# SiteCheck Web Intel (remote · api.webintel-api.workers.dev)

129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402

- Trust score: 72/100 (medium)
- Change this week: +4
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-04

## Components

- remote · `api.webintel-api.workers.dev`: 72/100 (this document), [markdown](https://verifymcp.io/servers/bck-stack-sitecheck-web-intel/api.md), [page](https://verifymcp.io/servers/bck-stack-sitecheck-web-intel/api)

## Channel facts

- Endpoint: `https://api.webintel-api.workers.dev/mcp?ref=registry`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-04.

- **Endpoint Security**: 63/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS check failed: the endpoint is reachable over plaintext HTTP.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 18886 tokens (~146/item across 129 items; 129 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 40/100
  - Stability observed for 12 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 129 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 130 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the SiteCheck Web Intel MCP server?

SiteCheck Web Intel is a hosted endpoint at https://api.webintel-api.workers.dev/mcp?ref=registry, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http bck-stack-sitecheck-web-intel 'https://api.webintel-api.workers.dev/mcp?ref=registry'
```

### Cursor

```json
{
  "mcpServers": {
    "bck-stack-sitecheck-web-intel": {
      "url": "https://api.webintel-api.workers.dev/mcp?ref=registry"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "bck-stack-sitecheck-web-intel": {
      "type": "http",
      "url": "https://api.webintel-api.workers.dev/mcp?ref=registry"
    }
  }
}
```

### Codex

```toml
[mcp_servers.bck-stack-sitecheck-web-intel]
url = "https://api.webintel-api.workers.dev/mcp?ref=registry"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "bck-stack-sitecheck-web-intel": {
      "type": "remote",
      "url": "https://api.webintel-api.workers.dev/mcp?ref=registry",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add bck-stack-sitecheck-web-intel --url 'https://api.webintel-api.workers.dev/mcp?ref=registry' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  bck-stack-sitecheck-web-intel:
    url: "https://api.webintel-api.workers.dev/mcp?ref=registry"
```

### Netclaw

```json
{
  "McpServers": {
    "bck-stack-sitecheck-web-intel": {
      "Transport": "http",
      "Url": "https://api.webintel-api.workers.dev/mcp?ref=registry"
    }
  }
}
```

### Vellum

```bash
assistant mcp add bck-stack-sitecheck-web-intel -t streamable-http -u 'https://api.webintel-api.workers.dev/mcp?ref=registry'
```

### Other

```json
{
  "mcpServers": {
    "bck-stack-sitecheck-web-intel": {
      "type": "http",
      "url": "https://api.webintel-api.workers.dev/mcp?ref=registry"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-04 (score 72, +1)

No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-02 (score 71, +1)

- [security] Tool “search_news_across_the_web” rewrote its description, which is the text the model reads

### 2026-10-31 (score 70, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-30 (score 69, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “search_shopify_metadata” rewrote its description, which is the text the model reads

### 2026-10-29 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-27 (score 68, +1)

- [security] Tool “search_reuters_articles” rewrote its description, which is the text the model reads
- [cosmetic] “search_reuters_articles” added an optional parameter “days”
- [cosmetic] “search_reuters_articles” reworded the description of “q”

### 2026-10-25 (score 67, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-24 (score 66, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [functional improvement] Stability: unverified → 0.03

## MCP tools (129)

### `security_dns_records` (~165 tokens)

Security Dns Records

DNS records of a domain (A, AAAA, MX, NS, TXT, CNAME, CAA, SOA) resolved live through the public AdGuard DNS JSON resolver (NextDNS as backup). Shows answers as they resolve now, with TTLs; it does not walk the delegation chain or query the authoritative servers directly. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `name` (string, required): Domain name, e.g. example.com (required)
- `types` (string): Comma list of record types from A,AAAA,MX,NS,TXT,CNAME,CAA,SOA (default A,AAAA,MX,NS,TXT)

Output parameters:

- `checkedAt`
- `name`
- `nameservers`
- `rcode`
- `records`
- `resolver`
- `source`

### `security_whois_rdap` (~117 tokens)

Security Whois Rdap

Domain registration facts via RDAP (IANA bootstrap, then the registry's own server): registration, last change and expiry dates, days left, registrar name, status flags, nameservers and DNSSEC delegation flag. Registrant contact data is usually redacted by registries and is not returned. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as example.com (required)

