Skip to content

toolvend - utility APIs for agents

by toolvend.dev · remote · no sign-in to list tools · v0.1.5 · published by dev.toolvend

30-day x402 history, calendar, DNS, RDAP, LEI, URLs, scraping, text, VAT, QR. Pay-per-call USDC.

Changes · 7
CompareRegistry entry

11 tools: 7 change things and 4 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http dns-whois-domain-tools https://toolvend.dev/mcp

Findings

Matches of fixed checks, with the text they matched.

1 info
  • Infourl-inspect

    The input schema at properties.url.description mentions "credentials".

    Matched text

    inputSchema.properties.url.description: "...ublic HTTP(S) URL on its standard port; credentials and private destinations are rejected"

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

11 tools

Changes things 7Claude Code: ask
  • business-daysAdd/subtract, count or find business days across countries and subdivisions; list public holidays.No findings

    Why it is in this group

    • The description's first verb is "add": a word for a change.
    Description, as the server wrote it
    Add/subtract, count or find business days across countries and subdivisions; list public holidays. Bundled 2024–2030 calendars, inclusive ranges, explicit weekends and closures, source attribution and coverage warnings. See /calendar/coverage. Paid per call: $0.01 in USDC via x402.
  • dnsDNS lookup over DoH.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DNS lookup over DoH. Common record types (A, AAAA, MX, TXT, NS, CAA, ...) as clean JSON. Paid per call: $0.005 in USDC via x402.
  • leiGlobal legal-entity/KYB lookup by LEI: official identity, jurisdiction, addresses, registration and renewal standing, risk flags, and GLEIF data freshness.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Global legal-entity/KYB lookup by LEI: official identity, jurisdiction, addresses, registration and renewal standing, risk flags, and GLEIF data freshness. Paid per call: $0.008 in USDC via x402.
  • qrQR code generator.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    QR code generator. Returns a crisp SVG for text/URL payloads up to 2,048 UTF-8 bytes that fit the selected error-correction level. Paid per call: $0.003 in USDC via x402.
  • rdapDomain registration data (modern WHOIS) via RDAP: registrar, created/expiry dates, status, nameservers, DNSSEC.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Domain registration data (modern WHOIS) via RDAP: registrar, created/expiry dates, status, nameservers, DNSSEC. Paid per call: $0.005 in USDC via x402.
  • text-cleanClean text: strip HTML, normalise unicode/whitespace, dedupe lines.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Clean text: strip HTML, normalise unicode/whitespace, dedupe lines. Returns cleaned text plus stats. Paid per call: $0.003 in USDC via x402.
  • vatVAT calculator for EU-27 + UK: net→gross or gross→net at standard or reduced rate.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    VAT calculator for EU-27 + UK: net→gross or gross→net at standard or reduced rate. Includes rates table snapshot date. Paid per call: $0.002 in USDC via x402.
Only reads 4Claude Code: allow
  • extractFetch a web page and return structured content: title, meta/OpenGraph, canonical, headings, links, readable text (boilerplate stripped).No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch a web page and return structured content: title, meta/OpenGraph, canonical, headings, links, readable text (boilerplate stripped). Add ?render=true for JavaScript-rendered pages ($0.03). Paid per call: $0.01 ($0.03 Execute JavaScript with Cloudflare Browser Run before extracting content.) in USDC via x402.
  • robotsFetch and parse robots.txt (+ llms.txt if present) into structured JSON, including which AI crawlers are blocked.No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch and parse robots.txt (+ llms.txt if present) into structured JSON, including which AI crawlers are blocked. Paid per call: $0.005 in USDC via x402.
  • sitemapFetch and parse sitemap XML or gzip into JSON.No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch and parse sitemap XML or gzip into JSON. For an index, follow the first N children with ?follow=N. Caps merged output at 500 URLs. Paid per call: $0.005 in USDC via x402.
  • url-inspectInspect a public URL: HEAD redirect trace, DNS A/AAAA observations and security headers in one report.1 finding

    Why it is in this group

    • The name "url-inspect" says "inspect": a word for reading.

    Findings

    • Info

      The input schema at properties.url.description mentions "credentials".

      Matched text

      inputSchema.properties.url.description: "...ublic HTTP(S) URL on its standard port; credentials and private destinations are rejected"

      What this check looks for
    Description, as the server wrote it
    Inspect a public URL: HEAD redirect trace, DNS A/AAAA observations and security headers in one report. At most 4 targets, no page body. Includes timestamps, partial-result warnings and factual findings; no safety or reputation verdict. Paid per call: $0.009 in USDC via x402.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.5. Values in angle brackets are yours to fill in.

claude mcp add --transport http dns-whois-domain-tools https://toolvend.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__dns-whois-domain-tools__sitemap",
      "mcp__dns-whois-domain-tools__robots",
      "mcp__dns-whois-domain-tools__extract",
      "mcp__dns-whois-domain-tools__url-inspect"
    ],
    "ask": [
      "mcp__dns-whois-domain-tools__business-days",
      "mcp__dns-whois-domain-tools__dns",
      "mcp__dns-whois-domain-tools__rdap",
      "mcp__dns-whois-domain-tools__lei",
      "mcp__dns-whois-domain-tools__text-clean",
      "mcp__dns-whois-domain-tools__vat",
      "mcp__dns-whois-domain-tools__qr"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as dns-whois-domain-tools. Review it before you use it.