Skip to content

SiteCheck Health & Travel

io.github.bck-stack/sitecheck-health-travelbck-stackstreamable-httpv1.0.0Scanned

120 pay-per-call agent tools: health care, drug, provider and travel data tools. x402

120 tools: 7 do something that can't be undone, 106 change things and 7 only read.

Tools: 0 delete, 7 irreversible, 106 write, 7 read.
  • Reads private data · 2
  • Reads text others write · 120
  • Can send data out · 7
  • 12 findings

Anlyon alternative

113 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

120 tools

Can't be undone 7Claude Code: ask
  • health_open_payments_cmsCMS Open Payments (Sunshine Act) general payments from drug and device makers to US physicians, prescribers and teaching hospitals for a program year (2019-2025): company, recipien…Reads text others write1 finding

    Why it is in this group

    • The name "health_open_payments_cms" says "open": a word for a change.
    • The name "health_open_payments_cms" also says "payment": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "health_open_payments_cms" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "health_open_payments_cms" says "open": a word for a change.

      What this check looks for
    Description, as the server wrote it
    CMS Open Payments (Sunshine Act) general payments from drug and device makers to US physicians, prescribers and teaching hospitals for a program year (2019-2025): company, recipient (name, type, NPI, specialty, city, state), amount (USD), date, form and nature of payment, related products, plus match count. Filter by company, recipient last name or NPI, state and product. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_google_flightsOne-way flight options with prices from Google Flights for a route and date (IATA codes, e.g.Reads text others writeCan send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "travel_google_flights" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    One-way flight options with prices from Google Flights for a route and date (IATA codes, e.g. JFK to LHR): lowest fare in USD, airline(s), stops, departure and arrival airport, local times and dates, total duration and layover airports, as shown on Google's public results page. Economy, 1 adult. Prices change constantly and are Google's displayed 'from' fares, not bookings. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_kayakKAYAK flight route overview between two city or airport codes (e.g.Reads text others writeCan send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "travel_kayak" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    KAYAK flight route overview between two city or airport codes (e.g. LON to PAR): up to 20 recent round-trip deals KAYAK found (airline, departure/arrival airport, departure time, duration, price in USD), the route's lowest recent price and KAYAK's published route insights as question/answer text (typical price range, cheapest month, day and airline, delays, flights per week). From KAYAK's public route page; not a live date search. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_momondomomondo flight prices from its public route page for two cities (e.g.Reads text others writeCan send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "travel_momondo" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    momondo flight prices from its public route page for two cities (e.g. london to paris): lowest recent price, up to 20 recent round-trip fares (airline, airports, departure, duration, USD price), deal dates and route facts (typical price range, cheapest day and month, trend, delays). City names as in momondo URLs (new-york-city, london). Not a live date search. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_rome2rioRome2Rio ways to travel between two places: the headline count ('11 ways to travel...') and the top options shown first (train, bus, flight, rideshare, car, ferry...) with label (B…Reads text others writeCan send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "travel_rome2rio" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Rome2Rio ways to travel between two places: the headline count ('11 ways to travel...') and the top options shown first (train, bus, flight, rideshare, car, ferry...) with label (Best, Cheapest, Fastest), total travel time (minutes and text) and price range in USD, plus the link to each route. From rome2rio.com's public route pages via a rendering residential proxy; the page shows the 4-5 top options first. Price: $0.02 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_seat61_routesSeat61 train route guide for a city pair (e.g.Reads text others writeCan send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "travel_seat61_routes" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Seat61 train route guide for a city pair (e.g. london to paris): guide title, section headings and its timetable and fare tables as rows of cells, plus the guide URL, from seat61.com. Tables only, not the guide's prose; timetables are Seat61's summaries, check the operator before travel. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_skyscannerSkyscanner flight prices from its public route page (Skyscanner codes, e.g.Reads text others writeCan send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "travel_skyscanner" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Skyscanner flight prices from its public route page (Skyscanner codes, e.g. lond to pari, ist to lond): lowest recent fare, up to 16 cheapest recent one-way deals (date, airline, airports, direct or not, USD price, when seen), cheapest fare per month for a year, route facts and Skyscanner's FAQ answers. Not a live date search. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Changes things 106Claude Code: ask
  • health_blood_center_accreditationAABB-accredited facilities from AABB's public lists: blood banks, transfusion services and blood centers, immunohematology and molecular labs, perioperative and out-of-hospital tra…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    AABB-accredited facilities from AABB's public lists: blood banks, transfusion services and blood centers, immunohematology and molecular labs, perioperative and out-of-hospital transfusion, cord blood, HPC and cell therapy facilities, and relationship (DNA) testing labs. Per facility: name, city, state, country, AABB codes, and website and phone for DNA labs. Filter by state, country or name. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_cdc_wonder_mortalityCDC/NCHS leading causes of death by US state and year (data.cdc.gov open data): cause, deaths and age-adjusted death rate per 100,000.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    CDC/NCHS leading causes of death by US state and year (data.cdc.gov open data): cause, deaths and age-adjusted death rate per 100,000. Published table only, not the CDC WONDER query tool. Up to 50 rows per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_cell_line_depmap_cancerCancer cell line lookup with DepMap IDs, from Cellosaurus (SIB, the reference cell line knowledge base): find a line by name (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Cancer cell line lookup with DepMap IDs, from Cellosaurus (SIB, the reference cell line knowledge base): find a line by name (e.g. MCF-7), Cellosaurus accession (CVCL_…) or DepMap ID (ACH-…), or list DepMap lines for a disease. Returns names and synonyms, DepMap ID, ATCC catalog number, disease (NCIt), species, sex, donor age, sampling site, genetic ancestry and the Cellosaurus link. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_chEMBL_bioactive_moleculesEMBL-EBI ChEMBL molecule search: ChEMBL ID, preferred name, maximum clinical phase, molecule type, molecular weight, canonical SMILES, first approval year and ATC codes.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    EMBL-EBI ChEMBL molecule search: ChEMBL ID, preferred name, maximum clinical phase, molecule type, molecular weight, canonical SMILES, first approval year and ATC codes. Up to 20 molecules per call, with total match count. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_clia_laboratory_finderCMS CLIA-certified clinical laboratories in one US state (Provider of Services File, latest quarterly release): CLIA provider number, lab name, city, street address, phone, certifi…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    CMS CLIA-certified clinical laboratories in one US state (Provider of Services File, latest quarterly release): CLIA provider number, lab name, city, street address, phone, certification date and program termination code. Does not list tests performed. Up to 50 labs per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_clinical_evidence_cochraneCochrane systematic reviews of health interventions, found through PubMed (journal Cochrane Database Syst Rev): PMID, title, publication date and DOI for a search term.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Cochrane systematic reviews of health interventions, found through PubMed (journal Cochrane Database Syst Rev): PMID, title, publication date and DOI for a search term. Citation records only (no abstract, no full text). Up to 10 per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_clinical_pharmacogeneticsCPIC pharmacogenetics guidelines (api.cpicpgx.org) for a gene symbol: guideline name, genes covered, guideline version, and ClinPGx link.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    CPIC pharmacogenetics guidelines (api.cpicpgx.org) for a gene symbol: guideline name, genes covered, guideline version, and ClinPGx link. Lists guidelines only; recommendation text is not included. Up to 20 guidelines per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_clinical_trials_govClinicalTrials.gov study search (API v2): NCT ID, title, status, phase, start and completion dates, sponsor, conditions, interventions, enrollment and primary outcome.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ClinicalTrials.gov study search (API v2): NCT ID, title, status, phase, start and completion dates, sponsor, conditions, interventions, enrollment and primary outcome. Up to 10 studies per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_clinvar_genetic_variantsNCBI ClinVar variants for a human gene symbol: VCV accession, variant type, germline clinical significance (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NCBI ClinVar variants for a human gene symbol: VCV accession, variant type, germline clinical significance (e.g. Pathogenic, Likely pathogenic) and last evaluation date. Up to 10 variants per call. Variant names and protein changes are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_cms_medicare_part_dCMS Medicare Part D prescriber rows (by provider and drug): prescriber NPI, name, specialty, state, drug name, claims, 30-day fills and total drug cost.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    CMS Medicare Part D prescriber rows (by provider and drug): prescriber NPI, name, specialty, state, drug name, claims, 30-day fills and total drug cost. Filter by 10-digit NPI, or by generic drug name with an optional state. Up to 20 rows per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_cosmetics_inci_ingredientsCosmetic ingredient lookup by INCI name: INCI name, cosmetic functions (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Cosmetic ingredient lookup by INCI name: INCI name, cosmetic functions (e.g. skin conditioning, preservative), chemical description, CAS and EC numbers and CosIng ID, from the European Commission's CosIng ingredient inventory (the EU's INCI reference). Safety assessments of the US Personal Care Products Council (CIR) are not included; use eu-cosing-cosmetics for EU restrictions. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_covid19_cdc_wastewaterCDC National Wastewater Surveillance System (NWSS) sampling sites in one US state (data.cdc.gov): wastewater plant, county, population served, 15-day detection proportion, percenti…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    CDC National Wastewater Surveillance System (NWSS) sampling sites in one US state (data.cdc.gov): wastewater plant, county, population served, 15-day detection proportion, percentile and sample dates. The pathogen is not named in the dataset; this is not confirmed COVID-19 activity. Up to 50 sites per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_cpt_hcpcs_procedureHCPCS Level II billing code search (CMS code set, via NLM Clinical Tables): code and short description for procedures, supplies and drugs, with total match count.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    HCPCS Level II billing code search (CMS code set, via NLM Clinical Tables): code and short description for procedures, supplies and drugs, with total match count. CPT codes are AMA-licensed and not included. Up to 20 codes per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_daily_med_label_splNLM DailyMed drug label listings (structured product labeling) matching a drug name: title with labeler, set ID, label version, published date and total match count.Reads text others write1 finding

    Why it is in this group

    • The name "health_daily_med_label_spl" says "label": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "health_daily_med_label_spl" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "health_daily_med_label_spl" says "label": a word for a change.

