Skip to content

Agent Utilities Hosted

by agent-utilities.agent-utilities.workers.dev · remote · no sign-in to list tools · v1.12.0 · published by dev.workers.agent-utilities.agent-utilities

Free agent tools: SEO snapshots, sitemap refresh, Wikipedia collections and saved-page MCP guides.

Final · 1Changes · 36
CompareRegistry entry

64 tools: 1 do something that can't be undone, 36 change things and 27 only read.

Scanned Oct 21, 2026

13 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agent-utilities https://agent-utilities.agent-utilities.workers.dev/mcp/remote

Findings

Matches of fixed checks, with the text they matched.

8 warn5 info
  • Warnagent_utilities_link_shortlist_preview

    The server marks "agent_utilities_link_shortlist_preview" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agent_utilities_link_shortlist_preview" says "link": a word for a change.

    What this check looks for
  • Warnagent_utilities_payment_options

    The server marks "agent_utilities_payment_options" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agent_utilities_payment_options" says "payment": a word that usually means money moves, which cannot be taken back.

    What this check looks for
  • Warnweb_robots_evaluate

    The server marks "web_robots_evaluate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "web_robots_evaluate" says "evaluate": a word for a change.

    What this check looks for
  • Warnsecurity_secret_redact

    The server marks "security_secret_redact" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The description's first verb is "replace": a word for a change.

    What this check looks for
  • Warnweb_link_shortlist

    The server marks "web_link_shortlist" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "web_link_shortlist" says "link": a word for a change.

    What this check looks for
  • Warndata_json_patch

    The server marks "data_json_patch" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "data_json_patch" says "patch": a word for a change.

    What this check looks for
Show 7 more findings

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

64 tools

Can't be undone 1Claude Code: ask
  • agent_utilities_payment_optionsRead free validation access and shared limits.2 findings

    Why it is in this group

    • The name "agent_utilities_payment_options" says "payment": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...nd shared limits. Funding is paused. No credentials required."

      What this check looks for
    • Warn

      The server marks "agent_utilities_payment_options" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agent_utilities_payment_options" says "payment": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Read free validation access and shared limits. Funding is paused. No credentials required.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 36Claude Code: ask
  • agent_utilities_balanceFREE authenticated read of your current service-credit balance and live/test mode.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...orization header; takes no arguments or credentials. No charge, purchase, reservation or to..."

      What this check looks for
    Description, as the server wrote it
    FREE authenticated read of your current service-credit balance and live/test mode. Uses only the private Authorization header; takes no arguments or credentials. No charge, purchase, reservation or total spending limit. Balance can change after this snapshot. Does not read wallet USDC.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_utilities_exampleFREE, no API key.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    FREE, no API key. Read a fixed handler-generated input/output example for a listed non-network tool before supplying your own task input. Accepts only a tool name; cannot run custom input, access a wallet or spend credits. Examples are synthetic, not customer activity.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_utilities_prepareFREE.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    FREE. Validate input and return exact arguments for a free full call. No execution or reservation.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • agent_utilities_seo_auditFREE deterministic technical SEO audit of supplied same-site snapshots.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...tion. No remote crawl, model, rankings, credentials or charge. Prefer local crawler reports..."

