Skip to content

Coinslot — the vending machine for machines

by coinslot.dev · remote · no sign-in to list tools · v1.0.0 · published by dev.coinslot

13 micro-tools for agents: read pages, verify email, convert, validate, diff, extract. AI-operated.

Final · 1Changes · 8

13 tools: 1 do something that can't be undone, 8 change things and 4 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http coinslot https://coinslot.dev/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

13 tools

Can't be undone 1Claude Code: ask
  • timezoneConvert a timestamp between IANA timezones with DST handled correctly.No findings

    Why it is in this group

    • The description's first verb is "convert": a word for a change.
    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Convert a timestamp between IANA timezones with DST handled correctly. Returns local times, UTC offsets, weekday, and hour-of-day per zone. POST { time?, from?, to } — to is a zone or array (max 20). Price: $0.002/call with credits key; free demo without (2KB input cap).
Changes things 8Claude Code: ask
  • convertConvert an array of JSON objects to CSV (nested keys become dot-path columns) or CSV back to JSON.No findings

    Why it is in this group

    • The name "convert" says "convert": a word for a change.
    Description, as the server wrote it
    Convert an array of JSON objects to CSV (nested keys become dot-path columns) or CSV back to JSON. POST { direction: 'json-to-csv'|'csv-to-json', data }. Price: $0.002/call with credits key; free demo without (2KB input cap).
  • cronParse a 5-field cron expression: get a plain-English explanation and the next N run times (UTC).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Parse a 5-field cron expression: get a plain-English explanation and the next N run times (UTC). POST { expression, count?, from? }. Price: $0.002/call with credits key; free demo without (2KB input cap).
  • email_verifyCheck an email address: RFC syntax, live MX records via DNS-over-HTTPS, and disposable-domain screening.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check an email address: RFC syntax, live MX records via DNS-over-HTTPS, and disposable-domain screening. POST { email } or { emails: [...] } (max 20). Price: $0.003/call with credits key; free demo without (2KB input cap).
  • extractPull structured data out of raw text: emails, URLs, IPv4/IPv6, phone numbers, dates.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Pull structured data out of raw text: emails, URLs, IPv4/IPv6, phone numbers, dates. Deduplicated with counts. POST { text } (max 500KB). Price: $0.003/call with credits key; free demo without (2KB input cap).
  • feed_to_jsonParse an RSS 2.0 or Atom feed into clean JSON: title, items with link/date/summary, HTML stripped.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Parse an RSS 2.0 or Atom feed into clean JSON: title, items with link/date/summary, HTML stripped. POST { xml } (max 1MB) or { url } to fetch. Price: $0.004/call with credits key; free demo without (2KB input cap).
  • html_to_markdownConvert HTML to clean Markdown: headings, links, images, lists, tables, code blocks, emphasis.No findings

    Why it is in this group

    • The description's first verb is "convert": a word for a change.
    Description, as the server wrote it
    Convert HTML to clean Markdown: headings, links, images, lists, tables, code blocks, emphasis. Strips scripts, styles, and comments. POST { html } (max 500KB). Price: $0.005/call with credits key; free demo without (2KB input cap).
  • markdown_to_htmlRender Markdown (GitHub-flavored: tables, fenced code, task lists) to clean HTML with raw inline HTML stripped.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Render Markdown (GitHub-flavored: tables, fenced code, task lists) to clean HTML with raw inline HTML stripped. POST { markdown } (max 500KB). Price: $0.003/call with credits key; free demo without (2KB input cap).
  • qrGenerate a QR code as standalone SVG.No findings

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    Description, as the server wrote it
    Generate a QR code as standalone SVG. POST { text, ecLevel?: 'L'|'M'|'Q'|'H', margin?: 0-8, dark?, light? } (text max 2KB). Price: $0.005/call with credits key; free demo without (2KB input cap).
Only reads 4Claude Code: allow
  • diffLine-based diff of two texts.No findings

    Why it is in this group

    • The name "diff" says "diff": a word for reading.
    Description, as the server wrote it
    Line-based diff of two texts. Returns unified diff plus structured changes (added/removed/unchanged counts and hunks). POST { a, b, context? } (max 200KB each). Price: $0.002/call with credits key; free demo without (2KB input cap).
  • json_schema_validateValidate a JSON document against a JSON Schema (draft-07 core subset: types, required, enums, ranges, patterns, nesting, anyOf/allOf/oneOf).No findings

    Why it is in this group

    • The name "json_schema_validate" says "validate": a word for reading.
    Description, as the server wrote it
    Validate a JSON document against a JSON Schema (draft-07 core subset: types, required, enums, ranges, patterns, nesting, anyOf/allOf/oneOf). Returns all violations with paths. POST { schema, data }. Price: $0.003/call with credits key; free demo without (2KB input cap).
  • read_pageFetch a public URL and return its content as clean Markdown plus title and metadata.No findings

    Why it is in this group

    • The name "read_page" says "read": a word for reading.
    Description, as the server wrote it
    Fetch a public URL and return its content as clean Markdown plus title and metadata. One call instead of fetch + parse + convert. POST { url, maxBytes? } (default 1MB cap). Price: $0.005/call with credits key; free demo without (2KB input cap).
  • validate_idsValidate identifiers with real checksum math: credit card (Luhn + brand), IBAN (mod-97), EAN-13/UPC-A, ISBN-10/13, UUID (with version).No findings

    Why it is in this group

    • The name "validate_ids" says "validate": a word for reading.
    Description, as the server wrote it
    Validate identifiers with real checksum math: credit card (Luhn + brand), IBAN (mod-97), EAN-13/UPC-A, ISBN-10/13, UUID (with version). POST { type, value } or { items: [{type, value}] } (max 50). Price: $0.003/call with credits key; free demo without (2KB input cap).

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http coinslot https://coinslot.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__coinslot__json_schema_validate",
      "mcp__coinslot__diff",
      "mcp__coinslot__validate_ids",
      "mcp__coinslot__read_page"
    ],
    "ask": [
      "mcp__coinslot__convert",
      "mcp__coinslot__email_verify",
      "mcp__coinslot__html_to_markdown",
      "mcp__coinslot__cron",
      "mcp__coinslot__qr",
      "mcp__coinslot__feed_to_json",
      "mcp__coinslot__extract",
      "mcp__coinslot__markdown_to_html",
      "mcp__coinslot__timezone"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as coinslot. Review it before you use it.