Output parameters:

- `checkedAt`
- `daysUntilExpiry`
- `dnssecDelegationSigned`
- `domain`
- `expires`
- `lastChanged`
- `nameservers`
- `registered`
- `registrar`
- `registry`
- `source`
- `status`

### `security_ssl_cert_chain` (~139 tokens)

Security Ssl Cert Chain

HTTPS certificate chain and cipher audit for a host (port 443) from Qualys SSL Labs' cached report: grade, number of certificates in the chain, trust store, TLS versions, weak-cipher count, Heartbleed/POODLE/BEAST flags and HSTS. Only reads reports SSL Labs already has, so a host that was never scanned returns a retry error instead of a new scan. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `host` (string, required): Host name such as wikipedia.org (required)

Output parameters:

- `chain`
- `checkedAt`
- `cipherSuites`
- `forwardSecrecy`
- `grade`
- `hasWarnings`
- `host`
- `hsts`
- `ip`
- `protocols`
- `source`
- `vulnerabilities`
- `weakCipherSuites`

### `security_crtsh_transparency` (~126 tokens)

Security Crtsh Transparency

Subdomain names found in public Certificate Transparency logs for a domain (via CertSpotter): unique host names and wildcard names, issuers, latest issue date and how many listed certificates are still valid. Returns the first page only (up to 100 certificates) and lists at most 100 names; wildcard names are shown as *.domain. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as wikipedia.org (required)

Output parameters:

- `certificatesListed`
- `checkedAt`
- `domain`
- `issuers`
- `latestIssued`
- `nameCount`
- `names`
- `source`
- `validCertificates`

### `security_ip_geolocation_asn` (~128 tokens)

Security Ip Geolocation Asn

IPv4 or IPv6 address → covering BGP prefix, origin AS number and holder name, whether the prefix is announced, and a coarse country and map point, all from RIPEstat. Location is an estimate (a block-level database), not a street address; the city is often empty. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 or IPv6 address such as 8.8.8.8 (required)

Output parameters:

- `announced`
- `asn`
- `asnHolder`
- `checkedAt`
- `ip`
- `location`
- `locationCoveragePct`
- `prefix`
- `source`

### `security_security_headers` (~141 tokens)

Security Security Headers

Checks the live HTTP response headers of a site's home page (one GET, https) for Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy and Cross-Origin-Opener-Policy. Returns present/missing headers with their values and a score out of 7. It does not judge the quality of the values. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as wikipedia.org (required)

Output parameters:

- `checkedAt`
- `domain`
- `finalUrl`
- `httpStatus`
- `maxScore`
- `missing`
- `present`
- `score`
- `source`

### `security_dmarc_spf_dkim` (~164 tokens)

Security Dmarc Spf Dkim

Email authentication DNS records for a domain: DMARC policy (p, sp, pct, rua), SPF record and its all-mechanism, and DKIM public keys for a selector you give or for 8 common selectors (revoked keys and CNAME-delegated keys are reported). Reads the published DNS records only; it does not check alignment against a real message. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as google.com (required)
- `selector` (string): DKIM selector such as google, selector1 or k1 (optional; common selectors are tried when empty)

Output parameters:

- `checkedAt`
- `dkim`
- `dkimSelectorsTried`
- `dmarc`
- `domain`
- `source`
- `spf`

### `security_urlhaus_malware` (~129 tokens)

Security Urlhaus Malware

Checks whether a host (domain or IP) is known to abuse.ch URLhaus as a malware distribution host: first seen, number of malware URLs, Spamhaus DBL / SURBL status and the latest URLs with status (online/offline), threat type, tags, reporter and URLhaus reference. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `host` (string, required): Domain or IPv4 address, e.g. 221.15.252.30 (required)

Output parameters:

- `blacklists`
- `checkedAt`
- `firstSeen`
- `host`
- `listed`
- `matches`
- `onlineNow`
- `reference`
- `source`
- `urlCount`

### `security_phishtank_check` (~124 tokens)

Security Phishtank Check

Looks one http or https URL up in the PhishTank phishing database (live checkurl lookup, no key). Returns whether PhishTank has the URL and, if so, its phish id, verification flag and validity. Absence means PhishTank has no record of this exact URL, not that it is safe. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `url` (string, required): Full http or https URL to check (required)

