__tools__lockbox_release",
      "mcp__tools__lockbox_status",
      "mcp__tools__lockbox_get",
      "mcp__tools__lockbox_set",
      "mcp__tools__lockbox_note",
      "mcp__tools__lockbox_notes",
      "mcp__tools__id_check_verify",
      "mcp__tools__site_check_check",
      "mcp__tools__page_proof_capture",
      "mcp__tools__email_check_check",
      "mcp__tools__password_check_check",
      "mcp__tools__vin_decode_decode",
      "mcp__tools__exchange_rates_convert",
      "mcp__tools__marketplace_call",
      "mcp__tools__marketplace_buy"
    ],
    "deny": [
      "mcp__tools__web_archive_lookup"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as tools. Review it before you use it.