# Pauhu AI (remote · api.pauhu.ai)

Pauhu AI gives industrial machines, and the engineers who run them, full answers.

- Trust score: 36/100 (low)
- Change this week: 0
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `api.pauhu.ai`: 36/100 (this document), [markdown](https://verifymcp.io/servers/ai-pauhu-mcp/api.md), [page](https://verifymcp.io/servers/ai-pauhu-mcp/api)

## Channel facts

- Endpoint: `https://api.pauhu.ai/mcp`
- Transports: `streamable-http`
- Auth: `required`
- Version: `2.0.3`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 89/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
  - The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents.
- **Transport & Reachability**: 0/100
  - Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http.
- **Schema Quality & AI Usability**: 0/100
  - Schema blocked by authentication: the endpoint requires auth we don't have to read it.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 0/100
  - Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.
- **Tool Safety**: 0/100
  - Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.
- **Capabilities**: 0/100
  - Capabilities blocked by authentication: the endpoint requires auth we don't have to read them.

**Unverified: 6 categories.** Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### How do I install the Pauhu AI MCP server?

Pauhu AI is a hosted endpoint at https://api.pauhu.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http ai-pauhu-mcp 'https://api.pauhu.ai/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "ai-pauhu-mcp": {
      "url": "https://api.pauhu.ai/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "ai-pauhu-mcp": {
      "type": "http",
      "url": "https://api.pauhu.ai/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.ai-pauhu-mcp]
url = "https://api.pauhu.ai/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ai-pauhu-mcp": {
      "type": "remote",
      "url": "https://api.pauhu.ai/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ai-pauhu-mcp --url 'https://api.pauhu.ai/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  ai-pauhu-mcp:
    url: "https://api.pauhu.ai/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "ai-pauhu-mcp": {
      "Transport": "http",
      "Url": "https://api.pauhu.ai/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add ai-pauhu-mcp -t streamable-http -u 'https://api.pauhu.ai/mcp'
```

### Other

```json
{
  "mcpServers": {
    "ai-pauhu-mcp": {
      "type": "http",
      "url": "https://api.pauhu.ai/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-29 (score 36, −40)

- [security regression] Endpoint reachability: reachable → behind authorisation
- [security regression] Stability: 0.37 → unverified
- [security regression] Tool safety: pass → unverified
- [security regression] Transport: pass → unverified
- [security improvement] Authorization: partial → pass
- [security] First check of Authorization: partial
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-10-28 (score 76, +1)

No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-26 (score 75, +1)

No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-24 (score 74, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-22 (score 73, +1)

No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-20 (score 72, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-19 (score 71, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “ask” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: 979 → 1098
- [functional] New tool “balance_top_up”
- [functional] New tool “price_quote”
- [cosmetic] Tool “ask” changed its title: Ask Pauhu — sourced answer → Ask Pauhu: sourced answer

### 2026-10-18 (score 71, +1)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “fetch” rewrote its description, which is the text the model reads
- [security] Tool “pauhu_code” rewrote its description, which is the text the model reads
- [security] Tool “pauhu_search” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: 792 → 979
- [functional improvement] Stability: unverified → 0.03
- [functional] New tool “list_customers”
- [functional] New tool “pauhu_ops”
- [functional] New tool “pauhu_till”
- [cosmetic] Tool “pauhu_code” changed its title: Pauhu code → Pauhu code synthesis

## MCP tools (16)

### `ask` (~81 tokens)

Ask Pauhu: sourced answer

Ask any question and get a sourced answer. It draws on the customer's own site pages, the governing law and official sources, each with a link to the source. customer is OPTIONAL; omit it for general questions.

Input parameters:

- `customer` (string|null): A customer site to include; omit for general questions
- `question` (string, required): The question, in any language

Output parameters:

- `answer` (string|null)
- `answer_basis` (string)
- `answer_citations`
- `cited_law_evidence`
- `code` (string)
- `customer` (string|null)
- `decision` (string)
- `error` (string)
- `governing_law_evidence`
- `law_lookup_error` (string|null)
- `next_steps` (array)
- `official_source`
- `question` (string)
- `retryable` (boolean)
- `site_evidence`
- `web_evidence`

### `list_customers` (~31 tokens)

List customers

List the customer corpora this connector serves, with page counts and freshness. Use ask() for actual queries.