      What this check looks for
    Description, as the server wrote it
    NLM DailyMed drug label listings (structured product labeling) matching a drug name: title with labeler, set ID, label version, published date and total match count. Lists labels only; label section text is not included. Up to 10 labels per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_dbSNP_polymorphismsNCBI dbSNP short variant record by rs number: variant type, placement (sequence and position), reference and alternate sequence, and study allele frequencies (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NCBI dbSNP short variant record by rs number: variant type, placement (sequence and position), reference and alternate sequence, and study allele frequencies (e.g. 1000 Genomes allele counts). Up to 10 frequency rows per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_dea_controlled_substancesDEA controlled substance schedules (21 CFR 1308.11-1308.15, via eCFR): substance name and DEA Controlled Substances Code Number for schedule I to V table entries matching a name.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    DEA controlled substance schedules (21 CFR 1308.11-1308.15, via eCFR): substance name and DEA Controlled Substances Code Number for schedule I to V table entries matching a name. Substances listed only in paragraphs are not searched. Does not include registration status. Up to 20 matches per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_dental_board_verifyDental license verification from official state open data: Colorado (dentists and hygienists, with discipline history) and Illinois (dentists, specialists, hygienists, sedation per…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Dental license verification from official state open data: Colorado (dentists and hygienists, with discipline history) and Illinois (dentists, specialists, hygienists, sedation permits, controlled-substance licenses, ever-disciplined flag): license number, name, type, status, issue, renewal and expiry dates, city and discipline details. Search by license number, name or city; active by default. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_drugbank_interactionDrug-drug interaction text from the FDA label (openFDA) of drug A that mentions drug B: matching sentences from the label's drug interactions section, with label set ID and effecti…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Drug-drug interaction text from the FDA label (openFDA) of drug A that mentions drug B: matching sentences from the label's drug interactions section, with label set ID and effective date. Label text only; no severity score. If no sentence matches, that does NOT mean there is no interaction. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_ema_human_medicinesEuropean Medicines Agency (EMA) centrally authorised human medicines (EMA bulk JSON, updated twice a day): name, EMA product number, status, active substance, ATC code, therapeutic…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    European Medicines Agency (EMA) centrally authorised human medicines (EMA bulk JSON, updated twice a day): name, EMA product number, status, active substance, ATC code, therapeutic indication, first authorisation date and holder. Searches name or active substance. Up to 20 per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_ema_shortages_safetyEuropean Medicines Agency (EMA) human medicine supply shortages (EMA shortages JSON): medicine, INN, shortage status, affected forms, availability of alternatives, start and expect…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    European Medicines Agency (EMA) human medicine supply shortages (EMA shortages JSON): medicine, INN, shortage status, affected forms, availability of alternatives, start and expected resolution dates. Shortages only; safety signals and pharmacovigilance data are not included. Up to 20 per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_eu_cosing_cosmeticsEU cosmetics regulatory status for a substance name: matching Annex II (prohibited), III (restricted), IV (colorants), V (preservatives) and VI (UV filters) entries of Regulation (…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    EU cosmetics regulatory status for a substance name: matching Annex II (prohibited), III (restricted), IV (colorants), V (preservatives) and VI (UV filters) entries of Regulation (EC) No 1223/2009 from the European Commission's CosIng database, with reference number, maximum concentration, conditions and warnings, CAS/EC numbers, amending regulation and SCCS opinions. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_fda_adverse_events_faersFDA FAERS drug adverse event reports (openFDA) for a generic drug name: report ID, receive date, seriousness, patient age and sex, drugs and reported reactions.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    FDA FAERS drug adverse event reports (openFDA) for a generic drug name: report ID, receive date, seriousness, patient age and sex, drugs and reported reactions. Spontaneous reports only; a report does not prove the drug caused the reaction. Up to 10 reports per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_fda_device_gudidFDA AccessGUDID device record by Device Identifier (DI, the GS1/GUDID number on a device label): brand, company, model, description, GMDN term, MRI safety status, sterile and singl…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    FDA AccessGUDID device record by Device Identifier (DI, the GS1/GUDID number on a device label): brand, company, model, description, GMDN term, MRI safety status, sterile and single-use flags. Lookup by DI only; no name search. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_fda_drug_shortagesFDA drug shortage listings (openFDA): generic name, availability status (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    FDA drug shortage listings (openFDA): generic name, availability status (e.g. Available, Currently in Shortage), manufacturer, package NDC, posting dates and FDA contact number. Up to 10 listings per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_fda_medical_device_510kFDA 510(k) premarket notifications (openFDA): K-number, device name, applicant, decision (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    FDA 510(k) premarket notifications (openFDA): K-number, device name, applicant, decision (e.g. Substantially Equivalent), decision and received dates, product code and advisory committee. Up to 10 per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_fda_orange_bookFDA Drugs@FDA approved applications (openFDA) by active ingredient: application number, sponsor, brand names, dosage form, marketing status and Orange Book therapeutic equivalence …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    FDA Drugs@FDA approved applications (openFDA) by active ingredient: application number, sponsor, brand names, dosage form, marketing status and Orange Book therapeutic equivalence (TE) code. Up to 10 applications per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_fda_purple_bookFDA Purple Book licensed biological products matching a name (brand or proper name, e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    FDA Purple Book licensed biological products matching a name (brand or proper name, e.g. adalimumab): applicant, BLA number, license type (351(a) originator, 351(k) biosimilar or interchangeable), strength, dosage form, route, marketing status, approval date, reference product and exclusivity expiry dates, plus the products newly approved or updated this month. From FDA's monthly Purple Book data download. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_fda_recalls_enforcementFDA drug recall enforcement reports (openFDA) matching a product word: recall number, class I/II/III, status, recalling firm, reason, product description and dates.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    FDA drug recall enforcement reports (openFDA) matching a product word: recall number, class I/II/III, status, recalling firm, reason, product description and dates. Drug recalls only, not food or cosmetics. Up to 10 per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_fluview_influenza_cdcCDC FluView weekly influenza-like illness (ILI) and weighted ILI for the US or a region (served via Delphi Epidata, which mirrors CDC FluView): epiweek, ILI %, weighted ILI %, pati…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    CDC FluView weekly influenza-like illness (ILI) and weighted ILI for the US or a region (served via Delphi Epidata, which mirrors CDC FluView): epiweek, ILI %, weighted ILI %, patient and provider counts. Give an epiweek range of up to 12 weeks. No outbreak maps. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_gwas_catalog_associationsEMBL-EBI GWAS Catalog genome-wide association hits for a gene symbol (REST API v2): reported trait, EFO trait, SNP and locus, p-value, odds ratio or beta, study accession and PubMe…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    EMBL-EBI GWAS Catalog genome-wide association hits for a gene symbol (REST API v2): reported trait, EFO trait, SNP and locus, p-value, odds ratio or beta, study accession and PubMed ID. Searches by mapped gene only. Up to 10 hits per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_health_insurance_exchangeACA Health Insurance Marketplace (HealthCare.gov) overview for a US ZIP code from CMS's QHP Landscape data: number of plans and insurers, plans per metal level, the cheapest plan o…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ACA Health Insurance Marketplace (HealthCare.gov) overview for a US ZIP code from CMS's QHP Landscape data: number of plans and insurers, plans per metal level, the cheapest plan of each metal level and the benchmark silver plan (second-lowest-cost silver, which sets ACA subsidies) with monthly premium before subsidies for the nearest published age, deductible and out-of-pocket maximum. Federal-platform states only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_hhs_hipaa_breach_portalHIPAA breaches affecting 500+ people from the HHS Office for Civil Rights portal (last 24 months, under investigation): entity name, state, entity type, individuals affected, submi…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    HIPAA breaches affecting 500+ people from the HHS Office for Civil Rights portal (last 24 months, under investigation): entity name, state, entity type, individuals affected, submission date, breach type, location of the information and business-associate flag. Newest 100 reports, filterable by state, entity type, breach type, minimum individuals or name; plus total open cases. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_icd10_cm_diagnosisICD-10-CM diagnosis code search (NLM Clinical Tables, CDC code set): matching codes and their official names, with the total match count.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ICD-10-CM diagnosis code search (NLM Clinical Tables, CDC code set): matching codes and their official names, with the total match count. Codes and names only; no cross-walks or clinical descriptions. Up to 20 codes per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_indian_health_service_ihsIndian Health Service, tribal and urban Indian health facilities from IHS's official map: filter by state, IHS Area, city, name or service (dental, pharmacy, behavioral health, urg…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Indian Health Service, tribal and urban Indian health facilities from IHS's official map: filter by state, IHS Area, city, name or service (dental, pharmacy, behavioral health, urgent care...). Per facility: IHS code, name, Area and service unit, address, county, coordinates, phone, fax, hours, website, facility and service type, services, operator (IHS, tribal, urban), beds and accreditation. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_kegg_pathway_genesKEGG human pathway (KEGG REST, flat file): pathway name, class, description and the genes in it (KEGG gene ID, symbol and description).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    KEGG human pathway (KEGG REST, flat file): pathway name, class, description and the genes in it (KEGG gene ID, symbol and description). Give a human pathway number such as 05200. Up to 100 genes per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_loinc_laboratory_codesRegenstrief LOINC laboratory and clinical test codes (via NLM Clinical Tables): LOINC number and long common name matching a term, with total match count.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Regenstrief LOINC laboratory and clinical test codes (via NLM Clinical Tables): LOINC number and long common name matching a term, with total match count. Codes and names only, no units or reference ranges. Up to 20 per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_mammography_facility_fdaFDA MQSA certified mammography facilities in one US state (FDA public search): facility name, phone, city, ZIP and FDA facility ID.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    FDA MQSA certified mammography facilities in one US state (FDA public search): facility name, phone, city, ZIP and FDA facility ID. Parsed from the FDA results page, which shows the facilities on the first results page only. Radiation safety data is not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_medicare_advantage_starOfficial CMS Medicare Star Ratings for Medicare Advantage (Part C) and Part D contracts from the newest Star Ratings Data Tables: contract number, organization type, contract and m…Reads text others write1 finding

