Agent Data API

io.github.Bustlll/agent-data-apiBustlllstreamable-httpv1.0.0Scanned 1 hour ago

Pay-per-call web search, page reader, enrichment, email check, token safety, 50+ data tools (x402)

18 tools: 13 change things and 5 only read.

Reads private data · 0
Reads text others write · 4
Can send data out · 3
1 finding

Anlyon alternative

13 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

18 tools

Changes things 13Creates or changes something that can be changed back.Claude Code: ask

check_x402_sellerShould my agent pay this x402 seller?Can send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Should my agent pay this x402 seller? Give an endpoint URL, host or payTo address: its Bazaar record (number of endpoints, 30-day calls and unique payers, revenue estimate, price range, last call), other hosts paying the same wallet, temporary-tunnel and price warnings. Public data; signals, not a verdict. Price: $0.005 per call (x402, USDC).
company_enrichCompany enrichment from a domain (firmographics + tech stack) in ~2 s: name, description, logo, socials (LinkedIn, X, Instagram...), contact emails and phones, address, key pages (…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Company enrichment from a domain (firmographics + tech stack) in ~2 s: name, description, logo, socials (LinkedIn, X, Instagram...), contact emails and phones, address, key pages (pricing, careers, docs, login), website platform, email provider, DMARC, and the SaaS stack proven by DNS records (~200 vendors: Google Workspace, Microsoft 365, HubSpot, Salesforce, Atlassian, OpenAI...) plus website tech. No API key. Price: $0.01 per call (x402, USDC).
crypto_address_riskCrypto address sanctions screening (OFAC) and AML risk, 18 chains incl.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Crypto address sanctions screening (OFAC) and AML risk, 18 chains incl. Solana, Ethereum, Tron, XRP: sanctioned match; Bitcoin one-hop exposure to sanctioned counterparties; Solana account profile (type, balance, velocity, failed txs, age). Risk band + findings. Screening aid, not a verdict. Price: $0.01 per call (x402, USDC).
email_verifyEmail verification / validation API for lead lists (up to 20 addresses per call, ~1 s): syntax, domain mail setup (MX), mailbox provider (Google, Microsoft, Zoho, gateways), dispos…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Email verification / validation API for lead lists (up to 20 addresses per call, ~1 s): syntax, domain mail setup (MX), mailbox provider (Google, Microsoft, Zoho, gateways), disposable / temporary domains (~10k), free webmail, role accounts (info@, sales@), typo suggestions (gmial.com -> gmail.com). Verdict valid / risky / invalid + score. No SMTP probing, no mail sent. Price: $0.002 per call (x402, USDC).
prompt_injection_checkPrompt injection detection for LLM agents: check text you are about to read (pages, emails, tool output): safe / suspicious / malicious, 0-100 risk score and evidence.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Warn
  The description contains "overrides, fake system/chat-template markers, tool", wording about other tools or servers.
  Matched text
  description: "...score and evidence. Catches instruction overrides, fake system/chat-template markers, tool and command hijacks, requests for keys,..."
  What this check looks for
Description, as the server wrote it
Prompt injection detection for LLM agents: check text you are about to read (pages, emails, tool output): safe / suspicious / malicious, 0-100 risk score and evidence. Catches instruction overrides, fake system/chat-template markers, tool and command hijacks, requests for keys, seed phrases or fund transfers, exfiltration links, invisible Unicode tag text (decoded), zero-width/bidi tricks, base64 payloads and (with html) hidden elements. Price: $0.002 per call (x402, USDC).
recommend_x402_apiWhich x402 API should I call?No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Which x402 API should I call? API recommender / discovery for agents: describe the need in plain words; get the best x402 endpoints from the WHOLE Bazaar (36k+ endpoints, re-indexed every 6 h) ranked by relevance, real 30-day demand (unique payers, calls), recent use and price, with method, price, networks and a ready-to-send example call. Max 2 per seller, dead tunnel URLs removed. Filters: max_price, network. Price: $0.005 per call (x402, USDC).
