Skip to content

ISHOB Knowledge Archive

by ishob.com · remote · no sign-in to list tools · v1.0.0 · published by com.ishob

License-checked research archive and technical-spec search for AI agents. Pay per call via x402.

Final · 1Changes · 24

43 tools: 1 do something that can't be undone, 24 change things and 18 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http archive https://api.ishob.com/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • The server marks "simulate_tx" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "set_agent_alarm" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "set_agent_alarm" says "set": a word for a change.

    What this check looks for
  • The server marks "generate_barcode" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "generate_barcode" says "generate": a word for a change.

    What this check looks for
  • The server marks "lookup_product_code" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "lookup_product_code" says "lookup": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

43 tools

Can't be undone 1Claude Code: ask
  • simulate_txSimulate a transaction before signing it: what leaves and enters the wallet (native, ERC-20, NFTs, SPL) with USD values, approvals granted (unlimited / to non-contracts), revert re…1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "simulate_tx" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Simulate a transaction before signing it: what leaves and enters the wallet (native, ERC-20, NFTs, SPL) with USD values, approvals granted (unlimited / to non-contracts), revert reason, gas and fee, plus a risk level. EVM chains via eth_simulateV1 (raw call: from, to, data, value); Solana via simulateTransaction (base64 transaction, unsigned is fine). Nothing is broadcast. Paid ($0.0015, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Changes things 24Claude Code: ask
  • contract_abiVerified smart-contract ABI (+ optional Solidity/Vyper source) for Ethereum, Base, Arbitrum, Optimism, Polygon and BNB Chain from the open Sourcify registry: compiler, deployment, …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Verified smart-contract ABI (+ optional Solidity/Vyper source) for Ethereum, Base, Arbitrum, Optimism, Polygon and BNB Chain from the open Sourcify registry: compiler, deployment, read/write function and event signatures, and proxy resolution to the implementation ABI. Unverified contracts return 404 (not charged). Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • crypto_pricesLive token prices computed from on-chain DEX pools (Uniswap V3, PancakeSwap V3, Orca Whirlpools) on Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain and Solana, with pool dep…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Live token prices computed from on-chain DEX pools (Uniswap V3, PancakeSwap V3, Orca Whirlpools) on Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain and Solana, with pool depth, confidence and 24h change; plus an Aave V3 yield screener (supply/borrow APY and market size per asset). No third-party price feed: every figure is derived from public chain state. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • domain_intelDomain intelligence: registration via RDAP (registrar, created/expiry dates, status, nameservers, DNSSEC; unregistered = likely available), DNS (A/AAAA/NS/MX/SPF/DMARC, email and D…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Domain intelligence: registration via RDAP (registrar, created/expiry dates, status, nameservers, DNSSEC; unregistered = likely available), DNS (A/AAAA/NS/MX/SPF/DMARC, email and DNS providers) and the homepage tech stack (CDN, hosting, server, CMS, frameworks, analytics, payments) with evidence. Paid ($0.0004, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • embed_textText embeddings for RAG / semantic search: one string or up to 100 strings -> L2-normalised vectors with open BAAI models on Cloudflare GPUs: bge-small-en-v1.5 (384-d, English, def…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Text embeddings for RAG / semantic search: one string or up to 100 strings -> L2-normalised vectors with open BAAI models on Cloudflare GPUs: bge-small-en-v1.5 (384-d, English, default) or bge-m3 (1024-d, multilingual). Up to 24,000 characters per call. Paid ($0.0002, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • extract_tablesExtract tables as structured JSON (rows, header, records keyed by column) from a public PDF (multi-column / ruled tables, up to 30 pages, 10 MB) or an HTML page (colspan/rowspan ex…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Extract tables as structured JSON (rows, header, records keyed by column) from a public PDF (multi-column / ruled tables, up to 30 pages, 10 MB) or an HTML page (colspan/rowspan expanded). robots.txt respected; nothing stored. No OCR. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • gas_trackerReal-time gas fees and network health for Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain and Solana: slow / standard / fast EIP-1559 fees (base fee + priority tip, from the…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Real-time gas fees and network health for Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain and Solana: slow / standard / fast EIP-1559 fees (base fee + priority tip, from the last 20 blocks), cost of a transfer / ERC-20 transfer / swap in native token and USD, congestion, base-fee trend, block time and latest-block age; Solana priority-fee percentiles and TPS. Paid ($0.0001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • generate_barcodeGenerate a barcode or QR code as SVG or PNG: QR, DataMatrix, PDF417, Code 128, Code 39, EAN-13, EAN-8, UPC-A, ISBN-13, ITF and GS1-128.1 finding

