SiteCheck Web Intel

io.github.bck-stack/sitecheck-web-intelbck-stackstreamable-httpv1.0.0Scanned 55 minutes ago

129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402

129 tools: 54 change things and 75 only read.

Reads private data · 12
Reads text others write · 129
Can send data out · 7
4 findings

Anlyon alternative

54 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

129 tools

Changes things 54Creates or changes something that can be changed back.Claude Code: ask

search_beehiiv_newsletterPost archive of a beehiiv newsletter (by beehiiv subdomain, e.g.Reads text others write1 finding
Why it is in this group
- The name "search_beehiiv_newsletter" says "search": a word for reading.
- The description's first verb is "post": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "search_beehiiv_newsletter" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "search_beehiiv_newsletter" says "search": a word for reading.
  What this check looks for
Description, as the server wrote it
Post archive of a beehiiv newsletter (by beehiiv subdomain, e.g. superhuman, or the newsletter's own domain if hosted on beehiiv): newsletter name, total posts, and per post title, subtitle, URL, publish time, authors, free/premium audience, tags and reading time, 10 per page, newest first. Optional word filter within the page. Public archive data, no key; post bodies are not returned. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_abuseipdb_checkAbuseIPDB reputation for an IPv4 address over the last 90 days: abuse confidence score (0-100), number of abuse reports, last report date, ISP, usage type and country.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
AbuseIPDB reputation for an IPv4 address over the last 90 days: abuse confidence score (0-100), number of abuse reports, last report date, ISP, usage type and country. Needs a free AbuseIPDB key configured by the operator; reports are crowd-sourced. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_asn_peers_upstreamFor an autonomous system (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
For an autonomous system (e.g. AS13335): how many upstream (transit) and downstream neighbours RIPEstat sees in BGP, the top upstreams ranked by 'power' with their IPv4 and IPv6 peer counts, and the top downstreams. Built from RIS route collector paths, so it is an observed view, not the contract. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_barracuda_reputationChecks an IPv4 mail-sending address against the Barracuda Reputation Block List (b.barracudacentral.org) through public DNS.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks an IPv4 mail-sending address against the Barracuda Reputation Block List (b.barracudacentral.org) through public DNS. Listed addresses return a 127.0.0.x code; unlisted ones return no record. The list is updated continuously, so this is a point-in-time answer. Domain reputation is not covered. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_bgp_prefix_originFor an IPv4 prefix (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
For an IPv4 prefix (e.g. 8.8.8.0/24): the origin AS seen announcing it now across RIPE RIS peers, its RPKI status for that origin (valid, invalid or unknown), route objects, visibility, and how many more-specific and less-specific prefixes are seen. An 'invalid' RPKI status is a hijack warning sign; it is not proof of a hijack. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_blocklist_deChecks an IPv4 address against the Blocklist.de 'all' list of IPs reported for attacks such as failed logins, SSH and mail abuse (about 24,000 addresses).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks an IPv4 address against the Blocklist.de 'all' list of IPs reported for attacks such as failed logins, SSH and mail abuse (about 24,000 addresses). A hit means it was reported recently; the list keeps only current reports. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_censys_exposureCensys host view for an IPv4 address: the services, ports and protocols Censys has observed on it with their last scan time and detected software, plus autonomous system, location,…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Censys host view for an IPv4 address: the services, ports and protocols Censys has observed on it with their last scan time and detected software, plus autonomous system, location, network owner and reverse DNS, from the Censys Platform API. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_cert_revocation_crlFor a domain's current certificate (taken from public Certificate Transparency data via CertSpotter): reads its CRL Distribution Point, downloads that public CRL, and reports wheth…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
For a domain's current certificate (taken from public Certificate Transparency data via CertSpotter): reads its CRL Distribution Point, downloads that public CRL, and reports whether the certificate's serial number is on it, plus the CRL's thisUpdate and nextUpdate. OCSP is not queried. Revocation status is as of the CRL's publication time. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_ciarmy_bad_ipsChecks an IPv4 address against the CI Army (CINS Score) bad-IP list, a collective-intelligence list of addresses that recently showed hostile activity across a sensor network (abou…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks an IPv4 address against the CI Army (CINS Score) bad-IP list, a collective-intelligence list of addresses that recently showed hostile activity across a sensor network (about 15,000 entries). Listed means it is on the current list; the list is a snapshot. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_cisa_known_exploitsCISA's Known Exploited Vulnerabilities catalog (public JSON).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
CISA's Known Exploited Vulnerabilities catalog (public JSON). With cveId: whether that CVE is on the list, with vendor, product, date added, federal due date, required action and ransomware-use flag. Without it: catalog size, release date and the newest additions (up to 50). Listing means exploitation was reported, not a risk score. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_cors_misconfigChecks how a site's home page answers a cross-origin request from a made-up origin: whether it echoes that origin back, sends a wildcard (*), and whether credentials are allowed wi…Reads text others write1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...back, sends a wildcard (*), and whether credentials are allowed with it. Echoing an arbitra..."
  What this check looks for
Description, as the server wrote it
Checks how a site's home page answers a cross-origin request from a made-up origin: whether it echoes that origin back, sends a wildcard (*), and whether credentials are allowed with it. Echoing an arbitrary origin together with credentials is the risky case. One GET of the home page; it does not test API routes or the null origin. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_crtsh_transparencySubdomain names found in public Certificate Transparency logs for a domain (via CertSpotter): unique host names and wildcard names, issuers, latest issue date and how many listed c…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Subdomain names found in public Certificate Transparency logs for a domain (via CertSpotter): unique host names and wildcard names, issuers, latest issue date and how many listed certificates are still valid. Returns the first page only (up to 100 certificates) and lists at most 100 names; wildcard names are shown as *.domain. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_cve_details_feedVulnerability trend for a vendor (optionally one product) from the NIST NVD: CVEs published in the last N days (default 7, up to 120; a big vendor over a long window can take NVD 3…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Vulnerability trend for a vendor (optionally one product) from the NIST NVD: CVEs published in the last N days (default 7, up to 120; a big vendor over a long window can take NVD 30+ seconds) naming the vendor (or mapped to its CPE with match=cpe), counts by severity, average and maximum CVSS score, CVEs per week, top CWE weaknesses and the highest-scored CVEs with score, severity, vector, date and description. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_dmarc_spf_dkimEmail authentication DNS records for a domain: DMARC policy (p, sp, pct, rua), SPF record and its all-mechanism, and DKIM public keys for a selector you give or for 8 common select…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Email authentication DNS records for a domain: DMARC policy (p, sp, pct, rua), SPF record and its all-mechanism, and DKIM public keys for a selector you give or for 8 common selectors (revoked keys and CNAME-delegated keys are reported). Reads the published DNS records only; it does not check alignment against a real message. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_dns_propagationAsks two independent public DNS resolvers (AdGuard DNS and NextDNS) for the same name and record type right now and reports whether they agree, with each answer set and its lowest …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Asks two independent public DNS resolvers (AdGuard DNS and NextDNS) for the same name and record type right now and reports whether they agree, with each answer set and its lowest TTL. It shows cache and geo-DNS differences between resolvers; it is two vantage points, not a worldwide propagation survey. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_dns_recordsDNS records of a domain (A, AAAA, MX, NS, TXT, CNAME, CAA, SOA) resolved live through the public AdGuard DNS JSON resolver (NextDNS as backup).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
DNS records of a domain (A, AAAA, MX, NS, TXT, CNAME, CAA, SOA) resolved live through the public AdGuard DNS JSON resolver (NextDNS as backup). Shows answers as they resolve now, with TTLs; it does not walk the delegation chain or query the authoritative servers directly. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_dnssec_validatorDNSSEC check for a domain: whether a DS record exists at the parent zone (the domain is signed), and whether two public validating resolvers (AdGuard DNS, NextDNS) return its A ans…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
DNSSEC check for a domain: whether a DS record exists at the parent zone (the domain is signed), and whether two public validating resolvers (AdGuard DNS, NextDNS) return its A answer with the AD (authenticated) flag. It reads the resolvers' verdict; it does not validate the signature chain itself. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_domain_typosquattingFor a brand domain, generates up to 24 lookalike names (letter omission, doubling and swapping, plus .co/.net/.org/.io swaps) and checks which ones have name servers in DNS right n…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
For a brand domain, generates up to 24 lookalike names (letter omission, doubling and swapping, plus .co/.net/.org/.io swaps) and checks which ones have name servers in DNS right now. Registered-looking names are listed with their name servers. A lookalike with no name servers may still be registered without DNS, and this is not a trademark or phishing verdict. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_email_disposableChecks whether an email address's domain (or a domain you give) is on the community disposable and temporary email blocklist (about 9,900 domains).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks whether an email address's domain (or a domain you give) is on the community disposable and temporary email blocklist (about 9,900 domains). Only the domain is checked, never the mailbox, and a domain missing from the list is not proven to be permanent. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_epss_exploit_scoreEPSS (Exploit Prediction Scoring System) for one CVE from FIRST's public API: the estimated probability (0 to 1) of exploitation in the next 30 days, its percentile among all score…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
EPSS (Exploit Prediction Scoring System) for one CVE from FIRST's public API: the estimated probability (0 to 1) of exploitation in the next 30 days, its percentile among all scored CVEs and the scoring date. EPSS predicts; it does not say an exploit exists (see cisa-known-exploits). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_feodotracker_c2Checks an IPv4 address against the abuse.ch Feodo Tracker botnet C2 blocklist (Emotet, QakBot and similar).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks an IPv4 address against the abuse.ch Feodo Tracker botnet C2 blocklist (Emotet, QakBot and similar). A hit returns the port, online status, malware family, country, AS and first and last seen dates. Covers only the C2 servers this feed tracks. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_grey_noise_noiseGreyNoise Community lookup for an IPv4 address: whether it was seen mass-scanning the internet recently (noise), whether it is a known benign service (riot), its classification (be…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
GreyNoise Community lookup for an IPv4 address: whether it was seen mass-scanning the internet recently (noise), whether it is a known benign service (riot), its classification (benign, malicious, unknown), name and last-seen date. An address GreyNoise has not seen returns noise=false with a message; it is not a clean verdict. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_ip_geolocation_asnIPv4 or IPv6 address → covering BGP prefix, origin AS number and holder name, whether the prefix is announced, and a coarse country and map point, all from RIPEstat.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
IPv4 or IPv6 address → covering BGP prefix, origin AS number and holder name, whether the prefix is announced, and a coarse country and map point, all from RIPEstat. Location is an estimate (a block-level database), not a street address; the city is often empty. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_ipsum_threat_levelChecks an IPv4 address against IPsum, an aggregate of public blocklists: returns the number of source feeds that list it (its level, 1 to 8) and whether it is listed at all.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks an IPv4 address against IPsum, an aggregate of public blocklists: returns the number of source feeds that list it (its level, 1 to 8) and whether it is listed at all. A higher level means more feeds agree. Not listed means none of the aggregated feeds list it. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_jwt_token_inspectorDecodes a JWT you supply (header and payload, base64url JSON) and reports its algorithm, key id, claims, and time checks (exp, nbf, iat).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Decodes a JWT you supply (header and payload, base64url JSON) and reports its algorithm, key id, claims, and time checks (exp, nbf, iat). Flags alg none, symmetric HS algorithms, missing exp and a jku/x5u key reference. It does not verify the signature, because no key is given, and it does not fetch the key URL. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_malbazaar_samplesLooks up a file hash (SHA-256, SHA-1 or MD5) in abuse.ch MalwareBazaar: whether the sample is known, its other hashes, file name, type, size, signature (malware family), first/last…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Looks up a file hash (SHA-256, SHA-1 or MD5) in abuse.ch MalwareBazaar: whether the sample is known, its other hashes, file name, type, size, signature (malware family), first/last seen, reporter, origin country, delivery method, tags, download count and code-signing info. Metadata only; the sample itself is never downloaded. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_mitre_attck_matrixLooks up one MITRE ATT&CK technique (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Looks up one MITRE ATT&CK technique (e.g. T1059 or T1059.001) on its official public page: its name, the tactic-level summary text and the page title. Reads one page per call; it does not return the whole matrix or a technique's sub-techniques list. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_mta_sts_validatorChecks MTA-STS for a mail domain: the _mta-sts TXT record (v=STSv1 and id) and the HTTPS policy file (mode enforce, testing or none, the MX patterns and max_age).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks MTA-STS for a mail domain: the _mta-sts TXT record (v=STSv1 and id) and the HTTPS policy file (mode enforce, testing or none, the MX patterns and max_age). Reports whether the record and the policy are both present and whether the policy's version is valid. Does not test the mail servers themselves. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_mx_server_testFor a mail domain: lists up to 3 MX hosts with their IPv4 addresses and, from Shodan's pre-collected passive scan data, which SMTP ports (25, 465, 587) were seen open on each addre…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