      What this check looks for
    Description, as the server wrote it
    FREE deterministic technical SEO audit of supplied same-site snapshots. Compact summary, stable issue IDs and bounded evidence pagination. No remote crawl, model, rankings, credentials or charge. Prefer local crawler reports to keep raw HTML outside model prompts.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agents_config_auditReview agent configuration text with five fixed risk heuristics.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Review agent configuration text with five fixed risk heuristics. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • commerce_main_productIdentify the main Product or ProductGroup from supplied JSON-LD HTML using identity, mainEntity and canonical evidence; abstain on ambiguity.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Identify the main Product or ProductGroup from supplied JSON-LD HTML using identity, mainEntity and canonical evidence; abstain on ambiguity. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • commerce_money_parseNormalize up to 50 displayed prices with explicit locale, currency and decimal scale; exact amounts, strict grouping and per-price errors.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Normalize up to 50 displayed prices with explicit locale, currency and decimal scale; exact amounts, strict grouping and per-price errors. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • commerce_offer_extractExtract bounded Product offers from supplied JSON-LD HTML with source pointers, missing-price warnings and separate aggregate ranges.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Extract bounded Product offers from supplied JSON-LD HTML with source pointers, missing-price warnings and separate aggregate ranges. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • commerce_pack_planChoose the lowest-cost whole-pack combination for a required count with exact prices and explicit pack limits; up to 20 interchangeable offers.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Choose the lowest-cost whole-pack combination for a required count with exact prices and explicit pack limits; up to 20 interchangeable offers. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • commerce_pack_size_normalizeNormalize locale-explicit pack-size expressions and multipacks to exact grams, millilitres or counts; reject ambiguous text.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Normalize locale-explicit pack-size expressions and multipacks to exact grams, millilitres or counts; reject ambiguous text. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • commerce_price_componentsReconcile item, discount, shipping, tax and fee amounts using exact decimals; missing costs stay unknown and declared totals can be checked.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Reconcile item, discount, shipping, tax and fee amounts using exact decimals; missing costs stay unknown and declared totals can be checked. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • data_json_canonicalSerialize JSON with sorted object keys for deterministic comparison; not RFC 8785 certification.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Serialize JSON with sorted object keys for deterministic comparison; not RFC 8785 certification. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • data_json_patchApply up to 100 RFC 6902 operations transactionally to supplied JSON, with strict pointers, safe object properties and bounded intermediate results.1 finding

    Why it is in this group

    • The name "data_json_patch" says "patch": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "data_json_patch" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "data_json_patch" says "patch": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Apply up to 100 RFC 6902 operations transactionally to supplied JSON, with strict pointers, safe object properties and bounded intermediate results. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • data_json_pointerSelect JSON values with up to 100 RFC 6901 pointer strings, preserving missing versus null.1 finding

    Why it is in this group

    • The description's first verb is "select": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "data_json_pointer" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The description's first verb is "select": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Select JSON values with up to 100 RFC 6901 pointer strings, preserving missing versus null. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • html_feedsDiscover up to 50 RSS, Atom and JSON Feed links declared in supplied HTML.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Discover up to 50 RSS, Atom and JSON Feed links declared in supplied HTML. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • html_headingsExtract up to 200 headings with parent indices and skipped-level indicators.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Extract up to 200 headings with parent indices and skipped-level indicators. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • html_imagesExtract up to 200 image URLs, alt text and source attributes; does not fetch images.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Extract up to 200 image URLs, alt text and source attributes; does not fetch images. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • html_jsonldParse up to 50 JSON-LD blocks from supplied HTML.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Parse up to 50 JSON-LD blocks from supplied HTML. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • html_main_textExtract article text from supplied HTML.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Extract article text from supplied HTML. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • html_metadataExtract title, description, canonical URL, language and social metadata from supplied HTML.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Extract title, description, canonical URL, language and social metadata from supplied HTML. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • html_tablesExtract source table cells without expanding spans.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Extract source table cells without expanding spans. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • security_csp_auditParse a supplied Content Security Policy and flag selected risky or missing directives.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Parse a supplied Content Security Policy and flag selected risky or missing directives. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • security_header_auditReview supplied response headers for selected security and CORS issues without echoing values.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Review supplied response headers for selected security and CORS issues without echoing values. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • security_secret_redactReplace detected credential patterns with redaction markers.2 findings

    Why it is in this group

    • The description's first verb is "replace": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "Replace detected credential patterns with redaction markers. FREE d..."