    Why it is in this group

    • The name "generate_barcode" says "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "generate_barcode" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "generate_barcode" says "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Generate a barcode or QR code as SVG or PNG: QR, DataMatrix, PDF417, Code 128, Code 39, EAN-13, EAN-8, UPC-A, ISBN-13, ITF and GS1-128. EAN/UPC/ISBN check digits are computed (or verified, never silently replaced). QR and DataMatrix support colours, square/rounded/dot styles and (QR) a centre logo from an https URL. Every format is verified scannable. Returns SVG text or base64 PNG plus a data URI ready to embed in HTML, PDF or labels. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • geocodeOffline geocoding (GeoNames + DB-IP, CC BY 4.0): exactly one of ip (IPv4/IPv6 -> country/region/city/lat,lon), q (place name, e.g.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Offline geocoding (GeoNames + DB-IP, CC BY 4.0): exactly one of ip (IPv4/IPv6 -> country/region/city/lat,lon), q (place name, e.g. 'Springfield, IL, US', optional country filter), postcode (+country), or lat+lon (reverse: nearest places). City/place level; no street addresses. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • location_reportLocation risk report in one call: resolve a place name (or reverse-geocode lat/lon), then weather risk for the next hours (drone-safe, outdoor-event risk, wind, rain, frost, extrem…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Location risk report in one call: resolve a place name (or reverse-geocode lat/lon), then weather risk for the next hours (drone-safe, outdoor-event risk, wind, rain, frost, extremes), local time, today's sunrise / sunset / daylight, and country facts (region, population, GDP, income group). For logistics, travel, events and drone planning. Paid ($0.01, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • lookup_product_codeLook up a product barcode number: identify and validate EAN-13, EAN-8, UPC-A, UPC-E, GTIN-14, ISBN-13/10, ISSN and ISMN codes (wrong check digits are reported with the correct digi…1 finding

    Why it is in this group

    • The name "lookup_product_code" says "lookup": a word for reading.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "lookup_product_code" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "lookup_product_code" says "lookup": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Look up a product barcode number: identify and validate EAN-13, EAN-8, UPC-A, UPC-E, GTIN-14, ISBN-13/10, ISSN and ISMN codes (wrong check digits are reported with the correct digit), convert between forms (GTIN-14, EAN-13, UPC-A, ISBN-10 <-> 13) and decode the GS1 prefix. Then fetch product data from open databases: name, brand, quantity, categories, image, labels, Nutri-Score (food, cosmetics, pet food via Open Food Facts) or title, authors, publisher and cover (books via Open Library). Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • render_documentRender Markdown (tables, code, lists, headings) into a styled PDF (custom CSS, A4/Letter/Legal, page numbers), a Word DOCX or standalone HTML; returns a private download link valid…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Render Markdown (tables, code, lists, headings) into a styled PDF (custom CSS, A4/Letter/Legal, page numbers), a Word DOCX or standalone HTML; returns a private download link valid for 24 hours. External resources are never fetched (inline data: images only). Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • research_briefResearch brief on any topic in one call: the best papers from ISHOB's open-licence archive, filled with a live search of 250M+ scholarly works, each with authors, year, venue, DOI …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Research brief on any topic in one call: the best papers from ISHOB's open-licence archive, filled with a live search of 250M+ scholarly works, each with authors, year, venue, DOI and citations; abstracts only for openly licensed papers (CC0 / public domain / CC BY / CC BY-SA), metadata and link for the rest; plus a short AI synthesis citing the papers as [n]. Checked before payment: if nothing is found anywhere the answer is a free 404 'not_covered'. Paid ($0.05, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • set_agent_alarmSchedule a signed webhook to wake an AI agent later: ISHOB POSTs your JSON payload to your https callback at deliver_at or after delay_seconds (60 s to 30 days ahead), retrying fai…1 finding