    Why it is in this group

    • The name "health_medicare_advantage_star" says "star": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "health_medicare_advantage_star" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "health_medicare_advantage_star" says "star": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Official CMS Medicare Star Ratings for Medicare Advantage (Part C) and Part D contracts from the newest Star Ratings Data Tables: contract number, organization type, contract and marketing name, parent organization, SNP flag, Part C summary, Part D summary and overall star rating (1-5, half stars). Search by contract ID, organization or parent name, organization type or minimum overall stars. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_medicare_inpatient_drgCMS Medicare inpatient hospital averages per MS-DRG (data.cms.gov, fee-for-service Part A): hospital name, state, DRG code and description, discharges, average submitted charge, av…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    CMS Medicare inpatient hospital averages per MS-DRG (data.cms.gov, fee-for-service Part A): hospital name, state, DRG code and description, discharges, average submitted charge, average total payment and average Medicare payment. Hospital-level averages, not the IPPS national rate table. Filter by 3-digit DRG code and optional state; up to 20 rows. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_mental_health_samhsaSAMHSA FindTreatment substance use and mental health treatment facilities near a latitude and longitude (FindTreatment.gov locator export): facility name, address, phone, website, …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    SAMHSA FindTreatment substance use and mental health treatment facilities near a latitude and longitude (FindTreatment.gov locator export): facility name, address, phone, website, miles from the point and facility type. Give lat and lng; ZIP or city search is not offered. Up to 20 facilities per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_mesh_biomedical_thesaurusNLM MeSH (Medical Subject Headings) descriptor for an exact heading: MeSH ID, label, entry terms (synonyms) and allowable subheadings (qualifiers).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NLM MeSH (Medical Subject Headings) descriptor for an exact heading: MeSH ID, label, entry terms (synonyms) and allowable subheadings (qualifiers). Exact match only; no scope notes (the public lookup API does not return them). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_nih_reporter_grantsNIH RePORTER funded research projects matching a text search (NIH RePORTER API v2): project number, title, fiscal year, award amount, lead organization and principal investigators.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NIH RePORTER funded research projects matching a text search (NIH RePORTER API v2): project number, title, fiscal year, award amount, lead organization and principal investigators. Up to 20 projects per call, most relevant first. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_npi_provider_registryCMS NPPES NPI Registry search: NPI number, name, credential, status, taxonomy (specialty code and description) and practice location.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...NPI Registry search: NPI number, name, credential, status, taxonomy (specialty code and d..."