Output parameters:

- `checkedAt`
- `inDatabase`
- `phishId`
- `source`
- `url`
- `valid`
- `verified`
- `verifiedAt`

### `security_cve_nvd_lookup` (~166 tokens)

Security Cve Nvd Lookup

One CVE record from the NIST National Vulnerability Database: description, published and last-modified dates, NVD status, primary CVSS score and severity (v4.0, 3.1, 3.0 or 2.0, whichever NVD marks primary first), CWE weakness IDs and up to 5 reference URLs. It does not say whether the CVE is being exploited (use cisa-known-exploits or epss-exploit-score for that). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `cveId` (string, required): CVE identifier such as CVE-2021-44228 (required)

Output parameters:

- `checkedAt`
- `cvss`
- `cwe`
- `description`
- `id`
- `lastModified`
- `published`
- `references`
- `source`
- `status`

### `security_tor_exit_nodes` (~135 tokens)

Security Tor Exit Nodes

Checks an IPv4 address against the Tor Project's bulk exit list (about 1,200 active exit IPs). If it is an exit, adds the relays for that address from Onionoo: nickname, flags, country, first and last seen. Only exit IPs are on the list; a relay's other IPs are not checked. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 171.25.193.25 (required)

Output parameters:

- `checkedAt`
- `exitListSize`
- `ip`
- `isTorExit`
- `relays`
- `source`

### `security_vpn_proxy_detector` (~131 tokens)

Security Vpn Proxy Detector

Checks an IPv4 address against the public X4BNet list of commercial VPN provider address ranges (about 11,000 CIDR blocks, refreshed by the list's maintainer). Returns whether the address falls in a listed VPN range and which range. A miss does not prove a direct connection, and IPv6 is not covered. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 2.26.157.10 (required)

Output parameters:

- `checkedAt`
- `ip`
- `isVpn`
- `range`
- `rangesInList`
- `source`

### `security_shodan_host_summary` (~133 tokens)

Security Shodan Host Summary

Shodan InternetDB summary for an IPv4 address (free, no key): open TCP ports, host names seen, CPE software identifiers, tags and CVE IDs Shodan associates with the host. Data is from Shodan's last scan, so it can be days old; an IP with no data returns empty lists with known=false. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 1.1.1.1 (required)

Output parameters:

- `checkedAt`
- `cpes`
- `hostnames`
- `ip`
- `known`
- `ports`
- `source`
- `tags`
- `vulns`

### `security_censys_exposure` (~118 tokens)

Security Censys Exposure

Censys host view for an IPv4 address: the services, ports and protocols Censys has observed on it with their last scan time and detected software, plus autonomous system, location, network owner and reverse DNS, from the Censys Platform API. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 8.8.8.8 (required)

Output parameters:

- `autonomousSystem`
- `checkedAt`
- `ip`
- `location`
- `organization`
- `reverseDns`
- `serviceCount`
- `services`
- `source`

### `security_abuseipdb_check` (~123 tokens)

Security Abuseipdb Check

AbuseIPDB reputation for an IPv4 address over the last 90 days: abuse confidence score (0-100), number of abuse reports, last report date, ISP, usage type and country. Needs a free AbuseIPDB key configured by the operator; reports are crowd-sourced. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 185.220.101.1 (required)

Output parameters:

- `abuseConfidenceScore`
- `checkedAt`
- `countryCode`
- `distinctReporters`
- `domain`
- `ip`
- `isTor`
- `isWhitelisted`
- `isp`
- `lastReportedAt`
- `source`
- `totalReports`
- `usageType`

### `security_grey_noise_noise` (~135 tokens)

Security Grey Noise Noise

GreyNoise Community lookup for an IPv4 address: whether it was seen mass-scanning the internet recently (noise), whether it is a known benign service (riot), its classification (benign, malicious, unknown), name and last-seen date. An address GreyNoise has not seen returns noise=false with a message; it is not a clean verdict. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 185.220.101.1 (required)

Output parameters:

- `checkedAt`
- `classification`
- `ip`
- `lastSeen`
- `message`
- `name`
- `noise`
- `riot`
- `source`