    Why it is in this group

    • The name "set_agent_alarm" says "set": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "set_agent_alarm" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "set_agent_alarm" says "set": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Schedule a signed webhook to wake an AI agent later: ISHOB POSTs your JSON payload to your https callback at deliver_at or after delay_seconds (60 s to 30 days ahead), retrying failed deliveries (1, 5, 15, 30, 60 min). Each delivery carries X-ISHOB-Signature (HMAC-SHA256 with the signing_secret returned once). Free status: GET /v1/alarm/{id}; free cancel: POST /v1/alarm/{id}/cancel. Charged only when the alarm is accepted. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • site_auditFull website audit in one call: an A-F grade with four 0-100 scores (performance, SEO, security, availability) and every issue listed with a fix.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Full website audit in one call: an A-F grade with four 0-100 scores (performance, SEO, security, availability) and every issue listed with a fix. One real browser load gives Core Web Vitals, SEO of the rendered page (title, description, headings, canonical, alt text, Open Graph, JSON-LD) and an optional screenshot; plus uptime, HTTP→HTTPS redirect, TLS expiry, security headers, SPF/DMARC email security, domain registration, robots.txt and sitemap. robots.txt respected; nothing stored. Paid ($0.02, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • site_metadataExtract a page's title, meta tags, OpenGraph, Twitter card, canonical/icons/feeds and JSON-LD from the <head> only (no full DOM download, robots.txt respected, nothing stored).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Extract a page's title, meta tags, OpenGraph, Twitter card, canonical/icons/feeds and JSON-LD from the <head> only (no full DOM download, robots.txt respected, nothing stored). Paid ($0.0002, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • site_speedPage speed & Core Web Vitals from a real headless-Chromium load (mobile or desktop): LCP, CLS, FCP, TTFB, total blocking time with good/needs-improvement/poor ratings, load timings…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Page speed & Core Web Vitals from a real headless-Chromium load (mobile or desktop): LCP, CLS, FCP, TTFB, total blocking time with good/needs-improvement/poor ratings, load timings, request count and page weight by resource type. Unthrottled lab run from Cloudflare's network (not Lighthouse, not field data). robots.txt respected. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • swap_routeBest DEX swap route and quote on Ethereum, Base, Arbitrum, Optimism, Polygon or BNB Chain via the KyberSwap aggregator (400+ liquidity sources, split routes): output amount, slippa…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Best DEX swap route and quote on Ethereum, Base, Arbitrum, Optimism, Polygon or BNB Chain via the KyberSwap aggregator (400+ liquidity sources, split routes): output amount, slippage-protected minimum, USD value change, gas, hops. With `sender`, also an unsigned ready-to-sign transaction plus the ERC-20 allowance check. Quotes only; ISHOB never sends transactions. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • token_auditToken safety & scam check for an ERC-20 (Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain) or SPL mint (Solana): honeypot simulation, buy/sell tax, mint / blacklist / pause /…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Token safety & scam check for an ERC-20 (Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain) or SPL mint (Solana): honeypot simulation, buy/sell tax, mint / blacklist / pause / owner privileges, LP lock, holder concentration (Powered by GoPlus Security) plus our own on-chain checks (proxy slots, owner, verified source, mint/freeze authority, Token-2022 extensions). Returns severity-ranked flags and a risk level. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • token_flowsWho is buying and selling a token right now: every on-chain transfer in the last 1h / 6h / 24h split into DEX buys, sells and wallet transfers.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Who is buying and selling a token right now: every on-chain transfer in the last 1h / 6h / 24h split into DEX buys, sells and wallet transfers. Returns buy vs sell volume and net flow in USD, unique buyers and sellers, top net buyers and sellers, the largest trades (with tx hashes) and an organic-activity score with wash-trading signals (round-tripping, volume concentration, repeated bot-size trades). Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain. Paid ($0.01, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • token_reportToken due diligence in one call: a 0-100 safety score and verdict (low-risk / caution / high-risk / avoid) with every deduction explained.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Token due diligence in one call: a 0-100 safety score and verdict (low-risk / caution / high-risk / avoid) with every deduction explained. Combines the token audit (honeypot, taxes, mint/blacklist/pause, LP lock, holders — Powered by GoPlus Security), a verified-contract scan for owner powers, price and real DEX liquidity, and live sell tests ($100 and $1,000 to USDC). Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Solana. Paid ($0.05, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • token_verdictShould I touch this token?No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Should I touch this token? A fast plain-English verdict (low-risk / caution / high-risk / avoid) with a 0-100 score, the top 3 reasons, the good signals and the key facts (honeypot, taxes, liquidity, holders, owner). Rule-based, no AI: same token, same answer. Optional 1200x630 SVG share card. Powered by GoPlus Security plus on-chain checks and real DEX liquidity. Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Solana. Paid ($0.01, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • wallet_portfolioMulti-chain wallet portfolio: native balances and token holdings with USD values and totals per chain.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Multi-chain wallet portfolio: native balances and token holdings with USD values and totals per chain. EVM addresses are checked on Ethereum, Base, Arbitrum, Optimism, Polygon and BNB Chain (native + ~75 major tokens + up to 20 tokens you pass); Solana addresses list SOL and every SPL / Token-2022 holding. Prices come from on-chain DEX pools. Read-only public data. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • wallet_reportWallet risk & activity report in one call — vet a counterparty before you transact: the address's own reputation (sanctions, phishing, theft, laundering, mixer...No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Wallet risk & activity report in one call — vet a counterparty before you transact: the address's own reputation (sanctions, phishing, theft, laundering, mixer... Powered by GoPlus Security), open token approvals with risky spenders, scam tokens held, and the full portfolio with USD values across Ethereum, Base, Arbitrum, Optimism, Polygon and BNB Chain (or Solana: holdings only). Verdict: clean / caution / high-risk / flagged / incomplete, with every reason listed. Paid ($0.03, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • weather_riskCurrent weather and hourly forecast (MET Norway, CC BY 4.0) for a lat/lon, plus decision flags: drone_safe, event_risk (low/moderate/high), rain_expected, frost_risk, high_wind — w…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Current weather and hourly forecast (MET Norway, CC BY 4.0) for a lat/lon, plus decision flags: drone_safe, event_risk (low/moderate/high), rain_expected, frost_risk, high_wind — with the thresholds used. Heuristics, not aviation or safety advice. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Only reads 18Claude Code: allow
  • company_snapshotCompany snapshot in one call for any SEC-registered company: fundamentals and ratios from the latest annual report (revenue, margins, growth, debt, cash flow, EPS), SEC profile (in…No findings