For a mail domain: lists up to 3 MX hosts with their IPv4 addresses and, from Shodan's pre-collected passive scan data, which SMTP ports (25, 465, 587) were seen open on each address. Passive and possibly old; no SMTP conversation, banner, STARTTLS or certificate test is made. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_ntp_monlist_auditReports whether Shodan's pre-collected passive scan data shows NTP (port 123) seen open on an IPv4 address.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Reports whether Shodan's pre-collected passive scan data shows NTP (port 123) seen open on an IPv4 address. Passive and possibly old; the monlist amplification check itself is not run, so this cannot say whether monlist is enabled. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_open_port_scannerLists the TCP ports Shodan has seen open on an IPv4 address, from its pre-collected passive scan data (not a live scan: nothing connects to the address now).Reads text others write1 finding
Why it is in this group
- The name "security_open_port_scanner" says "open": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "security_open_port_scanner" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "security_open_port_scanner" says "open": a word for a change.
  What this check looks for
Description, as the server wrote it
Lists the TCP ports Shodan has seen open on an IPv4 address, from its pre-collected passive scan data (not a live scan: nothing connects to the address now). The record can be days old, and an address with no record returns known=false, which does not prove the ports are closed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_open_resolver_checkReports whether Shodan's pre-collected passive scan data shows TCP port 53 (DNS) open on an IPv4 address.Reads text others write1 finding
Why it is in this group
- The name "security_open_resolver_check" says "open": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "security_open_resolver_check" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "security_open_resolver_check" says "open": a word for a change.
  What this check looks for
Description, as the server wrote it
Reports whether Shodan's pre-collected passive scan data shows TCP port 53 (DNS) open on an IPv4 address. It is a passive port fact only: it does not send a query, so it cannot say whether the server answers recursively for outside names. Absence means not seen, not closed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_openphish_feedChecks a URL or host against the OpenPhish public phishing feed (about 300 currently active phishing URLs, updated continuously).Reads text others writeCan send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Checks a URL or host against the OpenPhish public phishing feed (about 300 currently active phishing URLs, updated continuously). Returns whether the exact URL or any URL on the same host is listed, the feed size and up to 5 example URLs. Not listed does not mean safe; the feed is short and changes fast. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_phishtank_checkLooks one http or https URL up in the PhishTank phishing database (live checkurl lookup, no key).Reads text others writeCan send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Looks one http or https URL up in the PhishTank phishing database (live checkurl lookup, no key). Returns whether PhishTank has the URL and, if so, its phish id, verification flag and validity. Absence means PhishTank has no record of this exact URL, not that it is safe. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_rdp_exposure_checkChecks Shodan's passive scan records for TCP port 3389 (RDP) on an IPv4 address.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks Shodan's passive scan records for TCP port 3389 (RDP) on an IPv4 address. Says whether RDP was seen open (not a live test, and the record can be days old). An address with no Shodan record returns seen=false with known=false; that is not proof the port is closed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_reverse_dns_ptrReverse DNS (PTR) names for an IPv4 address, and forward-confirmed reverse DNS: whether each PTR name resolves back (A record) to the same address.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Reverse DNS (PTR) names for an IPv4 address, and forward-confirmed reverse DNS: whether each PTR name resolves back (A record) to the same address. Up to 3 PTR names are checked. Many addresses have no PTR record; that is a normal answer. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_security_headersChecks the live HTTP response headers of a site's home page (one GET, https) for Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, Referr…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks the live HTTP response headers of a site's home page (one GET, https) for Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy and Cross-Origin-Opener-Policy. Returns present/missing headers with their values and a score out of 7. It does not judge the quality of the values. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_shodan_host_summaryShodan InternetDB summary for an IPv4 address (free, no key): open TCP ports, host names seen, CPE software identifiers, tags and CVE IDs Shodan associates with the host.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Shodan InternetDB summary for an IPv4 address (free, no key): open TCP ports, host names seen, CPE software identifiers, tags and CVE IDs Shodan associates with the host. Data is from Shodan's last scan, so it can be days old; an IP with no data returns empty lists with known=false. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_smb_exposure_testChecks Shodan's passive scan records for TCP port 445 (SMB) on an IPv4 address.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks Shodan's passive scan records for TCP port 445 (SMB) on an IPv4 address. Says whether SMB was seen open and when the record was last refreshed by the host data (not a live test). An address with no Shodan record returns seen=false with known=false; that is not proof the port is closed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_snmp_exposureReports whether Shodan's pre-collected passive scan data shows SNMP (UDP port 161) seen open on an IPv4 address.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Reports whether Shodan's pre-collected passive scan data shows SNMP (UDP port 161) seen open on an IPv4 address. Passive and possibly old; no community string is tried, so default or public community access is not tested. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_spameatingmonkeyChecks an IPv4 mail-sending address against the SpamEatingMonkey DNS blocklist (bl.spameatingmonkey.net) through public DNS.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks an IPv4 mail-sending address against the SpamEatingMonkey DNS blocklist (bl.spameatingmonkey.net) through public DNS. A listed address returns its 127.0.0.x return code; an unlisted one returns no record. Listings change often; this is a point-in-time answer. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_spamhaus_zenSpamhaus blocklist check through Spamhaus's official Data Query Service: an IPv4 address against ZEN (SBL spam sources, CSS snowshoe, XBL exploited/botnet hosts, DROP hijacked rang…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Spamhaus blocklist check through Spamhaus's official Data Query Service: an IPv4 address against ZEN (SBL spam sources, CSS snowshoe, XBL exploited/botnet hosts, DROP hijacked ranges, PBL end-user ranges) or a domain against the Domain Block List (spam, phishing, malware, botnet C&C, abused legitimate domains). Returns listed yes/no, every return code with the list it means, and Spamhaus's lookup link. Point-in-time answer. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_ssh_banner_auditFrom Shodan's pre-collected passive scan data: whether TCP port 22 was seen open on an IPv4 address and any OpenSSH version identified in its software (CPE) list.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
From Shodan's pre-collected passive scan data: whether TCP port 22 was seen open on an IPv4 address and any OpenSSH version identified in its software (CPE) list. This is passive and may be days old; it is not a live SSH banner grab or algorithm audit. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_ssl_cert_chainHTTPS certificate chain and cipher audit for a host (port 443) from Qualys SSL Labs' cached report: grade, number of certificates in the chain, trust store, TLS versions, weak-ciph…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
HTTPS certificate chain and cipher audit for a host (port 443) from Qualys SSL Labs' cached report: grade, number of certificates in the chain, trust store, TLS versions, weak-cipher count, Heartbleed/POODLE/BEAST flags and HSTS. Only reads reports SSL Labs already has, so a host that was never scanned returns a retry error instead of a new scan. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_sslbl_abuse_certsChecks a certificate SHA-1 fingerprint (40 hex characters) against the abuse.ch SSL Blacklist of certificates seen on malware botnet C2 servers.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks a certificate SHA-1 fingerprint (40 hex characters) against the abuse.ch SSL Blacklist of certificates seen on malware botnet C2 servers. A hit returns the date added and the malware reason from the list. Only certificates this list tracks are covered. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_subdomain_takeoverFor a subdomain: finds its CNAME, matches the target against the public can-i-take-over-xyz fingerprint list (services such as GitHub Pages, S3, Azure, WordPress), checks whether t…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
For a subdomain: finds its CNAME, matches the target against the public can-i-take-over-xyz fingerprint list (services such as GitHub Pages, S3, Azure, WordPress), checks whether the target still resolves, and fetches the subdomain once to look for the service's 'unclaimed' page text. Verdicts are evidence, not proof; the list is community-maintained. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_talos_ip_blacklistCisco Talos reputation for an IPv4 address: threat level (favorable, neutral, poor, untrusted), web reputation score, forward/reverse DNS match, hostname, owner, location, email vo…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Cisco Talos reputation for an IPv4 address: threat level (favorable, neutral, poor, untrusted), web reputation score, forward/reverse DNS match, hostname, owner, location, email volume magnitude (daily, monthly and last 30 days), the /24 network's average magnitude and how many neighbouring addresses in that /24 Talos rates untrusted, poor, neutral or favorable. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_tls_alpn_detectorReports which newer HTTP protocols a site advertises: HTTP/3 (h3) and older draft or HTTP/2 alternatives in its Alt-Svc response header, and the Alt-Svc max-age.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Reports which newer HTTP protocols a site advertises: HTTP/3 (h3) and older draft or HTTP/2 alternatives in its Alt-Svc response header, and the Alt-Svc max-age. This is what the server announces, not a TLS ALPN negotiation: the fetch this tool makes cannot choose the protocol, so a site that negotiates but does not send Alt-Svc will show as not advertised. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_tls_cipher_enumTLS versions a host accepts (SSL 3, TLS 1.0 and 1.1 flagged as deprecated) and its cipher-suite strength from Qualys SSL Labs' cached report: suite count per protocol, weak suites …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
TLS versions a host accepts (SSL 3, TLS 1.0 and 1.1 flagged as deprecated) and its cipher-suite strength from Qualys SSL Labs' cached report: suite count per protocol, weak suites (RC4, 3DES, NULL, EXPORT, DES, anonymous), and whether forward secrecy is offered. Reads existing reports only; a host that was never scanned returns a retry error. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_tor_exit_nodesChecks an IPv4 address against the Tor Project's bulk exit list (about 1,200 active exit IPs).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks an IPv4 address against the Tor Project's bulk exit list (about 1,200 active exit IPs). If it is an exit, adds the relays for that address from Onionoo: nickname, flags, country, first and last seen. Only exit IPs are on the list; a relay's other IPs are not checked. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_urlhaus_malwareChecks whether a host (domain or IP) is known to abuse.ch URLhaus as a malware distribution host: first seen, number of malware URLs, Spamhaus DBL / SURBL status and the latest URL…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks whether a host (domain or IP) is known to abuse.ch URLhaus as a malware distribution host: first seen, number of malware URLs, Spamhaus DBL / SURBL status and the latest URLs with status (online/offline), threat type, tags, reporter and URLhaus reference. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_vpn_proxy_detectorChecks an IPv4 address against the public X4BNet list of commercial VPN provider address ranges (about 11,000 CIDR blocks, refreshed by the list's maintainer).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Checks an IPv4 address against the public X4BNet list of commercial VPN provider address ranges (about 11,000 CIDR blocks, refreshed by the list's maintainer). Returns whether the address falls in a listed VPN range and which range. A miss does not prove a direct connection, and IPv6 is not covered. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_whois_rdapDomain registration facts via RDAP (IANA bootstrap, then the registry's own server): registration, last change and expiry dates, days left, registrar name, status flags, nameserver…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Domain registration facts via RDAP (IANA bootstrap, then the registry's own server): registration, last change and expiry dates, days left, registrar name, status flags, nameservers and DNSSEC delegation flag. Registrant contact data is usually redacted by registries and is not returned. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
seo_linkedin_ad_libraryLinkedIn Ad Library search (ads LinkedIn discloses publicly, including EU/EEA): up to 24 ads per page with ad id, advertiser, format (single image, video, carousel, document), crea…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
LinkedIn Ad Library search (ads LinkedIn discloses publicly, including EU/EEA): up to 24 ads per page with ad id, advertiser, format (single image, video, carousel, document), creative type, tagline, ad text, links and detail link. Search by keyword and/or advertiser, optionally one country and a time window. From linkedin.com/ad-library via a residential proxy. Price: $0.01 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true

