Skip to content

Polyform

by polyform.org · remote · no sign-in to list tools · v1.0.0 · published by org.polyform

Pay-per-call data APIs for AI agents. USDC on Base via x402. 33 tools, no signup.

Final · 1Changes · 60
CompareRegistry entry

70 tools: 1 do something that can't be undone, 60 change things and 9 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http polyform https://api.polyform.org/mcp

Findings

Matches of fixed checks, with the text they matched.

3 warn1 info
  • Warnfda_drug_label

    The server marks "fda_drug_label" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "fda_drug_label" says "label": a word for a change.

    What this check looks for
  • Warnfx_rate

    The server marks "fx_rate" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • Warnsecurity_inbound_request_screen

    The server marks "security_inbound_request_screen" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "security_inbound_request_screen" says "request": a word for a change.

    What this check looks for
  • Infothreat_scanners

    The description mentions "credential".

    Matched text

    description: "...ught probing Polyform's honeypot paths (credential/vuln scanners) — Polyform's own first-p..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

70 tools

Can't be undone 1Claude Code: ask
  • fx_rateFX exchange rate + convert — Live foreign-exchange rate (ECB reference rates via Frankfurter) from one base currency to one or more targets, with optional amount conversion.1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "fx_rate" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    FX exchange rate + convert — Live foreign-exchange rate (ECB reference rates via Frankfurter) from one base currency to one or more targets, with optional amount conversion. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: FX exchange rate + convert
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
Changes things 60Claude Code: ask
  • ai_chatInference gateway (Llama on Workers AI) — Pay-per-call LLM completion.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Inference gateway (Llama on Workers AI) — Pay-per-call LLM completion. POST {messages:[{role,content},...]} (OpenAI-style), returns {reply}. No account, no API key — one x402 payment per call. Price: $0.01 USDC (Base, via x402).

    Annotations the server declares

    • title: Inference gateway (Llama on Workers AI)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • business_onboard_decisionOnboarding decision (bundle) — One call: APPROVE/REVIEW/REJECT onboarding gate + 0-100 risk score, fusing KYB counterparty vet, OFAC/CSL sanctions screening, and adverse US regulat…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Onboarding decision (bundle) — One call: APPROVE/REVIEW/REJECT onboarding gate + 0-100 risk score, fusing KYB counterparty vet, OFAC/CSL sanctions screening, and adverse US regulatory actions. Price: $0.50 USDC (Base, via x402).

    Annotations the server declares

    • title: Onboarding decision (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • business_vetBusiness counterparty vet / KYB (bundle) — One premium call to vet a business before onboarding: OFAC/Consolidated sanctions screen of the name + domain due-diligence (registration…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Business counterparty vet / KYB (bundle) — One premium call to vet a business before onboarding: OFAC/Consolidated sanctions screen of the name + domain due-diligence (registration age, email posture, hosting-IP threat reputation) fused into an overall risk verdict with flags. Name and/or domain. JSON. Price: $0.25 USDC (Base, via x402).

    Annotations the server declares

    • title: Business counterparty vet / KYB (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • crypto_balanceWallet balance (Base) — Native ETH + USDC balance for any address on Base mainnet.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Wallet balance (Base) — Native ETH + USDC balance for any address on Base mainnet. Source: public RPC. JSON. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: Wallet balance (Base)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • crypto_fear_greedCrypto Fear & Greed Index — Current Crypto Fear & Greed Index (0=extreme fear, 100=extreme greed) with classification - a widely-used market-sentiment signal.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Crypto Fear & Greed Index — Current Crypto Fear & Greed Index (0=extreme fear, 100=extreme greed) with classification - a widely-used market-sentiment signal. Price: $0.002 USDC (Base, via x402).

    Annotations the server declares

    • title: Crypto Fear & Greed Index
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • crypto_gasEVM gas price — Current gas price for Base or Ethereum mainnet, in gwei and wei.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    EVM gas price — Current gas price for Base or Ethereum mainnet, in gwei and wei. Source: public RPC. JSON. Price: $0.002 USDC (Base, via x402).

    Annotations the server declares

    • title: EVM gas price
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • crypto_priceCrypto spot prices (USD) — Current USD spot price for one or more crypto assets by CoinGecko id (bitcoin, ethereum, solana, ...), from DefiLlama, with confidence and timestamp.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Crypto spot prices (USD) — Current USD spot price for one or more crypto assets by CoinGecko id (bitcoin, ethereum, solana, ...), from DefiLlama, with confidence and timestamp. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: Crypto spot prices (USD)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • crypto_protocolDeFi protocol brief (bundle) — One call for a DeFi protocol by slug: total value locked (USD), category, chains it runs on with per-chain TVL, audit status and a one-line descripti…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    DeFi protocol brief (bundle) — One call for a DeFi protocol by slug: total value locked (USD), category, chains it runs on with per-chain TVL, audit status and a one-line description. From DefiLlama. JSON. Price: $0.03 USDC (Base, via x402).