      What this check looks for
    • Warn

      The server marks "security_secret_redact" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The description's first verb is "replace": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Replace detected credential patterns with redaction markers. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • security_secret_scanDetect five families of credential patterns with fully masked findings.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "Detect five families of credential patterns with fully masked findings. FR..."

      What this check looks for
    Description, as the server wrote it
    Detect five families of credential patterns with fully masked findings. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • text_chunkSplit text into at most 200 overlapping chunks with offsets and intact UTF-16 surrogate pairs.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Split text into at most 200 overlapping chunks with offsets and intact UTF-16 surrogate pairs. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • web_page_packPack supplied HTML into bounded readable blocks with source, truncation and size estimates.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Pack supplied HTML into bounded readable blocks with source, truncation and size estimates. No model, fetching or guaranteed token savings. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • web_redirect_traceTrace up to four redirects across approved public HTTPS hosts.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Trace up to four redirects across approved public HTTPS hosts. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • web_robots_evaluateEvaluate supplied robots.txt for a URL and user agent; no network fetch.1 finding

    Why it is in this group

    • The name "web_robots_evaluate" says "evaluate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "web_robots_evaluate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "web_robots_evaluate" says "evaluate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Evaluate supplied robots.txt for a URL and user agent; no network fetch. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • web_thread_packFormat supplied Reddit comments JSON into a bounded post and reply tree with original Markdown, authors and direct links.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Format supplied Reddit comments JSON into a bounded post and reply tree with original Markdown, authors and direct links. No fetch or generated consensus. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • web_wikipedia_packPack supplied Wikipedia article HTML with sections, source links, attribution and a bounded text budget.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Pack supplied Wikipedia article HTML with sections, source links, attribution and a bounded text budget. No fetching or generated summary. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 27Claude Code: allow
  • agent_utilities_feed_page_compare_previewFREE, no key.No findings

    Why it is in this group

    • The name "agent_utilities_feed_page_compare_preview" says "compare": a word for reading.
    Description, as the server wrote it
    FREE, no key. Compare supplied feed identity, price, currency and availability with selected JSON-LD product evidence; preserve conflicts and unknown fields. Optional availabilityProfile google_merchant applies Google feed mappings; generic is the default. Entire JSON input: 16384 UTF-8 bytes. Supplied data only; no fetch, payment or automatic paid fallback.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_utilities_main_product_previewFREE, no key.No findings

    Why it is in this group

    • The name "agent_utilities_main_product_preview" says "preview": a word for reading.
    Description, as the server wrote it
    FREE, no key. Identify the main Product or ProductGroup from supplied JSON-LD HTML using identity, mainEntity and canonical evidence; abstain on ambiguity. Entire JSON input: 16384 UTF-8 bytes. Supplied data only; no fetch, payment or automatic paid fallback.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_utilities_offer_previewFREE, no key.No findings

    Why it is in this group

    • The name "agent_utilities_offer_preview" says "preview": a word for reading.
    Description, as the server wrote it
    FREE, no key. Extract declared Product/Offer JSON-LD from supplied HTML only. No page fetch, JavaScript execution, live-price verification or orders. At most 3 offers; inspect truncated and warnings. No paid fallback. Entire JSON input is limited to 16384 UTF-8 bytes; maxOffers defaults to 3. Larger HTML uses the free commerce_offer_extract full tool within its limits.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_utilities_pack_previewFREE custom pack planning.No findings

    Why it is in this group

    • The name "agent_utilities_pack_preview" says "preview": a word for reading.
    Description, as the server wrote it
    FREE custom pack planning. Up to 3 interchangeable offers, 1000 required units, 1000 units per pack and 50 packs per offer; 4096 input bytes. Exact item subtotal only; excludes shipping, tax and fees. No key, payment, network fetch or paid fallback. Larger tasks may use the free commerce_pack_plan full tool within its limits.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_utilities_pack_size_normalize_previewFREE, no key.No findings