      What this check looks for
    Description, as the server wrote it
    CMS NPPES NPI Registry search: NPI number, name, credential, status, taxonomy (specialty code and description) and practice location. Matches can be fuzzy; the registry decides the match. Up to 10 records per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_nursing_licensure_nursysRegistered nurse license verification for Texas (a Nurse Licensure Compact state) from the Texas Board of Nursing's open data: license number, name, status, status and expiry dates…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Registered nurse license verification for Texas (a Nurse Licensure Compact state) from the Texas Board of Nursing's open data: license number, name, status, status and expiry dates, issue date, original licensure state, county, advanced practice recognition, board action flag, highest degree and school. Search by license number or name (+ county). Nursys has no open API. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_orphanet_rare_diseasesOrphanet rare disease by ORPHAcode (Orphadata open data, CC BY 4.0): preferred name, synonyms, disorder group and typology, and associated genes with association type.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Orphanet rare disease by ORPHAcode (Orphadata open data, CC BY 4.0): preferred name, synonyms, disorder group and typology, and associated genes with association type. Prevalence is not included. Up to 20 genes per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_osha_occupational_healthOSHA Permissible Exposure Limits (Table Z-1, 29 CFR 1910.1000, read from eCFR): chemical name, CAS number, 8-hour TWA in ppm and mg/m3, and notes such as ceiling or see-other-secti…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    OSHA Permissible Exposure Limits (Table Z-1, 29 CFR 1910.1000, read from eCFR): chemical name, CAS number, 8-hour TWA in ppm and mg/m3, and notes such as ceiling or see-other-section. Matches by name words. Up to 20 chemicals per call; not the full OSHA chemical database. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_pubchem_chemical_cidNIH PubChem compound lookup by name (PUG REST): PubChem CID, title, molecular formula, molecular weight and IUPAC name for the best match.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NIH PubChem compound lookup by name (PUG REST): PubChem CID, title, molecular formula, molecular weight and IUPAC name for the best match. Safety and hazard data are not included. One compound per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_pubmed_abstractsPubMed search (NCBI E-utilities): matching articles with PMID, title, authors, journal, publication date and DOI.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    PubMed search (NCBI E-utilities): matching articles with PMID, title, authors, journal, publication date and DOI. Citation metadata only, no abstract text. Up to 20 results. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_reactome_biological_pathsReactome curated human biological pathways matching a term (Reactome ContentService, CC BY 4.0): stable ID, pathway name, whether it is a disease pathway and a short summary.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Reactome curated human biological pathways matching a term (Reactome ContentService, CC BY 4.0): stable ID, pathway name, whether it is a disease pathway and a short summary. Human pathways only. Up to 20 per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_rxnorm_concept_idNIH RxNorm concept lookup (RxNav): RxCUI identifiers for a drug name with each concept's name and term type (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    NIH RxNorm concept lookup (RxNav): RxCUI identifiers for a drug name with each concept's name and term type (e.g. IN = ingredient, SCD = clinical drug). Up to 5 concepts per call. Exact-name lookup, no fuzzy matching. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_state_medical_board_flFlorida health-care license verification (Department of Health, MQA): search by name (and city) or license number within a board (medicine, osteopathic, nursing, dentistry, pharmac…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Florida health-care license verification (Department of Health, MQA): search by name (and city) or license number within a board (medicine, osteopathic, nursing, dentistry, pharmacy, psychology...): license number, name, profession, city and status, plus match count. With a license number also issue and expiry dates, address of record, discipline on file and prescriber flags. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_state_medical_board_nyNew York medical board disciplinary actions (NYS DOH Board for Professional Medical Conduct open data since 1990): search physicians and physician or specialist assistants by licen…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    New York medical board disciplinary actions (NYS DOH Board for Professional Medical Conduct open data since 1990): search physicians and physician or specialist assistants by license number or name for every public action: date, license type, action (revocation, suspension, probation...) and case summary. An empty result means no public action; it is not a licence-status check. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_state_medical_board_txTexas Medical Board license verification and disciplinary status from TMB open data (data.texas.gov, daily): physicians, PAs, acupuncturists and other TMB licenses.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Texas Medical Board license verification and disciplinary status from TMB open data (data.texas.gov, daily): physicians, PAs, acupuncturists and other TMB licenses. Look up a license number or search by name, city, specialty or type; returns license type, degree, specialties, issue and expiry dates, registration and disciplinary status, board action, practice address and license status. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_string_protein_networksSTRING protein-protein interaction partners for a human gene (STRING API, CC BY 4.0): partner gene name, combined confidence score (0-1) and evidence scores for experiments, databa…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    STRING protein-protein interaction partners for a human gene (STRING API, CC BY 4.0): partner gene name, combined confidence score (0-1) and evidence scores for experiments, databases and text mining. Up to 20 partners. No enrichment analysis. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_uniprot_protein_knowledgeUniProt reviewed (Swiss-Prot) human protein entries for a gene symbol: accession, protein name, gene, sequence length and the curated function summary.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    UniProt reviewed (Swiss-Prot) human protein entries for a gene symbol: accession, protein name, gene, sequence length and the curated function summary. Human only (taxon 9606). Up to 5 entries per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_usp_monographs_standardsUSP Reference Standards catalog search (official USP Store): total matches and per item the catalog number, name, package size, CAS number, chemical name, molecular formula, catego…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    USP Reference Standards catalog search (official USP Store): total matches and per item the catalog number, name, package size, CAS number, chemical name, molecular formula, category (e.g. Active Pharmaceutical Ingredients), product line, price (USD), in-stock / ready-to-ship flags, current lot number and release date, associated monograph, therapeutic categories and store link. From store.usp.org. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_usps_prescription_shipUS rules for mailing prescription drugs from the official texts, section by section with citations: USPS Publication 52 section 453 (definitions, mailer responsibility, what may be…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    US rules for mailing prescription drugs from the official texts, section by section with citations: USPS Publication 52 section 453 (definitions, mailer responsibility, what may be mailed, packaging and marking) and DEA 21 CFR Part 1306 (who may prescribe and fill, Schedule II-V refills, labeling, online pharmacies, telemedicine). Filter by source or words in the text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_veterinary_license_dbVeterinarian license verification from official state open data — Colorado (DORA, VET licenses with degrees and discipline history) and Illinois (IDFPR: licensed veterinarians, con…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Veterinarian license verification from official state open data — Colorado (DORA, VET licenses with degrees and discipline history) and Illinois (IDFPR: licensed veterinarians, controlled-substance licenses, certified veterinary technicians, ever-disciplined flag): license number, name, type, status, issue/renewal/expiry dates, city and discipline details. Search by license number, name or city; active licenses by default. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_who_global_health_statsWHO Global Health Observatory values for one country and one indicator (OData API): indicator name, year, sex or group breakdown, value with uncertainty interval.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WHO Global Health Observatory values for one country and one indicator (OData API): indicator name, year, sex or group breakdown, value with uncertainty interval. Up to 20 rows, newest year first. Default indicator is life expectancy at birth. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_agodaTop hotels in a city from Agoda's city guide page (no dates needed): about 10 properties with Agoda hotel ID, name, star rating, area, amenities (Wi-Fi, parking, breakfast, pool …)…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Top hotels in a city from Agoda's city guide page (no dates needed): about 10 properties with Agoda hotel ID, name, star rating, area, amenities (Wi-Fi, parking, breakfast, pool …), review score out of 10 with its label and number of reviews, a recent guest quote, average price per night with currency, and the Agoda hotel link. The city is Agoda's URL slug, e.g. bangkok-th, tokyo-jp, bali-id, london-gb. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_airbnbAirbnb stays for a place and dates (first results page, usually 18): listing id, name, type, total price for the stay in the chosen currency (and original price when discounted), r…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Airbnb stays for a place and dates (first results page, usually 18): listing id, name, type, total price for the stay in the chosen currency (and original price when discounted), rating out of 5 with review count, beds/bathrooms, badges such as Guest favourite, free-cancellation note, coordinates and room URL. From Airbnb's public search page; availability and prices as Airbnb shows them at call time. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_airbnb_reviewsReview summary for one Airbnb listing (by room id or URL): overall guest rating out of 5 and number of reviews, the six category ratings (cleanliness, accuracy, check-in, communica…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Review summary for one Airbnb listing (by room id or URL): overall guest rating out of 5 and number of reviews, the six category ratings (cleanliness, accuracy, check-in, communication, location, value), share of 5/4/3/2/1-star reviews, review themes with mention counts (e.g. 'Hot tub' 165), Guest favourite and Superhost flags, host's total review count. Individual review texts are not included (Airbnb does not put them in the public page). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_amtrak_train_trackerLive Amtrak train status from Amtrak's Track Your Train map feed: train number, route, origin/destination, state (Predeparture/Active/Completed), current GPS position, speed (mph),…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Live Amtrak train status from Amtrak's Track Your Train map feed: train number, route, origin/destination, state (Predeparture/Active/Completed), current GPS position, speed (mph), heading, last update, and every stop with scheduled and estimated/actual arrival and departure plus on-time/late comments. Filter by train number, route name or station code. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_autonationAutoNation cars for sale (new and used) for a make and optional model: VIN, condition, year, make/model, trim, mileage, AutoNation 1Price (USD), store name, stock status, distance …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    AutoNation cars for sale (new and used) for a make and optional model: VIN, condition, year, make/model, trim, mileage, AutoNation 1Price (USD), store name, stock status, distance and vehicle page link; about 24 per page. From autonation.com's public inventory pages through a rendering residential proxy; store and distance reflect the proxy's US location. Price: $0.02 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_autotraderVehicle listings from AutoTrader.ca (Canada; the US and UK AutoTrader sites block datacenter traffic): up to 20 per page with title, year, make, model, trim, price in CAD, AutoTrad…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Vehicle listings from AutoTrader.ca (Canada; the US and UK AutoTrader sites block datacenter traffic): up to 20 per page with title, year, make, model, trim, price in CAD, AutoTrader's price label, mileage in km, transmission, fuel, new/used, dealer, city, province and URL, plus the total matching count and min/median/max price of the page. Filter by make, model, province and city. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_aviationweather_metar_tafCurrent airport weather from NOAA Aviation Weather Center: latest METAR (observed temperature, dewpoint, wind, visibility, altimeter, flight category) and the TAF forecast text for…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Current airport weather from NOAA Aviation Weather Center: latest METAR (observed temperature, dewpoint, wind, visibility, altimeter, flight category) and the TAF forecast text for a 4-letter ICAO airport code. Raw text is included alongside the parsed fields. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_booking_comBooking.com hotel price guide for a city (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Booking.com hotel price guide for a city (e.g. fr / paris): the lowest 'from' nightly price in the page title and Booking.com's published average nightly prices for 3-, 4- and 5-star hotels (typical, this weekend, tonight, as stated on the city page), plus the hotels Booking.com names as best or popular with their URLs. Currency selectable. Averages are Booking.com's own figures, not a live date search. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_booking_com_hotelsHotels featured on a Booking.com city page (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Hotels featured on a Booking.com city page (e.g. us / new-york): name, property id, sample nightly price as displayed (in the currency you pick), guest score out of 10, review count, stars, district, coordinates, a featured guest review and the hotel URL. Comes from the page's 'top hotels' and 'most booked' blocks (usually 10-15 hotels). Prices are Booking.com's landing-page samples, not a live date search. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_booking_com_reviewsBooking.com guest reviews featured on a city page (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Booking.com guest reviews featured on a city page (e.g. us / new-york): hotel reviews with hotel name, hotel guest score and review count, reviewer name, country and traveller type; guests' reviews of the city itself (score out of 10); and the highlighted review of each top hotel. Typically 10-25 reviews in total; it is the selection Booking.com shows on the city page, not a hotel's full review history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_bringatrailer_auctionsLive Bring a Trailer auctions (collector cars, motorcycles, parts), optionally filtered by words in the title (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Live Bring a Trailer auctions (collector cars, motorcycles, parts), optionally filtered by words in the title (e.g. porsche 911) or no-reserve only: title, model year, current bid with currency, auction end time, no-reserve flag, country and listing URL, soonest-ending first, from BaT's public auctions page. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_carfaxCARFAX used-car listings by body style or price ceiling (optionally near a US ZIP): total matches and 24 cars per page with VIN, year, make, model, trim, mileage, price, value badg…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    CARFAX used-car listings by body style or price ceiling (optionally near a US ZIP): total matches and 24 cars per page with VIN, year, make, model, trim, mileage, price, value badge, history flags (one owner, no accidents, service history), colour, drivetrain, engine, fuel, MPG, dealer, rating, location, phone, photo and link. From carfax.com via a stealth proxy. Price: $0.03 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_carmaxCarMax used cars for a make (and optional model): stock number, VIN, year, make, model, trim, body, price, original price and price-drop flag, mileage, colors, drivetrain, engine, …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    CarMax used cars for a make (and optional model): stock number, VIN, year, make, model, trim, body, price, original price and price-drop flag, mileage, colors, drivetrain, engine, MPG, store name/city/state, highlights (single owner, warranty...), date listed and link; about 20-24 per page, plus the nationwide total. From carmax.com's public search pages via a residential proxy. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_carsdirect_vehicleCarsDirect used-car listings near a US ZIP code (optionally one make and model): vehicle name, year, make, model, condition, mileage, exterior and interior colour, price (USD), dea…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    CarsDirect used-car listings near a US ZIP code (optionally one make and model): vehicle name, year, make, model, condition, mileage, exterior and interior colour, price (USD), dealer name with distance, photo and listing link, about 20-25 per page. From carsdirect.com via a residential proxy. Price: $0.02 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_carvanaCarvana used cars for a make (and optional model): year, make, model, trim (from the listing text), color, mileage, price (USD), VIN, Carvana stock id, image and link, about 20 per…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Carvana used cars for a make (and optional model): year, make, model, trim (from the listing text), color, mileage, price (USD), VIN, Carvana stock id, image and link, about 20 per page (page 1 to 20). From carvana.com's public inventory pages via a residential proxy. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_craigslistCurrent Craigslist listings for one site and category (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Current Craigslist listings for one site and category (e.g. sfbay + cta = cars & trucks, newyork + apa = apartments), optionally matching a search query: title, price, area and listing URL, newest first as Craigslist orders them, read from the public search page. Up to ~300 results per call; no contact details or full post text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_crtsh_certificate_transparencyCertificate transparency records for a domain from the CertSpotter public CT index: certificate id, validity dates, revocation flag and the DNS names on each certificate (including…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Certificate transparency records for a domain from the CertSpotter public CT index: certificate id, validity dates, revocation flag and the DNS names on each certificate (including subdomains). Shows issued certificates only, not live TLS configuration. crt.sh was unavailable during testing, so CertSpotter is used. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_data_wa_gov_electric_vehicleWashington State Department of Licensing registered electric vehicles (BEV and plug-in hybrid): make, model, model year, EV type, electric range, city, county and ZIP.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Washington State Department of Licensing registered electric vehicles (BEV and plug-in hybrid): make, model, model year, EV type, electric range, city, county and ZIP. Vehicles are registrations, not current status; the range field is 0 where not yet researched. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_equibaseHorse racing entries from Equibase's free entry pages for a track and date (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Horse racing entries from Equibase's free entry pages for a track and date (e.g. BEL, 2026-10-22): race card with purse, type, distance, surface, starters and post time; with a race number, the field with program number, post position, horse, age/sex, medication, jockey, weight, trainer and morning-line odds. US tracks (CAN for Canada). No past performances or results. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_ev_databaseElectric car models listed on the public EV Database home page: make, model name (with battery size where listed), availability text and EV-Database detail URL.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Electric car models listed on the public EV Database home page: make, model name (with battery size where listed), availability text and EV-Database detail URL. Only the models on that page are returned; specs such as range are not on the list. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_fipe_brazil_vehicle_pricesBrazilian FIPE reference price for one car: brand, model, model year, fuel, FIPE code and reference month, from the public FIPE API.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Brazilian FIPE reference price for one car: brand, model, model year, fuel, FIPE code and reference month, from the public FIPE API. Needs the FIPE brand, model and year codes (numbers and a 'year-fuel' code); lookup lists are at /cars/brands. Reference prices are not a sale offer. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_flightaware_public_trackerPublic FlightAware flight page for one flight number: airline, aircraft type, origin and destination airports (IATA, name), status (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Public FlightAware flight page for one flight number: airline, aircraft type, origin and destination airports (IATA, name), status (e.g. arrived, en route) and the flight ident. Read from the JSON embedded in the public page; no login. Live altitude and speed are not included on the page used. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_flightradar24_live_flightsLive aircraft inside a lat/lon box from the public Flightradar24 feed: callsign, position, altitude (ft), speed (kts), heading, aircraft type, registration, origin/destination airp…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Live aircraft inside a lat/lon box from the public Flightradar24 feed: callsign, position, altitude (ft), speed (kts), heading, aircraft type, registration, origin/destination airport codes and on-ground flag. Position data is seconds old; the feed does not include every flight worldwide and has no key or history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_forsalebyownerHomes listed for sale by owner (FSBO) on ForSaleByOwner.com for a US city: the first 20 listings with address, ZIP, coordinates, asking price (USD), property type, the owner's desc…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Homes listed for sale by owner (FSBO) on ForSaleByOwner.com for a US city: the first 20 listings with address, ZIP, coordinates, asking price (USD), property type, the owner's description (beds, baths, size and features as written by the seller), photo and listing link, plus the total number of FSBO listings in the city. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_google_hotels_priceLowest nightly hotel prices for a city and stay dates from Google Hotels' public results page (about 18-20 hotels, Google's order): hotel name, 'prices starting from' amount, curre…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Lowest nightly hotel prices for a city and stay dates from Google Hotels' public results page (about 18-20 hotels, Google's order): hotel name, 'prices starting from' amount, currency as Google shows it (it follows the server's region, so check the currency field) and Google's deal flag with % below usual. Confirms the dates Google applied. Not a booking; prices change constantly. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_google_travelGoogle Travel hotels and vacation rentals for a place (about 20, Google's order): name, type, lowest price and currency (Google picks currency by server region), deal flag and % be…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Google Travel hotels and vacation rentals for a place (about 20, Google's order): name, type, lowest price and currency (Google picks currency by server region), deal flag and % below usual, guest rating with review count and star distribution, hotel class, amenities, topics guests mention, eco-certified flag and link. Optional stay dates; otherwise Google's default dates (returned). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_greatschoolsUS schools in a city from GreatSchools: name, GreatSchools rating (1-10) and label, sub-ratings (test scores, student progress, equity...), school type (public, charter, private), …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    US schools in a city from GreatSchools: name, GreatSchools rating (1-10) and label, sub-ratings (test scores, student progress, equity...), school type (public, charter, private), grade levels, district, address, enrollment, students per teacher, % low-income, parent rating and review count, coordinates and profile URL, plus the total number of schools. Filter by level (preschool, elementary, middle, high) and type; 25 per page, best rated first. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_hk_mtr_realtimeHong Kong MTR realtime next-train arrivals at one station on one line, from the Hong Kong government open data feed: direction, destination platform, minutes to next train (ttnt) a…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Hong Kong MTR realtime next-train arrivals at one station on one line, from the Hong Kong government open data feed: direction, destination platform, minutes to next train (ttnt) and scheduled time. Times are the feed's; the feed can be delayed or empty late at night. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_hostelworldHostels in a city as listed on Hostelworld's public city page (up to 30, Hostelworld's own order): name, address, coordinates, guest rating out of 10 with review count, lowest 'fro…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Hostels in a city as listed on Hostelworld's public city page (up to 30, Hostelworld's own order): name, address, coordinates, guest rating out of 10 with review count, lowest 'from' price per night as shown (currency depends on the visitor region) and property URL. Needs the continent, country and city as in Hostelworld URLs (e.g. europe / germany / berlin). No live availability for dates. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_hotel_booking_sites_direct_hotel_websitesKAYAK hotel prices for a city (KAYAK compares booking sites and hotel websites): the city's lowest nightly price headline and KAYAK's 'best hotels' list (usually ~16) with name, st…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    KAYAK hotel prices for a city (KAYAK compares booking sites and hotel websites): the city's lowest nightly price headline and KAYAK's 'best hotels' list (usually ~16) with name, star rating, street address, price shown per night in USD, guest rating out of 10 with review count, phone and KAYAK hotel URL. The city is matched with KAYAK's own place search. Prices are KAYAK's recent prices on its public city page, not a live date search. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_korn_ferry_tour_leaderboardKorn Ferry Tour leaderboard for the current or most recent tournament (or the event on a given date): tournament name, dates and status, then each player's place, name, country, sc…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Korn Ferry Tour leaderboard for the current or most recent tournament (or the event on a given date): tournament name, dates and status, then each player's place, name, country, score to par, round scores and total strokes, from ESPN's public golf scoreboard feed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_marketwatchMarketWatch quote for a stock, ETF or fund: name, exchange, currency, last price, change and change %, quote time, plus the Key Data panel (open, day range, 52-week range, market c…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    MarketWatch quote for a stock, ETF or fund: name, exchange, currency, last price, change and change %, quote time, plus the Key Data panel (open, day range, 52-week range, market cap, shares outstanding, float, beta, P/E, EPS, yield, dividend, ex-dividend date, short interest, average volume). From marketwatch.com's public quote pages via a residential proxy; prices may be delayed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_mbta_realtimeLive MBTA Boston vehicle positions for one route (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Live MBTA Boston vehicle positions for one route (e.g. Red, Orange, Blue, 1): vehicle label, latitude/longitude, bearing, speed, current status, current stop id and occupancy when reported. Anonymous access is rate limited by MBTA. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_michelin_restaurant_guideMICHELIN Guide restaurants for a region and city: restaurant name, distinction (three/two/one star, Bib Gourmand, selected), Green Star flag, price level, cuisine, location text, c…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    MICHELIN Guide restaurants for a region and city: restaurant name, distinction (three/two/one star, Bib Gourmand, selected), Green Star flag, price level, cuisine, location text, city, region, coordinates, online booking flag and MICHELIN Guide link; about 48-50 per page (page 1 to 10). Path as in guide.michelin.com/us/en/<region>/<city>/restaurants. Via a rendering residential proxy. Price: $0.02 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_modern_manga_colorizerColors a black-and-white manga page you name (public image URL, PNG or JPEG up to 4 MB) with a Workers AI image-to-image model.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Colors a black-and-white manga page you name (public image URL, PNG or JPEG up to 4 MB) with a Workers AI image-to-image model. Output is a generated image, not the original artwork; colors are model guesses. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_netherlands_kvkBasic Dutch company data from the Netherlands Chamber of Commerce (KVK) open High Value Dataset for an 8-digit KVK number: whether the registration is active, start date, legal for…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Basic Dutch company data from the Netherlands Chamber of Commerce (KVK) open High Value Dataset for an 8-digit KVK number: whether the registration is active, start date, legal form code and meaning (BV, NV, sole proprietorship, foundation...), 2-digit postcode region, and SBI activity codes (main and other activities). KVK's open set is anonymised: names and addresses are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_nhtsa_vehicle_complaintsUS NHTSA owner-filed vehicle complaints for a make, model and model year: incident date, components, summary, crash/fire flags and injury counts.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    US NHTSA owner-filed vehicle complaints for a make, model and model year: incident date, components, summary, crash/fire flags and injury counts. Complaints are unverified owner reports; the total count is NHTSA's, the returned list is a slice. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_nhtsa_vehicle_recallsUS NHTSA safety recalls for a make, model and model year: campaign number, component, summary, report date and remedy flags, as published by NHTSA.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    US NHTSA safety recalls for a make, model and model year: campaign number, component, summary, report date and remedy flags, as published by NHTSA. Recalls only; no VIN lookup and no recall status (open/closed). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_nhtsa_vpic_vehicle_decoderDecodes a VIN with NHTSA vPIC: make, manufacturer, model, model year, trim, vehicle type, plant city/state/country and the check-digit message.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Decodes a VIN with NHTSA vPIC: make, manufacturer, model, model year, trim, vehicle type, plant city/state/country and the check-digit message. Only fields NHTSA has for that VIN are returned; no recall or history data. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_numbeoNumbeo cost-of-living prices for one city from its public page: item label and the crowd-sourced price with currency symbol (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Numbeo cost-of-living prices for one city from its public page: item label and the crowd-sourced price with currency symbol (e.g. meal at an inexpensive restaurant, one-way ticket). Prices are user-submitted estimates, not official. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_plugshareEV charging stations near a point.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    EV charging stations near a point. Primary source OpenStreetMap (Overpass): name, operator, network, socket types, capacity, access, hours. For US points when Overpass is unavailable, the US DOE/NREL Alternative Fuel Stations directory is used instead. PlugShare itself has no public API, so its reviews and live status are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_ritchie_bros_auctioneersRitchie Bros.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Ritchie Bros. (rbauction.com) auction calendar: upcoming and running heavy-equipment, truck and agriculture auctions with name, sale number, start and end time, bidding end, country and city, item count, classification, selling method (timed/live), online bidding, item sites and catalog PDF link. Filter by country code (ISO-3, e.g. USA, CAN, NLD) and limit. From rbauction.com's public auctions page via a residential proxy. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_spaceflight_newsLatest spaceflight news articles from the Spaceflight News API v4: title, news site, publish date, URL, summary and the total article count.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Latest spaceflight news articles from the Spaceflight News API v4: title, news site, publish date, URL, summary and the total article count. Aggregated from news sites; summaries are the site's own text cut by the API. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_trivagotrivago hotel prices for a destination: the hotels trivago lists for a city search (usually ~35) with name, location note, lowest price shown per night, guest rating out of 10 with…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    trivago hotel prices for a destination: the hotels trivago lists for a city search (usually ~35) with name, location note, lowest price shown per night, guest rating out of 10 with review count, stars and trivago URL, plus trivago's destination price facts (typical nightly range, cheapest and most expensive month). Prices are in the currency trivago picks for the visitor region (reported in the output); not a dated availability search. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_virtual_staging_actorAdds generated furniture to an empty room photo you name (public https PNG or JPEG up to 4 MB) with a Workers AI image-to-image model.Reads text others write1 finding