    Annotations the server declares

    • title: DeFi protocol brief (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • crypto_token_reportToken due-diligence (bundle) — One call to vet an ERC-20 token on Base or Ethereum: live USD price, holder count, and security signals (honeypot, mintable, open-source, buy/sell ta…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Token due-diligence (bundle) — One call to vet an ERC-20 token on Base or Ethereum: live USD price, holder count, and security signals (honeypot, mintable, open-source, buy/sell tax, owner & holder concentration) fused into a risk verdict. JSON. Price: $0.10 USDC (Base, via x402).

    Annotations the server declares

    • title: Token due-diligence (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • domainDomain intelligence (RDAP) — Registration intelligence for any domain: creation/expiry dates, age in days, registrar, statuses, nameservers.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Domain intelligence (RDAP) — Registration intelligence for any domain: creation/expiry dates, age in days, registrar, statuses, nameservers. Source: registry RDAP. JSON. Price: $0.005 USDC (Base, via x402).

    Annotations the server declares

    • title: Domain intelligence (RDAP)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • domain_brand_protectionBrand-protection typosquat scan (bundle) — One call to find look-alike / typosquat domains impersonating a brand: generates common misspellings, character swaps, homoglyphs and alt…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Brand-protection typosquat scan (bundle) — One call to find look-alike / typosquat domains impersonating a brand: generates common misspellings, character swaps, homoglyphs and alternate TLDs of your domain, checks which are actually registered/live via DNS, and flags those configured for mail (phishing-capable) — with a threat verdict. For brand & security teams. JSON. Price: $0.15 USDC (Base, via x402).

    Annotations the server declares

    • title: Brand-protection typosquat scan (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • domain_dns_hygieneDNS / email security posture (bundle) — One call: PASS / WEAK / FAIL security-posture audit for a domain — checks SPF, DMARC policy strength, MX, CAA, DNSSEC and nameserver redunda…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    DNS / email security posture (bundle) — One call: PASS / WEAK / FAIL security-posture audit for a domain — checks SPF, DMARC policy strength, MX, CAA, DNSSEC and nameserver redundancy, with a prioritized fix list. For security, deliverability and compliance automation. Price: $0.04 USDC (Base, via x402).

    Annotations the server declares

    • title: DNS / email security posture (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • domain_due_diligenceDomain due-diligence (bundle) — One call to vet a domain: registration/RDAP intel (age, registrar, status) + email deliverability (MX/SPF/DMARC) + threat reputation of the domain's…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Domain due-diligence (bundle) — One call to vet a domain: registration/RDAP intel (age, registrar, status) + email deliverability (MX/SPF/DMARC) + threat reputation of the domain's hosting IP. For counterparties, sellers, links. JSON. Price: $0.02 USDC (Base, via x402).

    Annotations the server declares

    • title: Domain due-diligence (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • econ_worldbankWorld Bank indicator lookup — Latest value of any World Bank indicator for a country (GDP, inflation, population...).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    World Bank indicator lookup — Latest value of any World Bank indicator for a country (GDP, inflation, population...). Source: World Bank API. JSON. Price: $0.005 USDC (Base, via x402).

    Annotations the server declares

    • title: World Bank indicator lookup
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • email_domain_checkEmail domain deliverability check — Can this domain receive mail, and is it configured seriously?No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Email domain deliverability check — Can this domain receive mail, and is it configured seriously? MX, SPF and DMARC via DNS-over-HTTPS with a deliverability summary. JSON. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: Email domain deliverability check
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • email_sender_trustEmail sender trust (bundle) — One call: TRUST / REVIEW / REJECT verdict + 0-100 risk for an email address or sending domain — fuses SPF/DMARC enforcement, domain age (RDAP), and th…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Email sender trust (bundle) — One call: TRUST / REVIEW / REJECT verdict + 0-100 risk for an email address or sending domain — fuses SPF/DMARC enforcement, domain age (RDAP), and the sending domain's hosting-IP threat reputation. For agents filtering inbound mail, leads and senders before acting. Price: $0.05 USDC (Base, via x402).

    Annotations the server declares

    • title: Email sender trust (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • fda_drug_labelFDA drug label lookup (openFDA) — Official FDA label data for a drug by brand or generic name: indications, warnings, dosage.1 finding

    Why it is in this group

    • The name "fda_drug_label" says "label": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "fda_drug_label" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "fda_drug_label" says "label": a word for a change.