run_data_toolRun one of our 70 data tools (Google Maps places, YouTube transcripts/videos/comments, Indeed / LinkedIn / 13-board jobs, Google Ads library, Google News and Trends, TikTok comment…No findings
Why it is in this group
- The name "run_data_tool" says "run": a word for a change.
Description, as the server wrote it
Run one of our 70 data tools (Google Maps places, YouTube transcripts/videos/comments, Indeed / LinkedIn / 13-board jobs, Google Ads library, Google News and Trends, TikTok comments, Pinterest, Airbnb, Redfin, AliExpress, app stores, website contacts, SEO and domain checks, sanctions, clinical trials...) with its JSON input. list_tools_and_prices (free) shows each tool's input example. Price: $0.01 per call (x402, USDC).
shopify_storeLive tech stack of one Shopify store: every installed app by name (435+ known apps, 31 categories), estimated monthly app spend, missing revenue categories, ad pixels, theme, catal…No findings
Why it is in this group
- The name "shopify_store" says "store": a word for a change.
Description, as the server wrote it
Live tech stack of one Shopify store: every installed app by name (435+ known apps, 31 categories), estimated monthly app spend, missing revenue categories, ad pixels, theme, catalog size and price, public contact emails and socials. Non-Shopify domains are not charged. Price: $0.01 per call (x402, USDC).
shopify_stores_searchFind Shopify stores by the apps they run or lack: stores using Klaviyo, stores without a loyalty app, by country, niche keyword and estimated app spend.No findings
Why it is in this group
- The name "shopify_stores_search" says "store": a word for a change.
Description, as the server wrote it
Find Shopify stores by the apps they run or lack: stores using Klaviyo, stores without a loyalty app, by country, niche keyword and estimated app spend. Up to 10 stores per call (page with offset), most-visited first, with apps, spend estimate, gaps and public contacts. From our index of high-traffic Shopify stores. Price: $0.01 per call (x402, USDC).
solana_wallet_profileSolana wallet profile: account type, SOL balance, recent activity, failed-transaction share and velocity from the RPC, plus the wallet's record on new tokens in our trade data (tok…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Solana wallet profile: account type, SOL balance, recent activity, failed-transaction share and velocity from the RPC, plus the wallet's record on new tokens in our trade data (tokens entered, early entries, hit rate, rugs, realized USD) and a label: smart / sniper-bot / active / new / unused. Price: $0.005 per call (x402, USDC).
token_launchesNew Solana token launches feed (pump.fun, memecoins) for sniping bots: pools created in the last N minutes on Solana (pump.fun, Meteora, Raydium, PumpSwap), Base, Ethereum or BSC, …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
New Solana token launches feed (pump.fun, memecoins) for sniping bots: pools created in the last N minutes on Solana (pump.fun, Meteora, Raydium, PumpSwap), Base, Ethereum or BSC, each with liquidity, early volume, buyers, momentum score AND a pre-trade verdict (go / caution / avoid + reasons, holder concentration). Filter by liquidity and verdict. Poll it. Price: $0.01 per call (x402, USDC).
token_pretrade_checkToken rug check / pre-trade safety verdict (Solana + EVM) for trading bots: go / caution / avoid + reasons, up to 10 tokens per call, ~0.3-1 s, cached 120 s.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Token rug check / pre-trade safety verdict (Solana + EVM) for trading bots: go / caution / avoid + reasons, up to 10 tokens per call, ~0.3-1 s, cached 120 s. Solana (pump.fun and Meteora curves, Token-2022) and Ethereum/BSC/Base: authorities, honeypot simulation and taxes, liquidity, holder concentration (pools excluded), buys vs sells, price moves, age. Price: $0.01 per call (x402, USDC).
token_safetyToken safety / honeypot / rug-pull check for SOLANA (incl.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Token safety / honeypot / rug-pull check for SOLANA (incl. pump.fun), Ethereum, BSC or Base: Solana mint & freeze authority, Token-2022 traps, top-holder and insider concentration, LP locked, liquidity, buys vs sells; EVM sell simulation and taxes. One 0-100 safety score + verdict. Signals, not advice. Price: $0.01 per call (x402, USDC).