    Why it is in this group

    • The description's first verb is "add": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "travel_virtual_staging_actor" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "add": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Adds generated furniture to an empty room photo you name (public https PNG or JPEG up to 4 MB) with a Workers AI image-to-image model. The result is a generated visual for listing or planning, not a record of the room's real furniture. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_yatcoYachts for sale on YATCO (about 6,000 active listings), optionally by builder (e.g.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Yachts for sale on YATCO (about 6,000 active listings), optionally by builder (e.g. sunseeker, benetti): name, builder, model, year, length, asking price with currency (or price on application), category, staterooms, location, days on market and listing URL, 12 per page, from the public JSON route behind yatco.com search. Values are as the brokers entered them. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Only reads 7Show 7 read-only tools
  • health_formulary_coverage_lookupMedicare Part D drug coverage from CMS monthly formulary files, current and next plan year: for a drug (name or RxCUI), in one plan, across a state's plans or over every formulary:…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "health_formulary_coverage_lookup" says "lookup": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "file": it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "mail": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Medicare Part D drug coverage from CMS monthly formulary files, current and next plan year: for a drug (name or RxCUI), in one plan, across a state's plans or over every formulary: coverage per strength, cost-share tier, prior authorization, step therapy, quantity limit, IRA negotiated-price flag, 30-day retail/mail cost, plan premium and deductible. Includes the CMS release date. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • health_physician_compare_cmsCMS Medicare Doctors and Clinicians file: clinician NPI, name, credential, specialty, medical school, graduation year and practice location, by last name and optional state.Reads private dataReads text others write1 finding

    Why it is in this group

    • The name "health_physician_compare_cms" says "compare": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "file": it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...d Clinicians file: clinician NPI, name, credential, specialty, medical school, graduation..."

      What this check looks for
    Description, as the server wrote it
    CMS Medicare Doctors and Clinicians file: clinician NPI, name, credential, specialty, medical school, graduation year and practice location, by last name and optional state. Hospital affiliations are not in this file (only the practice group name). Up to 20 records per call. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_france_annuaire_entreprisesSearch French companies and establishments in the official Annuaire des Entreprises (SIRENE data): SIREN, full name, head-office address, main activity code (NAF) and active state.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Search French companies and establishments in the official Annuaire des Entreprises (SIRENE data): SIREN, full name, head-office address, main activity code (NAF) and active state. Public register data only; no financial statements. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_guidestarSearch US tax-exempt nonprofits (IRS Form 990 index) by name via the ProPublica Nonprofit Explorer API: EIN, name, city, state, NTEE code and total result count.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Search US tax-exempt nonprofits (IRS Form 990 index) by name via the ProPublica Nonprofit Explorer API: EIN, name, city, state, NTEE code and total result count. Search results only; financial detail pages are not included. GuideStar itself has no free public API, so this uses ProPublica's index. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_rag_web_browserFetches one public web page you name (http or https) and returns its title, canonical URL and readable text as Markdown-like text (headings, links, list items; scripts and styles r…Reads text others writeCan send data outNo findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe name "travel_rag_web_browser" says "web": it reads web pages, which anyone can write.
    • untrusted-inputThe description's first sentence says "fetch" and "web": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Fetches one public web page you name (http or https) and returns its title, canonical URL and readable text as Markdown-like text (headings, links, list items; scripts and styles removed, capped at 20,000 characters). Pages that need login or run only in JavaScript return little text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_septa_train_viewLive SEPTA regional rail train positions from the public TrainView feed: train number, line, destination, current and next stop, heading, minutes late and track.Reads text others writeNo findings

    Why it is in this group

    • The name "travel_septa_train_view" says "view": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Live SEPTA regional rail train positions from the public TrainView feed: train number, line, destination, current and next stop, heading, minutes late and track. Covers SEPTA regional rail trains currently reporting; not a schedule. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • travel_wikivoyage_articlesSearch English Wikivoyage travel guide articles: title, short snippet with HTML removed, word count, last-edit page id and article URL, plus the total hit count.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "search" and "html": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Search English Wikivoyage travel guide articles: title, short snippet with HTML removed, word count, last-edit page id and article URL, plus the total hit count. Snippets are search excerpts, not full guides; content is CC BY-SA. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

1680 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 2 private-data tools breaks every one.

Reads private data2
Reads files, mail, messages, databases, secrets, calendars or repositories.
Can send data out7
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__sitecheck-health-travel__health_formulary_coverage_lookup",
      "mcp__sitecheck-health-travel__health_physician_compare_cms"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

10 warn2 info
  • The server marks "health_open_payments_cms" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "health_open_payments_cms" says "open": a word for a change.

    What this check looks for
  • The server marks "health_daily_med_label_spl" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "health_daily_med_label_spl" says "label": a word for a change.

    What this check looks for
  • The server marks "health_medicare_advantage_star" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "health_medicare_advantage_star" says "star": a word for a change.

    What this check looks for
  • The server marks "travel_rome2rio" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "travel_skyscanner" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "travel_kayak" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
Show 6 more findings
  • The server marks "travel_momondo" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "travel_google_flights" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "travel_seat61_routes" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "travel_virtual_staging_actor" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "add": a word for a change.

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...NPI Registry search: NPI number, name, credential, status, taxonomy (specialty code and d..."

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...d Clinicians file: clinician NPI, name, credential, specialty, medical school, graduation..."

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http sitecheck-health-travel https://api.healthtravel-api.workers.dev/mcp?ref=registry
claude mcp add --transport http sitecheck-health-travel https://api.healthtravel-api.workers.dev/mcp?ref=registry