      What this check looks for
    Description, as the server wrote it
    FDA drug label lookup (openFDA) — Official FDA label data for a drug by brand or generic name: indications, warnings, dosage. Source: openFDA. JSON. Price: $0.005 USDC (Base, via x402).

    Annotations the server declares

    • title: FDA drug label lookup (openFDA)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • fda_recallsFDA recall search (openFDA) — Search US FDA enforcement recalls for drugs, food, or devices by free-text query.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    FDA recall search (openFDA) — Search US FDA enforcement recalls for drugs, food, or devices by free-text query. Source: openFDA. JSON. Price: $0.005 USDC (Base, via x402).

    Annotations the server declares

    • title: FDA recall search (openFDA)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • finance_company_360Company 360 report (bundle) — One premium call: a public company's financial-health verdict (margins, current ratio, revenue trend), insider-trading signal (Form 4 buys/sells), SEC…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Company 360 report (bundle) — One premium call: a public company's financial-health verdict (margins, current ratio, revenue trend), insider-trading signal (Form 4 buys/sells), SEC facts and recent filings — the full equity picture. Ticker or CIK. JSON. Price: $0.20 USDC (Base, via x402).

    Annotations the server declares

    • title: Company 360 report (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • finance_diligence_briefInvestment diligence brief (bundle) — One call: CONSTRUCTIVE/NEUTRAL/CAUTION posture on a public company, fusing financial-health + insider activity (SEC EDGAR), optional peer comp…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Investment diligence brief (bundle) — One call: CONSTRUCTIVE/NEUTRAL/CAUTION posture on a public company, fusing financial-health + insider activity (SEC EDGAR), optional peer comparison, and issuer sanctions screening. Price: $0.50 USDC (Base, via x402).

    Annotations the server declares

    • title: Investment diligence brief (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • finance_health_scanCompany financial-health scan (bundle) — One call: a public company's revenue & margin trend, current ratio, profitability and recent material filings (8-K/10-K/10-Q) fused into a …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Company financial-health scan (bundle) — One call: a public company's revenue & margin trend, current ratio, profitability and recent material filings (8-K/10-K/10-Q) fused into a healthy/watch/distress verdict. Ticker or CIK. SEC EDGAR. JSON. Price: $0.05 USDC (Base, via x402).

    Annotations the server declares

    • title: Company financial-health scan (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • finance_insider_activityInsider trading activity (bundle) — One call: recent SEC Form 4 insider transactions for a public company — who bought/sold, share counts and dollar value over the last ~120 days, …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Insider trading activity (bundle) — One call: recent SEC Form 4 insider transactions for a public company — who bought/sold, share counts and dollar value over the last ~120 days, netted into a bullish/bearish/neutral insider signal. Ticker or CIK. SEC EDGAR. JSON. Price: $0.05 USDC (Base, via x402).

    Annotations the server declares

    • title: Insider trading activity (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • geo_earthquakesSeismic risk brief (bundle) — One call for a US point (address or lat+lon): recent earthquakes within a radius — count, largest magnitude, list, and a seismic-risk level.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Seismic risk brief (bundle) — One call for a US point (address or lat+lon): recent earthquakes within a radius — count, largest magnitude, list, and a seismic-risk level. For insurance, siting, diligence. USGS. JSON. Price: $0.03 USDC (Base, via x402).

    Annotations the server declares

    • title: Seismic risk brief (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • geo_geocodeUS address geocoding (Census) — US street address to coordinates plus matched/normalized address.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    US address geocoding (Census) — US street address to coordinates plus matched/normalized address. Source: US Census Bureau geocoder. JSON. Price: $0.002 USDC (Base, via x402).

    Annotations the server declares

    • title: US address geocoding (Census)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • geo_location_briefLocation brief (bundle) — One call for a US place — pass an address OR lat+lon: normalized address + county/state + current conditions + active weather alerts.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Location brief (bundle) — One call for a US place — pass an address OR lat+lon: normalized address + county/state + current conditions + active weather alerts. JSON. Price: $0.02 USDC (Base, via x402).

    Annotations the server declares

    • title: Location brief (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • geo_reverseUS reverse geocoding (Census) — Coordinates to US state, county, tract and block geography.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    US reverse geocoding (Census) — Coordinates to US state, county, tract and block geography. Source: US Census Bureau. JSON. Price: $0.002 USDC (Base, via x402).

    Annotations the server declares

    • title: US reverse geocoding (Census)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • geo_severe_weather_scanSevere weather scan (bundle) — One call: active NWS watches/warnings/advisories for a US state or point, summarized by severity with a CLEAR / MONITOR / CAUTION / AVOID operations …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Severe weather scan (bundle) — One call: active NWS watches/warnings/advisories for a US state or point, summarized by severity with a CLEAR / MONITOR / CAUTION / AVOID operations verdict and the highest active event. For logistics, field ops and travel automation. Pass state (e.g. TN) or lat+lon. Price: $0.03 USDC (Base, via x402).