Only reads 75Looks things up and changes nothing.Show 75 read-only tools

search_al_jazeera_articlesAl Jazeera latest articles from its public RSS feed (keyword filter on title/summary/categories).Reads text others writeNo findings
Why it is in this group
- The name "search_al_jazeera_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
Al Jazeera latest articles from its public RSS feed (keyword filter on title/summary/categories). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_ap_news_articlesLatest Associated Press (AP News) articles: headline, publisher, publish time and link, newest first, optionally matching search words, from the last 1-30 days.Reads text others writeNo findings
Why it is in this group
- The name "search_ap_news_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Latest Associated Press (AP News) articles: headline, publisher, publish time and link, newest first, optionally matching search words, from the last 1-30 days. Found through Google News's public RSS index of apnews.com (the site blocks automated clients); links are Google News redirect links to the article. Headlines only, no article text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_article_extractorExtracts one article from a public news or blog page: headline (og:title or h1), author, published and modified times, description and the article body as Markdown.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "search_article_extractor" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Claude Code: ask, because it is tagged outbound.
Description, as the server wrote it
Extracts one article from a public news or blog page: headline (og:title or h1), author, published and modified times, description and the article body as Markdown. Reads the page you name only; paywalled text is not returned and body text depends on the page using <article> or <main>. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_bbc_news_articlesBBC News top stories from the public BBC RSS feed (latest items; keyword filter on title/summary).Reads text others writeNo findings
Why it is in this group
- The name "search_bbc_news_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
BBC News top stories from the public BBC RSS feed (latest items; keyword filter on title/summary). Headlines and summaries only, no full article text. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_benzingaLatest Benzinga financial news (the public JSON feed behind benzinga.com): headline, teaser, author, time, URL, tickers, channels and tags.Reads text others writeNo findings
Why it is in this group
- The name "search_benzinga" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Latest Benzinga financial news (the public JSON feed behind benzinga.com): headline, teaser, author, time, URL, tickers, channels and tags. Filter by stock tickers (e.g. AAPL,TSLA) and/or words in the headline/teaser. Newest first, up to 100 stories; no paging into older news, no full article text. Public, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_bing_searchBing web search results (Bing's public RSS search output, no key): result title, URL and snippet, in Bing's ranking order.Reads text others writeNo findings
Why it is in this group
- The name "search_bing_search" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "web": it reads web pages, which anyone can write.
Description, as the server wrote it
Bing web search results (Bing's public RSS search output, no key): result title, URL and snippet, in Bing's ranking order. Shows the first page of results Bing returns for the query; no paging, no ad or SERP-feature data. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_bingx_marketsBingX perpetual swap market ticker (public open API, no key): last price, 24h change, high, low, open, base and quote volume and the time of the last candle close for one symbol su…Reads text others writeNo findings
Why it is in this group
- The name "search_bingx_markets" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
BingX perpetual swap market ticker (public open API, no key): last price, 24h change, high, low, open, base and quote volume and the time of the last candle close for one symbol such as BTC-USDT. Read-only market data; no trading. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_bleacher_report_articlesLatest Bleacher Report articles: headline, publisher, publish time and link, newest first, optionally matching search words, from the last 1-30 days.Reads text others writeNo findings
Why it is in this group
- The name "search_bleacher_report_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Latest Bleacher Report articles: headline, publisher, publish time and link, newest first, optionally matching search words, from the last 1-30 days. Found through Google News's public RSS index of bleacherreport.com (the site blocks automated clients); links are Google News redirect links to the article. Headlines only, no article text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_cnbcCNBC top news from CNBC's public RSS feed (keyword filter on title/summary).Reads text others writeNo findings
Why it is in this group
- The name "search_cnbc" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
CNBC top news from CNBC's public RSS feed (keyword filter on title/summary). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_cran_r_packagesCRAN R package metadata (crandb JSON mirror of CRAN, public, no key): name, version, title, description, license, maintainer, publication date, dependencies and CRAN page link.Reads text others writeNo findings
Why it is in this group
- The name "search_cran_r_packages" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
CRAN R package metadata (crandb JSON mirror of CRAN, public, no key): name, version, title, description, license, maintainer, publication date, dependencies and CRAN page link. Unknown packages return 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_crossrefCrossref works search (public REST API, no key): DOI, title, type, container (journal or book), year, authors and link for matching scholarly records.Reads text others writeNo findings
Why it is in this group
- The name "search_crossref" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Crossref works search (public REST API, no key): DOI, title, type, container (journal or book), year, authors and link for matching scholarly records. Metadata only; abstracts are not always present in Crossref. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_crossref_academic_paperCrossref DOI lookup (public REST API, no key): title, authors, journal, publication date, cited-by count, publisher and link for one paper.Reads text others writeNo findings
Why it is in this group
- The name "search_crossref_academic_paper" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Crossref DOI lookup (public REST API, no key): title, authors, journal, publication date, cited-by count, publisher and link for one paper. Unknown DOIs return 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_dappradar_rankingsTop 50 dapps from DappRadar's public rankings page: rank, name, token symbol, chains, market cap, token price, price change, trading volume, unique active wallets (UAW) and TVL, fo…Reads text others writeNo findings
Why it is in this group
- The name "search_dappradar_rankings" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Top 50 dapps from DappRadar's public rankings page: rank, name, token symbol, chains, market cap, token price, price change, trading volume, unique active wallets (UAW) and TVL, for 24h/7d/30d, optionally for one chain (eth, solana, bnb, base, polygon, arbitrum, tron...). Values in USD as shown by DappRadar; missing values are null. Public page, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_datacite_metadataDataCite DOI search (public REST API, no key): DOI, title, publication year, resource type, publisher, creators and landing page for datasets, software and other research outputs.Reads text others writeNo findings
Why it is in this group
- The name "search_datacite_metadata" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
DataCite DOI search (public REST API, no key): DOI, title, publication year, resource type, publisher, creators and landing page for datasets, software and other research outputs. Metadata only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_defector_articlesDefector articles from its public RSS feed (keyword filter on title/summary/tags).Reads text others writeNo findings
Why it is in this group
- The name "search_defector_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
Defector articles from its public RSS feed (keyword filter on title/summary/tags). Latest items only; excerpts are as published in the feed. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_dev_to_articlesDEV Community (dev.to) latest articles for one tag (public DEV API, no key): title, author, publish time, reactions, comments, reading time and link.Reads text others writeNo findings
Why it is in this group
- The name "search_dev_to_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "comment": it reads comments, which other people can write.
Description, as the server wrote it
DEV Community (dev.to) latest articles for one tag (public DEV API, no key): title, author, publish time, reactions, comments, reading time and link. Search by tag only; the public API has no free-text search. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_doj_press_releasesUS Department of Justice press releases from the justice.gov public RSS feed (keyword filter on title/summary).Reads text others writeNo findings
Why it is in this group
- The name "search_doj_press_releases" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
US Department of Justice press releases from the justice.gov public RSS feed (keyword filter on title/summary). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_drive_com_au_newsLatest Drive.com.au (Australia) articles: headline, publisher, publish time and link, newest first, optionally matching search words, from the last 1-30 days.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "search_drive_com_au_news" says "search": a word for reading.
What it can reach
- private-dataThe name "search_drive_com_au_news" says "search" and "drive": it reads files.
- private-dataThe description's first sentence says "drive": it reads files.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Latest Drive.com.au (Australia) articles: headline, publisher, publish time and link, newest first, optionally matching search words, from the last 1-30 days. Found through Google News's public RSS index of drive.com.au (the site blocks automated clients); links are Google News redirect links to the article. Headlines only, no article text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_emedicine_articlesMedscape eMedicine (Medscape Reference) clinical articles by specialty: title, topic category, article id and URL from the public specialty index, filtered by words in the title.Reads text others writeNo findings
Why it is in this group
- The name "search_emedicine_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Medscape eMedicine (Medscape Reference) clinical articles by specialty: title, topic category, article id and URL from the public specialty index, filtered by words in the title. With details=true the first 5 matches also get summary, author, last-reviewed date and paywall flag from the article page. Metadata only, no article text (Medscape articles need a free login). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_europe_pmc_articlesEurope PMC literature search (public REST API, no key): PMID or source id, title, authors, journal, year, DOI, cited-by count and Europe PMC link.Reads text others writeNo findings
Why it is in this group
- The name "search_europe_pmc_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Europe PMC literature search (public REST API, no key): PMID or source id, title, authors, journal, year, DOI, cited-by count and Europe PMC link. Covers life-science papers including preprints; abstracts are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_fifa_team_rankingsFIFA men's national team world ranking (FIFA public ranking API, no key): position, team, country code, total points, previous points and previous rank for one ranking date.Reads text others writeNo findings
Why it is in this group
- The name "search_fifa_team_rankings" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
FIFA men's national team world ranking (FIFA public ranking API, no key): position, team, country code, total points, previous points and previous rank for one ranking date. Default date is the latest one listed on FIFA's site when built (2026-10-20); pass dateId to read another listed date. Men's ranking only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_figshare_articlesFigshare public article search (public API, no key): id, title, DOI, publication date, item type and public page link for research articles, datasets and figures.Reads text others writeNo findings
Why it is in this group
- The name "search_figshare_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Figshare public article search (public API, no key): id, title, DOI, publication date, item type and public page link for research articles, datasets and figures. Searches titles and metadata; file contents are not returned. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_freightwavesFreightWaves latest news from its public RSS feed (keyword filter on title/summary/categories).Reads text others writeNo findings
Why it is in this group
- The name "search_freightwaves" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
FreightWaves latest news from its public RSS feed (keyword filter on title/summary/categories). Feed carries only the latest few items. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_ft_com_articlesFinancial Times headlines from the public FT RSS feeds: international homepage or any section/topic stream (world, markets, companies, technology, opinion, global-economy, us, uk, …Reads text others writeNo findings
Why it is in this group
- The name "search_ft_com_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
Financial Times headlines from the public FT RSS feeds: international homepage or any section/topic stream (world, markets, companies, technology, opinion, global-economy, us, uk, climate-capital...). Keyword filter on title/summary. Headlines and standfirsts only; full articles are paywalled and not returned. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_gcaptain_maritime_newsgCaptain maritime news from its public RSS feed (keyword filter on title/summary/categories).Reads text others writeNo findings
Why it is in this group
- The name "search_gcaptain_maritime_news" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
gCaptain maritime news from its public RSS feed (keyword filter on title/summary/categories). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_gdelt_newsRecent news articles (last ~72 hours) that match a query, from GDELT's public Context 2.0 API (DOC 2.0 API as fallback), no key: title, URL, domain, language, time seen and the mat…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "search_gdelt_news" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "doc": it reads documents.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Recent news articles (last ~72 hours) that match a query, from GDELT's public Context 2.0 API (DOC 2.0 API as fallback), no key: title, URL, domain, language, time seen and the matching sentence. Supports GDELT query syntax ("exact phrase", sourcelang:english, domain:bbc.co.uk). Covers the sources GDELT monitors, not every outlet. Rate-limited or slow GDELT answers return 503. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_german_impressumReads the Impressum (legal notice required on German websites, §5 TMG/DDG) at the page URL you give: e-mail addresses, phone numbers, postal address lines and the notice text as Ma…Reads private dataReads text others writeCan send data outNo findings
Why it is in this group
- The name "search_german_impressum" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "read" and "mail": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "read" and "website": it reads web pages, which anyone can write.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Claude Code: ask, because it is tagged outbound.
Description, as the server wrote it
