Skip to content
anlyon.devby Anlyon

uk.firstmention.api/automaton

uk.firstmention.api/automatonapi.firstmention.ukstreamable-httpv1.0.1Scanned

Pay-per-call MCP tools run by autonomous AI agents, each call paid with x402 in USDC.

73 tools: 3 do something that can't be undone, 47 change things and 23 only read.

Tools: 0 delete, 3 irreversible, 47 write, 23 read.
  • Reads private data · 3
  • Reads text others write · 6
  • Can send data out · 18
  • No findings

Tools listed without sign-in. Remote posture

Anlyon alternative

50 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

73 tools

Can't be undone 3Claude Code: ask
  • agentkit__convertDeterministic mid-task utilities for AI agents: unit + currency conversion by ratio, timezone/date maths, cron schedule expansion, entity extraction, and format + JSON Schema valid…Can send data outNo findings

    Why it is in this group

    • The name "agentkit__convert" says "convert": a word for a change.
    • The input addresses people (input.to): what it sends cannot be taken back.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.
    Description, as the server wrote it
    Deterministic mid-task utilities for AI agents: unit + currency conversion by ratio, timezone/date maths, cron schedule expansion, entity extraction, and format + JSON Schema validation. Exact answers, no LLM, 30ms. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/agentkit/convert
  • agentkit__datetimeDeterministic mid-task utilities for AI agents: unit + currency conversion by ratio, timezone/date maths, cron schedule expansion, entity extraction, and format + JSON Schema valid…Can send data outNo findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.
    Description, as the server wrote it
    Deterministic mid-task utilities for AI agents: unit + currency conversion by ratio, timezone/date maths, cron schedule expansion, entity extraction, and format + JSON Schema validation. Exact answers, no LLM, 30ms. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/agentkit/datetime
  • agentkit__extractDeterministic mid-task utilities for AI agents: unit + currency conversion by ratio, timezone/date maths, cron schedule expansion, entity extraction, and format + JSON Schema valid…Can send data outNo findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.
    Description, as the server wrote it
    Deterministic mid-task utilities for AI agents: unit + currency conversion by ratio, timezone/date maths, cron schedule expansion, entity extraction, and format + JSON Schema validation. Exact answers, no LLM, 30ms. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/agentkit/extract
Changes things 47Claude Code: ask
  • basedue__dueBase token due diligence over x402.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Base token due diligence over x402. /report bundles due diligence, cross-venue reference price and position exit cost in ONE $0.01 call. /price now takes up to 10 tokens per $0.01 call for bulk screening. Free /sample on every endpoint. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/basedue/due
  • basedue__exitBase token due diligence over x402.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Base token due diligence over x402. /report bundles due diligence, cross-venue reference price and position exit cost in ONE $0.01 call. /price now takes up to 10 tokens per $0.01 call for bulk screening. Free /sample on every endpoint. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/basedue/exit
  • basedue__priceBase token due diligence over x402.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Base token due diligence over x402. /report bundles due diligence, cross-venue reference price and position exit cost in ONE $0.01 call. /price now takes up to 10 tokens per $0.01 call for bulk screening. Free /sample on every endpoint. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/basedue/price
  • basedue__reportBase token due diligence over x402.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Base token due diligence over x402. /report bundles due diligence, cross-venue reference price and position exit cost in ONE $0.01 call. /price now takes up to 10 tokens per $0.01 call for bulk screening. Free /sample on every endpoint. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/basedue/report
  • bizcal_api__addPublic holiday and business-day calendar for US and UK: is a date a business day, add N business days, count business days between dates (net of holidays), and list a year's holida…No findings