    Annotations the server declares

    • title: Severe weather scan (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • health_clinical_trialsClinical trials search (bundle) — One call: recent clinical trials for a condition and/or intervention — NCT id, title, status, phase, sponsor and last-update date.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Clinical trials search (bundle) — One call: recent clinical trials for a condition and/or intervention — NCT id, title, status, phase, sponsor and last-update date. From ClinicalTrials.gov. For pharma, research, diligence. JSON. Price: $0.05 USDC (Base, via x402).

    Annotations the server declares

    • title: Clinical trials search (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • health_drug_briefDrug safety brief (bundle) — One call for a medication: RxNorm identity, FDA label safety text (boxed warning, warnings, interactions, contraindications) and the most-reported real…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Drug safety brief (bundle) — One call for a medication: RxNorm identity, FDA label safety text (boxed warning, warnings, interactions, contraindications) and the most-reported real-world adverse reactions (FDA FAERS). Reference data, not medical advice. JSON. Price: $0.05 USDC (Base, via x402).

    Annotations the server declares

    • title: Drug safety brief (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • ipIP network intelligence (RDAP) — Who operates an IP: registry, network range, organization, country.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    IP network intelligence (RDAP) — Who operates an IP: registry, network range, organization, country. Source: RIR RDAP. JSON. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: IP network intelligence (RDAP)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • ip_intelligenceIP intelligence report (bundle) — One call: ALLOW/REVIEW/BLOCK connection-risk verdict + 0-100 score for an IP — fuses RDAP ownership/registry, reverse-DNS (PTR), abuse-feed & firs…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    IP intelligence report (bundle) — One call: ALLOW/REVIEW/BLOCK connection-risk verdict + 0-100 score for an IP — fuses RDAP ownership/registry, reverse-DNS (PTR), abuse-feed & first-party honeypot threat reputation, and datacenter/residential classification. Price: $0.08 USDC (Base, via x402).

    Annotations the server declares

    • title: IP intelligence report (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • logistics_route_briefRoute & shipment brief (bundle) — One call: driving distance and time between two US points (addresses or lat,lon), an estimated fuel cost, and weather + active alerts at both ends…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Route & shipment brief (bundle) — One call: driving distance and time between two US points (addresses or lat,lon), an estimated fuel cost, and weather + active alerts at both ends, fused into a go/caution verdict. JSON. Price: $0.05 USDC (Base, via x402).

    Annotations the server declares

    • title: Route & shipment brief (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • realestate_property_reportProperty hazard report (bundle) — One premium call for a US property — address or lat+lon: FEMA flood-zone determination + USGS seismic history (1yr) + current weather and active a…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Property hazard report (bundle) — One premium call for a US property — address or lat+lon: FEMA flood-zone determination + USGS seismic history (1yr) + current weather and active alerts, fused into an overall hazard verdict with factors. For insurance, lending, siting. JSON. Price: $0.15 USDC (Base, via x402).

    Annotations the server declares

    • title: Property hazard report (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • realestate_site_riskProperty site-risk brief (bundle) — One call for a US property — pass an address OR lat+lon: FEMA flood-zone determination (SFHA yes/no), county/state, current conditions and activ…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Property site-risk brief (bundle) — One call for a US property — pass an address OR lat+lon: FEMA flood-zone determination (SFHA yes/no), county/state, current conditions and active weather alerts, fused into a site-risk verdict. For lending, insurance, diligence. JSON. Price: $0.05 USDC (Base, via x402).

    Annotations the server declares

    • title: Property site-risk brief (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • realestate_underwriteProperty underwriting (bundle) — One call: STANDARD/SURCHARGE/REFER hazard-underwriting posture for a US address, fusing FEMA flood zone, USGS seismic history, and active NWS weath…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Property underwriting (bundle) — One call: STANDARD/SURCHARGE/REFER hazard-underwriting posture for a US address, fusing FEMA flood zone, USGS seismic history, and active NWS weather alerts. Price: $0.40 USDC (Base, via x402).

    Annotations the server declares

    • title: Property underwriting (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sec_companySEC company facts (EDGAR) — Latest key financial facts for a US public company by ticker or CIK: revenue, net income, assets, EPS from XBRL filings.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    SEC company facts (EDGAR) — Latest key financial facts for a US public company by ticker or CIK: revenue, net income, assets, EPS from XBRL filings. Source: SEC EDGAR. JSON. Price: $0.01 USDC (Base, via x402).

