Skip to content

x402 Web Tools

by x402-web-tools.microtools-x402.workers.dev · remote · no sign-in to list tools · v0.2.0 · published by dev.workers.microtools-x402.x402-web-tools

Web/PDF to Markdown, transcription, paper search and citation checks. Pay per call in USDC via x402.

Changes · 31 high finding
CompareRegistry entry

9 tools: 3 change things and 6 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http web-tools https://x402-web-tools.microtools-x402.workers.dev/mcp

Findings

Matches of fixed checks, with the text they matched.

1 high
  • Highread_url_safe

    The description contains "ignore previous instructions", an instruction to set earlier instructions aside.

    Matched text

    description: "...isible text, instruction-like phrases ("ignore previous instructions", role reassignment, secret exfiltratio..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

9 tools

Changes things 3Claude Code: ask
  • check_citationCheck whether a cited paper really exists (catch hallucinated or mistyped references) and whether it has been retracted.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check whether a cited paper really exists (catch hallucinated or mistyped references) and whether it has been retracted. Give a doi, or a title with optional year and first_author. Returns exists, verdict (verified | found | doi_exists_metadata_mismatch | uncertain | not_found), confidence (high/medium/low) with a note on what matched, is_retracted (OpenAlex is_retracted + Crossref/Retraction Watch notices) and the best match. Data: OpenAlex (CC0, openalex.org) with Crossref REST (crossref.org) for retraction notices and as fallback. Upstream errors are not charged. Costs $0.002 USDC per check via x402.
  • healthFree health check.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Free health check. Returns service status, version, tool prices, network and the plain-HTTP x402 endpoints.
  • transcribe_audioTranscribe a public direct audio file URL (mp3, wav, m4a, ogg/opus, flac; max 25 MB and 10 minutes, checked from the file header before transcription) with Whisper (@cf/openai/whis…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Transcribe a public direct audio file URL (mp3, wav, m4a, ogg/opus, flac; max 25 MB and 10 minutes, checked from the file header before transcription) with Whisper (@cf/openai/whisper-large-v3-turbo) on Cloudflare Workers AI. Returns text, language, duration, segments with timestamps, optional SRT/VTT subtitles. YouTube/TikTok/Instagram and other page URLs are rejected. Failed transcriptions and files with no detected speech are not charged. Costs $0.01 USDC per file via x402.
Only reads 6Claude Code: allow
  • get_paperLook up one scholarly work by DOI (10.xxxx/..., doi.org URL), arXiv id (arXiv:1706.03762) or OpenAlex work id (W...).No findings

    Why it is in this group

    • The name "get_paper" says "get": a word for reading.
    Description, as the server wrote it
    Look up one scholarly work by DOI (10.xxxx/..., doi.org URL), arXiv id (arXiv:1706.03762) or OpenAlex work id (W...). Returns title, authors, year, venue, DOI, citation count, references count, open-access PDF link, abstract, OpenAlex id and a retraction flag (OpenAlex is_retracted plus Crossref/Retraction Watch notices). Data: OpenAlex (CC0, openalex.org) with Crossref REST (crossref.org) for retraction notices and as fallback. Not-found and upstream errors are not charged. Costs $0.002 USDC per lookup via x402.
  • pingPaid connectivity test: returns ok and a server timestamp.No findings

    Why it is in this group

    • The name "ping" says "ping": a word for reading.
    Description, as the server wrote it
    Paid connectivity test: returns ok and a server timestamp. Use it to check that your x402 payment flow works end to end. Costs $0.001 USDC per call via x402.
  • read_pdfFetch a public PDF (max 10 MB) and convert it to Markdown with Cloudflare Workers AI toMarkdown.No findings

    Why it is in this group

    • The name "read_pdf" says "read": a word for reading.
    Description, as the server wrote it
    Fetch a public PDF (max 10 MB) and convert it to Markdown with Cloudflare Workers AI toMarkdown. Returns title (if detected), url, markdown, word_count. Same URL safety rules as read_url. Failed conversions are not charged. Costs $0.006 USDC per call via x402.
  • read_urlFetch a public web page and return its main content as clean Markdown (readability extraction): title, url, final_url, markdown, word_count.No findings

    Why it is in this group

    • The name "read_url" says "read": a word for reading.
    Description, as the server wrote it
    Fetch a public web page and return its main content as clean Markdown (readability extraction): title, url, final_url, markdown, word_count. HTML, plain text, Markdown, JSON and XML. Static fetch only (no JavaScript rendering). Respects robots.txt, blocks private/loopback/metadata hosts, max 3 MB / 15 s, no logins or paywall bypass. For PDFs use read_pdf. Failed reads are not charged. Costs $0.002 USDC per call via x402.
  • read_url_safeSame as read_url plus a heuristic prompt-injection check: flags hidden/invisible text, instruction-like phrases ("ignore previous instructions", role reassignment, secret exfiltrat…1 finding

    Why it is in this group

    • The name "read_url_safe" says "read": a word for reading.

    Findings

    • High

      The description contains "ignore previous instructions", an instruction to set earlier instructions aside.

      Matched text

      description: "...isible text, instruction-like phrases ("ignore previous instructions", role reassignment, secret exfiltratio..."

      What this check looks for
    Description, as the server wrote it
    Same as read_url plus a heuristic prompt-injection check: flags hidden/invisible text, instruction-like phrases ("ignore previous instructions", role reassignment, secret exfiltration, chat-template tokens), suspicious HTML comments and zero-width/Unicode-tag characters. Returns injection_check {flagged, risk none|low|medium|high, signals}. Heuristic, not a guarantee. Failed reads are not charged. Costs $0.003 USDC per call via x402.
  • search_papersSearch scholarly papers (OpenAlex index of 250M+ works).No findings

    Why it is in this group

    • The name "search_papers" says "search": a word for reading.
    Description, as the server wrote it
    Search scholarly papers (OpenAlex index of 250M+ works). Returns up to 25 results with title, authors, year, venue, DOI, citation count, open-access PDF link, abstract (reconstructed from OpenAlex's inverted index; may be null when the publisher withholds it) and OpenAlex id. Optional from_year / to_year / open_access_only filters. Data: OpenAlex (CC0, openalex.org) with Crossref REST (crossref.org) for retraction notices and as fallback. Upstream errors are not charged. Costs $0.005 USDC per search via x402.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http web-tools https://x402-web-tools.microtools-x402.workers.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__web-tools__read_url",
      "mcp__web-tools__read_url_safe",
      "mcp__web-tools__read_pdf",
      "mcp__web-tools__search_papers",
      "mcp__web-tools__get_paper",
      "mcp__web-tools__ping"
    ],
    "ask": [
      "mcp__web-tools__transcribe_audio",
      "mcp__web-tools__check_citation",
      "mcp__web-tools__health"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as web-tools. Review it before you use it.