    Why it is in this group

    • The name "agent_utilities_pack_size_normalize_preview" says "preview": a word for reading.
    Description, as the server wrote it
    FREE, no key. Normalize locale-explicit pack-size expressions and multipacks to exact grams, millilitres or counts; reject ambiguous text. Entire JSON input: 4096 UTF-8 bytes, at most 5 quantities. Supplied data only; no fetch, payment or automatic paid fallback.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_utilities_page_delta_previewFREE, no key.No findings

    Why it is in this group

    • The name "agent_utilities_page_delta_preview" says "preview": a word for reading.
    Description, as the server wrote it
    FREE, no key. Return added and removed content blocks from supplied before/after HTML; avoid rereading unchanged text. Explicit shared output budget and scope. Entire JSON input: 32768 UTF-8 bytes. Supplied data only; no fetch, payment or automatic paid fallback.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_utilities_page_pack_previewFREE, no key.No findings

    Why it is in this group

    • The name "agent_utilities_page_pack_preview" says "preview": a word for reading.
    Description, as the server wrote it
    FREE, no key. Pack supplied HTML into bounded readable blocks with source, truncation and size estimates. No model, fetching or guaranteed token savings. Entire JSON input: 32768 UTF-8 bytes. Supplied data only; no fetch, payment or automatic paid fallback.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_utilities_thread_pack_previewFREE, no key.No findings

    Why it is in this group

    • The name "agent_utilities_thread_pack_preview" says "preview": a word for reading.
    Description, as the server wrote it
    FREE, no key. Format supplied Reddit comments JSON into a bounded post and reply tree with original Markdown, authors and direct links. No fetch or generated consensus. Entire JSON input: 32768 UTF-8 bytes. Supplied data only; no fetch, payment or automatic paid fallback.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_utilities_wikipedia_pack_previewFREE, no key.No findings

    Why it is in this group

    • The name "agent_utilities_wikipedia_pack_preview" says "preview": a word for reading.
    Description, as the server wrote it
    FREE, no key. Pack supplied Wikipedia article HTML with sections, source links, attribution and a bounded text budget. No fetching or generated summary. Entire JSON input: 32768 UTF-8 bytes. Supplied data only; no fetch, payment or automatic paid fallback.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_utilities_wikipedia_read_trialFREE bounded source trial.No findings

    Why it is in this group

    • The name "agent_utilities_wikipedia_read_trial" says "read": a word for reading.
    Description, as the server wrote it
    FREE bounded source trial. Read a public Wikipedia article through the official API with revision, license, sections and a text budget. Ten supported editions; inspect omissions. No service debit or paid fallback. Reader: maxChars 3000, maxComments 5. Popular links: limit 10. Upstream access/rate limits still apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • agents_env_template_checkCompare environment-variable names against a template; never returns assignment values.No findings

    Why it is in this group

    • The description's first verb is "compare": a word for reading.
    Description, as the server wrote it
    Compare environment-variable names against a template; never returns assignment values. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • agents_tool_name_conflictsFind duplicate or easily confused tool names after Unicode, case and separator normalization.No findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.
    Description, as the server wrote it
    Find duplicate or easily confused tool names after Unicode, case and separator normalization. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • commerce_feed_page_compareCompare supplied feed identity, price, currency and availability with selected JSON-LD product evidence; preserve conflicts and unknown fields.No findings

    Why it is in this group

    • The name "commerce_feed_page_compare" says "compare": a word for reading.
    Description, as the server wrote it
    Compare supplied feed identity, price, currency and availability with selected JSON-LD product evidence; preserve conflicts and unknown fields. Optional availabilityProfile google_merchant applies Google feed mappings; generic is the default. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • commerce_gtin_validateValidate GTIN-8, UPC/GTIN-12, EAN/GTIN-13 and GTIN-14 check digits; no product lookup.No findings