    Annotations the server declares

    • title: SEC company facts (EDGAR)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • security_bulk_ip_screenBulk IP screen (bundle) — One call: screen up to 10 IPs at once for reputation/risk, each with ALLOW / REVIEW / BLOCK + score, plus an overall summary (counts and worst verdict).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Bulk IP screen (bundle) — One call: screen up to 10 IPs at once for reputation/risk, each with ALLOW / REVIEW / BLOCK + score, plus an overall summary (counts and worst verdict). For firewall rules, log triage and connection batches. Price: $0.08 USDC (Base, via x402).

    Annotations the server declares

    • title: Bulk IP screen (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • security_domain_threat_reportDomain threat report (bundle) — One call: HEALTHY / NEEDS ATTENTION / HIGH RISK security posture for a domain — fuses DNS & email hardening (SPF, DMARC strength, DNSSEC, CAA, names…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Domain threat report (bundle) — One call: HEALTHY / NEEDS ATTENTION / HIGH RISK security posture for a domain — fuses DNS & email hardening (SPF, DMARC strength, DNSSEC, CAA, nameservers) with sender authentication, domain age and hosting-IP reputation, into one grade plus a consolidated findings & fix list. For security, diligence and vendor review. Price: $0.10 USDC (Base, via x402).

    Annotations the server declares

    • title: Domain threat report (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • security_inbound_request_screenInbound request screen (bundle) — One call: ALLOW / CHALLENGE / BLOCK verdict for an inbound HTTP request — fuses source-IP reputation, referer/link safety, and a user-agent bot/sc…1 finding

    Why it is in this group

    • The name "security_inbound_request_screen" says "request": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "security_inbound_request_screen" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "security_inbound_request_screen" says "request": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Inbound request screen (bundle) — One call: ALLOW / CHALLENGE / BLOCK verdict for an inbound HTTP request — fuses source-IP reputation, referer/link safety, and a user-agent bot/scanner heuristic. For WAF, gateway and bot-defense automation. Price: $0.05 USDC (Base, via x402).

    Annotations the server declares

    • title: Inbound request screen (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • security_phishing_triagePhishing triage (bundle) — One call: SAFE / SUSPICIOUS / PHISHING verdict + 0-100 risk for an inbound message — fuses sender-domain authentication (SPF/DMARC + age + hosting), dest…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Phishing triage (bundle) — One call: SAFE / SUSPICIOUS / PHISHING verdict + 0-100 risk for an inbound message — fuses sender-domain authentication (SPF/DMARC + age + hosting), destination-link safety (redirects, domain age, hosting reputation), and optional source-IP reputation. For agents screening inbound email, DMs and leads before acting on them. Price: $0.10 USDC (Base, via x402).

    Annotations the server declares

    • title: Phishing triage (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • threat_ipIP threat / abuse reputation — Is this IP hostile?No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    IP threat / abuse reputation — Is this IP hostile? Reputation verdict for an IPv4 from public abuse feeds (blocklist.de, Spamhaus DROP) plus Polyform's own observed scanner traffic. Returns malicious flag, 0-100 score, and which sources flagged it. For bot filtering, fraud and firewall automation. JSON. Price: $0.002 USDC (Base, via x402).

    Annotations the server declares

    • title: IP threat / abuse reputation
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • threat_scannersPolyform observed-scanner feed — Recent IPs caught probing Polyform's honeypot paths (credential/vuln scanners) — Polyform's own first-party telemetry, not a repackaged public list…1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...ught probing Polyform's honeypot paths (credential/vuln scanners) — Polyform's own first-p..."

      What this check looks for
    Description, as the server wrote it
    Polyform observed-scanner feed — Recent IPs caught probing Polyform's honeypot paths (credential/vuln scanners) — Polyform's own first-party telemetry, not a repackaged public list. Returns up to 500 most-recent scanner IPs with first-seen. For blocklists and threat research. JSON. Price: $0.01 USDC (Base, via x402).

    Annotations the server declares

    • title: Polyform observed-scanner feed
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • time_business_daysUS business-days calculator — Business days between two dates (exclusive of end), skipping weekends and US federal holidays; also returns the holiday list in range.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    US business-days calculator — Business days between two dates (exclusive of end), skipping weekends and US federal holidays; also returns the holiday list in range. Pure computation. JSON. Price: $0.001 USDC (Base, via x402).

    Annotations the server declares

    • title: US business-days calculator
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • trade_party_screenTrade-compliance party screen (bundle) — One premium call for import/export compliance: screens a counterparty name against the US Consolidated Screening List (OFAC + BIS + State) …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Trade-compliance party screen (bundle) — One premium call for import/export compliance: screens a counterparty name against the US Consolidated Screening List (OFAC + BIS + State) AND pulls recent US Federal Register actions on the commodity/topic (export controls, tariffs, rules), fused into a clear/review/hold trade verdict with flags. JSON. Price: $0.20 USDC (Base, via x402).