### `security_hibp_breach_check` (~118 tokens)

Security Hibp Breach Check

Lists the data breaches HaveIBeenPwned has recorded for a domain (breach name, breach date, accounts affected, data types exposed, verified flag). It is the public breach catalogue, not a check of individual email addresses (that needs a paid key and is not offered here). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as adobe.com (required)

Output parameters:

- `breachCount`
- `breaches`
- `catalogueSize`
- `checkedAt`
- `domain`
- `source`

### `security_cisa_known_exploits` (~167 tokens)

Security Cisa Known Exploits

CISA's Known Exploited Vulnerabilities catalog (public JSON). With cveId: whether that CVE is on the list, with vendor, product, date added, federal due date, required action and ransomware-use flag. Without it: catalog size, release date and the newest additions (up to 50). Listing means exploitation was reported, not a risk score. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `cveId` (string): CVE identifier to look up (optional)
- `limit` (string): How many newest additions to list when no cveId is given, 1 to 50 (default 10)

Output parameters:

- `catalogSize`
- `catalogVersion`
- `checkedAt`
- `cveId`
- `entry`
- `listed`
- `released`
- `source`

### `security_open_port_scanner` (~126 tokens)

Security Open Port Scanner

Lists the TCP ports Shodan has seen open on an IPv4 address, from its pre-collected passive scan data (not a live scan: nothing connects to the address now). The record can be days old, and an address with no record returns known=false, which does not prove the ports are closed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 1.1.1.1 (required)

Output parameters:

- `checkedAt`
- `ip`
- `known`
- `openPorts`
- `portCount`
- `source`

### `security_dns_propagation` (~148 tokens)

Security Dns Propagation

Asks two independent public DNS resolvers (AdGuard DNS and NextDNS) for the same name and record type right now and reports whether they agree, with each answer set and its lowest TTL. It shows cache and geo-DNS differences between resolvers; it is two vantage points, not a worldwide propagation survey. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `name` (string, required): Host or domain name, e.g. example.com (required)
- `type` (string): A, AAAA, MX, NS, TXT or CNAME (default A)

Output parameters:

- `agree`
- `checkedAt`
- `name`
- `resolvers`
- `source`
- `type`

### `security_reverse_dns_ptr` (~119 tokens)

Security Reverse Dns Ptr

Reverse DNS (PTR) names for an IPv4 address, and forward-confirmed reverse DNS: whether each PTR name resolves back (A record) to the same address. Up to 3 PTR names are checked. Many addresses have no PTR record; that is a normal answer. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 8.8.8.8 (required)

Output parameters:

- `checkedAt`
- `fcrdns`
- `forward`
- `ip`
- `ptrNames`
- `rcode`
- `source`

### `security_bgp_prefix_origin` (~161 tokens)

Security Bgp Prefix Origin

For an IPv4 prefix (e.g. 8.8.8.0/24): the origin AS seen announcing it now across RIPE RIS peers, its RPKI status for that origin (valid, invalid or unknown), route objects, visibility, and how many more-specific and less-specific prefixes are seen. An 'invalid' RPKI status is a hijack warning sign; it is not proof of a hijack. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `prefix` (string, required): IPv4 prefix in CIDR form, e.g. 8.8.8.0/24 (required)

Output parameters:

- `checkedAt`
- `currentOrigin`
- `firstSeenOrigin`
- `lastSeenAt`
- `lessSpecifics`
- `moreSpecifics`
- `prefix`
- `routeObjects`
- `rpkiAlert`
- `rpkiStatus`
- `source`
- `totalRisPeers`
- `visibleOnRisPeers`

### `security_dnssec_validator` (~122 tokens)

Security Dnssec Validator

DNSSEC check for a domain: whether a DS record exists at the parent zone (the domain is signed), and whether two public validating resolvers (AdGuard DNS, NextDNS) return its A answer with the AD (authenticated) flag. It reads the resolvers' verdict; it does not validate the signature chain itself. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as example.com (required)

Output parameters:

- `checkedAt`
- `domain`
- `dsAtParent`
- `resolvers`
- `source`
- `verdict`

### `security_cors_misconfig` (~127 tokens)

Security Cors Misconfig

Checks how a site's home page answers a cross-origin request from a made-up origin: whether it echoes that origin back, sends a wildcard (*), and whether credentials are allowed with it. Echoing an arbitrary origin together with credentials is the risky case. One GET of the home page; it does not test API routes or the null origin. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as httpbin.org (required)