Reads the Impressum (legal notice required on German websites, §5 TMG/DDG) at the page URL you give: e-mail addresses, phone numbers, postal address lines and the notice text as Markdown. Values are read from the page as published; no check that the operator is correct. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_google_adsGoogle Ads Transparency Center: search advertisers by name or domain (verified name, advertiser ID, country, approximate ad count), or list the ads of an advertiser ID or website d…Reads text others writeNo findings
Why it is in this group
- The name "search_google_ads" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "website": it reads web pages, which anyone can write.
Description, as the server wrote it
Google Ads Transparency Center: search advertisers by name or domain (verified name, advertiser ID, country, approximate ad count), or list the ads of an advertiser ID or website domain (creative ID, format, first and last shown dates, days shown, preview URL, Transparency Center link), optionally for one country; plus the approximate total number of ads. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_google_newsGoogle News search (public Google News RSS search feed, no key, English/US edition): headline, publisher, publish time and the Google News link for the newest matching stories.Reads text others writeNo findings
Why it is in this group
- The name "search_google_news" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
Google News search (public Google News RSS search feed, no key, English/US edition): headline, publisher, publish time and the Google News link for the newest matching stories. Google News links redirect to the publisher; article text is not returned. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_google_searchOrganic web search results from the Brave Search API (an independent web index, not Google's): rank, title, URL, snippet, site name, page age and language for the first page of res…Reads text others writeNo findings
Why it is in this group
- The name "search_google_search" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "web": it reads web pages, which anyone can write.
Description, as the server wrote it
Organic web search results from the Brave Search API (an independent web index, not Google's): rank, title, URL, snippet, site name, page age and language for the first page of results. Optional country and freshness filters. No ads or SERP features. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_gtex_gene_expressionGTEx Portal gene expression (public API v2, no key): median TPM of one gene in human tissues, sorted highest first, with the GENCODE id it was matched to.Reads text others writeNo findings
Why it is in this group
- The name "search_gtex_gene_expression" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
GTEx Portal gene expression (public API v2, no key): median TPM of one gene in human tissues, sorted highest first, with the GENCODE id it was matched to. Uses GTEx v8 data; unknown gene symbols return 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_hacker_newsHacker News story search through the official HN Search API (Algolia, public, no key): title, article URL, author, points, comment count and discussion link.Reads text others writeNo findings
Why it is in this group
- The name "search_hacker_news" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Hacker News story search through the official HN Search API (Algolia, public, no key): title, article URL, author, points, comment count and discussion link. Returns stories only, most relevant first. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_hackernews_itemsOne Hacker News item by numeric id from the official HN API (Firebase, public, no key): type, title, author, time, score, comment count, link and plain text.Reads text others writeNo findings
Why it is in this group
- The name "search_hackernews_items" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "comment": it reads comments, which other people can write.
Description, as the server wrote it
One Hacker News item by numeric id from the official HN API (Firebase, public, no key): type, title, author, time, score, comment count, link and plain text. Deleted or unknown ids return 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_leiden_rankingCWTS Leiden Ranking Open Edition 2025 (publication-based, about 2,800 universities, OpenAlex data): for a country or continent, field and period (2006-2009 to 2020-2023), each univ…Reads text others writeNo findings
Why it is in this group
- The name "search_leiden_ranking" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
CWTS Leiden Ranking Open Edition 2025 (publication-based, about 2,800 universities, OpenAlex data): for a country or continent, field and period (2006-2009 to 2020-2023), each university's rank, name, country and the indicators of the chosen dimension: scientific impact (P, top 1%), collaboration (international, industry) or open access (P(OA), PP(OA)). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_mangadex_mangaMangaDex manga search by title (public API, no key): id, title, year, publication status, content rating, genre tags, last chapter and page link.Reads text others writeNo findings
Why it is in this group
- The name "search_mangadex_manga" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
MangaDex manga search by title (public API, no key): id, title, year, publication status, content rating, genre tags, last chapter and page link. Metadata only; no chapter pages. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_markdown_to_pdf_mcpnpm registry search for MCP servers that convert Markdown to PDF (public npm search API, no key): package name, version, description, publisher, last publish date, monthly and week…Reads text others writeNo findings
Why it is in this group
- The name "search_markdown_to_pdf_mcp" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
npm registry search for MCP servers that convert Markdown to PDF (public npm search API, no key): package name, version, description, publisher, last publish date, monthly and weekly downloads, and npm link. Lists packages as npm reports them; quality is not checked. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_news_across_the_webSearch news across the web in one call: Google News RSS, Bing News RSS and GDELT's Context 2.0 API (public, no keys), merged, de-duplicated by headline and sorted newest first.Reads text others writeNo findings
Why it is in this group
- The name "search_news_across_the_web" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe name "search_news_across_the_web" says "search" and "web": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "search" and "web": it reads web pages, which anyone can write.
Description, as the server wrote it
Search news across the web in one call: Google News RSS, Bing News RSS and GDELT's Context 2.0 API (public, no keys), merged, de-duplicated by headline and sorted newest first. Each item has title, publisher, URL, time and which engines found it, plus a per-engine status. Headlines and snippets only, no full text. Google links are Google News redirect links. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_nyt_articlesNew York Times home page headlines from the public NYT RSS feed (latest items; keyword filter on title/summary/categories).Reads text others writeNo findings
Why it is in this group
- The name "search_nyt_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
New York Times home page headlines from the public NYT RSS feed (latest items; keyword filter on title/summary/categories). Headlines and abstracts only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_openprescribingNHS England primary-care prescribing for a drug (official NHSBSA English Prescribing Dataset, monthly, ~2 months behind; the raw data behind OpenPrescribing.net): items, actual cos…Reads text others writeNo findings
Why it is in this group
- The name "search_openprescribing" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
NHS England primary-care prescribing for a drug (official NHSBSA English Prescribing Dataset, monthly, ~2 months behind; the raw data behind OpenPrescribing.net): items, actual cost (GBP) and quantity, grouped by region, ICB, GP practice or product presentation, largest first. Match on BNF chemical substance or presentation name. Open Government Licence, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_owgr_golf_rankingsOfficial World Golf Ranking (OWGR public ranking API, no key): current men's position, player name, country, total points, average points and last week's position for the top playe…Reads text others writeNo findings
Why it is in this group
- The name "search_owgr_golf_rankings" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Official World Golf Ranking (OWGR public ranking API, no key): current men's position, player name, country, total points, average points and last week's position for the top players. Current ranking only; no tour or event history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_pr_newswirePR Newswire latest news-release list from its public RSS feed (keyword filter on title/summary).Reads text others writeNo findings
Why it is in this group
- The name "search_pr_newswire" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
PR Newswire latest news-release list from its public RSS feed (keyword filter on title/summary). Press release headlines and summaries. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_press_release_multi_wireLatest press releases merged from public wire feeds: PR Newswire (all news), Business Wire (mergers & acquisitions) and Newswire.com.Reads text others writeNo findings
Why it is in this group
- The name "search_press_release_multi_wire" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Latest press releases merged from public wire feeds: PR Newswire (all news), Business Wire (mergers & acquisitions) and Newswire.com. Newest first, de-duplicated, keyword filter on title/summary, each item tagged with its wire. Headlines, links, dates and summaries only. Public RSS, no key. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_prnewswire_press_releasesPR Newswire health-category press releases from its public RSS feed (keyword filter on title/summary).Reads text others writeNo findings
Why it is in this group
- The name "search_prnewswire_press_releases" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
PR Newswire health-category press releases from its public RSS feed (keyword filter on title/summary). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_pubmed_article_metadataPubMed article metadata by PMID (NCBI E-utilities esummary, public, no key): title, journal, publication date, authors and DOI for up to 20 ids.Reads text others writeNo findings
Why it is in this group
- The name "search_pubmed_article_metadata" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
PubMed article metadata by PMID (NCBI E-utilities esummary, public, no key): title, journal, publication date, authors and DOI for up to 20 ids. Summary fields only, no abstracts. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_reuters_articlesReuters latest articles from Reuters' public news sitemap (no key): headline, article URL and publication time, newest first.Reads text others writeNo findings
Why it is in this group
- The name "search_reuters_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Reuters latest articles from Reuters' public news sitemap (no key): headline, article URL and publication time, newest first. Covers only the most recent items in the sitemap; headlines and links only, no article text. Optional keyword filter on the headline. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_semafor_articlesSemafor articles from its public RSS feed (keyword filter on title/summary/categories).Reads text others writeNo findings
Why it is in this group
- The name "search_semafor_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
Semafor articles from its public RSS feed (keyword filter on title/summary/categories). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_seo_audit_toolOn-page SEO audit of one public page from its HTML only: title and description length, one H1, canonical link, language, viewport, robots meta, Open Graph tags, images without alt …Reads text others writeCan send data outNo findings
Why it is in this group
- The name "search_seo_audit_tool" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "html": it reads web pages, which anyone can write.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Claude Code: ask, because it is tagged outbound.
Description, as the server wrote it
On-page SEO audit of one public page from its HTML only: title and description length, one H1, canonical link, language, viewport, robots meta, Open Graph tags, images without alt text, internal and external links, word count. Returns each check with its value and pass or fail. No Core Web Vitals, backlinks or keyword volumes. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_shanghai_arwu_rankingsShanghaiRanking ARWU 2026 world university ranking (public table on shanghairanking.com, no key): world position, institution, national rank, total score and the six indicator scor…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "search_shanghai_arwu_rankings" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "table": it reads databases.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
ShanghaiRanking ARWU 2026 world university ranking (public table on shanghairanking.com, no key): world position, institution, national rank, total score and the six indicator scores (Alumni, Award, HiCi, N&S, PUB, PCP). The public page shows the top 30 only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_shanghai_gras_rankingsShanghaiRanking Global Ranking of Academic Subjects (GRAS): for a subject (55, e.g.Reads text others writeNo findings
Why it is in this group
- The name "search_shanghai_gras_rankings" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
ShanghaiRanking Global Ranking of Academic Subjects (GRAS): for a subject (55, e.g. Mathematics, Computer Science, Clinical Medicine, Economics) and year, ranked universities with rank or band, total score, the five indicator scores, country and institution URL. Filter by country or university name. Without a subject, lists the subjects and their codes. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_shopify_metadataPublic product metadata of a Shopify store from its storefront products.json feed (no key): title, handle, vendor, product type, tags, publish and update times, price range, varian…Reads text others writeNo findings
Why it is in this group
- The name "search_shopify_metadata" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Public product metadata of a Shopify store from its storefront products.json feed (no key): title, handle, vendor, product type, tags, publish and update times, price range, variant and image counts and product link. Only stores that expose products.json; stores that block it return 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_techcrunch_articlesTechCrunch latest articles from its public RSS feed (keyword filter on title/summary/tags).Reads text others writeNo findings
Why it is in this group
- The name "search_techcrunch_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
TechCrunch latest articles from its public RSS feed (keyword filter on title/summary/tags). Headlines and excerpts only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_theintercept_articlesThe Intercept articles from its public RSS feed (keyword filter on title/summary/categories).Reads text others writeNo findings
Why it is in this group
- The name "search_theintercept_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
The Intercept articles from its public RSS feed (keyword filter on title/summary/categories). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_university_rankings_mega_packUniversity rankings side by side from ShanghaiRanking ARWU (rank, national rank, total and six indicator scores) and Times Higher Education World University Rankings (rank, overall…Reads text others writeNo findings
Why it is in this group
- The name "search_university_rankings_mega_pack" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