    Why it is in this group

    • The name "company_snapshot" says "snapshot": a word for reading.
    Description, as the server wrote it
    Company snapshot in one call for any SEC-registered company: fundamentals and ratios from the latest annual report (revenue, margins, growth, debt, cash flow, EPS), SEC profile (industry, exchange, state, fiscal year), recent filings (latest 10-K / 10-Q, 8-K events, insider-trading activity in 90 days) and the official website's health (uptime, TLS expiry, email security, registration). Sources: SEC EDGAR (public domain), Wikidata (CC0). Paid ($0.05, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • explain_transactionExplain any mined transaction in plain English: what happened (swap, transfer, approval, NFT buy/sell/mint, wrap, contract deploy, failed + revert reason), the sender's net token c…No findings

    Why it is in this group

    • The name "explain_transaction" says "explain": a word for reading.
    Description, as the server wrote it
    Explain any mined transaction in plain English: what happened (swap, transfer, approval, NFT buy/sell/mint, wrap, contract deploy, failed + revert reason), the sender's net token changes with USD values, every token and native-coin movement, approvals granted, the function called (named from the verified ABI or a signature database, with decoded arguments) and the fee. Rule-based, no AI. Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain. Paid ($0.005, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • extract_webpageFetch a public web page live (robots.txt respected) and return clean Markdown.No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch a public web page live (robots.txt respected) and return clean Markdown. Not stored or redistributed. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • finance_snapshotFundamentals and ratios for a US-listed company from its latest annual SEC filing (10-K/20-F, public domain): revenue, net income, EPS, cash flow, debt, equity; debt-to-equity, cur…No findings