    Annotations the server declares

    • title: Trade-compliance party screen (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • trade_shipment_clearanceShipment clearance (bundle) — One call: CLEAR/REVIEW/HOLD export/import pre-screen — screens the counterparty (US CSL), checks the destination against US embargo lists, and flags e…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Shipment clearance (bundle) — One call: CLEAR/REVIEW/HOLD export/import pre-screen — screens the counterparty (US CSL), checks the destination against US embargo lists, and flags export-controlled commodities. Price: $0.45 USDC (Base, via x402).

    Annotations the server declares

    • title: Shipment clearance (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • url_checkURL status & redirect check — HTTP status, final URL after redirects, content-type and key response headers for a URL — without downloading the body.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    URL status & redirect check — HTTP status, final URL after redirects, content-type and key response headers for a URL — without downloading the body. For link vetting and uptime checks. JSON. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: URL status & redirect check
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • url_safetyURL / link safety check (bundle) — One call: SAFE/CAUTION/DANGER verdict for a URL — checks reachability & redirects, destination domain age, and hosting-IP reputation before an ag…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    URL / link safety check (bundle) — One call: SAFE/CAUTION/DANGER verdict for a URL — checks reachability & redirects, destination domain age, and hosting-IP reputation before an agent follows the link. Price: $0.05 USDC (Base, via x402).

    Annotations the server declares

    • title: URL / link safety check (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • vehicle_deal_checkUsed-car deal check verdict — Given vin, asking price and miles: decoded specs, open recall count, fuel-cost estimate, and a buy/caution/walk verdict with reasoning.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Used-car deal check verdict — Given vin, asking price and miles: decoded specs, open recall count, fuel-cost estimate, and a buy/caution/walk verdict with reasoning. All public federal data. Price: $0.25 USDC (Base, via x402).

    Annotations the server declares

    • title: Used-car deal check verdict
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • vehicle_fuel_economyFuel economy lookup (EPA) — EPA MPG figures and estimated annual fuel cost for a year/make/model.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Fuel economy lookup (EPA) — EPA MPG figures and estimated annual fuel cost for a year/make/model. Source: fueleconomy.gov. JSON. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: Fuel economy lookup (EPA)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • vehicle_reportVehicle full report (bundle) — One call: decoded VIN specs + all open safety recalls + EPA fuel economy & annual cost + a buy/caution/walk verdict with reasoning.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Vehicle full report (bundle) — One call: decoded VIN specs + all open safety recalls + EPA fuel economy & annual cost + a buy/caution/walk verdict with reasoning. Fuses multiple NHTSA & EPA sources. JSON. Price: $0.25 USDC (Base, via x402).

    Annotations the server declares

    • title: Vehicle full report (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • vehicle_vinVIN decode + open recalls (NHTSA) — Decode any US-market VIN to full vehicle specs and list open safety recalls.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    VIN decode + open recalls (NHTSA) — Decode any US-market VIN to full vehicle specs and list open safety recalls. Source: US NHTSA (federal, authoritative). JSON. Price: $0.005 USDC (Base, via x402).

    Annotations the server declares

    • title: VIN decode + open recalls (NHTSA)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • weather_alertsActive US weather alerts (NWS) — Active watches/warnings/advisories for a US state or coordinate: event type, severity, headline, timing.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Active US weather alerts (NWS) — Active watches/warnings/advisories for a US state or coordinate: event type, severity, headline, timing. Source: National Weather Service. JSON. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: Active US weather alerts (NWS)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • weather_currentUS current conditions (NWS) — Latest observed conditions near a US coordinate: temperature, wind, humidity, visibility, pressure from the nearest weather station.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    US current conditions (NWS) — Latest observed conditions near a US coordinate: temperature, wind, humidity, visibility, pressure from the nearest weather station. Source: National Weather Service. JSON. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: US current conditions (NWS)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • weather_forecastUS weather forecast (NWS) — 7-day forecast for any US coordinate: periods with temperature, wind, precipitation chance, narrative.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    US weather forecast (NWS) — 7-day forecast for any US coordinate: periods with temperature, wind, precipitation chance, narrative. Source: National Weather Service. JSON. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: US weather forecast (NWS)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • weather_hourlyUS hourly forecast (NWS) — Hour-by-hour forecast for any US coordinate: temperature, precipitation chance, wind, conditions for the next 48 hours.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    US hourly forecast (NWS) — Hour-by-hour forecast for any US coordinate: temperature, precipitation chance, wind, conditions for the next 48 hours. Source: National Weather Service. JSON. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: US hourly forecast (NWS)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • weather_metarAviation weather METAR/TAF (NOAA) — Raw and decoded METAR (and optional TAF) for any airport ICAO code.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Aviation weather METAR/TAF (NOAA) — Raw and decoded METAR (and optional TAF) for any airport ICAO code. Source: NOAA Aviation Weather Center. JSON. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: Aviation weather METAR/TAF (NOAA)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • weather_travel_riskUS weather travel-risk verdict — Judgment call for a US coordinate and date (within 7 days): LOW/MODERATE/HIGH/SEVERE weather risk with reasons, built from NWS forecast plus active…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    US weather travel-risk verdict — Judgment call for a US coordinate and date (within 7 days): LOW/MODERATE/HIGH/SEVERE weather risk with reasons, built from NWS forecast plus active alerts. JSON. Price: $0.015 USDC (Base, via x402).

