Skip to content

Tollmint

by tollmint.com · remote · no sign-in to list tools · v0.1.0 · published by com.tollmint

Per-call data for agents: graded behavioural science, dark-pattern detection, web fetch, geocode.

Changes · 20

24 tools: 20 change things and 4 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http gateway https://api.tollmint.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

24 tools

Changes things 20Claude Code: ask
  • content_ai-scoreMeasure how mechanically a piece of text reads across 19 stylistic signals: sentence-length variance (burstiness), em-dash rate, negative parallelism, copula avoidance, the charact…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Measure how mechanically a piece of text reads across 19 stylistic signals: sentence-length variance (burstiness), em-dash rate, negative parallelism, copula avoidance, the characteristic AI vocabulary cluster, hedged superlatives, significance inflation, puffery, vague attribution, over-signposting, formatting tics, and more. Returns a per-sentence breakdown naming which signal each one tripped. Deterministic and model-free, so before-and-after comparisons across an edit are meaningful. NOT an AI detector — it reports stylistic properties, never authorship, and returns no verdict or probability. Authorship classifiers are unreliable and disproportionately misjudge non-native English writers. Costs $0.004000 per call.
  • content_humanizeRewrite text for tone, cadence, and brand voice while preserving meaning exactly.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rewrite text for tone, cadence, and brand voice while preserving meaning exactly. Returns a before/after analysis: burstiness, hedge and transition density, abstract-noun ratio, plus the specific sentences that read mechanically and which signals they tripped. Reports signals the rewrite failed to clear rather than hiding them. Declines academic manuscripts and requests to defeat AI detection — enforced by structural checks on the submitted text, not by a policy the caller self-certifies against. Costs up to $0.026000 (metered per 1k_output_tokens; you are charged only for units used).
  • design_ai-slop-detectScore how closely a page matches the documented 2025-2026 AI/template design fingerprint: the Tailwind indigo-violet gradient, a default sans with no display pairing, the badge/her…Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Score how closely a page matches the documented 2025-2026 AI/template design fingerprint: the Tailwind indigo-violet gradient, a default sans with no display pairing, the badge/hero/three-card/steps/testimonial/pricing skeleton, glassmorphism, uniform border radii, emoji feature bullets, round-number social proof with no attribution, and abstract illustration in place of the product. Each finding quotes the markup that produced it and names the move that breaks the pattern. Deterministic and model-free. Reports template convergence, never authorship — the same fingerprint appears in human sites built from the same tutorials. Costs $0.025000 per call.
  • psych_biasesCognitive biases with their mechanism, the conditions that trigger them, documented countermeasures, and an exploitation-risk score.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Cognitive biases with their mechanism, the conditions that trigger them, documented countermeasures, and an exploitation-risk score. Every entry carries its citation and replication status. Use to audit a decision process, to harden a system against manipulation, or to check your own reasoning. Free — this call costs nothing. No account or payment required.
  • psych_cognitive-loadMeasure the mental effort a page demands before a decision can be made: form fields, competing choices, interactive density, and reading burden.Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Measure the mental effort a page demands before a decision can be made: form fields, competing choices, interactive density, and reading burden. Deterministic and reproducible — the same markup always scores the same, so the number is usable for tracking a page over time or against a competitor. Choice count is weighted logarithmically per Hick's law rather than linearly, which is the law's most common misapplication. Costs $0.025000 per call.
  • psych_cta-scoreScore call-to-action text against a curated behavioural-science corpus.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Score call-to-action text against a curated behavioural-science corpus. Checks verb framing (outcome versus effort), friction words introduced at the point of commitment, hedging, ownership framing, and length — each finding citing the effect it rests on and that effect's replication status, so a recommendation grounded in a contested result is visibly weaker than one grounded in a robust one. Separately flags urgency language the surrounding copy does not support, which is a regulatory exposure rather than merely a conversion cost. Deterministic: the same text scores identically every time, so two variants can be compared without sampling noise. Does not predict a conversion lift, because the corpus does not support that precision. Costs $0.012000 per call.
  • psych_dark-pattern-detectScan a live page or raw HTML for deceptive design.Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Scan a live page or raw HTML for deceptive design. Returns each detected pattern with the evidence quoted from the markup, the regulation it trips, and the honest alternative. Fully deterministic — no model call, so results are reproducible and the same page always scores the same. Returns a clean/review/fail verdict suitable for gating a deploy. Names the patterns that need a full user flow to assess rather than implying the site is clean. Costs $0.030000 per call.
  • psych_dark-patternsDeceptive-design taxonomy with the regulation each pattern trips (EU DSA Art.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Deceptive-design taxonomy with the regulation each pattern trips (EU DSA Art. 25, UCPD, FTC ROSCA and the Negative Option Rule), the signals that detect it in markup or copy, a severity score, and the honest alternative that achieves the same business goal. Use before shipping conversion changes, or to audit a competitor. Free — this call costs nothing. No account or payment required.
  • psych_enforcementRegulatory enforcement actions over deceptive interface design, each citing the regulator’s own document: the law and article, the company, the penalty, and what was actually on th…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Regulatory enforcement actions over deceptive interface design, each citing the regulator’s own document: the law and article, the company, the penalty, and what was actually on the screen. Includes dismissals, vacated rules and findings of lawfulness, which mark where the line sits and which fine-only lists omit. Also reports patterns prohibited but never enforced, and cases excluded for want of a primary source. Use to tell whether a design choice has cost anyone money, and where. Free — this call costs nothing. No account or payment required.
  • psych_heuristicsInteraction-design laws with their formulae, sources, and design implications — Fitts, Hick, Jakob, Tesler, Doherty.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Interaction-design laws with their formulae, sources, and design implications — Fitts, Hick, Jakob, Tesler, Doherty. Includes the common misapplications, since these are misquoted more often than they are wrong. Separate from the effects corpus because these are engineering constraints, not contested empirical claims. Free — this call costs nothing. No account or payment required.
  • psych_page-auditAudit a live page or raw HTML for conversion psychology.Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Audit a live page or raw HTML for conversion psychology. Returns measured cognitive load, detected dark patterns with the specific regulation each trips and the evidence found in the markup, a trust-signal gap list, and ranked findings tied to graded behavioural effects. Findings may only cite effects from our corpus, and citations are attached from our data rather than generated — so a reference is never invented. Names the patterns a static page cannot assess rather than implying the site is clean. Costs $0.120000 per call.
  • psych_trust-signalsCheck which trust signals a page carries and which it omits — pricing visibility, privacy and terms, contact routes, cancellation terms.Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Check which trust signals a page carries and which it omits — pricing visibility, privacy and terms, contact routes, cancellation terms. Each gap is returned with the inference a visitor draws from its absence, because under ambiguity aversion missing information is read as adverse rather than neutral: a hidden price is inferred to be a high one. Deterministic, model-free, and reproducible. Costs $0.025000 per call.
  • ref_geocodeConvert a free-form address or place name into coordinates with normalised address components, a calibrated confidence score, and precision classification (rooftop / street / local…No findings