    Why it is in this group

    • The name "bizcal_api__add" says "add": a word for a change.
    Description, as the server wrote it
    Public holiday and business-day calendar for US and UK: is a date a business day, add N business days, count business days between dates (net of holidays), and list a year's holidays. $0.01 per call in USDC on Base via x402. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/bizcal-api/add
  • bizcal_api__betweenPublic holiday and business-day calendar for US and UK: is a date a business day, add N business days, count business days between dates (net of holidays), and list a year's holida…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Public holiday and business-day calendar for US and UK: is a date a business day, add N business days, count business days between dates (net of holidays), and list a year's holidays. $0.01 per call in USDC on Base via x402. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/bizcal-api/between
  • bizcal_api__dayPublic holiday and business-day calendar for US and UK: is a date a business day, add N business days, count business days between dates (net of holidays), and list a year's holida…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Public holiday and business-day calendar for US and UK: is a date a business day, add N business days, count business days between dates (net of holidays), and list a year's holidays. $0.01 per call in USDC on Base via x402. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/bizcal-api/day
  • bizcal_api__workdaysPublic holiday and business-day calendar for US and UK: is a date a business day, add N business days, count business days between dates (net of holidays), and list a year's holida…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Public holiday and business-day calendar for US and UK: is a date a business day, add N business days, count business days between dates (net of holidays), and list a year's holidays. $0.01 per call in USDC on Base via x402. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/bizcal-api/workdays
  • bizcal_api__yearPublic holiday and business-day calendar for US and UK: is a date a business day, add N business days, count business days between dates (net of holidays), and list a year's holida…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Public holiday and business-day calendar for US and UK: is a date a business day, add N business days, count business days between dates (net of holidays), and list a year's holidays. $0.01 per call in USDC on Base via x402. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/bizcal-api/year
  • check_sanctions__addressSanctions screening against US OFAC, UK OFSI and EU lists with real matching on all three.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Sanctions screening against US OFAC, UK OFSI and EU lists with real matching on all three. Screen a name, a wallet address, a batch, or your own watchlist. Non-Latin names are transliterated; unscreenable names return 400, never a false clear. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/check-sanctions/address
  • check_sanctions__batchSanctions screening against US OFAC, UK OFSI and EU lists with real matching on all three.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Sanctions screening against US OFAC, UK OFSI and EU lists with real matching on all three. Screen a name, a wallet address, a batch, or your own watchlist. Non-Latin names are transliterated; unscreenable names return 400, never a false clear. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/check-sanctions/batch
  • check_sanctions__changesSanctions screening against US OFAC, UK OFSI and EU lists with real matching on all three.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Sanctions screening against US OFAC, UK OFSI and EU lists with real matching on all three. Screen a name, a wallet address, a batch, or your own watchlist. Non-Latin names are transliterated; unscreenable names return 400, never a false clear. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/check-sanctions/changes
  • check_sanctions__screenSanctions screening against US OFAC, UK OFSI and EU lists with real matching on all three.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Sanctions screening against US OFAC, UK OFSI and EU lists with real matching on all three. Screen a name, a wallet address, a batch, or your own watchlist. Non-Latin names are transliterated; unscreenable names return 400, never a false clear. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/check-sanctions/screen
  • check_sanctions__verdictSanctions screening against US OFAC, UK OFSI and EU lists with real matching on all three.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Sanctions screening against US OFAC, UK OFSI and EU lists with real matching on all three. Screen a name, a wallet address, a batch, or your own watchlist. Non-Latin names are transliterated; unscreenable names return 400, never a false clear. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/check-sanctions/verdict
  • check_sanctions__watchlistSanctions screening against US OFAC, UK OFSI and EU lists with real matching on all three.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Sanctions screening against US OFAC, UK OFSI and EU lists with real matching on all three. Screen a name, a wallet address, a batch, or your own watchlist. Non-Latin names are transliterated; unscreenable names return 400, never a false clear. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/check-sanctions/watchlist
  • chgwatch__diffmultiMonitor public web pages for changes.Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.urls): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Monitor public web pages for changes. One call checks many URLs; returns changed=true/false plus added/removed lines, so alert agents pay per poll instead of per page. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/chgwatch/diffmulti
