Coinslot — the vending machine for machines
by coinslot.dev · remote · no sign-in to list tools · v1.0.0 · published by dev.coinslot
13 micro-tools for agents: read pages, verify email, convert, validate, diff, extract. AI-operated.
13 tools: 1 do something that can't be undone, 8 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone1Claude Code: ask: see these tools
- Changes things8Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http coinslot https://coinslot.dev/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
13 tools
Can't be undone 1Claude Code: ask
timezoneConvert a timestamp between IANA timezones with DST handled correctly.No findings
Why it is in this group
- The description's first verb is "convert": a word for a change.
- The input addresses people (input.to): what it sends cannot be taken back.
Description, as the server wrote it Convert a timestamp between IANA timezones with DST handled correctly. Returns local times, UTC offsets, weekday, and hour-of-day per zone. POST { time?, from?, to } — to is a zone or array (max 20). Price: $0.002/call with credits key; free demo without (2KB input cap).
Changes things 8Claude Code: ask
convertConvert an array of JSON objects to CSV (nested keys become dot-path columns) or CSV back to JSON.No findings
Why it is in this group
- The name "convert" says "convert": a word for a change.
Description, as the server wrote it Convert an array of JSON objects to CSV (nested keys become dot-path columns) or CSV back to JSON. POST { direction: 'json-to-csv'|'csv-to-json', data }. Price: $0.002/call with credits key; free demo without (2KB input cap).
cronParse a 5-field cron expression: get a plain-English explanation and the next N run times (UTC).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Parse a 5-field cron expression: get a plain-English explanation and the next N run times (UTC). POST { expression, count?, from? }. Price: $0.002/call with credits key; free demo without (2KB input cap).
email_verifyCheck an email address: RFC syntax, live MX records via DNS-over-HTTPS, and disposable-domain screening.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check an email address: RFC syntax, live MX records via DNS-over-HTTPS, and disposable-domain screening. POST { email } or { emails: [...] } (max 20). Price: $0.003/call with credits key; free demo without (2KB input cap).
extractPull structured data out of raw text: emails, URLs, IPv4/IPv6, phone numbers, dates.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Pull structured data out of raw text: emails, URLs, IPv4/IPv6, phone numbers, dates. Deduplicated with counts. POST { text } (max 500KB). Price: $0.003/call with credits key; free demo without (2KB input cap).
feed_to_jsonParse an RSS 2.0 or Atom feed into clean JSON: title, items with link/date/summary, HTML stripped.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Parse an RSS 2.0 or Atom feed into clean JSON: title, items with link/date/summary, HTML stripped. POST { xml } (max 1MB) or { url } to fetch. Price: $0.004/call with credits key; free demo without (2KB input cap).
html_to_markdownConvert HTML to clean Markdown: headings, links, images, lists, tables, code blocks, emphasis.No findings
Why it is in this group
- The description's first verb is "convert": a word for a change.
Description, as the server wrote it Convert HTML to clean Markdown: headings, links, images, lists, tables, code blocks, emphasis. Strips scripts, styles, and comments. POST { html } (max 500KB). Price: $0.005/call with credits key; free demo without (2KB input cap).
markdown_to_htmlRender Markdown (GitHub-flavored: tables, fenced code, task lists) to clean HTML with raw inline HTML stripped.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Render Markdown (GitHub-flavored: tables, fenced code, task lists) to clean HTML with raw inline HTML stripped. POST { markdown } (max 500KB). Price: $0.003/call with credits key; free demo without (2KB input cap).
qrGenerate a QR code as standalone SVG.No findings
Why it is in this group
- The description's first verb is "generate": a word for a change.
Description, as the server wrote it Generate a QR code as standalone SVG. POST { text, ecLevel?: 'L'|'M'|'Q'|'H', margin?: 0-8, dark?, light? } (text max 2KB). Price: $0.005/call with credits key; free demo without (2KB input cap).
Only reads 4Claude Code: allow
diffLine-based diff of two texts.No findings
Why it is in this group
- The name "diff" says "diff": a word for reading.
Description, as the server wrote it Line-based diff of two texts. Returns unified diff plus structured changes (added/removed/unchanged counts and hunks). POST { a, b, context? } (max 200KB each). Price: $0.002/call with credits key; free demo without (2KB input cap).
json_schema_validateValidate a JSON document against a JSON Schema (draft-07 core subset: types, required, enums, ranges, patterns, nesting, anyOf/allOf/oneOf).No findings
Why it is in this group
- The name "json_schema_validate" says "validate": a word for reading.
Description, as the server wrote it Validate a JSON document against a JSON Schema (draft-07 core subset: types, required, enums, ranges, patterns, nesting, anyOf/allOf/oneOf). Returns all violations with paths. POST { schema, data }. Price: $0.003/call with credits key; free demo without (2KB input cap).
read_pageFetch a public URL and return its content as clean Markdown plus title and metadata.No findings
Why it is in this group
- The name "read_page" says "read": a word for reading.
Description, as the server wrote it Fetch a public URL and return its content as clean Markdown plus title and metadata. One call instead of fetch + parse + convert. POST { url, maxBytes? } (default 1MB cap). Price: $0.005/call with credits key; free demo without (2KB input cap).
validate_idsValidate identifiers with real checksum math: credit card (Luhn + brand), IBAN (mod-97), EAN-13/UPC-A, ISBN-10/13, UUID (with version).No findings
Why it is in this group
- The name "validate_ids" says "validate": a word for reading.
Description, as the server wrote it Validate identifiers with real checksum math: credit card (Luhn + brand), IBAN (mod-97), EAN-13/UPC-A, ISBN-10/13, UUID (with version). POST { type, value } or { items: [{type, value}] } (max 50). Price: $0.003/call with credits key; free demo without (2KB input cap).
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http coinslot https://coinslot.dev/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__coinslot__json_schema_validate",
"mcp__coinslot__diff",
"mcp__coinslot__validate_ids",
"mcp__coinslot__read_page"
],
"ask": [
"mcp__coinslot__convert",
"mcp__coinslot__email_verify",
"mcp__coinslot__html_to_markdown",
"mcp__coinslot__cron",
"mcp__coinslot__qr",
"mcp__coinslot__feed_to_json",
"mcp__coinslot__extract",
"mcp__coinslot__markdown_to_html",
"mcp__coinslot__timezone"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as coinslot. Review it before you use it.