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__sitecheck-health-travel__health_physician_compare_cms",
      "mcp__sitecheck-health-travel__health_formulary_coverage_lookup",
      "mcp__sitecheck-health-travel__travel_wikivoyage_articles",
      "mcp__sitecheck-health-travel__travel_septa_train_view",
      "mcp__sitecheck-health-travel__travel_guidestar",
      "mcp__sitecheck-health-travel__travel_france_annuaire_entreprises"
    ],
    "ask": [
      "mcp__sitecheck-health-travel__health_pubmed_abstracts",
      "mcp__sitecheck-health-travel__health_clinical_trials_gov",
      "mcp__sitecheck-health-travel__health_fda_orange_book",
      "mcp__sitecheck-health-travel__health_fda_purple_book",
      "mcp__sitecheck-health-travel__health_fda_drug_shortages",
      "mcp__sitecheck-health-travel__health_fda_medical_device_510k",
      "mcp__sitecheck-health-travel__health_fda_recalls_enforcement",
      "mcp__sitecheck-health-travel__health_fda_adverse_events_faers",
      "mcp__sitecheck-health-travel__health_ema_human_medicines",
      "mcp__sitecheck-health-travel__health_ema_shortages_safety",
      "mcp__sitecheck-health-travel__health_who_global_health_stats",
      "mcp__sitecheck-health-travel__health_cdc_wonder_mortality",
      "mcp__sitecheck-health-travel__health_npi_provider_registry",
      "mcp__sitecheck-health-travel__health_hospitallink_cms_ratings",
      "mcp__sitecheck-health-travel__health_rxnorm_concept_id",
      "mcp__sitecheck-health-travel__health_mesh_biomedical_thesaurus",
      "mcp__sitecheck-health-travel__health_icd10_cm_diagnosis",
      "mcp__sitecheck-health-travel__health_cpt_hcpcs_procedure",
      "mcp__sitecheck-health-travel__health_loinc_laboratory_codes",
      "mcp__sitecheck-health-travel__health_cms_medicare_part_d",
      "mcp__sitecheck-health-travel__health_medicare_inpatient_drg",
      "mcp__sitecheck-health-travel__health_open_payments_cms",
      "mcp__sitecheck-health-travel__health_nih_reporter_grants",
      "mcp__sitecheck-health-travel__health_daily_med_label_spl",
      "mcp__sitecheck-health-travel__health_dea_controlled_substances",
      "mcp__sitecheck-health-travel__health_state_medical_board_ny",
      "mcp__sitecheck-health-travel__health_state_medical_board_fl",
      "mcp__sitecheck-health-travel__health_state_medical_board_tx",
      "mcp__sitecheck-health-travel__health_nursing_licensure_nursys",
      "mcp__sitecheck-health-travel__health_dental_board_verify",
      "mcp__sitecheck-health-travel__health_veterinary_license_db",
      "mcp__sitecheck-health-travel__health_chEMBL_bioactive_molecules",
      "mcp__sitecheck-health-travel__health_pubchem_chemical_cid",
      "mcp__sitecheck-health-travel__health_drugbank_interaction",
      "mcp__sitecheck-health-travel__health_kegg_pathway_genes",
      "mcp__sitecheck-health-travel__health_uniprot_protein_knowledge",
      "mcp__sitecheck-health-travel__health_clinvar_genetic_variants",
      "mcp__sitecheck-health-travel__health_dbSNP_polymorphisms",
      "mcp__sitecheck-health-travel__health_orphanet_rare_diseases",
      "mcp__sitecheck-health-travel__health_gwas_catalog_associations",
      "mcp__sitecheck-health-travel__health_reactome_biological_paths",
      "mcp__sitecheck-health-travel__health_string_protein_networks",
      "mcp__sitecheck-health-travel__health_cell_line_depmap_cancer",
      "mcp__sitecheck-health-travel__health_clinical_pharmacogenetics",
      "mcp__sitecheck-health-travel__health_fda_device_gudid",
      "mcp__sitecheck-health-travel__health_mammography_facility_fda",
      "mcp__sitecheck-health-travel__health_clia_laboratory_finder",
      "mcp__sitecheck-health-travel__health_mental_health_samhsa",
      "mcp__sitecheck-health-travel__health_blood_center_accreditation",
      "mcp__sitecheck-health-travel__health_covid19_cdc_wastewater",
      "mcp__sitecheck-health-travel__health_fluview_influenza_cdc",
      "mcp__sitecheck-health-travel__health_usps_prescription_ship",
      "mcp__sitecheck-health-travel__health_indian_health_service_ihs",
      "mcp__sitecheck-health-travel__health_medicare_advantage_star",
      "mcp__sitecheck-health-travel__health_health_insurance_exchange",
      "mcp__sitecheck-health-travel__health_hhs_hipaa_breach_portal",
      "mcp__sitecheck-health-travel__health_clinical_evidence_cochrane",
      "mcp__sitecheck-health-travel__health_usp_monographs_standards",
      "mcp__sitecheck-health-travel__health_cosmetics_inci_ingredients",
      "mcp__sitecheck-health-travel__health_eu_cosing_cosmetics",
      "mcp__sitecheck-health-travel__health_osha_occupational_health",
      "mcp__sitecheck-health-travel__travel_booking_com_hotels",
      "mcp__sitecheck-health-travel__travel_plugshare",
      "mcp__sitecheck-health-travel__travel_autotrader",
      "mcp__sitecheck-health-travel__travel_carfax",
      "mcp__sitecheck-health-travel__travel_agoda",
      "mcp__sitecheck-health-travel__travel_rome2rio",
      "mcp__sitecheck-health-travel__travel_carvana",
      "mcp__sitecheck-health-travel__travel_hotel_booking_sites_direct_hotel_websites",
      "mcp__sitecheck-health-travel__travel_carmax",
      "mcp__sitecheck-health-travel__travel_flightradar24_live_flights",
      "mcp__sitecheck-health-travel__travel_flightaware_public_tracker",
      "mcp__sitecheck-health-travel__travel_skyscanner",
      "mcp__sitecheck-health-travel__travel_fipe_brazil_vehicle_prices",
      "mcp__sitecheck-health-travel__travel_booking_com_reviews",
      "mcp__sitecheck-health-travel__travel_booking_com",
      "mcp__sitecheck-health-travel__travel_autonation",
      "mcp__sitecheck-health-travel__travel_nhtsa_vehicle_recalls",
      "mcp__sitecheck-health-travel__travel_kayak",
      "mcp__sitecheck-health-travel__travel_trivago",
      "mcp__sitecheck-health-travel__travel_nhtsa_vpic_vehicle_decoder",
      "mcp__sitecheck-health-travel__travel_airbnb",
      "mcp__sitecheck-health-travel__travel_hostelworld",
      "mcp__sitecheck-health-travel__travel_nhtsa_vehicle_complaints",
      "mcp__sitecheck-health-travel__travel_momondo",
      "mcp__sitecheck-health-travel__travel_amtrak_train_tracker",
      "mcp__sitecheck-health-travel__travel_google_flights",
      "mcp__sitecheck-health-travel__travel_data_wa_gov_electric_vehicle",
      "mcp__sitecheck-health-travel__travel_carsdirect_vehicle",
      "mcp__sitecheck-health-travel__travel_hk_mtr_realtime",
      "mcp__sitecheck-health-travel__travel_seat61_routes",
      "mcp__sitecheck-health-travel__travel_mbta_realtime",
      "mcp__sitecheck-health-travel__travel_korn_ferry_tour_leaderboard",
      "mcp__sitecheck-health-travel__travel_google_hotels_price",
      "mcp__sitecheck-health-travel__travel_google_travel",
      "mcp__sitecheck-health-travel__travel_airbnb_reviews",
      "mcp__sitecheck-health-travel__travel_spaceflight_news",
      "mcp__sitecheck-health-travel__travel_equibase",
      "mcp__sitecheck-health-travel__travel_crtsh_certificate_transparency",
      "mcp__sitecheck-health-travel__travel_craigslist",
      "mcp__sitecheck-health-travel__travel_marketwatch",
      "mcp__sitecheck-health-travel__travel_bringatrailer_auctions",
      "mcp__sitecheck-health-travel__travel_ritchie_bros_auctioneers",
      "mcp__sitecheck-health-travel__travel_forsalebyowner",
      "mcp__sitecheck-health-travel__travel_netherlands_kvk",
      "mcp__sitecheck-health-travel__travel_michelin_restaurant_guide",
      "mcp__sitecheck-health-travel__travel_numbeo",
      "mcp__sitecheck-health-travel__travel_modern_manga_colorizer",
      "mcp__sitecheck-health-travel__travel_greatschools",
      "mcp__sitecheck-health-travel__travel_yatco",
      "mcp__sitecheck-health-travel__travel_rag_web_browser",
      "mcp__sitecheck-health-travel__travel_aviationweather_metar_taf",
      "mcp__sitecheck-health-travel__travel_virtual_staging_actor",
      "mcp__sitecheck-health-travel__travel_ev_database"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as sitecheck-health-travel. Review it before you use it.