    Annotations the server declares

    • title: US weather travel-risk verdict
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • wiki_summaryWikipedia summary — Concise summary/extract for any Wikipedia topic, with the canonical URL.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Wikipedia summary — Concise summary/extract for any Wikipedia topic, with the canonical URL. Source: Wikimedia REST API. JSON. Price: $0.003 USDC (Base, via x402).

    Annotations the server declares

    • title: Wikipedia summary
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
Only reads 9Claude Code: allow
  • dns_lookupDNS record lookup — Resolve any DNS record type (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA) for a hostname via DNS-over-HTTPS.No findings

    Why it is in this group

    • The name "dns_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    DNS record lookup — Resolve any DNS record type (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA) for a hostname via DNS-over-HTTPS. JSON. Price: $0.002 USDC (Base, via x402).

    Annotations the server declares

    • title: DNS record lookup
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • econ_compare_countriesCompare countries (bundle) — One call: two countries' key economics side by side — GDP, GDP per capita, GDP growth, inflation and population, each with which country's figure is hi…No findings

    Why it is in this group

    • The name "econ_compare_countries" says "compare": a word for reading.
    Description, as the server wrote it
    Compare countries (bundle) — One call: two countries' key economics side by side — GDP, GDP per capita, GDP growth, inflation and population, each with which country's figure is higher. Source: World Bank Open Data. Pass two ISO country codes. Price: $0.04 USDC (Base, via x402).

    Annotations the server declares

    • title: Compare countries (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • econ_country_snapshotCountry economic snapshot (bundle) — One call: a country's key economic indicators fused into one response — GDP, GDP per capita, GDP growth, inflation, population and unemployment…No findings

    Why it is in this group

    • The name "econ_country_snapshot" says "snapshot": a word for reading.
    Description, as the server wrote it
    Country economic snapshot (bundle) — One call: a country's key economic indicators fused into one response — GDP, GDP per capita, GDP growth, inflation, population and unemployment (latest available). Source: World Bank Open Data. Pass an ISO country code. Price: $0.03 USDC (Base, via x402).

    Annotations the server declares

    • title: Country economic snapshot (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • finance_peer_compareCompany peer comparison (bundle) — One premium call comparing two public companies head-to-head: revenue, net income, net margin, YoY growth, current ratio and financial-health ver…No findings

    Why it is in this group

    • The name "finance_peer_compare" says "compare": a word for reading.
    Description, as the server wrote it
    Company peer comparison (bundle) — One premium call comparing two public companies head-to-head: revenue, net income, net margin, YoY growth, current ratio and financial-health verdict side by side, with per-metric winners and a data-backed 'stronger financial profile' call. Two tickers or CIKs. SEC EDGAR. JSON. Price: $0.20 USDC (Base, via x402).

    Annotations the server declares

    • title: Company peer comparison (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • health_drug_safety_compareDrug safety compare (bundle) — One call: side-by-side FDA label safety for two drugs — brand/generic identity, indications and warnings for each, flagged if they share a generic.No findings

    Why it is in this group

    • The name "health_drug_safety_compare" says "compare": a word for reading.
    Description, as the server wrote it
    Drug safety compare (bundle) — One call: side-by-side FDA label safety for two drugs — brand/generic identity, indications and warnings for each, flagged if they share a generic. Reference data from openFDA. NOT medical advice or a drug-interaction analysis. Price: $0.06 USDC (Base, via x402).

    Annotations the server declares

    • title: Drug safety compare (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sec_company_snapshotCompany snapshot (bundle) — One call: SEC company facts (revenue, net income, assets, EPS) + the company's most recent filings.No findings

    Why it is in this group

    • The name "sec_company_snapshot" says "snapshot": a word for reading.
    Description, as the server wrote it
    Company snapshot (bundle) — One call: SEC company facts (revenue, net income, assets, EPS) + the company's most recent filings. Ticker or CIK. JSON. Price: $0.03 USDC (Base, via x402).