Output parameters:

- `connector`
- `corpora` (array)
- `customer_count` (number)

### `fetch` (~42 tokens)

Fetch a result by id

Fetch a bounded snippet + metadata for a result id returned by ask(). Full text at the public source URL.

Input parameters:

- `id` (string, required): A result id returned by ask

Output parameters:

- `id` (string)
- `metadata` (object)
- `text` (string)
- `title` (string)
- `url` (string)

### `pauhu_code` (~52 tokens)

Pauhu code synthesis

Synthesize a program from an intent. Returns clean, sourced code, or says when it can't.

Input parameters:

- `intent` (string, required): What the function should do
- `lang` (string): Language of the program

Output parameters:

- `code` (string)
- `error` (string)
- `next_steps` (array)
- `retryable` (boolean)
- `text` (string)

### `pauhu_ops` (~31 tokens)

Pauhu operations

List the operations a program can be built from; describe a function in terms of them in pauhu_code.

Output parameters:

- `code` (string)
- `error` (string)
- `next_steps` (array)
- `retryable` (boolean)
- `text` (string)

### `pauhu_translate` (~66 tokens)

Pauhu sourced translation

Translate text between languages, with exact sourced terms.

Input parameters:

- `source_lang` (string): Language code of the text, e.g. en
- `target_lang` (string): Language code to translate into, e.g. fi
- `text` (string, required): The text to translate

Output parameters:

- `code`
- `error`
- `retryable`
- `translation`

### `read_text` (~72 tokens)

Read text from an image

Returns the text in an image: printed pages, receipts, forms, screenshots or handwriting.

Input parameters:

- `handwriting` (boolean): True when the image is handwritten
- `image_base64` (string, required): The image (PNG, JPEG or WebP), base64-encoded
- `mime` (string): The image type

Output parameters:

- `code` (string)
- `error` (string)
- `next_steps` (array)
- `receipt`
- `retryable` (boolean)
- `text` (string)

### `speak` (~52 tokens)

Speak text

Turns text into spoken audio (WAV, base64).

Input parameters:

- `text` (string, required): The text to speak, up to 5000 characters
- `voice` (string): Voice name; omit for the default voice

Output parameters:

- `bytes` (number)
- `code` (string)
- `error` (string)
- `mime` (string)
- `next_steps` (array)
- `receipt`
- `retryable` (boolean)

### `transcribe` (~65 tokens)

Transcribe speech

Returns the words spoken in an audio recording.

Input parameters:

- `audio_base64` (string, required): The recording (WAV, MP3, OGG or WebM), base64-encoded
- `language` (string): Language code, e.g. fi or en; omit to detect

Output parameters:

- `code` (string)
- `error` (string)
- `next_steps` (array)
- `receipt`
- `retryable` (boolean)
- `text` (string)

### `web_search` (~54 tokens)

Search the web

Searches the public web and returns matching pages as title, URL and snippet, each attributed to its own URL. Free.

Input parameters:

- `max` (integer): Most results to return
- `query` (string, required): What to search for

Output parameters:

- `code` (string)
- `error` (string)
- `next_steps` (array)
- `note` (string)
- `query` (string)
- `results` (array)
- `retryable` (boolean)

### `web_fetch` (~43 tokens)

Read a web page

Reads one public web page and returns its text. Pages whose site does not allow automated reading are refused.

Input parameters:

- `url` (string, required): The page address (http or https)

Output parameters:

- `code` (string)
- `error` (string)
- `next_steps` (array)
- `retryable` (boolean)
- `text` (string)
- `url` (string)

### `contribute` (~188 tokens)

Contribute to Pauhu

Offer a question with a checkable answer, a missing source, a wrong-answer report or an unanswered tool request. Accepted contributions earn usage credit on your Pauhu balance. Requires your Pauhu key.