Only reads 5Looks things up and changes nothing.Show 5 read-only tools

list_tools_and_pricesFREE.No findings
Why it is in this group
- The name "list_tools_and_prices" says "list": a word for reading.
Description, as the server wrote it
FREE. Every tool with its price, input example and the equivalent plain-HTTP x402 endpoint.
web_fetchFetch any URL (web scraping / URL fetch) and get the raw content: HTML/JSON/text as text, images and PDFs as base64 (for multimodal LLM input), or markdown.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "web_fetch" says "fetch": a word for reading.
What it can reach
- untrusted-inputThe name "web_fetch" says "fetch" and "web": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "fetch" and "url": it reads web pages, which anyone can write.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Claude Code: ask, because it is tagged outbound.
Description, as the server wrote it
Fetch any URL (web scraping / URL fetch) and get the raw content: HTML/JSON/text as text, images and PDFs as base64 (for multimodal LLM input), or markdown. Final URL after redirects, status, content type, size. Fetched from Cloudflare's edge (fallback for sites that block it), up to 5 MB. Error statuses are not charged. Price: $0.002 per call (x402, USDC).
web_readWeb page to markdown (read URL as clean text) for LLM agents: main content only (no nav, cookie banners, ads), with title, description, author, dates, language, headings, internal/…Reads text others writeCan send data outNo findings
Why it is in this group
- The name "web_read" says "read": a word for reading.
What it can reach
- untrusted-inputThe name "web_read" says "read" and "web": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "web": it reads web pages, which anyone can write.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Claude Code: ask, because it is tagged outbound.
Description, as the server wrote it
Web page to markdown (read URL as clean text) for LLM agents: main content only (no nav, cookie banners, ads), with title, description, author, dates, language, headings, internal/external links and JSON-LD types, PLUS a prompt-injection scan of the page (visible text, hidden HTML, comments, invisible Unicode) so your agent knows whether the content tries to give it orders. Fetched from Cloudflare's edge, ~0.5 s. Unreachable pages are not charged. Price: $0.003 per call (x402, USDC).
web_searchWeb search API for AI agents (SERP, no API key): ranked results (title, URL, domain, snippet, position) for any query, with region (us, uk, de, fr, es, ...) and time filter (day, w…Reads text others writeNo findings
Why it is in this group
- The name "web_search" says "search": a word for reading.
What it can reach
- untrusted-inputThe name "web_search" says "search" and "web": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "web": it reads web pages, which anyone can write.
Description, as the server wrote it
Web search API for AI agents (SERP, no API key): ranked results (title, URL, domain, snippet, position) for any query, with region (us, uk, de, fr, es, ...) and time filter (day, week, month, year). Up to 10 results per call. Price: $0.003 per call (x402, USDC).
web_search_readWeb search + read top pages (search and scrape for RAG / answers with sources) in one call: the top 1-5 results as clean markdown (main content only) with title, URL, date and a pr…Reads text others writeNo findings
Why it is in this group
- The name "web_search_read" says "search": a word for reading.
What it can reach
- untrusted-inputThe name "web_search_read" says "search" and "web": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
Description, as the server wrote it
Web search + read top pages (search and scrape for RAG / answers with sources) in one call: the top 1-5 results as clean markdown (main content only) with title, URL, date and a prompt-injection safety verdict per page, plus the other results. Everything an agent needs to answer with sources. Fetched from Cloudflare's edge in parallel. Price: $0.01 per call (x402, USDC).

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write4: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; web_fetch
web_read
web_search
web_search_read
Can send data out3: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; check_x402_seller
web_fetch
web_read

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnprompt_injection_check
The description contains "overrides, fake system/chat-template markers, tool", wording about other tools or servers.
Matched text
description: "...score and evidence. Catches instruction overrides, fake system/chat-template markers, tool and command hijacks, requests for keys,..."
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http agent-data-api https://agent-data.centorprat.workers.dev/mcp

claude mcp add --transport http agent-data-api https://agent-data.centorprat.workers.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__agent-data-api__list_tools_and_prices",
      "mcp__agent-data-api__web_search",
      "mcp__agent-data-api__web_search_read"
    ],
    "ask": [
      "mcp__agent-data-api__web_read",
      "mcp__agent-data-api__web_fetch",
      "mcp__agent-data-api__prompt_injection_check",
      "mcp__agent-data-api__recommend_x402_api",
      "mcp__agent-data-api__check_x402_seller",
      "mcp__agent-data-api__company_enrich",
      "mcp__agent-data-api__email_verify",
      "mcp__agent-data-api__token_pretrade_check",
      "mcp__agent-data-api__token_launches",
      "mcp__agent-data-api__token_safety",
      "mcp__agent-data-api__crypto_address_risk",
      "mcp__agent-data-api__solana_wallet_profile",
      "mcp__agent-data-api__shopify_store",
      "mcp__agent-data-api__shopify_stores_search",
      "mcp__agent-data-api__run_data_tool"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as agent-data-api. Review it before you use it.

Capability tags behind 5 rules

mcp__agent-data-api__web_search untrusted-input
mcp__agent-data-api__web_search_read untrusted-input
mcp__agent-data-api__web_read untrusted-input, outbound
mcp__agent-data-api__web_fetch untrusted-input, outbound
mcp__agent-data-api__check_x402_seller outbound

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.Bustlll/agent-data-api/verify?hash=36c04ded27207028eab551022d7b646f893a192325867e753eed98feab4d1f47" | jq -e '.changed == false'

Pinned hash 36c04ded2720, from Oct 23, 2026, 20:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.Bustlll/agent-data-api/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.Bustlll/agent-data-api.svg)](https://anlyon.dev/servers/io.github.Bustlll/agent-data-api)

Source: MCP Registry. Synced Oct 23, 2026, 20:17 UTC.