  • composite__briefOne call joins public SEC EDGAR data into an agent-ready brief: company profile, annual financial series (revenue, net income, assets, cash, EPS) with YoY growth and margins, recen…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    One call joins public SEC EDGAR data into an agent-ready brief: company profile, annual financial series (revenue, net income, assets, cash, EPS) with YoY growth and margins, recent filings, and risk-factor excerpts. Saves an agent five separate lookups and all the parsing. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/composite/brief
  • composite__filingsOne call joins public SEC EDGAR data into an agent-ready brief: company profile, annual financial series (revenue, net income, assets, cash, EPS) with YoY growth and margins, recen…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    One call joins public SEC EDGAR data into an agent-ready brief: company profile, annual financial series (revenue, net income, assets, cash, EPS) with YoY growth and margins, recent filings, and risk-factor excerpts. Saves an agent five separate lookups and all the parsing. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/composite/filings
  • composite__watchlistOne call joins public SEC EDGAR data into an agent-ready brief: company profile, annual financial series (revenue, net income, assets, cash, EPS) with YoY growth and margins, recen…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    One call joins public SEC EDGAR data into an agent-ready brief: company profile, annual financial series (revenue, net income, assets, cash, EPS) with YoY growth and margins, recent filings, and risk-factor excerpts. Saves an agent five separate lookups and all the parsing. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/composite/watchlist
  • domain_intel__batchTrust check for any domain in one call: DNS records, email auth (SPF/DMARC/DKIM), WHOIS registrar and age, live HTTP status, TLS certificate issuer/expiry and HSTS.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Trust check for any domain in one call: DNS records, email auth (SPF/DMARC/DKIM), WHOIS registrar and age, live HTTP status, TLS certificate issuer/expiry and HSTS. Free /preflight returns the real records as a sample; paid /dns full report, /batch up to 10 domains. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/domain-intel/batch
  • domain_intel__dnsTrust check for any domain in one call: DNS records, email auth (SPF/DMARC/DKIM), WHOIS registrar and age, live HTTP status, TLS certificate issuer/expiry and HSTS.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Trust check for any domain in one call: DNS records, email auth (SPF/DMARC/DKIM), WHOIS registrar and age, live HTTP status, TLS certificate issuer/expiry and HSTS. Free /preflight returns the real records as a sample; paid /dns full report, /batch up to 10 domains. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/domain-intel/dns
  • domfacts__dnsDNS records (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA) and RDAP registration facts for any domain: registrar, created and expiry dates, domain age, days to expiry, nameservers, EPP st…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DNS records (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA) and RDAP registration facts for any domain: registrar, created and expiry dates, domain age, days to expiry, nameservers, EPP status. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/domfacts/dns
  • domfacts__rdapDNS records (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA) and RDAP registration facts for any domain: registrar, created and expiry dates, domain age, days to expiry, nameservers, EPP st…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    DNS records (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA) and RDAP registration facts for any domain: registrar, created and expiry dates, domain age, days to expiry, nameservers, EPP status. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/domfacts/rdap
  • edgar__companyPublic SEC EDGAR data for agents: company profile plus recent filings, XBRL financial history for any tag (revenue, net income, assets), and full-text search across EDGAR filings s…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Public SEC EDGAR data for agents: company profile plus recent filings, XBRL financial history for any tag (revenue, net income, assets), and full-text search across EDGAR filings si…[29 more chars, already applied] Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/edgar/company
  • edgar__financialsPublic SEC EDGAR data for agents: company profile plus recent filings, XBRL financial history for any tag (revenue, net income, assets), and full-text search across EDGAR filings s…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Public SEC EDGAR data for agents: company profile plus recent filings, XBRL financial history for any tag (revenue, net income, assets), and full-text search across EDGAR filings si…[29 more chars, already applied] Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/edgar/financials
  • feednews__digestNews and feed digest from public RSS/Atom/JSON feeds: merge up to 12 sources, dedupe, filter by keyword and recency, and get one ranked list of items with title, link, time and sum…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    News and feed digest from public RSS/Atom/JSON feeds: merge up to 12 sources, dedupe, filter by keyword and recency, and get one ranked list of items with title, link, time and summary. Includes 22 curated working feeds. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/feednews/digest
  • funding_rates__batchPerpetual-futures funding rates and annualized carry for BTC, ETH, SOL and more, from exchange public market-data APIs, in one call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Perpetual-futures funding rates and annualized carry for BTC, ETH, SOL and more, from exchange public market-data APIs, in one call. Free /preflight sample. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/funding-rates/batch
  • funding_rates__bestPerpetual-futures funding rates and annualized carry for BTC, ETH, SOL and more, from exchange public market-data APIs, in one call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Perpetual-futures funding rates and annualized carry for BTC, ETH, SOL and more, from exchange public market-data APIs, in one call. Free /preflight sample. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/funding-rates/best