    Why it is in this group

    • The name "finance_snapshot" says "snapshot": a word for reading.
    Description, as the server wrote it
    Fundamentals and ratios for a US-listed company from its latest annual SEC filing (10-K/20-F, public domain): revenue, net income, EPS, cash flow, debt, equity; debt-to-equity, current/quick ratio, margins, ROE/ROA, growth. P/E and market cap are null (no licensed price feed); EPS and shares outstanding are included to compute them. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_catalog_pageBrowse the catalog, 100 resources per page, optionally by topic.No findings

    Why it is in this group

    • The name "get_catalog_page" says "get": a word for reading.
    Description, as the server wrote it
    Browse the catalog, 100 resources per page, optionally by topic. Free.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • get_datasetStatic Knowledge Base: open, commercially reusable datasets (world cities, countries, ISHOB topics) by page, by id or by facet filter, with licence and attribution.No findings

    Why it is in this group

    • The name "get_dataset" says "get": a word for reading.
    Description, as the server wrote it
    Static Knowledge Base: open, commercially reusable datasets (world cities, countries, ISHOB topics) by page, by id or by facet filter, with licence and attribution. Free catalogue: /v1/datasets. Paid ($0.0001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • get_documentRecord metadata, abstract, license and attribution for one resource.No findings

    Why it is in this group

    • The name "get_document" says "get": a word for reading.
    Description, as the server wrote it
    Record metadata, abstract, license and attribution for one resource. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • get_fulltextStructured full text (sections) of one resource, with license.No findings

    Why it is in this group

    • The name "get_fulltext" says "get": a word for reading.
    Description, as the server wrote it
    Structured full text (sections) of one resource, with license. Paid ($0.01, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • get_referencesParsed reference list of one resource.No findings

    Why it is in this group

    • The name "get_references" says "get": a word for reading.
    Description, as the server wrote it
    Parsed reference list of one resource. Paid ($0.002, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • list_topicsList knowledge topics with live resource counts.No findings

    Why it is in this group

    • The name "list_topics" says "list": a word for reading.
    Description, as the server wrote it
    List knowledge topics with live resource counts. Free.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • ping_statusUptime / API health check: is a URL up, HTTP status, response time, redirect chain, headers and security headers (edge), plus the TLS certificate (issuer, expiry date, days remaini…No findings

    Why it is in this group

    • The name "ping_status" says "ping": a word for reading.
    Description, as the server wrote it
    Uptime / API health check: is a URL up, HTTP status, response time, redirect chain, headers and security headers (edge), plus the TLS certificate (issuer, expiry date, days remaining, SAN, verification errors). A down target is a valid answer. Paid ($0.0002, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • query_specsStructured specification table filtered by quantity (e.g.No findings

    Why it is in this group

    • The name "query_specs" says "query": a word for reading.
    Description, as the server wrote it
    Structured specification table filtered by quantity (e.g. accuracy, wavelength, range), unit family, unit and value range, with source document and license. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • read_barcodeRead barcodes and QR codes from an image (URL or base64): QR, Micro QR, DataMatrix, Aztec, PDF417, MaxiCode, EAN-13/8, UPC-A/E, Code 128/39/93, Codabar, ITF and DataBar.No findings

    Why it is in this group

    • The name "read_barcode" says "read": a word for reading.
    Description, as the server wrote it
    Read barcodes and QR codes from an image (URL or base64): QR, Micro QR, DataMatrix, Aztec, PDF417, MaxiCode, EAN-13/8, UPC-A/E, Code 128/39/93, Codabar, ITF and DataBar. Finds every code in the picture, even rotated, small or inverted (phone photos, receipts, labels, screenshots), and returns each one's text, format, position and meaning (URL, Wi-Fi network, vCard, e-mail, phone, location, crypto payment URI, product GTIN). No code found = not charged. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • read_feedRead a published RSS 2.0 / RSS 1.0 / Atom / JSON Feed (blogs, news, podcasts, Reddit, Mastodon, YouTube channel feeds) as clean JSON items: title, link, ISO dates, author, plain-te…No findings