Input parameters:

- `act` (string): question: the act or document
- `answer_id` (string): wrong_answer: the answer being reported
- `article` (string): question: article or section
- `ask` (string): unanswered: the tool request nobody answers
- `fact_regex` (string): question: a pattern the correct answer must match
- `kind` (string, required): What you offer: question, source, wrong_answer or unanswered
- `lang` (string): question: language code
- `question` (string): question: the question
- `url` (string): source: the public URL of the missing source
- `why` (string): wrong_answer: what is wrong

Output parameters:

- `code` (string)
- `contribution_id`
- `error` (string)
- `next_steps` (array)
- `retryable` (boolean)
- `status` (string)

### `pauhu_search` (~59 tokens)

Pauhu sourced search

Search Pauhu's sourced knowledge. Returns a sourced answer, its sources (document id and URL) and per-match snippets; every answer traces to a source.

Input parameters:

- `limit` (integer): Max matches
- `q` (string, required): Search query

Output parameters:

- `code` (string)
- `error` (string)
- `next_steps` (array)
- `retryable` (boolean)
- `text` (string)

### `price_quote` (~42 tokens)

Price of a call

Shows what an output costs before you call it, as currently served, and how to pay for it. Free.

Input parameters:

- `output`: One output; omit for all

Output parameters:

- `code` (string)
- `error` (string)
- `next_steps` (array)
- `outputs` (array)
- `prepaid`
- `retryable` (boolean)
- `source` (string)

### `balance_top_up` (~83 tokens)

Prepaid balance and top-up

Reads what is left on your prepaid balance (connect with your balance key), or gives the payment page that tops it up. Free.

Input parameters:

- `action` (string, required): balance: read what is left; top_up: get the payment page
- `amount_eur`: top_up: amount in euros
- `country`: top_up: billing country, two letters

Output parameters:

- `balance`
- `code` (string)
- `error` (string)
- `next_steps` (array)
- `note` (string)
- `payment_url` (string)
- `retryable` (boolean)

### `pauhu_till` (~21 tokens)

Pauhu till

Session tally of the tool calls made through this server.

Output parameters:

- `code` (string)
- `error` (string)
- `next_steps` (array)
- `retryable` (boolean)
- `text` (string)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/ai-pauhu-mcp/api#diagnostics

## Score history

- 2026-11-05: 36
- 2026-11-04: 36
- 2026-11-03: 36
- 2026-11-02: 36
- 2026-11-01: 36
- 2026-10-31: 36
- 2026-10-30: 36
- 2026-10-29: 36
- 2026-10-28: 76
- 2026-10-27: 75
- 2026-10-26: 75
- 2026-10-25: 74
- 2026-10-24: 74
- 2026-10-23: 73
- 2026-10-22: 73
- 2026-10-21: 72
- 2026-10-20: 72
- 2026-10-19: 71
- 2026-10-18: 71
- 2026-10-17: 70

## Common questions

### What is the Pauhu AI MCP server?

Pauhu AI is an MCP server listed in the public MCP registry as ai.pauhu/mcp. Pauhu AI gives industrial machines, and the engineers who run them, full answers. This page covers its hosted endpoint (https://api.pauhu.ai/mcp).

### Is the Pauhu AI MCP server safe to use?

Pauhu AI scores 36 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Pauhu AI MCP server expose?

Pauhu AI exposes 16 tools: ask, list_customers, fetch, pauhu_code, pauhu_ops, and 11 more. Their descriptions and schemas cost roughly 982 tokens of context every time the server is loaded.

### Does the Pauhu AI MCP server require authentication?

Yes. Pauhu AI asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

### Is the Pauhu AI MCP server still maintained?

Pauhu AI is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://api.pauhu.ai/mcp
- Authorisation metadata: https://api.pauhu.ai/.well-known/oauth-protected-resource/mcp
- Website: https://pauhu.ai/?r=371274
- Changelog RSS feed: https://verifymcp.io/servers/ai-pauhu-mcp/api.xml
- Changelog JSON feed: https://verifymcp.io/servers/ai-pauhu-mcp/api.json
- HTML version of this page: https://verifymcp.io/servers/ai-pauhu-mcp/api