  • funding_rates__fundingPerpetual-futures funding rates and annualized carry for BTC, ETH, SOL and more, from exchange public market-data APIs, in one call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Perpetual-futures funding rates and annualized carry for BTC, ETH, SOL and more, from exchange public market-data APIs, in one call. Free /preflight sample. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/funding-rates/funding
  • funding_rates__historyPerpetual-futures funding rates and annualized carry for BTC, ETH, SOL and more, from exchange public market-data APIs, in one call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Perpetual-futures funding rates and annualized carry for BTC, ETH, SOL and more, from exchange public market-data APIs, in one call. Free /preflight sample. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/funding-rates/history
  • funding_rates__ratesPerpetual-futures funding rates and annualized carry for BTC, ETH, SOL and more, from exchange public market-data APIs, in one call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Perpetual-futures funding rates and annualized carry for BTC, ETH, SOL and more, from exchange public market-data APIs, in one call. Free /preflight sample. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/funding-rates/rates
  • fundinglens__bestPerpetual funding rates across 7 venues (Binance, Bybit, OKX, Bitget, Hyperliquid, dYdX, Deribit), normalized to 8h and annualized.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Perpetual funding rates across 7 venues (Binance, Bybit, OKX, Bitget, Hyperliquid, dYdX, Deribit), normalized to 8h and annualized. Free /sample. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/fundinglens/best
  • fundinglens__ratesPerpetual funding rates across 7 venues (Binance, Bybit, OKX, Bitget, Hyperliquid, dYdX, Deribit), normalized to 8h and annualized.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Perpetual funding rates across 7 venues (Binance, Bybit, OKX, Bitget, Hyperliquid, dYdX, Deribit), normalized to 8h and annualized. Free /sample. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/fundinglens/rates
  • pageaudit__auditOne call, full picture of a web page: clean markdown, metadata (title, description, canonical, OpenGraph, favicon), heading outline, link census with resolved links, link health ch…Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    One call, full picture of a web page: clean markdown, metadata (title, description, canonical, OpenGraph, favicon), heading outline, link census with resolved links, link health checks and a change…[11 more chars, already applied] Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/pageaudit/audit
  • token_dd__batchToken due-diligence report for any Base/ETH/BSC/Arbitrum token: live price and liquidity, contract security (honeypot, mint/freeze authority, tax, holder concentration), on-chain s…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Token due-diligence report for any Base/ETH/BSC/Arbitrum token: live price and liquidity, contract security (honeypot, mint/freeze authority, tax, holder concentration), on-chain supply checks and a risk verdict. Free preview; full report $0.01. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/token-dd/batch
  • token_dd__checkToken due-diligence report for any Base/ETH/BSC/Arbitrum token: live price and liquidity, contract security (honeypot, mint/freeze authority, tax, holder concentration), on-chain s…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Token due-diligence report for any Base/ETH/BSC/Arbitrum token: live price and liquidity, contract security (honeypot, mint/freeze authority, tax, holder concentration), on-chain supply checks and a risk verdict. Free preview; full report $0.01. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/token-dd/check
  • txpreflight__preflightBase agent toolbox.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Base agent toolbox. /preflight simulates a tx (revert reason, gas, EIP-1559 fees in ETH and USD) before you sign. /verify reads a receipt and proves a USDC transfer settled: confirmations, amount, sender, recipient. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/txpreflight/preflight
  • txpreflight__verifyBase agent toolbox.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Base agent toolbox. /preflight simulates a tx (revert reason, gas, EIP-1559 fees in ETH and USD) before you sign. /verify reads a receipt and proves a USDC transfer settled: confirmations, amount, sender, recipient. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/txpreflight/verify
  • walletprofile__profileBase wallet activity profile + heuristic risk score + exact-address OFAC SDN sanctions screen (US Treasury list, public data).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Base wallet activity profile + heuristic risk score + exact-address OFAC SDN sanctions screen (US Treasury list, public data). /profile and /sanctions. Free /sample. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/walletprofile/profile
  • walletprofile__sanctionsBase wallet activity profile + heuristic risk score + exact-address OFAC SDN sanctions screen (US Treasury list, public data).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Base wallet activity profile + heuristic risk score + exact-address OFAC SDN sanctions screen (US Treasury list, public data). /profile and /sanctions. Free /sample. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/walletprofile/sanctions
  • web_extract__extractExtract clean readable text or markdown from any public web page: title, language, word/paragraph counts and the full article body.Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Extract clean readable text or markdown from any public web page: title, language, word/paragraph counts and the full article body. Free /preview sample first. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/web-extract/extract
  • webmd__extractConvert public web pages into clean markdown plus metadata, headings and link inventory.Can send data outNo findings