    Why it is in this group

    • The description's first verb is "convert": a word for a change.
    Description, as the server wrote it
    Convert a free-form address or place name into coordinates with normalised address components, a calibrated confidence score, and precision classification (rooftop / street / locality / region / country). Deduplicates OSM elements and flags ambiguous queries with the competing alternatives. Data from OpenStreetMap. Costs $0.000800 per call.
  • verify_compliance-scanCheck marketing copy, or a live page, against 225 curated regulatory rules covering AI-content disclosure, advertising claim substantiation, subscriptions and price display, unsoli…Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Check marketing copy, or a live page, against 225 curated regulatory rules covering AI-content disclosure, advertising claim substantiation, subscriptions and price display, unsolicited messaging, accessibility, and automated data collection. Every finding cites the instrument and article plus a primary-source URL, and reports whether that URL resolved when the corpus was built. Crucially it also returns what is NOT law: rules commonly believed to be in force that were vacated, enjoined, or superseded — the FTC Click-to-Cancel rule, the California election-deepfake statutes, the DOT ancillary-fee rule. A scanner built by prompting a model asserts all three as live and sends you to rewrite compliant copy. Dead rules never enter the analysis and are reported separately with the reason they died. Reports rule conflicts and citations; does not determine liability. Costs $0.035000 per call.
Only reads 4Claude Code: allow, ask for 1 outbound
  • psych_effectsQuery a curated corpus of behavioural science effects.No findings

