Skip to content

io.github.ciinkwia/agent-tool-finder

by ciinkwia · remote · no sign-in to list tools · v1.0.0 · published by GitHub user ciinkwia

Free search across ~35,000 agent tools (x402 bazaar + MCP registry) by plain-language need.

Final · 1Changes · 12

17 tools: 1 do something that can't be undone, 12 change things and 4 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agent-tool-finder https://clink-lithium-vault.fly.dev/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

17 tools

Can't be undone 1Claude Code: ask
  • send_feedbackReport a bug, missing feature, wrong data, or a slow call on clink's shop — for a call you already made, not a new capability request (use request_agent_tool for that).Can send data outNo findings

    Why it is in this group

    • The name "send_feedback" says "send": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • outboundThe name "send_feedback" says "send": it sends or publishes something to other people.
    Description, as the server wrote it
    Report a bug, missing feature, wrong data, or a slow call on clink's shop — for a call you already made, not a new capability request (use request_agent_tool for that). Read the same day; if it's a real bug it gets fixed and you're told. Free.
Changes things 12Claude Code: ask
  • credits_balanceCheck the shop-credits balance for the key on this connection (Authorization: Bearer ck_live_… or X-Clink-Key).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check the shop-credits balance for the key on this connection (Authorization: Bearer ck_live_… or X-Clink-Key). Free.
  • pdf_textConvert a public PDF to plain text — full extracted text in one call, up to 25MB / 500k chars, with page count and a likely_scanned flag (text-based PDFs only, no OCR).Can send data outNo findings

    Why it is in this group

    • The description's first verb is "convert": a word for a change.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Convert a public PDF to plain text — full extracted text in one call, up to 25MB / 500k chars, with page count and a likely_scanned flag (text-based PDFs only, no OCR). Costs $0.01 per call, paid from clink's shop credits (an existing key; new top-ups are paused). A failed or empty call is free.
  • request_agent_toolAsk clink's shop to BUILD a tool or data source that nobody sells yet.No findings

    Why it is in this group

    • The name "request_agent_tool" says "request": a word for a change.
    Description, as the server wrote it
    Ask clink's shop to BUILD a tool or data source that nobody sells yet. Use this right after find_agent_tools comes back unsatisfied. clink reads every request the same day; buildable asks ship as pay-per-call x402 endpoints, usually within a week. Returns a request id and a status URL; pass `notify` (email or https webhook) to be told the moment it ships.
  • sec_insiderSEC Form 4 insider trading for one US stock ticker — every insider buy/sell/grant/gift in the window (name, role, date, code, shares, price, shares owned after, filing URL) plus op…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    SEC Form 4 insider trading for one US stock ticker — every insider buy/sell/grant/gift in the window (name, role, date, code, shares, price, shares owned after, filing URL) plus open-market buy vs sell totals. Source: SEC EDGAR. Facts only — this is not investment advice, a price target, or a buy/sell/hold signal. Costs $0.01 per call, paid from clink's shop credits (an existing key; new top-ups are paused). A failed or empty call is free.
  • ticker_briefOne-call US stock ticker brief — X/Twitter activity (24h), SEC Form 4 insider activity (90d), and the latest 8-K, bundled.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    One-call US stock ticker brief — X/Twitter activity (24h), SEC Form 4 insider activity (90d), and the latest 8-K, bundled. Each section fails independently. Facts only — this is not investment advice, a price target, or a buy/sell/hold signal. Costs $0.04 per call, paid from clink's shop credits (an existing key; new top-ups are paused). A failed or empty call is free.
  • token_verdictBase token facts — send a contract address, get name/symbol/decimals/supply read straight from the chain, the X/Twitter post counts that mention it, and an explicit list of what wa…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Base token facts — send a contract address, get name/symbol/decimals/supply read straight from the chain, the X/Twitter post counts that mention it, and an explicit list of what was NOT checked. Facts only: no score, no rating, no verdict. Facts only — this is not investment advice, a price target, or a buy/sell/hold signal. 404/free if the address isn't found; 503/free if the chain read is down. Costs $0.01 per call, paid from clink's shop credits (an existing key; new top-ups are paused). A failed or empty call is free.
  • translate_textTranslate text — up to 2,000 chars, any language pair, source auto-detected when omitted.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Translate text — up to 2,000 chars, any language pair, source auto-detected when omitted. Returns clean JSON: detected source language + full translation. Costs $0.01 per call, paid from clink's shop credits (an existing key; new top-ups are paused). A failed or empty call is free.
  • x_digestX/Twitter trend digest — live tweet search PLUS an AI-written summary: sentiment, key themes, driving accounts, notable posts.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    X/Twitter trend digest — live tweet search PLUS an AI-written summary: sentiment, key themes, driving accounts, notable posts. Same query syntax as x_search. Costs $0.05 per call, paid from clink's shop credits (an existing key; new top-ups are paused). A failed or empty call is free.
  • x_leads_deepX/Twitter deep lead finder — one call does the whole search -> profile -> contact chain: searches up to 4 pages, finds the PEOPLE behind the posts, enriches the top 10-15 with thei…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    X/Twitter deep lead finder — one call does the whole search -> profile -> contact chain: searches up to 4 pages, finds the PEOPLE behind the posts, enriches the top 10-15 with their own website (emails, LinkedIn, GitHub) and clusters them with a one-line why-they-match each. Recruiting, B2B prospecting, cofounder/investor search. Costs $0.20 per call, paid from clink's shop credits (an existing key; new top-ups are paused). A failed or empty call is free.
  • x_personX/Twitter person lookup — enriched PERSON CARD for a lead/recruiting/sales agent: name, role, company, what they work on, topics, seniority guess, and contact routes (emails actual…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    X/Twitter person lookup — enriched PERSON CARD for a lead/recruiting/sales agent: name, role, company, what they work on, topics, seniority guess, and contact routes (emails actually found on their site/bio, LinkedIn, GitHub, X DM-open flag), plus non-LLM stats (followers, account age, posts/week). Costs $0.15 per call, paid from clink's shop credits (an existing key; new top-ups are paused). A failed or empty call is free.
  • x_profileX/Twitter profile lookup — display name, bio, follower/following counts, verified status, location, join date, profile URL for one handle.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    X/Twitter profile lookup — display name, bio, follower/following counts, verified status, location, join date, profile URL for one handle. Costs $0.02 per call, paid from clink's shop credits (an existing key; new top-ups are paused). A failed or empty call is free.
  • x_ticker_pulseX/Twitter activity for one US stock ticker — post volume vs the prior window, top posts, most active accounts, keyword topic flags (earnings, guidance, lawsuit, SEC investigation, …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    X/Twitter activity for one US stock ticker — post volume vs the prior window, top posts, most active accounts, keyword topic flags (earnings, guidance, lawsuit, SEC investigation, recall, M&A, layoffs, upgrade/downgrade, short report, dividend, buyback, CEO). Facts only — this is not investment advice, a price target, or a buy/sell/hold signal. Costs $0.02 per call, paid from clink's shop credits (an existing key; new top-ups are paused). A failed or empty call is free.
Only reads 4Claude Code: allow
  • agent_market_statsGet current size and shape of the agent tool market: how many paid x402 endpoints and MCP servers exist, how many have real paying users, and total measured spend over the last 30 …No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get current size and shape of the agent tool market: how many paid x402 endpoints and MCP servers exist, how many have real paying users, and total measured spend over the last 30 days. Useful for deciding whether a capability is well supplied before you build it yourself. Free.
  • find_agent_toolsFind an API, data source, or MCP server that can do something you cannot do on your own.No findings