Output parameters:

- `allowCredentials`
- `allowOrigin`
- `checkedAt`
- `domain`
- `finalUrl`
- `httpStatus`
- `probeOrigin`
- `source`
- `verdict`

### `security_cookie_security` (~108 tokens)

Security Cookie Security

Lists the cookies a site sets on its public home page (one anonymous GET, no login) with their Secure, HttpOnly and SameSite flags, and flags the ones missing a flag. Cookies set later, after login or on other pages, are not seen. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as github.com (required)

Output parameters:

- `checkedAt`
- `cookieCount`
- `cookies`
- `cookiesWithIssues`
- `domain`
- `finalUrl`
- `httpStatus`
- `source`

### `security_subdomain_takeover` (~146 tokens)

Security Subdomain Takeover

For a subdomain: finds its CNAME, matches the target against the public can-i-take-over-xyz fingerprint list (services such as GitHub Pages, S3, Azure, WordPress), checks whether the target still resolves, and fetches the subdomain once to look for the service's 'unclaimed' page text. Verdicts are evidence, not proof; the list is community-maintained. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `subdomain` (string, required): Host name to check, e.g. staging.wordpress.com (required)

Output parameters:

- `checkedAt`
- `cname`
- `fingerprintMatched`
- `httpStatus`
- `service`
- `serviceStatus`
- `source`
- `subdomain`
- `targetResolves`
- `verdict`

### `security_robots_security_txt` (~114 tokens)

Security Robots Security Txt

Reads a site's public robots.txt (crawl rules, sitemaps, AI-crawler rules) and security.txt (RFC 9116: contact, expiry, policy), and says whether security.txt is present, current or expired. Missing files are reported as absent, not as errors. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as github.com (required)

Output parameters:

- `checkedAt`
- `domain`
- `robotsTxt`
- `securityTxt`
- `source`

### `security_email_disposable` (~122 tokens)

Security Email Disposable

Checks whether an email address's domain (or a domain you give) is on the community disposable and temporary email blocklist (about 9,900 domains). Only the domain is checked, never the mailbox, and a domain missing from the list is not proven to be permanent. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `email` (string, required): Email address or domain, e.g. user@mailinator.com or mailinator.com (required)

Output parameters:

- `checkedAt`
- `disposable`
- `domain`
- `listSize`
- `source`

### `security_domain_typosquatting` (~138 tokens)

Security Domain Typosquatting

For a brand domain, generates up to 24 lookalike names (letter omission, doubling and swapping, plus .co/.net/.org/.io swaps) and checks which ones have name servers in DNS right now. Registered-looking names are listed with their name servers. A lookalike with no name servers may still be registered without DNS, and this is not a trademark or phishing verdict. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Brand domain such as github.com (required)

Output parameters:

- `brand`
- `candidatesChecked`
- `checkedAt`
- `registeredLookalikes`
- `source`

### `security_asn_peers_upstream` (~138 tokens)

Security Asn Peers Upstream

For an autonomous system (e.g. AS13335): how many upstream (transit) and downstream neighbours RIPEstat sees in BGP, the top upstreams ranked by 'power' with their IPv4 and IPv6 peer counts, and the top downstreams. Built from RIS route collector paths, so it is an observed view, not the contract. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `asn` (string, required): AS number such as AS13335 or 13335 (required)

Output parameters:

- `asn`
- `checkedAt`
- `counts`
- `downstreams`
- `source`
- `upstreams`

### `security_tls_cipher_enum` (~140 tokens)

Security Tls Cipher Enum

TLS versions a host accepts (SSL 3, TLS 1.0 and 1.1 flagged as deprecated) and its cipher-suite strength from Qualys SSL Labs' cached report: suite count per protocol, weak suites (RC4, 3DES, NULL, EXPORT, DES, anonymous), and whether forward secrecy is offered. Reads existing reports only; a host that was never scanned returns a retry error. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `host` (string, required): Host name such as wikipedia.org (required)

Output parameters:

- `checkedAt`
- `deprecatedProtocolsOffered`
- `forwardSecrecy`
- `host`
- `ip`
- `perProtocol`
- `protocols`
- `source`
- `weakSuites`

### `security_open_resolver_check` (~127 tokens)

Security Open Resolver Check

Reports whether Shodan's pre-collected passive scan data shows TCP port 53 (DNS) open on an IPv4 address. It is a passive port fact only: it does not send a query, so it cannot say whether the server answers recursively for outside names. Absence means not seen, not closed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 8.8.8.8 (required)

Output parameters:

- `checkedAt`
- `dnsPortSeenOpen`
- `ip`
- `known`
- `recursionTested`
- `source`

### `security_ntp_monlist_audit` (~118 tokens)

Security Ntp Monlist Audit

Reports whether Shodan's pre-collected passive scan data shows NTP (port 123) seen open on an IPv4 address. Passive and possibly old; the monlist amplification check itself is not run, so this cannot say whether monlist is enabled. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 129.6.15.28 (required)

Output parameters:

- `checkedAt`
- `ip`
- `known`
- `monlistTested`
- `ntpPortSeenOpen`
- `source`

### `security_snmp_exposure` (~113 tokens)

Security Snmp Exposure

Reports whether Shodan's pre-collected passive scan data shows SNMP (UDP port 161) seen open on an IPv4 address. Passive and possibly old; no community string is tried, so default or public community access is not tested. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 1.1.1.1 (required)

Output parameters:

- `checkedAt`
- `communityTested`
- `ip`
- `known`
- `snmpPortSeenOpen`
- `source`

### `security_ssh_banner_audit` (~125 tokens)

Security Ssh Banner Audit

From Shodan's pre-collected passive scan data: whether TCP port 22 was seen open on an IPv4 address and any OpenSSH version identified in its software (CPE) list. This is passive and may be days old; it is not a live SSH banner grab or algorithm audit. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 185.220.100.240 (required)

Output parameters:

- `checkedAt`
- `ip`
- `known`
- `opensshVersion`
- `source`
- `sshPortSeenOpen`

### `security_smb_exposure_test` (~133 tokens)

Security Smb Exposure Test

Checks Shodan's passive scan records for TCP port 445 (SMB) on an IPv4 address. Says whether SMB was seen open and when the record was last refreshed by the host data (not a live test). An address with no Shodan record returns seen=false with known=false; that is not proof the port is closed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 1.1.1.1 (required)

Output parameters:

- `checkedAt`
- `ip`
- `known`
- `openPortsSeen`
- `seen`
- `source`

### `security_rdp_exposure_check` (~132 tokens)

Security Rdp Exposure Check

Checks Shodan's passive scan records for TCP port 3389 (RDP) on an IPv4 address. Says whether RDP was seen open (not a live test, and the record can be days old). An address with no Shodan record returns seen=false with known=false; that is not proof the port is closed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 1.1.1.1 (required)

Output parameters:

- `checkedAt`
- `ip`
- `known`
- `openPortsSeen`
- `seen`
- `source`

### `security_spameatingmonkey` (~129 tokens)

Security Spameatingmonkey

Checks an IPv4 mail-sending address against the SpamEatingMonkey DNS blocklist (bl.spameatingmonkey.net) through public DNS. A listed address returns its 127.0.0.x return code; an unlisted one returns no record. Listings change often; this is a point-in-time answer. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 185.220.101.1 (required)

Output parameters:

- `checkedAt`
- `ip`
- `listed`
- `returnCodes`
- `source`
- `zone`

### `security_barracuda_reputation` (~145 tokens)

Security Barracuda Reputation

Checks an IPv4 mail-sending address against the Barracuda Reputation Block List (b.barracudacentral.org) through public DNS. Listed addresses return a 127.0.0.x code; unlisted ones return no record. The list is updated continuously, so this is a point-in-time answer. Domain reputation is not covered. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 127.0.0.2 (test entry) or a sending IP (required)

Output parameters:

- `checkedAt`
- `ip`
- `listed`
- `returnCodes`
- `source`
- `zone`

### `security_spamhaus_zen` (~197 tokens)

Security Spamhaus Zen

Spamhaus blocklist check through Spamhaus's official Data Query Service: an IPv4 address against ZEN (SBL spam sources, CSS snowshoe, XBL exploited/botnet hosts, DROP hijacked ranges, PBL end-user ranges) or a domain against the Domain Block List (spam, phishing, malware, botnet C&C, abused legitimate domains). Returns listed yes/no, every return code with the list it means, and Spamhaus's lookup link. Point-in-time answer. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string): Domain name instead of an IP, e.g. dbltest.com (Spamhaus DBL test entry)
- `ip` (string): IPv4 address, e.g. 127.0.0.2 (Spamhaus test entry)

Output parameters:

- `checkedAt`
- `ip`
- `listed`
- `lists`
- `lookup`
- `returnCodes`
- `source`
- `zone`

### `security_surbl_uri_lookup` (~114 tokens)

Security Surbl Uri Lookup

Checks a domain against SURBL's multi-list (multi.surbl.org): whether it appears in spam or phishing URI lists. Listed domains return a 127.0.0.x code. Not listed means not in SURBL's current lists, not that the domain is safe. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as example.com (required)

Output parameters:

- `checkedAt`
- `domain`
- `listed`
- `returnCodes`
- `source`
- `zone`

### `security_openphish_feed` (~132 tokens)

Security Openphish Feed

Checks a URL or host against the OpenPhish public phishing feed (about 300 currently active phishing URLs, updated continuously). Returns whether the exact URL or any URL on the same host is listed, the feed size and up to 5 example URLs. Not listed does not mean safe; the feed is short and changes fast. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `url` (string, required): A full http or https URL, or a host name such as example.com (required)

Output parameters:

- `checkedAt`
- `exactMatch`
- `feedSize`
- `host`
- `listed`
- `query`
- `sampleUrls`
- `source`
- `urlsOnHost`

### `security_threatfox_iocs` (~176 tokens)

Security Threatfox Iocs

Searches abuse.ch ThreatFox for indicators of compromise matching a term (IP, IP:port, domain, URL or file hash): IOC, type, malware family, threat type, confidence, first/last seen, reporter, tags and Malpedia link. Optional exact match and a first-seen window in days. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `days` (string): Only IOCs first seen in the last N days, 1 to 365 (default: no limit)
- `exact` (string): true for exact match only (default false: partial match)
- `term` (string, required): An IP, IP:port, domain, URL or hash to look for (required)

Output parameters:

- `checkedAt`
- `count`
- `days`
- `exact`
- `iocs`
- `source`
- `term`

### `security_malbazaar_samples` (~170 tokens)

Security Malbazaar Samples

Looks up a file hash (SHA-256, SHA-1 or MD5) in abuse.ch MalwareBazaar: whether the sample is known, its other hashes, file name, type, size, signature (malware family), first/last seen, reporter, origin country, delivery method, tags, download count and code-signing info. Metadata only; the sample itself is never downloaded. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `hash` (string, required): SHA-256 (64 hex), SHA-1 (40 hex) or MD5 (32 hex) of the file (required)
- `sha256` (string): Same as hash (older name)

Output parameters:

- `checkedAt`
- `hash`
- `known`
- `link`
- `sample`
- `source`

### `security_feodotracker_c2` (~127 tokens)

Security Feodotracker C2

Checks an IPv4 address against the abuse.ch Feodo Tracker botnet C2 blocklist (Emotet, QakBot and similar). A hit returns the port, online status, malware family, country, AS and first and last seen dates. Covers only the C2 servers this feed tracks. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 162.243.103.246 (required)

Output parameters:

- `checkedAt`
- `entry`
- `ip`
- `listSize`
- `listed`
- `source`

### `security_sslbl_abuse_certs` (~116 tokens)

Security Sslbl Abuse Certs

Checks a certificate SHA-1 fingerprint (40 hex characters) against the abuse.ch SSL Blacklist of certificates seen on malware botnet C2 servers. A hit returns the date added and the malware reason from the list. Only certificates this list tracks are covered. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `sha1` (string, required): Certificate SHA-1 fingerprint, 40 hex characters (required)

Output parameters:

- `checkedAt`
- `entry`
- `listSize`
- `listed`
- `sha1`
- `source`

### `security_ipsum_threat_level` (~127 tokens)

Security Ipsum Threat Level

Checks an IPv4 address against IPsum, an aggregate of public blocklists: returns the number of source feeds that list it (its level, 1 to 8) and whether it is listed at all. A higher level means more feeds agree. Not listed means none of the aggregated feeds list it. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 185.220.101.1 (required)