    Why it is in this group

    • The description's first verb is "convert": a word for a change.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Convert public web pages into clean markdown plus metadata, headings and link inventory. One URL per call ($0.01), or POST up to 10 URLs at once in a single call for batch ingestion. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/webmd/extract
  • x402_preflight__checkPreflight and monitoring for x402/HTTP APIs: free structural audit of any x402 402 challenge (accepts[], scheme, network, asset, amount, payTo), plus paid live probe (/check), head…Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Preflight and monitoring for x402/HTTP APIs: free structural audit of any x402 402 challenge (accepts[], scheme, network, asset, amount, payTo), plus paid live probe (/check), headers, TLS, uptime history and a public monitored board. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/x402-preflight/check
  • x402_preflight__headersPreflight and monitoring for x402/HTTP APIs: free structural audit of any x402 402 challenge (accepts[], scheme, network, asset, amount, payTo), plus paid live probe (/check), head…Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Preflight and monitoring for x402/HTTP APIs: free structural audit of any x402 402 challenge (accepts[], scheme, network, asset, amount, payTo), plus paid live probe (/check), headers, TLS, uptime history and a public monitored board. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/x402-preflight/headers
  • x402_preflight__tlsPreflight and monitoring for x402/HTTP APIs: free structural audit of any x402 402 challenge (accepts[], scheme, network, asset, amount, payTo), plus paid live probe (/check), head…Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Preflight and monitoring for x402/HTTP APIs: free structural audit of any x402 402 challenge (accepts[], scheme, network, asset, amount, payTo), plus paid live probe (/check), headers, TLS, uptime history and a public monitored board. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/x402-preflight/tls
  • x402check__checkCheck whether any x402 endpoint is live and correctly priced before you pay it: fetches the target URL, decodes its HTTP 402 payment requirements and returns a verdict with the acc…Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Check whether any x402 endpoint is live and correctly priced before you pay it: fetches the target URL, decodes its HTTP 402 payment requirements and returns a verdict with the accepted price, network, asset and pay-to address. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/x402check/check
  • x402index__verdictx402 market intelligence over 41k live listings.Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    x402 market intelligence over 41k live listings. Free /search, /market, /compare, /gaps, /guide. Paid /verdict ($0.01): vet one endpoint, or send {"resources":[...]} to batch-vet up to 25 worst-first with live diagnosis, demand, price percentile and alternatives. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/x402index/verdict
Only reads 23Show 23 read-only tools
  • agentkit__validateDeterministic mid-task utilities for AI agents: unit + currency conversion by ratio, timezone/date maths, cron schedule expansion, entity extraction, and format + JSON Schema valid…No findings

    Why it is in this group

    • The name "agentkit__validate" says "validate": a word for reading.
    Description, as the server wrote it
    Deterministic mid-task utilities for AI agents: unit + currency conversion by ratio, timezone/date maths, cron schedule expansion, entity extraction, and format + JSON Schema validation. Exact answers, no LLM, 30ms. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/agentkit/validate
  • api_change_check__compareCompare two OpenAPI 3 JSON specs and get a precise breaking-change report: removed paths, renamed parameters, new required fields, type changes.No findings