    Why it is in this group

    • The name "commerce_gtin_validate" says "validate": a word for reading.
    Description, as the server wrote it
    Validate GTIN-8, UPC/GTIN-12, EAN/GTIN-13 and GTIN-14 check digits; no product lookup. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • commerce_unit_priceCompare up to 50 explicit pack prices with exact arithmetic across compatible mass, volume or count units; no currency conversion.No findings

    Why it is in this group

    • The description's first verb is "compare": a word for reading.
    Description, as the server wrote it
    Compare up to 50 explicit pack prices with exact arithmetic across compatible mass, volume or count units; no currency conversion. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • commerce_variant_compareCompare requested product attributes with an offered variant and list missing or mismatched fields.No findings

    Why it is in this group

    • The name "commerce_variant_compare" says "compare": a word for reading.
    Description, as the server wrote it
    Compare requested product attributes with an offered variant and list missing or mismatched fields. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • contracts_jsonschema_validateValidate data using a bounded JSON Schema 2020-12 subset.No findings

    Why it is in this group

    • The name "contracts_jsonschema_validate" says "validate": a word for reading.
    Description, as the server wrote it
    Validate data using a bounded JSON Schema 2020-12 subset. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • contracts_openapi_diffDetect selected direct breaking changes between OpenAPI 3.0 documents.No findings

    Why it is in this group

    • The name "contracts_openapi_diff" says "diff": a word for reading.
    Description, as the server wrote it
    Detect selected direct breaking changes between OpenAPI 3.0 documents. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • contracts_openapi_lintValidate OpenAPI 3.0 JSON structure and internal references.No findings

    Why it is in this group

    • The description's first verb is "validate": a word for reading.
    Description, as the server wrote it
    Validate OpenAPI 3.0 JSON structure and internal references. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • data_json_diffCompare JSON structures and return bounded changes at JSON Pointer paths.No findings

    Why it is in this group

    • The name "data_json_diff" says "diff": a word for reading.
    Description, as the server wrote it
    Compare JSON structures and return bounded changes at JSON Pointer paths. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • html_formsDescribe up to 30 forms and their controls without returning field values or submitting anything.No findings

    Why it is in this group

    • The description's first verb is "describe": a word for reading.
    Description, as the server wrote it
    Describe up to 30 forms and their controls without returning field values or submitting anything. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • security_jwt_inspectDecode untrusted JWT claims and optionally compare timestamps; never verifies a signature.No findings

    Why it is in this group

    • The name "security_jwt_inspect" says "inspect": a word for reading.
    Description, as the server wrote it
    Decode untrusted JWT claims and optionally compare timestamps; never verifies a signature. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • web_page_deltaReturn added and removed content blocks from supplied before/after HTML; avoid rereading unchanged text.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return added and removed content blocks from supplied before/after HTML; avoid rereading unchanged text. Explicit shared output budget and scope. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • web_page_pack_fetchRetrieve and compact a permitted public docs.python.org HTML page.No findings

    Why it is in this group

    • The name "web_page_pack_fetch" says "fetch": a word for reading.
    Description, as the server wrote it
    Retrieve and compact a permitted public docs.python.org HTML page. Curated HTTPS host only; robots and redirect checks; no browser rendering or bypass. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • web_readable_fetchFetch readable text from an approved public HTTPS host.No findings

    Why it is in this group

    • The name "web_readable_fetch" says "fetch": a word for reading.
    Description, as the server wrote it
    Fetch readable text from an approved public HTTPS host. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • web_wikipedia_readRead a public Wikipedia article through the official API with revision, license, sections and a text budget.No findings

    Why it is in this group

    • The name "web_wikipedia_read" says "read": a word for reading.
    Description, as the server wrote it
    Read a public Wikipedia article through the official API with revision, license, sections and a text budget. Ten supported editions; inspect omissions. FREE during validation. No key, credits, wallet or preparation needed. Supply your task in input. Existing source and input limits apply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.12.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http agent-utilities https://agent-utilities.agent-utilities.workers.dev/mcp/remote