Capability tags behind 120 rules
  • mcp__sitecheck-health-travel__health_pubmed_abstracts untrusted-input
  • mcp__sitecheck-health-travel__health_clinical_trials_gov untrusted-input
  • mcp__sitecheck-health-travel__health_fda_orange_book untrusted-input
  • mcp__sitecheck-health-travel__health_fda_purple_book untrusted-input
  • mcp__sitecheck-health-travel__health_fda_drug_shortages untrusted-input
  • mcp__sitecheck-health-travel__health_fda_medical_device_510k untrusted-input
  • mcp__sitecheck-health-travel__health_fda_recalls_enforcement untrusted-input
  • mcp__sitecheck-health-travel__health_fda_adverse_events_faers untrusted-input
  • mcp__sitecheck-health-travel__health_ema_human_medicines untrusted-input
  • mcp__sitecheck-health-travel__health_ema_shortages_safety untrusted-input
  • mcp__sitecheck-health-travel__health_who_global_health_stats untrusted-input
  • mcp__sitecheck-health-travel__health_cdc_wonder_mortality untrusted-input
  • mcp__sitecheck-health-travel__health_npi_provider_registry untrusted-input
  • mcp__sitecheck-health-travel__health_physician_compare_cms private-data, untrusted-input
  • mcp__sitecheck-health-travel__health_hospitallink_cms_ratings untrusted-input
  • mcp__sitecheck-health-travel__health_rxnorm_concept_id untrusted-input
  • mcp__sitecheck-health-travel__health_mesh_biomedical_thesaurus untrusted-input
  • mcp__sitecheck-health-travel__health_icd10_cm_diagnosis untrusted-input
  • mcp__sitecheck-health-travel__health_cpt_hcpcs_procedure untrusted-input
  • mcp__sitecheck-health-travel__health_loinc_laboratory_codes untrusted-input
  • mcp__sitecheck-health-travel__health_cms_medicare_part_d untrusted-input
  • mcp__sitecheck-health-travel__health_medicare_inpatient_drg untrusted-input
  • mcp__sitecheck-health-travel__health_open_payments_cms untrusted-input
  • mcp__sitecheck-health-travel__health_nih_reporter_grants untrusted-input
  • mcp__sitecheck-health-travel__health_daily_med_label_spl untrusted-input
  • mcp__sitecheck-health-travel__health_dea_controlled_substances untrusted-input
  • mcp__sitecheck-health-travel__health_state_medical_board_ny untrusted-input
  • mcp__sitecheck-health-travel__health_state_medical_board_fl untrusted-input
  • mcp__sitecheck-health-travel__health_state_medical_board_tx untrusted-input
  • mcp__sitecheck-health-travel__health_nursing_licensure_nursys untrusted-input
  • mcp__sitecheck-health-travel__health_dental_board_verify untrusted-input
  • mcp__sitecheck-health-travel__health_veterinary_license_db untrusted-input
  • mcp__sitecheck-health-travel__health_chEMBL_bioactive_molecules untrusted-input
  • mcp__sitecheck-health-travel__health_pubchem_chemical_cid untrusted-input
  • mcp__sitecheck-health-travel__health_drugbank_interaction untrusted-input
  • mcp__sitecheck-health-travel__health_kegg_pathway_genes untrusted-input
  • mcp__sitecheck-health-travel__health_uniprot_protein_knowledge untrusted-input
  • mcp__sitecheck-health-travel__health_clinvar_genetic_variants untrusted-input
  • mcp__sitecheck-health-travel__health_dbSNP_polymorphisms untrusted-input
  • mcp__sitecheck-health-travel__health_orphanet_rare_diseases untrusted-input
  • mcp__sitecheck-health-travel__health_gwas_catalog_associations untrusted-input
  • mcp__sitecheck-health-travel__health_reactome_biological_paths untrusted-input
  • mcp__sitecheck-health-travel__health_string_protein_networks untrusted-input
  • mcp__sitecheck-health-travel__health_cell_line_depmap_cancer untrusted-input
  • mcp__sitecheck-health-travel__health_clinical_pharmacogenetics untrusted-input
  • mcp__sitecheck-health-travel__health_fda_device_gudid untrusted-input
  • mcp__sitecheck-health-travel__health_mammography_facility_fda untrusted-input
  • mcp__sitecheck-health-travel__health_clia_laboratory_finder untrusted-input
  • mcp__sitecheck-health-travel__health_mental_health_samhsa untrusted-input
  • mcp__sitecheck-health-travel__health_blood_center_accreditation untrusted-input
  • mcp__sitecheck-health-travel__health_covid19_cdc_wastewater untrusted-input
  • mcp__sitecheck-health-travel__health_fluview_influenza_cdc untrusted-input
  • mcp__sitecheck-health-travel__health_usps_prescription_ship untrusted-input
  • mcp__sitecheck-health-travel__health_indian_health_service_ihs untrusted-input
  • mcp__sitecheck-health-travel__health_medicare_advantage_star untrusted-input
  • mcp__sitecheck-health-travel__health_formulary_coverage_lookup private-data, untrusted-input
  • mcp__sitecheck-health-travel__health_health_insurance_exchange untrusted-input
  • mcp__sitecheck-health-travel__health_hhs_hipaa_breach_portal untrusted-input
  • mcp__sitecheck-health-travel__health_clinical_evidence_cochrane untrusted-input
  • mcp__sitecheck-health-travel__health_usp_monographs_standards untrusted-input
  • mcp__sitecheck-health-travel__health_cosmetics_inci_ingredients untrusted-input
  • mcp__sitecheck-health-travel__health_eu_cosing_cosmetics untrusted-input
  • mcp__sitecheck-health-travel__health_osha_occupational_health untrusted-input
  • mcp__sitecheck-health-travel__travel_booking_com_hotels untrusted-input
  • mcp__sitecheck-health-travel__travel_plugshare untrusted-input
  • mcp__sitecheck-health-travel__travel_autotrader untrusted-input
  • mcp__sitecheck-health-travel__travel_carfax untrusted-input
  • mcp__sitecheck-health-travel__travel_agoda untrusted-input
  • mcp__sitecheck-health-travel__travel_rome2rio untrusted-input, outbound
  • mcp__sitecheck-health-travel__travel_carvana untrusted-input
  • mcp__sitecheck-health-travel__travel_hotel_booking_sites_direct_hotel_websites untrusted-input
  • mcp__sitecheck-health-travel__travel_carmax untrusted-input
  • mcp__sitecheck-health-travel__travel_flightradar24_live_flights untrusted-input
  • mcp__sitecheck-health-travel__travel_flightaware_public_tracker untrusted-input
  • mcp__sitecheck-health-travel__travel_skyscanner untrusted-input, outbound
  • mcp__sitecheck-health-travel__travel_fipe_brazil_vehicle_prices untrusted-input
  • mcp__sitecheck-health-travel__travel_booking_com_reviews untrusted-input
  • mcp__sitecheck-health-travel__travel_booking_com untrusted-input
  • mcp__sitecheck-health-travel__travel_autonation untrusted-input
  • mcp__sitecheck-health-travel__travel_nhtsa_vehicle_recalls untrusted-input
  • mcp__sitecheck-health-travel__travel_kayak untrusted-input, outbound
  • mcp__sitecheck-health-travel__travel_trivago untrusted-input
  • mcp__sitecheck-health-travel__travel_nhtsa_vpic_vehicle_decoder untrusted-input
  • mcp__sitecheck-health-travel__travel_airbnb untrusted-input
  • mcp__sitecheck-health-travel__travel_hostelworld untrusted-input
  • mcp__sitecheck-health-travel__travel_nhtsa_vehicle_complaints untrusted-input
  • mcp__sitecheck-health-travel__travel_momondo untrusted-input, outbound
  • mcp__sitecheck-health-travel__travel_amtrak_train_tracker untrusted-input
  • mcp__sitecheck-health-travel__travel_wikivoyage_articles untrusted-input
  • mcp__sitecheck-health-travel__travel_google_flights untrusted-input, outbound
  • mcp__sitecheck-health-travel__travel_data_wa_gov_electric_vehicle untrusted-input
  • mcp__sitecheck-health-travel__travel_carsdirect_vehicle untrusted-input
  • mcp__sitecheck-health-travel__travel_hk_mtr_realtime untrusted-input
  • mcp__sitecheck-health-travel__travel_seat61_routes untrusted-input, outbound
  • mcp__sitecheck-health-travel__travel_mbta_realtime untrusted-input
  • mcp__sitecheck-health-travel__travel_septa_train_view untrusted-input
  • mcp__sitecheck-health-travel__travel_korn_ferry_tour_leaderboard untrusted-input
  • mcp__sitecheck-health-travel__travel_google_hotels_price untrusted-input
  • mcp__sitecheck-health-travel__travel_google_travel untrusted-input
  • mcp__sitecheck-health-travel__travel_airbnb_reviews untrusted-input
  • mcp__sitecheck-health-travel__travel_spaceflight_news untrusted-input
  • mcp__sitecheck-health-travel__travel_equibase untrusted-input
  • mcp__sitecheck-health-travel__travel_crtsh_certificate_transparency untrusted-input
  • mcp__sitecheck-health-travel__travel_craigslist untrusted-input
  • mcp__sitecheck-health-travel__travel_marketwatch untrusted-input
  • mcp__sitecheck-health-travel__travel_bringatrailer_auctions untrusted-input
  • mcp__sitecheck-health-travel__travel_ritchie_bros_auctioneers untrusted-input
  • mcp__sitecheck-health-travel__travel_forsalebyowner untrusted-input
  • mcp__sitecheck-health-travel__travel_netherlands_kvk untrusted-input
  • mcp__sitecheck-health-travel__travel_michelin_restaurant_guide untrusted-input
  • mcp__sitecheck-health-travel__travel_guidestar untrusted-input
  • mcp__sitecheck-health-travel__travel_numbeo untrusted-input
  • mcp__sitecheck-health-travel__travel_france_annuaire_entreprises untrusted-input
  • mcp__sitecheck-health-travel__travel_modern_manga_colorizer untrusted-input
  • mcp__sitecheck-health-travel__travel_greatschools untrusted-input
  • mcp__sitecheck-health-travel__travel_yatco untrusted-input
  • mcp__sitecheck-health-travel__travel_rag_web_browser untrusted-input, outbound
  • mcp__sitecheck-health-travel__travel_aviationweather_metar_taf untrusted-input
  • mcp__sitecheck-health-travel__travel_virtual_staging_actor untrusted-input
  • mcp__sitecheck-health-travel__travel_ev_database untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.bck-stack/sitecheck-health-travel/verify?hash=3b96666b5854a724004bca667ab9a3f136581187510908e53e4b23adaff77cb8" | jq -e '.changed == false'

Pinned hash 3b96666b5854, from Oct 23, 2026, 18:19 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.bck-stack/sitecheck-health-travel/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.bck-stack/sitecheck-health-travel
[![anlyon.dev](https://anlyon.dev/badge/io.github.bck-stack/sitecheck-health-travel.svg)](https://anlyon.dev/servers/io.github.bck-stack/sitecheck-health-travel)

Source: MCP Registry. Synced Oct 23, 2026, 18:18 UTC.