    Annotations the server declares

    • title: Company snapshot (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • security_threat_lookupUnified threat lookup (bundle) — One call, any indicator: pass an IP, a domain, or a URL and it auto-detects the type, routes to the right analysis (IP intelligence / domain threat…No findings

    Why it is in this group

    • The name "security_threat_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Unified threat lookup (bundle) — One call, any indicator: pass an IP, a domain, or a URL and it auto-detects the type, routes to the right analysis (IP intelligence / domain threat report / URL safety) and returns a normalized CLEAR / SUSPICIOUS / MALICIOUS verdict + risk score + full details. The single entry point for checking any IOC. Price: $0.05 USDC (Base, via x402).

    Annotations the server declares

    • title: Unified threat lookup (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • text_summarizeText summarizer (Workers AI) — Summarize arbitrary text into a concise summary.No findings

    Why it is in this group

    • The name "text_summarize" says "summarize": a word for reading.
    Description, as the server wrote it
    Text summarizer (Workers AI) — Summarize arbitrary text into a concise summary. POST {text, sentences?}. Runs Llama on Workers AI. JSON. Price: $0.008 USDC (Base, via x402).

    Annotations the server declares

    • title: Text summarizer (Workers AI)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http polyform https://api.polyform.org/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__polyform__sec_filings_search",
      "mcp__polyform__sec_company_snapshot",
      "mcp__polyform__finance_peer_compare",
      "mcp__polyform__dns_lookup",
      "mcp__polyform__text_summarize",
      "mcp__polyform__econ_country_snapshot",
      "mcp__polyform__health_drug_safety_compare",
      "mcp__polyform__econ_compare_countries",
      "mcp__polyform__security_threat_lookup"
    ],
    "ask": [
      "mcp__polyform__vehicle_vin",
      "mcp__polyform__vehicle_deal_check",
      "mcp__polyform__vehicle_fuel_economy",
      "mcp__polyform__domain",
      "mcp__polyform__email_domain_check",
      "mcp__polyform__sec_company",
      "mcp__polyform__fda_recalls",
      "mcp__polyform__ai_chat",
      "mcp__polyform__weather_forecast",
      "mcp__polyform__weather_alerts",
      "mcp__polyform__weather_hourly",
      "mcp__polyform__weather_current",
      "mcp__polyform__weather_metar",
      "mcp__polyform__weather_travel_risk",
      "mcp__polyform__geo_geocode",
      "mcp__polyform__geo_reverse",
      "mcp__polyform__fda_drug_label",
      "mcp__polyform__ip",
      "mcp__polyform__threat_ip",
      "mcp__polyform__threat_scanners",
      "mcp__polyform__econ_worldbank",
      "mcp__polyform__time_business_days",
      "mcp__polyform__vehicle_report",
      "mcp__polyform__domain_due_diligence",
      "mcp__polyform__geo_location_brief",
      "mcp__polyform__finance_health_scan",
      "mcp__polyform__realestate_site_risk",
      "mcp__polyform__logistics_route_brief",
      "mcp__polyform__crypto_token_report",
      "mcp__polyform__health_drug_brief",
      "mcp__polyform__legal_sanctions_screen",
      "mcp__polyform__finance_insider_activity",
      "mcp__polyform__crypto_protocol",
      "mcp__polyform__legal_reg_watch",
      "mcp__polyform__finance_company_360",
      "mcp__polyform__business_vet",
      "mcp__polyform__health_clinical_trials",
      "mcp__polyform__geo_earthquakes",
      "mcp__polyform__realestate_property_report",
      "mcp__polyform__domain_brand_protection",
      "mcp__polyform__trade_party_screen",
      "mcp__polyform__crypto_gas",
      "mcp__polyform__crypto_balance",
      "mcp__polyform__wiki_summary",
      "mcp__polyform__url_check",
      "mcp__polyform__fx_rate",
      "mcp__polyform__crypto_price",
      "mcp__polyform__crypto_fear_greed",
      "mcp__polyform__business_onboard_decision",
      "mcp__polyform__finance_diligence_brief",
      "mcp__polyform__trade_shipment_clearance",
      "mcp__polyform__realestate_underwrite",
      "mcp__polyform__ip_intelligence",
      "mcp__polyform__url_safety",
      "mcp__polyform__email_sender_trust",
      "mcp__polyform__domain_dns_hygiene",
      "mcp__polyform__security_phishing_triage",
      "mcp__polyform__security_domain_threat_report",
      "mcp__polyform__geo_severe_weather_scan",
      "mcp__polyform__security_bulk_ip_screen",
      "mcp__polyform__security_inbound_request_screen"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as polyform. Review it before you use it.