    Why it is in this group

    • The name "api_change_check__compare" says "compare": a word for reading.
    Description, as the server wrote it
    Compare two OpenAPI 3 JSON specs and get a precise breaking-change report: removed paths, renamed parameters, new required fields, type changes. $0.02 via x402. Price: $0.02 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/api-change-check/compare
  • chainread__balanceRead-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100. Batch up to 25 tokens. Free /scan and /t/<address> verdict pages. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/chainread/balance
  • chainread__batchRead-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100. Batch up to 25 tokens. Free /scan and /t/<address> verdict pages. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/chainread/batch
  • chainread__blockRead-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100. Batch up to 25 tokens. Free /scan and /t/<address> verdict pages. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/chainread/block
  • chainread__codeRead-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100. Batch up to 25 tokens. Free /scan and /t/<address> verdict pages. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/chainread/code
  • chainread__gasRead-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100. Batch up to 25 tokens. Free /scan and /t/<address> verdict pages. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/chainread/gas
  • chainread__networkRead-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100. Batch up to 25 tokens. Free /scan and /t/<address> verdict pages. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/chainread/network
  • chainread__nonceRead-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100. Batch up to 25 tokens. Free /scan and /t/<address> verdict pages. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/chainread/nonce
  • chainread__tokenRead-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100. Batch up to 25 tokens. Free /scan and /t/<address> verdict pages. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/chainread/token
  • chainread__txRead-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100. Batch up to 25 tokens. Free /scan and /t/<address> verdict pages. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/chainread/tx
  • chainread__verdictRead-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only Base and Ethereum chain data over x402: gas, blocks, balances, token metadata, tx status, nonces, and token safety verdicts scored 0-100. Batch up to 25 tokens. Free /scan and /t/<address> verdict pages. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/chainread/verdict
  • chgwatch__diffMonitor public web pages for changes.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "chgwatch__diff" says "diff": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "web": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.urls), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.urls): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Monitor public web pages for changes. One call checks many URLs; returns changed=true/false plus added/removed lines, so alert agents pay per poll instead of per page. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/chgwatch/diff
  • company_facts__lookupOne joined company dossier from public sources: SEC EDGAR identity, CIK, SIC industry, incorporation state, recent filings, plus RDAP domain facts and an OFAC/UK/EU sanctions scree…No findings

    Why it is in this group

    • The name "company_facts__lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    One joined company dossier from public sources: SEC EDGAR identity, CIK, SIC industry, incorporation state, recent filings, plus RDAP domain facts and an OFAC/UK/EU sanctions screen of the name. No personal data…[44 more chars, already applied] Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/company-facts/lookup
  • company_facts__snapshotOne joined company dossier from public sources: SEC EDGAR identity, CIK, SIC industry, incorporation state, recent filings, plus RDAP domain facts and an OFAC/UK/EU sanctions scree…No findings

    Why it is in this group

    • The name "company_facts__snapshot" says "snapshot": a word for reading.
    Description, as the server wrote it
    One joined company dossier from public sources: SEC EDGAR identity, CIK, SIC industry, incorporation state, recent filings, plus RDAP domain facts and an OFAC/UK/EU sanctions screen of the name. No personal data…[44 more chars, already applied] Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/company-facts/snapshot
  • edgar__resolvePublic SEC EDGAR data for agents: company profile plus recent filings, XBRL financial history for any tag (revenue, net income, assets), and full-text search across EDGAR filings s…No findings

    Why it is in this group

    • The name "edgar__resolve" says "resolve": a word for reading.
    Description, as the server wrote it
    Public SEC EDGAR data for agents: company profile plus recent filings, XBRL financial history for any tag (revenue, net income, assets), and full-text search across EDGAR filings si…[29 more chars, already applied] Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/edgar/resolve
  • edgar__searchPublic SEC EDGAR data for agents: company profile plus recent filings, XBRL financial history for any tag (revenue, net income, assets), and full-text search across EDGAR filings s…No findings

    Why it is in this group

    • The name "edgar__search" says "search": a word for reading.
    Description, as the server wrote it
    Public SEC EDGAR data for agents: company profile plus recent filings, XBRL financial history for any tag (revenue, net income, assets), and full-text search across EDGAR filings si…[29 more chars, already applied] Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/edgar/search
  • list_servicesFree.No findings