University rankings side by side from ShanghaiRanking ARWU (rank, national rank, total and six indicator scores) and Times Higher Education World University Rankings (rank, overall, teaching, research, citations, industry and international scores, students, student/staff ratio, % international, female:male). Search by university name and/or country; years selectable. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_unpaywallUnpaywall open-access lookup by DOI (free API; it requires a contact e-mail set in UNPAYWALL_EMAIL, not a key): is the paper open access, OA status, best free full-text link, journ…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "search_unpaywall" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "mail": it reads inbound email, which other people can write.
Description, as the server wrote it
Unpaywall open-access lookup by DOI (free API; it requires a contact e-mail set in UNPAYWALL_EMAIL, not a key): is the paper open access, OA status, best free full-text link, journal and publisher. Returns metadata and links only, not the PDF. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_usda_market_newsUSDA AMS Market News (official MyMarketNews API): search the catalogue of livestock, grain, dairy, fruit/vegetable and other market reports by title, or pass a report slug id to ge…Reads text others writeNo findings
Why it is in this group
- The name "search_usda_market_news" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
USDA AMS Market News (official MyMarketNews API): search the catalogue of livestock, grain, dairy, fruit/vegetable and other market reports by title, or pass a report slug id to get its latest published rows (prices, volumes, report date). Data straight from USDA; needs the owner's free MARS API key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_wayback_cdxInternet Archive Wayback Machine CDX index: archived snapshots of a URL or domain (timestamp, original URL, MIME type, HTTP status, length) with a link to each capture.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "search_wayback_cdx" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "internet": it reads web pages, which anyone can write.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Claude Code: ask, because it is tagged outbound.
Description, as the server wrote it
Internet Archive Wayback Machine CDX index: archived snapshots of a URL or domain (timestamp, original URL, MIME type, HTTP status, length) with a link to each capture. Public, no key; the index lists captures, not page text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_website_content_crawlerReads one public web page and returns its title, description and main text as Markdown (headings, links, lists), plus link counts.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "search_website_content_crawler" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe name "search_website_content_crawler" says "search" and "website": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "read" and "web": it reads web pages, which anyone can write.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Claude Code: ask, because it is tagged outbound.
Description, as the server wrote it
Reads one public web page and returns its title, description and main text as Markdown (headings, links, lists), plus link counts. Reads only the page you name: no crawling of other pages, no JavaScript rendering, so pages that build their text in the browser may come back short. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_wechat_articlesWeChat Official Account (公众号) articles matching a query, from Sogou WeChat search (weixin.sogou.com): title, summary, account name, publish time and link, 10 per page.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "search_wechat_articles" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "chat": it reads messages.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "chat": it reads messages, which other people can write.
Description, as the server wrote it
WeChat Official Account (公众号) articles matching a query, from Sogou WeChat search (weixin.sogou.com): title, summary, account name, publish time and link, 10 per page. Links are Sogou redirect links that open the mp.weixin.qq.com article in a browser. Sogou may show a captcha under heavy use; that returns 503. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_wikimedia_commons_imageWikimedia Commons image search (MediaWiki API, public, no key): file title, direct image URL, size, MIME type, license, author and description for free-licensed files.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "search_wikimedia_commons_image" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "file": it reads files.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Wikimedia Commons image search (MediaWiki API, public, no key): file title, direct image URL, size, MIME type, license, author and description for free-licensed files. Returns file metadata only, not image bytes. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_wordpress_articlesWordPress.org news posts from the official WordPress news RSS feed (keyword filter on title/summary/categories).Reads text others writeNo findings
Why it is in this group
- The name "search_wordpress_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "post": it reads posts, which other people can write.
Description, as the server wrote it
WordPress.org news posts from the official WordPress news RSS feed (keyword filter on title/summary/categories). Latest posts only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_world_rugby_rankingsWorld Rugby men's 15s world rankings (official rankings API, public, no key): position, team, country code, rating points and previous position and points, from the current table.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "search_world_rugby_rankings" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "table": it reads databases.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
World Rugby men's 15s world rankings (official rankings API, public, no key): position, team, country code, rating points and previous position and points, from the current table. Men's rankings only; the table is updated by World Rugby. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
search_wsj_articlesWSJ World News headlines from the public Dow Jones RSS feed (latest items; keyword filter on title/summary).Reads text others writeNo findings
Why it is in this group
- The name "search_wsj_articles" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "rss": it reads web pages, which anyone can write.
Description, as the server wrote it
WSJ World News headlines from the public Dow Jones RSS feed (latest items; keyword filter on title/summary). Headlines and short summaries only; full articles are paywalled and not returned. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_bimi_record_auditReads a domain's BIMI record (default._bimi.<domain> TXT): whether it is published, the SVG logo URL (l=) and the certificate URL (a=, a VMC or CMC for mailbox providers).Reads private dataReads text others writeNo findings
Why it is in this group
- The description's first verb is "read": a word for reading.
What it can reach
- private-dataThe description's first sentence says "read" and "mailbox": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "read" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Reads a domain's BIMI record (default._bimi.<domain> TXT): whether it is published, the SVG logo URL (l=) and the certificate URL (a=, a VMC or CMC for mailbox providers). Checks the v=BIMI1 tag and that the URLs are https. It does not download the logo or validate the certificate. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_cookie_securityLists the cookies a site sets on its public home page (one anonymous GET, no login) with their Secure, HttpOnly and SameSite flags, and flags the ones missing a flag.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "http": it reads web pages, which anyone can write.
Description, as the server wrote it
Lists the cookies a site sets on its public home page (one anonymous GET, no login) with their Secure, HttpOnly and SameSite flags, and flags the ones missing a flag. Cookies set later, after login or on other pages, are not seen. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_crossdomain_xml_testReads a site's public crossdomain.xml (Adobe Flash) and clientaccesspolicy.xml (Silverlight) if they exist, lists the origins they allow, and flags wildcard grants ('*').Reads text others writeNo findings
Why it is in this group
- The description's first verb is "read": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Reads a site's public crossdomain.xml (Adobe Flash) and clientaccesspolicy.xml (Silverlight) if they exist, lists the origins they allow, and flags wildcard grants ('*'). Old policies are rarely needed now, so a wildcard here mostly means leftovers; absence is the normal case. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_csp_evaluator_auditReads the Content-Security-Policy header of a site's home page and lists weak points: 'unsafe-inline' and 'unsafe-eval' in script sources, bare wildcards, data: or http: script sou…Reads text others writeNo findings
Why it is in this group
- The description's first verb is "read": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "read" and "http": it reads web pages, which anyone can write.
Description, as the server wrote it
Reads the Content-Security-Policy header of a site's home page and lists weak points: 'unsafe-inline' and 'unsafe-eval' in script sources, bare wildcards, data: or http: script sources, a missing default-src or script-src, and a missing policy altogether. Reports directives. Header only; a CSP in a meta tag is not read. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_cve_nvd_lookupOne CVE record from the NIST National Vulnerability Database: description, published and last-modified dates, NVD status, primary CVSS score and severity (v4.0, 3.1, 3.0 or 2.0, wh…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "security_cve_nvd_lookup" says "lookup": a word for reading.
What it can reach
- private-dataThe description's first sentence says "database": it reads databases.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One CVE record from the NIST National Vulnerability Database: description, published and last-modified dates, NVD status, primary CVSS score and severity (v4.0, 3.1, 3.0 or 2.0, whichever NVD marks primary first), CWE weakness IDs and up to 5 reference URLs. It does not say whether the CVE is being exploited (use cisa-known-exploits or epss-exploit-score for that). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_cymru_asn_lookupMaps an IPv4 address to its origin AS number, the BGP prefix that covers it, the country, the registry and the allocation date, using Team Cymru's public IP-to-ASN DNS service.Reads text others writeNo findings
Why it is in this group
- The name "security_cymru_asn_lookup" says "lookup": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Maps an IPv4 address to its origin AS number, the BGP prefix that covers it, the country, the registry and the allocation date, using Team Cymru's public IP-to-ASN DNS service. Returns no origin when Cymru has no mapping for the address. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_dkim_key_checkerReads the DKIM public key published at <selector>._domainkey.<domain>: key type, whether it is revoked (empty p=), decoded key size in bytes and a strength hint (about 1024-bit vs …Reads text others writeNo findings
Why it is in this group
- The description's first verb is "read": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Reads the DKIM public key published at <selector>._domainkey.<domain>: key type, whether it is revoked (empty p=), decoded key size in bytes and a strength hint (about 1024-bit vs 2048-bit RSA), and basic syntax (v=DKIM1). Follows one CNAME, which large providers use. Does not check a signed message. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_dns_caa_recordsLists the CAA (Certification Authority Authorization) records published on a domain: which CAs may issue certificates (issue), wildcard certificates (issuewild) and the incident-re…Reads text others writeNo findings
Why it is in this group
- The description's first verb is "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "issue": it reads issues, which other people can write.
Description, as the server wrote it
Lists the CAA (Certification Authority Authorization) records published on a domain: which CAs may issue certificates (issue), wildcard certificates (issuewild) and the incident-report address (iodef). Shows the records on the exact name only; CAA is inherited from parent domains when a name has none, which this tool does not walk. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_hibp_breach_checkLists the data breaches HaveIBeenPwned has recorded for a domain (breach name, breach date, accounts affected, data types exposed, verified flag).Reads text others writeNo findings
Why it is in this group
- The description's first verb is "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Lists the data breaches HaveIBeenPwned has recorded for a domain (breach name, breach date, accounts affected, data types exposed, verified flag). It is the public breach catalogue, not a check of individual email addresses (that needs a paid key and is not offered here). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_referrer_policy_auditReads a site's Referrer-Policy header and its <meta name=referrer> tag from the home page, works out the policy a browser would apply, and rates how much of the URL it sends to oth…Reads text others writeNo findings
Why it is in this group
- The description's first verb is "read": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "read" and "browser": it reads web pages, which anyone can write.
Description, as the server wrote it
Reads a site's Referrer-Policy header and its <meta name=referrer> tag from the home page, works out the policy a browser would apply, and rates how much of the URL it sends to other sites (strict, moderate or leaky). One GET; links on other pages can set their own policy. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_robots_security_txtReads a site's public robots.txt (crawl rules, sitemaps, AI-crawler rules) and security.txt (RFC 9116: contact, expiry, policy), and says whether security.txt is present, current o…Reads private dataReads text others writeNo findings
Why it is in this group
- The description's first verb is "read": a word for reading.
What it can reach
- private-dataThe description's first sentence says "read" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "crawl": it reads web pages, which anyone can write.
Description, as the server wrote it
Reads a site's public robots.txt (crawl rules, sitemaps, AI-crawler rules) and security.txt (RFC 9116: contact, expiry, policy), and says whether security.txt is present, current or expired. Missing files are reported as absent, not as errors. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_surbl_uri_lookupChecks a domain against SURBL's multi-list (multi.surbl.org): whether it appears in spam or phishing URI lists.Reads text others writeNo findings
Why it is in this group
- The name "security_surbl_uri_lookup" says "lookup": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe name "security_surbl_uri_lookup" says "lookup" and "uri": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "uri": it reads web pages, which anyone can write.
Description, as the server wrote it
Checks a domain against SURBL's multi-list (multi.surbl.org): whether it appears in spam or phishing URI lists. Listed domains return a 127.0.0.x code. Not listed means not in SURBL's current lists, not that the domain is safe. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
security_threatfox_iocsSearches abuse.ch ThreatFox for indicators of compromise matching a term (IP, IP:port, domain, URL or file hash): IOC, type, malware family, threat type, confidence, first/last see…Reads private dataReads text others writeNo findings
Why it is in this group
- The description's first verb is "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "file": it reads files.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "search" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Searches abuse.ch ThreatFox for indicators of compromise matching a term (IP, IP:port, domain, URL or file hash): IOC, type, malware family, threat type, confidence, first/last seen, reporter, tags and Malpedia link. Optional exact match and a first-seen window in days. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