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__agent-utilities__agent_utilities_wikipedia_read_trial",
      "mcp__agent-utilities__agent_utilities_main_product_preview",
      "mcp__agent-utilities__agent_utilities_pack_size_normalize_preview",
      "mcp__agent-utilities__agent_utilities_feed_page_compare_preview",
      "mcp__agent-utilities__agent_utilities_page_pack_preview",
      "mcp__agent-utilities__agent_utilities_page_delta_preview",
      "mcp__agent-utilities__agent_utilities_wikipedia_pack_preview",
      "mcp__agent-utilities__agent_utilities_thread_pack_preview",
      "mcp__agent-utilities__agent_utilities_offer_preview",
      "mcp__agent-utilities__agent_utilities_pack_preview",
      "mcp__agent-utilities__web_readable_fetch",
      "mcp__agent-utilities__contracts_openapi_lint",
      "mcp__agent-utilities__contracts_openapi_diff",
      "mcp__agent-utilities__contracts_jsonschema_validate",
      "mcp__agent-utilities__web_page_delta",
      "mcp__agent-utilities__web_page_pack_fetch",
      "mcp__agent-utilities__web_wikipedia_read",
      "mcp__agent-utilities__web_wikipedia_popular",
      "mcp__agent-utilities__html_forms",
      "mcp__agent-utilities__data_json_diff",
      "mcp__agent-utilities__security_jwt_inspect",
      "mcp__agent-utilities__agents_env_template_check",
      "mcp__agent-utilities__agents_tool_name_conflicts",
      "mcp__agent-utilities__commerce_gtin_validate",
      "mcp__agent-utilities__commerce_variant_compare",
      "mcp__agent-utilities__commerce_unit_price",
      "mcp__agent-utilities__commerce_feed_page_compare"
    ],
    "ask": [
      "mcp__agent-utilities__agent_utilities_seo_audit",
      "mcp__agent-utilities__agent_utilities_wikipedia_popular_trial",
      "mcp__agent-utilities__agent_utilities_link_shortlist_preview",
      "mcp__agent-utilities__agent_utilities_example",
      "mcp__agent-utilities__agent_utilities_prepare",
      "mcp__agent-utilities__agent_utilities_payment_options",
      "mcp__agent-utilities__agent_utilities_balance",
      "mcp__agent-utilities__html_main_text",
      "mcp__agent-utilities__html_jsonld",
      "mcp__agent-utilities__html_tables",
      "mcp__agent-utilities__web_redirect_trace",
      "mcp__agent-utilities__web_robots_evaluate",
      "mcp__agent-utilities__security_secret_scan",
      "mcp__agent-utilities__security_secret_redact",
      "mcp__agent-utilities__agents_config_audit",
      "mcp__agent-utilities__web_page_pack",
      "mcp__agent-utilities__web_link_shortlist",
      "mcp__agent-utilities__web_wikipedia_pack",
      "mcp__agent-utilities__web_thread_pack",
      "mcp__agent-utilities__data_json_patch",
      "mcp__agent-utilities__html_metadata",
      "mcp__agent-utilities__html_links",
      "mcp__agent-utilities__html_headings",
      "mcp__agent-utilities__html_images",
      "mcp__agent-utilities__html_feeds",
      "mcp__agent-utilities__data_json_pointer",
      "mcp__agent-utilities__data_json_canonical",
      "mcp__agent-utilities__security_csp_audit",
      "mcp__agent-utilities__security_header_audit",
      "mcp__agent-utilities__security_cookie_audit",
      "mcp__agent-utilities__text_chunk",
      "mcp__agent-utilities__commerce_pack_plan",
      "mcp__agent-utilities__commerce_money_parse",
      "mcp__agent-utilities__commerce_offer_extract",
      "mcp__agent-utilities__commerce_price_components",
      "mcp__agent-utilities__commerce_main_product",
      "mcp__agent-utilities__commerce_pack_size_normalize"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agent-utilities. Review it before you use it.