    Why it is in this group

    • The name "list_services" says "list": a word for reading.
    Description, as the server wrote it
    Free. Lists the paid services on this server: name, description, price, HTTP paths, MCP tools and OpenAPI document. Paid tools are billed per call with x402 in USDC on Base.
  • webread__metaFetch a public web page and return clean structured content for agents: title and description, heading outline, main article text (boilerplate removed), markdown, links, images, ta…Reads private dataReads text others writeCan send data outNo findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "fetch" and "table": it reads databases.
    • untrusted-inputThe description's first sentence says "fetch" and "web": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Fetch a public web page and return clean structured content for agents: title and description, heading outline, main article text (boilerplate removed), markdown, links, images, tables and JSON-LD. No LLM, no API key, ~1s. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/webread/meta
  • webread__outlineFetch a public web page and return clean structured content for agents: title and description, heading outline, main article text (boilerplate removed), markdown, links, images, ta…Reads private dataReads text others writeCan send data outNo findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "fetch" and "table": it reads databases.
    • untrusted-inputThe description's first sentence says "fetch" and "web": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Fetch a public web page and return clean structured content for agents: title and description, heading outline, main article text (boilerplate removed), markdown, links, images, tables and JSON-LD. No LLM, no API key, ~1s. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/webread/outline
  • webread__readFetch a public web page and return clean structured content for agents: title and description, heading outline, main article text (boilerplate removed), markdown, links, images, ta…Reads private dataReads text others writeCan send data outNo findings

    Why it is in this group

    • The name "webread__read" says "read": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "fetch" and "table": it reads databases.
    • untrusted-inputThe description's first sentence says "fetch" and "web": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Fetch a public web page and return clean structured content for agents: title and description, heading outline, main article text (boilerplate removed), markdown, links, images, tables and JSON-LD. No LLM, no API key, ~1s. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: POST https://api.firstmention.uk/s/webread/read
  • websearch__briefSearch plus page-to-markdown in one $0.01 call: ranked results from Wikipedia, Hacker News, GitHub and a web engine, with clean readable article text.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The description's first verb is "search": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "search" and "web": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Search plus page-to-markdown in one $0.01 call: ranked results from Wikipedia, Hacker News, GitHub and a web engine, with clean readable article text. Pass q= to search, or url= to extract any single page. Free /demo and /quickstart. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/websearch/brief
  • websearch__briefbatchSearch plus page-to-markdown in one $0.01 call: ranked results from Wikipedia, Hacker News, GitHub and a web engine, with clean readable article text.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The description's first verb is "search": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "search" and "web": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Search plus page-to-markdown in one $0.01 call: ranked results from Wikipedia, Hacker News, GitHub and a web engine, with clean readable article text. Pass q= to search, or url= to extract any single page. Free /demo and /quickstart. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/websearch/briefbatch

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

324 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 3 private-data tools breaks every one.

Reads private data3
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write6
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out18
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__automaton__webread__meta",
      "mcp__automaton__webread__outline",
      "mcp__automaton__webread__read"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Oct 29, 2026, 21:20 UTC, unchanged since Oct 29, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
50
Protocol version
2025-06-18
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
not observed
RFC 9728 protected resource metadata
not observed
Authorization servers
not observed
Legacy HTTP+SSE transport
no
Dynamic client registration
not observed
Client ID metadata documents
not observed
  • HighThe whole server

    The endpoint served tools/list without credentials, and the list has 50 tools that change things (3 irreversible, 47 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://api.firstmention.uk/mcp: tools/list returned 73 tools to an anonymous client, including agentkit__convert (irreversible), agentkit__datetime (irreversible), agentkit__extract (irreversible), basedue__due (write), basedue__price (write) and 45 more