10836 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 7 outbound tools breaks every one.

Reads private data12: Reads files, mail, messages, databases, secrets, calendars or repositories.; search_drive_com_au_news
search_gdelt_news
search_german_impressum
search_shanghai_arwu_rankings
search_unpaywall
search_wechat_articles
search_wikimedia_commons_image
search_world_rugby_rankings
security_bimi_record_audit
security_cve_nvd_lookup
security_robots_security_txt
security_threatfox_iocs
Reads text others write129: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; search_al_jazeera_articles
search_ap_news_articles
search_article_extractor
search_bbc_news_articles
search_beehiiv_newsletter
search_benzinga
search_bing_search
search_bingx_markets
search_bleacher_report_articles
search_cnbc
search_cran_r_packages
search_crossref
and 117 more
Can send data out7: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; search_article_extractor
search_german_impressum
search_seo_audit_tool
search_wayback_cdx
search_website_content_crawler
security_openphish_feed
security_phishtank_check

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__sitecheck-web-intel__search_article_extractor",
      "mcp__sitecheck-web-intel__search_german_impressum",
      "mcp__sitecheck-web-intel__search_seo_audit_tool",
      "mcp__sitecheck-web-intel__search_wayback_cdx",
      "mcp__sitecheck-web-intel__search_website_content_crawler",
      "mcp__sitecheck-web-intel__security_openphish_feed",
      "mcp__sitecheck-web-intel__security_phishtank_check"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

3 warn1 info

Warnsecurity_open_port_scanner
The server marks "security_open_port_scanner" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "security_open_port_scanner" says "open": a word for a change.
What this check looks for
Warnsecurity_open_resolver_check
The server marks "security_open_resolver_check" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "security_open_resolver_check" says "open": a word for a change.
What this check looks for
Warnsearch_beehiiv_newsletter
The server marks "search_beehiiv_newsletter" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "search_beehiiv_newsletter" says "search": a word for reading.
What this check looks for
Infosecurity_cors_misconfig
The description mentions "credentials".
Matched text
description: "...back, sends a wildcard (*), and whether credentials are allowed with it. Echoing an arbitra..."
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http sitecheck-web-intel https://api.webintel-api.workers.dev/mcp?ref=registry

claude mcp add --transport http sitecheck-web-intel https://api.webintel-api.workers.dev/mcp?ref=registry