    Why it is in this group

    • The name "read_feed" says "read": a word for reading.
    Description, as the server wrote it
    Read a published RSS 2.0 / RSS 1.0 / Atom / JSON Feed (blogs, news, podcasts, Reddit, Mastodon, YouTube channel feeds) as clean JSON items: title, link, ISO dates, author, plain-text summary/content, categories, enclosures. An HTML page URL is followed to its advertised feed. robots.txt respected; nothing stored; social networks are not scraped. Paid ($0.0003, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • resolve_nameResolve ENS names and Basenames both ways.No findings

    Why it is in this group

    • The name "resolve_name" says "resolve": a word for reading.
    Description, as the server wrote it
    Resolve ENS names and Basenames both ways. name -> Ethereum address, Base address and profile records (avatar, description, url, email, Twitter/X, GitHub, Discord, Telegram) and whether it is that address's primary name; address -> its primary ENS name and primary Basename, each verified to resolve back to the same address. Works for .eth, *.base.eth, subnames and offchain (CCIP-Read) names. Unknown name or address = 404, not charged. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • screenshotRender a public web page in headless Chromium (Cloudflare Browser Rendering) and return a screenshot (PNG/JPEG/WebP, base64) for vision models: viewport up to 1920x1920 (default 19…No findings

    Why it is in this group

    • The name "screenshot" says "screenshot": a word for reading.
    Description, as the server wrote it
    Render a public web page in headless Chromium (Cloudflare Browser Rendering) and return a screenshot (PNG/JPEG/WebP, base64) for vision models: viewport up to 1920x1920 (default 1920x1080) or full page up to 8000 px. robots.txt respected; every page request is SSRF-guarded; nothing stored. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • search_archiveSearch the ISHOB archive (titles, keywords, authors).No findings

    Why it is in this group

    • The name "search_archive" says "search": a word for reading.
    Description, as the server wrote it
    Search the ISHOB archive (titles, keywords, authors). All words must match. Free.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • search_specsFull-text search over abstracts and full texts, with extracted technical specifications (values, ranges, tolerances, units).No findings

    Why it is in this group

    • The name "search_specs" says "search": a word for reading.
    Description, as the server wrote it
    Full-text search over abstracts and full texts, with extracted technical specifications (values, ranges, tolerances, units). Numeric constraints like "50 Nm" are matched. Paid ($0.001, x402).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http archive https://api.ishob.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__archive__search_archive",
      "mcp__archive__list_topics",
      "mcp__archive__get_catalog_page",
      "mcp__archive__get_document",
      "mcp__archive__get_fulltext",
      "mcp__archive__get_references",
      "mcp__archive__extract_webpage",
      "mcp__archive__get_dataset",
      "mcp__archive__finance_snapshot",
      "mcp__archive__screenshot",
      "mcp__archive__ping_status",
      "mcp__archive__read_feed",
      "mcp__archive__explain_transaction",
      "mcp__archive__resolve_name",
      "mcp__archive__company_snapshot",
      "mcp__archive__read_barcode",
      "mcp__archive__search_specs",
      "mcp__archive__query_specs"
    ],
    "ask": [
      "mcp__archive__site_metadata",
      "mcp__archive__weather_risk",
      "mcp__archive__domain_intel",
      "mcp__archive__geocode",
      "mcp__archive__extract_tables",
      "mcp__archive__embed_text",
      "mcp__archive__site_speed",
      "mcp__archive__render_document",
      "mcp__archive__contract_abi",
      "mcp__archive__token_audit",
      "mcp__archive__swap_route",
      "mcp__archive__crypto_prices",
      "mcp__archive__gas_tracker",
      "mcp__archive__wallet_portfolio",
      "mcp__archive__simulate_tx",
      "mcp__archive__token_report",
      "mcp__archive__token_verdict",
      "mcp__archive__token_flows",
      "mcp__archive__wallet_report",
      "mcp__archive__site_audit",
      "mcp__archive__research_brief",
      "mcp__archive__location_report",
      "mcp__archive__set_agent_alarm",
      "mcp__archive__generate_barcode",
      "mcp__archive__lookup_product_code"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as archive. Review it before you use it.