    What this check looks for

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http automaton https://api.firstmention.uk/mcp
claude mcp add --transport http automaton https://api.firstmention.uk/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__automaton__list_services",
      "mcp__automaton__agentkit__validate",
      "mcp__automaton__api_change_check__compare",
      "mcp__automaton__chainread__network",
      "mcp__automaton__chainread__block",
      "mcp__automaton__chainread__balance",
      "mcp__automaton__chainread__token",
      "mcp__automaton__chainread__tx",
      "mcp__automaton__chainread__nonce",
      "mcp__automaton__chainread__gas",
      "mcp__automaton__chainread__code",
      "mcp__automaton__chainread__verdict",
      "mcp__automaton__chainread__batch",
      "mcp__automaton__company_facts__lookup",
      "mcp__automaton__company_facts__snapshot",
      "mcp__automaton__edgar__search",
      "mcp__automaton__edgar__resolve"
    ],
    "ask": [
      "mcp__automaton__agentkit__convert",
      "mcp__automaton__agentkit__datetime",
      "mcp__automaton__agentkit__extract",
      "mcp__automaton__basedue__due",
      "mcp__automaton__basedue__price",
      "mcp__automaton__basedue__exit",
      "mcp__automaton__basedue__report",
      "mcp__automaton__bizcal_api__day",
      "mcp__automaton__bizcal_api__add",
      "mcp__automaton__bizcal_api__between",
      "mcp__automaton__bizcal_api__year",
      "mcp__automaton__bizcal_api__workdays",
      "mcp__automaton__check_sanctions__screen",
      "mcp__automaton__check_sanctions__address",
      "mcp__automaton__check_sanctions__batch",
      "mcp__automaton__check_sanctions__changes",
      "mcp__automaton__check_sanctions__verdict",
      "mcp__automaton__check_sanctions__watchlist",
      "mcp__automaton__chgwatch__diff",
      "mcp__automaton__chgwatch__diffmulti",
      "mcp__automaton__composite__brief",
      "mcp__automaton__composite__watchlist",
      "mcp__automaton__composite__filings",
      "mcp__automaton__domain_intel__dns",
      "mcp__automaton__domain_intel__batch",
      "mcp__automaton__domfacts__dns",
      "mcp__automaton__domfacts__rdap",
      "mcp__automaton__edgar__company",
      "mcp__automaton__edgar__financials",
      "mcp__automaton__feednews__digest",
      "mcp__automaton__funding_rates__funding",
      "mcp__automaton__funding_rates__batch",
      "mcp__automaton__funding_rates__rates",
      "mcp__automaton__funding_rates__best",
      "mcp__automaton__funding_rates__history",
      "mcp__automaton__fundinglens__rates",
      "mcp__automaton__fundinglens__best",
      "mcp__automaton__pageaudit__audit",
      "mcp__automaton__token_dd__check",
      "mcp__automaton__token_dd__batch",
      "mcp__automaton__txpreflight__preflight",
      "mcp__automaton__txpreflight__verify",
      "mcp__automaton__walletprofile__profile",
      "mcp__automaton__walletprofile__sanctions",
      "mcp__automaton__web_extract__extract",
      "mcp__automaton__webmd__extract",
      "mcp__automaton__webread__read",
      "mcp__automaton__webread__outline",
      "mcp__automaton__webread__meta",
      "mcp__automaton__websearch__brief",
      "mcp__automaton__websearch__briefbatch",
      "mcp__automaton__x402_preflight__check",
      "mcp__automaton__x402_preflight__headers",
      "mcp__automaton__x402_preflight__tls",
      "mcp__automaton__x402check__check",
      "mcp__automaton__x402index__verdict"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as automaton. Review it before you use it.

Capability tags behind 18 rules
  • mcp__automaton__agentkit__convert outbound
  • mcp__automaton__agentkit__datetime outbound
  • mcp__automaton__agentkit__extract outbound
  • mcp__automaton__chgwatch__diff untrusted-input, outbound
  • mcp__automaton__chgwatch__diffmulti outbound
  • mcp__automaton__pageaudit__audit outbound
  • mcp__automaton__web_extract__extract outbound
  • mcp__automaton__webmd__extract outbound
  • mcp__automaton__webread__read private-data, untrusted-input, outbound
  • mcp__automaton__webread__outline private-data, untrusted-input, outbound
  • mcp__automaton__webread__meta private-data, untrusted-input, outbound
  • mcp__automaton__websearch__brief untrusted-input, outbound
  • mcp__automaton__websearch__briefbatch untrusted-input, outbound
  • mcp__automaton__x402_preflight__check outbound
  • mcp__automaton__x402_preflight__headers outbound
  • mcp__automaton__x402_preflight__tls outbound
  • mcp__automaton__x402check__check outbound
  • mcp__automaton__x402index__verdict outbound

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/uk.firstmention.api/automaton/verify?hash=f614fb8b5f857b718e7ab647cac40078e3682133154799a032938aa53e3ef3d2" | jq -e '.changed == false'

Pinned hash f614fb8b5f85, from Oct 29, 2026, 22:19 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/uk.firstmention.api/automaton/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for uk.firstmention.api/automaton
[![anlyon.dev](https://anlyon.dev/badge/uk.firstmention.api/automaton.svg)](https://anlyon.dev/servers/uk.firstmention.api/automaton)

Source: MCP Registry. Synced Oct 29, 2026, 22:19 UTC.