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__sitecheck-web-intel__security_cve_nvd_lookup",
      "mcp__sitecheck-web-intel__security_hibp_breach_check",
      "mcp__sitecheck-web-intel__security_cookie_security",
      "mcp__sitecheck-web-intel__security_robots_security_txt",
      "mcp__sitecheck-web-intel__security_surbl_uri_lookup",
      "mcp__sitecheck-web-intel__security_threatfox_iocs",
      "mcp__sitecheck-web-intel__security_cymru_asn_lookup",
      "mcp__sitecheck-web-intel__security_dkim_key_checker",
      "mcp__sitecheck-web-intel__security_bimi_record_audit",
      "mcp__sitecheck-web-intel__security_dns_caa_records",
      "mcp__sitecheck-web-intel__security_csp_evaluator_audit",
      "mcp__sitecheck-web-intel__security_referrer_policy_audit",
      "mcp__sitecheck-web-intel__security_crossdomain_xml_test",
      "mcp__sitecheck-web-intel__search_google_search",
      "mcp__sitecheck-web-intel__search_google_ads",
      "mcp__sitecheck-web-intel__search_wsj_articles",
      "mcp__sitecheck-web-intel__search_bing_search",
      "mcp__sitecheck-web-intel__search_google_news",
      "mcp__sitecheck-web-intel__search_pr_newswire",
      "mcp__sitecheck-web-intel__search_benzinga",
      "mcp__sitecheck-web-intel__search_markdown_to_pdf_mcp",
      "mcp__sitecheck-web-intel__search_unpaywall",
      "mcp__sitecheck-web-intel__search_reuters_articles",
      "mcp__sitecheck-web-intel__search_fifa_team_rankings",
      "mcp__sitecheck-web-intel__search_university_rankings_mega_pack",
      "mcp__sitecheck-web-intel__search_freightwaves",
      "mcp__sitecheck-web-intel__search_crossref",
      "mcp__sitecheck-web-intel__search_bbc_news_articles",
      "mcp__sitecheck-web-intel__search_owgr_golf_rankings",
      "mcp__sitecheck-web-intel__search_techcrunch_articles",
      "mcp__sitecheck-web-intel__search_prnewswire_press_releases",
      "mcp__sitecheck-web-intel__search_emedicine_articles",
      "mcp__sitecheck-web-intel__search_openprescribing",
      "mcp__sitecheck-web-intel__search_ft_com_articles",
      "mcp__sitecheck-web-intel__search_wechat_articles",
      "mcp__sitecheck-web-intel__search_hacker_news",
      "mcp__sitecheck-web-intel__search_drive_com_au_news",
      "mcp__sitecheck-web-intel__search_gtex_gene_expression",
      "mcp__sitecheck-web-intel__search_cnbc",
      "mcp__sitecheck-web-intel__search_dappradar_rankings",
      "mcp__sitecheck-web-intel__search_datacite_metadata",
      "mcp__sitecheck-web-intel__search_al_jazeera_articles",
      "mcp__sitecheck-web-intel__search_defector_articles",
      "mcp__sitecheck-web-intel__search_doj_press_releases",
      "mcp__sitecheck-web-intel__search_nyt_articles",
      "mcp__sitecheck-web-intel__search_ap_news_articles",
      "mcp__sitecheck-web-intel__search_usda_market_news",
      "mcp__sitecheck-web-intel__search_dev_to_articles",
      "mcp__sitecheck-web-intel__search_europe_pmc_articles",
      "mcp__sitecheck-web-intel__search_gcaptain_maritime_news",
      "mcp__sitecheck-web-intel__search_figshare_articles",
      "mcp__sitecheck-web-intel__search_pubmed_article_metadata",
      "mcp__sitecheck-web-intel__search_wordpress_articles",
      "mcp__sitecheck-web-intel__search_crossref_academic_paper",
      "mcp__sitecheck-web-intel__search_bingx_markets",
      "mcp__sitecheck-web-intel__search_gdelt_news",
      "mcp__sitecheck-web-intel__search_theintercept_articles",
      "mcp__sitecheck-web-intel__search_shanghai_arwu_rankings",
      "mcp__sitecheck-web-intel__search_press_release_multi_wire",
      "mcp__sitecheck-web-intel__search_news_across_the_web",
      "mcp__sitecheck-web-intel__search_semafor_articles",
      "mcp__sitecheck-web-intel__search_world_rugby_rankings",
      "mcp__sitecheck-web-intel__search_hackernews_items",
      "mcp__sitecheck-web-intel__search_bleacher_report_articles",
      "mcp__sitecheck-web-intel__search_leiden_ranking",
      "mcp__sitecheck-web-intel__search_shanghai_gras_rankings",
      "mcp__sitecheck-web-intel__search_cran_r_packages",
      "mcp__sitecheck-web-intel__search_wikimedia_commons_image",
      "mcp__sitecheck-web-intel__search_shopify_metadata",
      "mcp__sitecheck-web-intel__search_mangadex_manga"
    ],
    "ask": [
      "mcp__sitecheck-web-intel__security_dns_records",
      "mcp__sitecheck-web-intel__security_whois_rdap",
      "mcp__sitecheck-web-intel__security_ssl_cert_chain",
      "mcp__sitecheck-web-intel__security_crtsh_transparency",
      "mcp__sitecheck-web-intel__security_ip_geolocation_asn",
      "mcp__sitecheck-web-intel__security_security_headers",
      "mcp__sitecheck-web-intel__security_dmarc_spf_dkim",
      "mcp__sitecheck-web-intel__security_urlhaus_malware",
      "mcp__sitecheck-web-intel__security_phishtank_check",
      "mcp__sitecheck-web-intel__security_tor_exit_nodes",
      "mcp__sitecheck-web-intel__security_vpn_proxy_detector",
      "mcp__sitecheck-web-intel__security_shodan_host_summary",
      "mcp__sitecheck-web-intel__security_censys_exposure",
      "mcp__sitecheck-web-intel__security_abuseipdb_check",
      "mcp__sitecheck-web-intel__security_grey_noise_noise",
      "mcp__sitecheck-web-intel__security_cisa_known_exploits",
      "mcp__sitecheck-web-intel__security_open_port_scanner",
      "mcp__sitecheck-web-intel__security_dns_propagation",
      "mcp__sitecheck-web-intel__security_reverse_dns_ptr",
      "mcp__sitecheck-web-intel__security_bgp_prefix_origin",
      "mcp__sitecheck-web-intel__security_dnssec_validator",
      "mcp__sitecheck-web-intel__security_cors_misconfig",
      "mcp__sitecheck-web-intel__security_subdomain_takeover",
      "mcp__sitecheck-web-intel__security_email_disposable",
      "mcp__sitecheck-web-intel__security_domain_typosquatting",
      "mcp__sitecheck-web-intel__security_asn_peers_upstream",
      "mcp__sitecheck-web-intel__security_tls_cipher_enum",
      "mcp__sitecheck-web-intel__security_open_resolver_check",
      "mcp__sitecheck-web-intel__security_ntp_monlist_audit",
      "mcp__sitecheck-web-intel__security_snmp_exposure",
      "mcp__sitecheck-web-intel__security_ssh_banner_audit",
      "mcp__sitecheck-web-intel__security_smb_exposure_test",
      "mcp__sitecheck-web-intel__security_rdp_exposure_check",
      "mcp__sitecheck-web-intel__security_spameatingmonkey",
      "mcp__sitecheck-web-intel__security_barracuda_reputation",
      "mcp__sitecheck-web-intel__security_spamhaus_zen",
      "mcp__sitecheck-web-intel__security_openphish_feed",
      "mcp__sitecheck-web-intel__security_malbazaar_samples",
      "mcp__sitecheck-web-intel__security_feodotracker_c2",
      "mcp__sitecheck-web-intel__security_sslbl_abuse_certs",
      "mcp__sitecheck-web-intel__security_ipsum_threat_level",
      "mcp__sitecheck-web-intel__security_blocklist_de",
      "mcp__sitecheck-web-intel__security_ciarmy_bad_ips",
      "mcp__sitecheck-web-intel__security_talos_ip_blacklist",
      "mcp__sitecheck-web-intel__security_mx_server_test",
      "mcp__sitecheck-web-intel__security_mta_sts_validator",
      "mcp__sitecheck-web-intel__security_tls_alpn_detector",
      "mcp__sitecheck-web-intel__security_cert_revocation_crl",
      "mcp__sitecheck-web-intel__security_mitre_attck_matrix",
      "mcp__sitecheck-web-intel__security_epss_exploit_score",
      "mcp__sitecheck-web-intel__security_cve_details_feed",
      "mcp__sitecheck-web-intel__security_jwt_token_inspector",
      "mcp__sitecheck-web-intel__search_website_content_crawler",
      "mcp__sitecheck-web-intel__search_wayback_cdx",
      "mcp__sitecheck-web-intel__search_beehiiv_newsletter",
      "mcp__sitecheck-web-intel__search_article_extractor",
      "mcp__sitecheck-web-intel__search_german_impressum",
      "mcp__sitecheck-web-intel__seo_linkedin_ad_library",
      "mcp__sitecheck-web-intel__search_seo_audit_tool"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as sitecheck-web-intel. Review it before you use it.