    Why it is in this group

    • The name "find_agent_tools" says "find": a word for reading.
    Description, as the server wrote it
    Find an API, data source, or MCP server that can do something you cannot do on your own. Searches 35,000+ agent-callable tools: ~14,000 paid x402 endpoints and ~21,000 MCP servers, in one place. Use it whenever you need outside data or a capability you lack — web search, onchain and crypto data, company or people lookup, scraping, maps, weather, documents, financial data, travel, and more. Returns what each tool does, how to call or install it, and what it costs. Free to use.
  • x_listX/Twitter watchlist — 2-50 handles in one call, their combined recent tweets newest first, deduped, per-handle counts and a since-cursor for only-what's-new next time.Reads text others writeNo findings

    Why it is in this group

    • The name "x_list" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "tweet": it reads posts, which other people can write.
    Description, as the server wrote it
    X/Twitter watchlist — 2-50 handles in one call, their combined recent tweets newest first, deduped, per-handle counts and a since-cursor for only-what's-new next time. No from:-OR-splitting. Costs $0.05 per call, paid from clink's shop credits (an existing key; new top-ups are paused). A failed or empty call is free.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write1
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out2
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http agent-tool-finder https://clink-lithium-vault.fly.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__agent-tool-finder__find_agent_tools",
      "mcp__agent-tool-finder__agent_market_stats",
      "mcp__agent-tool-finder__x_search",
      "mcp__agent-tool-finder__x_list"
    ],
    "ask": [
      "mcp__agent-tool-finder__request_agent_tool",
      "mcp__agent-tool-finder__send_feedback",
      "mcp__agent-tool-finder__x_profile",
      "mcp__agent-tool-finder__x_digest",
      "mcp__agent-tool-finder__x_ticker_pulse",
      "mcp__agent-tool-finder__sec_insider",
      "mcp__agent-tool-finder__ticker_brief",
      "mcp__agent-tool-finder__token_verdict",
      "mcp__agent-tool-finder__x_person",
      "mcp__agent-tool-finder__x_leads_deep",
      "mcp__agent-tool-finder__pdf_text",
      "mcp__agent-tool-finder__translate_text",
      "mcp__agent-tool-finder__credits_balance"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as agent-tool-finder. Review it before you use it.

Capability tags behind 3 rules
  • mcp__agent-tool-finder__send_feedback outbound
  • mcp__agent-tool-finder__x_list untrusted-input
  • mcp__agent-tool-finder__pdf_text outbound