    Why it is in this group

    • The description's first verb is "query": a word for reading.
    Description, as the server wrote it
    Query a curated corpus of behavioural science effects. Every entry carries its canonical citation, replication status (robust / mixed / contested / failed), effect size, and boundary conditions. Effects that failed replication are included and labelled, not hidden — filter with actionable_only to exclude them. Free — this call costs nothing. No account or payment required.
  • tollmint_catalogList every Tollmint product with its price, sourcing class, evidence grading, latency SLO and input schema.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List every Tollmint product with its price, sourcing class, evidence grading, latency SLO and input schema. Free — this call costs nothing. Call it first to see what is available and what it costs.
  • tollmint_quoteGet the exact price of a specific call before making it.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the exact price of a specific call before making it. Free — this call costs nothing. The quoted price is binding: you will never be charged more than it.
  • web_fetchFetch a URL and return the main content as clean markdown, with navigation, cookie banners, footers, and related-post chrome removed.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "web_fetch" says "fetch": a word for reading.

    What it can reach

    • untrusted-inputThe name "web_fetch" says "fetch" and "web": it reads web pages, which anyone can write.
    • untrusted-inputThe description's first sentence says "fetch" and "url": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Fetch a URL and return the main content as clean markdown, with navigation, cookie banners, footers, and related-post chrome removed. Extracts title, byline, publication date, and excerpt. Content detection is driven by link density rather than class names, so it survives CSS refactors. Reports how much of the page was retained and whether it had to fall back to the full body, so you can tell a clean extraction from a guess. Honours robots.txt; refuses private addresses and pages behind authentication. Costs $0.003000 per call.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write1
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out7
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:42 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
20
Protocol version
2025-06-18
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
none
RFC 9728 protected resource metadata
none
Authorization servers
none
Legacy HTTP+SSE transport
no
Dynamic client registration
not observed
Client ID metadata documents
not observed
  • WarnThe whole server

    The endpoint served tools/list without credentials, and the list has 20 tools that change things (20 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://api.tollmint.com/mcp: tools/list returned 24 tools to an anonymous client, including psych_dark-pattern-detect (write), psych_cognitive-load (write), psych_trust-signals (write), psych_biases (write), psych_dark-patterns (write) and 15 more

    What this check looks for

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http gateway https://api.tollmint.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__gateway__tollmint_catalog",
      "mcp__gateway__tollmint_quote",
      "mcp__gateway__psych_effects"
    ],
    "ask": [
      "mcp__gateway__psych_dark-pattern-detect",
      "mcp__gateway__psych_cognitive-load",
      "mcp__gateway__psych_trust-signals",
      "mcp__gateway__psych_biases",
      "mcp__gateway__psych_dark-patterns",
      "mcp__gateway__psych_enforcement",
      "mcp__gateway__psych_heuristics",
      "mcp__gateway__psych_cta-score",
      "mcp__gateway__content_ai-score",
      "mcp__gateway__design_ai-slop-detect",
      "mcp__gateway__web_fetch",
      "mcp__gateway__verify_compliance-scan",
      "mcp__gateway__ref_geocode",
      "mcp__gateway__legal_ai-disclosure",
      "mcp__gateway__legal_claims",
      "mcp__gateway__legal_subscriptions",
      "mcp__gateway__legal_messaging",
      "mcp__gateway__legal_accessibility",
      "mcp__gateway__legal_scraping",
      "mcp__gateway__psych_page-audit",
      "mcp__gateway__content_humanize"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as gateway. Review it before you use it.

Capability tags behind 7 rules
  • mcp__gateway__psych_dark-pattern-detect outbound
  • mcp__gateway__psych_cognitive-load outbound
  • mcp__gateway__psych_trust-signals outbound
  • mcp__gateway__design_ai-slop-detect outbound
  • mcp__gateway__web_fetch untrusted-input, outbound
  • mcp__gateway__verify_compliance-scan outbound
  • mcp__gateway__psych_page-audit outbound