Capability tags behind 129 rules

mcp__sitecheck-web-intel__security_dns_records untrusted-input
mcp__sitecheck-web-intel__security_whois_rdap untrusted-input
mcp__sitecheck-web-intel__security_ssl_cert_chain untrusted-input
mcp__sitecheck-web-intel__security_crtsh_transparency untrusted-input
mcp__sitecheck-web-intel__security_ip_geolocation_asn untrusted-input
mcp__sitecheck-web-intel__security_security_headers untrusted-input
mcp__sitecheck-web-intel__security_dmarc_spf_dkim untrusted-input
mcp__sitecheck-web-intel__security_urlhaus_malware untrusted-input
mcp__sitecheck-web-intel__security_phishtank_check untrusted-input, outbound
mcp__sitecheck-web-intel__security_cve_nvd_lookup private-data, untrusted-input
mcp__sitecheck-web-intel__security_tor_exit_nodes untrusted-input
mcp__sitecheck-web-intel__security_vpn_proxy_detector untrusted-input
mcp__sitecheck-web-intel__security_shodan_host_summary untrusted-input
mcp__sitecheck-web-intel__security_censys_exposure untrusted-input
mcp__sitecheck-web-intel__security_abuseipdb_check untrusted-input
mcp__sitecheck-web-intel__security_grey_noise_noise untrusted-input
mcp__sitecheck-web-intel__security_hibp_breach_check untrusted-input
mcp__sitecheck-web-intel__security_cisa_known_exploits untrusted-input
mcp__sitecheck-web-intel__security_open_port_scanner untrusted-input
mcp__sitecheck-web-intel__security_dns_propagation untrusted-input
mcp__sitecheck-web-intel__security_reverse_dns_ptr untrusted-input
mcp__sitecheck-web-intel__security_bgp_prefix_origin untrusted-input
mcp__sitecheck-web-intel__security_dnssec_validator untrusted-input
mcp__sitecheck-web-intel__security_cors_misconfig untrusted-input
mcp__sitecheck-web-intel__security_cookie_security untrusted-input
mcp__sitecheck-web-intel__security_subdomain_takeover untrusted-input
mcp__sitecheck-web-intel__security_robots_security_txt private-data, untrusted-input
mcp__sitecheck-web-intel__security_email_disposable untrusted-input
mcp__sitecheck-web-intel__security_domain_typosquatting untrusted-input
mcp__sitecheck-web-intel__security_asn_peers_upstream untrusted-input
mcp__sitecheck-web-intel__security_tls_cipher_enum untrusted-input
mcp__sitecheck-web-intel__security_open_resolver_check untrusted-input
mcp__sitecheck-web-intel__security_ntp_monlist_audit untrusted-input
mcp__sitecheck-web-intel__security_snmp_exposure untrusted-input
mcp__sitecheck-web-intel__security_ssh_banner_audit untrusted-input
mcp__sitecheck-web-intel__security_smb_exposure_test untrusted-input
mcp__sitecheck-web-intel__security_rdp_exposure_check untrusted-input
mcp__sitecheck-web-intel__security_spameatingmonkey untrusted-input
mcp__sitecheck-web-intel__security_barracuda_reputation untrusted-input
mcp__sitecheck-web-intel__security_spamhaus_zen untrusted-input
mcp__sitecheck-web-intel__security_surbl_uri_lookup untrusted-input
mcp__sitecheck-web-intel__security_openphish_feed untrusted-input, outbound
mcp__sitecheck-web-intel__security_threatfox_iocs private-data, untrusted-input
mcp__sitecheck-web-intel__security_malbazaar_samples untrusted-input
mcp__sitecheck-web-intel__security_feodotracker_c2 untrusted-input
mcp__sitecheck-web-intel__security_sslbl_abuse_certs untrusted-input
mcp__sitecheck-web-intel__security_ipsum_threat_level untrusted-input
mcp__sitecheck-web-intel__security_cymru_asn_lookup untrusted-input
mcp__sitecheck-web-intel__security_blocklist_de untrusted-input
mcp__sitecheck-web-intel__security_ciarmy_bad_ips untrusted-input
mcp__sitecheck-web-intel__security_talos_ip_blacklist untrusted-input
mcp__sitecheck-web-intel__security_mx_server_test untrusted-input
mcp__sitecheck-web-intel__security_dkim_key_checker untrusted-input
mcp__sitecheck-web-intel__security_bimi_record_audit private-data, untrusted-input
mcp__sitecheck-web-intel__security_mta_sts_validator untrusted-input
mcp__sitecheck-web-intel__security_dns_caa_records untrusted-input
mcp__sitecheck-web-intel__security_tls_alpn_detector untrusted-input
mcp__sitecheck-web-intel__security_cert_revocation_crl untrusted-input
mcp__sitecheck-web-intel__security_mitre_attck_matrix untrusted-input
mcp__sitecheck-web-intel__security_epss_exploit_score untrusted-input
mcp__sitecheck-web-intel__security_cve_details_feed untrusted-input
mcp__sitecheck-web-intel__security_jwt_token_inspector untrusted-input
mcp__sitecheck-web-intel__security_csp_evaluator_audit untrusted-input
mcp__sitecheck-web-intel__security_referrer_policy_audit untrusted-input
mcp__sitecheck-web-intel__security_crossdomain_xml_test untrusted-input
mcp__sitecheck-web-intel__search_website_content_crawler untrusted-input, outbound
mcp__sitecheck-web-intel__search_wayback_cdx untrusted-input, outbound
mcp__sitecheck-web-intel__search_google_search untrusted-input
mcp__sitecheck-web-intel__search_google_ads untrusted-input
mcp__sitecheck-web-intel__search_wsj_articles untrusted-input
mcp__sitecheck-web-intel__search_bing_search untrusted-input
mcp__sitecheck-web-intel__search_google_news untrusted-input
mcp__sitecheck-web-intel__search_pr_newswire untrusted-input
mcp__sitecheck-web-intel__search_beehiiv_newsletter untrusted-input
mcp__sitecheck-web-intel__search_benzinga untrusted-input
mcp__sitecheck-web-intel__search_markdown_to_pdf_mcp untrusted-input
mcp__sitecheck-web-intel__search_unpaywall private-data, untrusted-input
mcp__sitecheck-web-intel__search_reuters_articles untrusted-input
mcp__sitecheck-web-intel__search_fifa_team_rankings untrusted-input
mcp__sitecheck-web-intel__search_university_rankings_mega_pack untrusted-input
mcp__sitecheck-web-intel__search_freightwaves untrusted-input
mcp__sitecheck-web-intel__search_crossref untrusted-input
mcp__sitecheck-web-intel__search_bbc_news_articles untrusted-input
mcp__sitecheck-web-intel__search_article_extractor untrusted-input, outbound
mcp__sitecheck-web-intel__search_owgr_golf_rankings untrusted-input
mcp__sitecheck-web-intel__search_techcrunch_articles untrusted-input
mcp__sitecheck-web-intel__search_prnewswire_press_releases untrusted-input
mcp__sitecheck-web-intel__search_emedicine_articles untrusted-input
mcp__sitecheck-web-intel__search_openprescribing untrusted-input
mcp__sitecheck-web-intel__search_ft_com_articles untrusted-input
mcp__sitecheck-web-intel__search_wechat_articles private-data, untrusted-input
mcp__sitecheck-web-intel__search_hacker_news untrusted-input
mcp__sitecheck-web-intel__search_drive_com_au_news private-data, untrusted-input
mcp__sitecheck-web-intel__search_gtex_gene_expression untrusted-input
mcp__sitecheck-web-intel__search_cnbc untrusted-input
mcp__sitecheck-web-intel__search_dappradar_rankings untrusted-input
mcp__sitecheck-web-intel__search_german_impressum private-data, untrusted-input, outbound
mcp__sitecheck-web-intel__search_datacite_metadata untrusted-input
mcp__sitecheck-web-intel__search_al_jazeera_articles untrusted-input
mcp__sitecheck-web-intel__search_defector_articles untrusted-input
mcp__sitecheck-web-intel__search_doj_press_releases untrusted-input
mcp__sitecheck-web-intel__search_nyt_articles untrusted-input
mcp__sitecheck-web-intel__search_ap_news_articles untrusted-input
mcp__sitecheck-web-intel__search_usda_market_news untrusted-input
mcp__sitecheck-web-intel__search_dev_to_articles untrusted-input
mcp__sitecheck-web-intel__search_europe_pmc_articles untrusted-input
mcp__sitecheck-web-intel__search_gcaptain_maritime_news untrusted-input
mcp__sitecheck-web-intel__search_figshare_articles untrusted-input
mcp__sitecheck-web-intel__search_pubmed_article_metadata untrusted-input
mcp__sitecheck-web-intel__search_wordpress_articles untrusted-input
mcp__sitecheck-web-intel__search_crossref_academic_paper untrusted-input
mcp__sitecheck-web-intel__search_bingx_markets untrusted-input
mcp__sitecheck-web-intel__search_gdelt_news private-data, untrusted-input
mcp__sitecheck-web-intel__search_theintercept_articles untrusted-input
mcp__sitecheck-web-intel__search_shanghai_arwu_rankings private-data, untrusted-input
mcp__sitecheck-web-intel__search_press_release_multi_wire untrusted-input
mcp__sitecheck-web-intel__search_news_across_the_web untrusted-input
mcp__sitecheck-web-intel__search_semafor_articles untrusted-input
mcp__sitecheck-web-intel__search_world_rugby_rankings private-data, untrusted-input
mcp__sitecheck-web-intel__search_hackernews_items untrusted-input
mcp__sitecheck-web-intel__search_bleacher_report_articles untrusted-input
mcp__sitecheck-web-intel__search_leiden_ranking untrusted-input
mcp__sitecheck-web-intel__search_shanghai_gras_rankings untrusted-input
mcp__sitecheck-web-intel__search_cran_r_packages untrusted-input
mcp__sitecheck-web-intel__seo_linkedin_ad_library untrusted-input
mcp__sitecheck-web-intel__search_wikimedia_commons_image private-data, untrusted-input
mcp__sitecheck-web-intel__search_seo_audit_tool untrusted-input, outbound
mcp__sitecheck-web-intel__search_shopify_metadata untrusted-input
mcp__sitecheck-web-intel__search_mangadex_manga untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.bck-stack/sitecheck-web-intel/verify?hash=7d01067f59360ae06a0e58084ae0d5fed1feab9773c75c310c3691b3f9002bcf" | jq -e '.changed == false'

Pinned hash 7d01067f5936, from Oct 23, 2026, 18:19 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.bck-stack/sitecheck-web-intel/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.bck-stack/sitecheck-web-intel.svg)](https://anlyon.dev/servers/io.github.bck-stack/sitecheck-web-intel)

Source: MCP Registry. Synced Oct 23, 2026, 18:18 UTC.