Output parameters:

- `checkedAt`
- `entries`
- `ip`
- `level`
- `listed`
- `source`

### `security_cymru_asn_lookup` (~118 tokens)

Security Cymru Asn Lookup

Maps an IPv4 address to its origin AS number, the BGP prefix that covers it, the country, the registry and the allocation date, using Team Cymru's public IP-to-ASN DNS service. Returns no origin when Cymru has no mapping for the address. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 8.8.8.8 (required)

Output parameters:

- `allocated`
- `asn`
- `checkedAt`
- `country`
- `ip`
- `mapped`
- `prefix`
- `registry`
- `source`

### `security_blocklist_de` (~116 tokens)

Security Blocklist De

Checks an IPv4 address against the Blocklist.de 'all' list of IPs reported for attacks such as failed logins, SSH and mail abuse (about 24,000 addresses). A hit means it was reported recently; the list keeps only current reports. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 1.10.176.3 (required)

Output parameters:

- `checkedAt`
- `ip`
- `listSize`
- `listed`
- `source`

### `security_ciarmy_bad_ips` (~121 tokens)

Security Ciarmy Bad Ips

Checks an IPv4 address against the CI Army (CINS Score) bad-IP list, a collective-intelligence list of addresses that recently showed hostile activity across a sensor network (about 15,000 entries). Listed means it is on the current list; the list is a snapshot. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): IPv4 address such as 1.117.61.172 (required)

Output parameters:

- `checkedAt`
- `ip`
- `listSize`
- `listed`
- `source`

### `security_talos_ip_blacklist` (~134 tokens)

Security Talos Ip Blacklist

Cisco Talos reputation for an IPv4 address: threat level (favorable, neutral, poor, untrusted), web reputation score, forward/reverse DNS match, hostname, owner, location, email volume magnitude (daily, monthly and last 30 days), the /24 network's average magnitude and how many neighbouring addresses in that /24 Talos rates untrusted, poor, neutral or favorable. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `ip` (string, required): Public IPv4 address

Output parameters:

- `blockLists`
- `checkedAt`
- `contextTags`
- `dnsMatch`
- `emailVolume`
- `hostname`
- `ip`
- `last30Days`
- `location`
- `neighbours24`
- `organisation`
- `source`
- `spamProbability`
- `threatCategories`
- `threatLevel`
- `webReputation`

### `security_mx_server_test` (~125 tokens)

Security Mx Server Test

For a mail domain: lists up to 3 MX hosts with their IPv4 addresses and, from Shodan's pre-collected passive scan data, which SMTP ports (25, 465, 587) were seen open on each address. Passive and possibly old; no SMTP conversation, banner, STARTTLS or certificate test is made. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Mail domain such as gmail.com (required)

Output parameters:

- `checkedAt`
- `domain`
- `mxCount`
- `servers`
- `source`

### `security_dkim_key_checker` (~155 tokens)

Security Dkim Key Checker

Reads the DKIM public key published at <selector>._domainkey.<domain>: key type, whether it is revoked (empty p=), decoded key size in bytes and a strength hint (about 1024-bit vs 2048-bit RSA), and basic syntax (v=DKIM1). Follows one CNAME, which large providers use. Does not check a signed message. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Sending domain such as mailchimp.com (required)
- `selector` (string, required): DKIM selector such as k1 or google (required)

Output parameters:

- `checkedAt`
- `cnameTarget`
- `domain`
- `found`
- `keyBytes`
- `keyType`
- `revoked`
- `selector`
- `source`
- `strength`
- `syntaxOk`
- `version`

### `security_bimi_record_audit` (~132 tokens)

Security Bimi Record Audit

Reads a domain's BIMI record (default._bimi.<domain> TXT): whether it is published, the SVG logo URL (l=) and the certificate URL (a=, a VMC or CMC for mailbox providers). Checks the v=BIMI1 tag and that the URLs are https. It does not download the logo or validate the certificate. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as ebay.com (required)

Output parameters:

- `certificate`
- `checkedAt`
- `domain`
- `issues`
- `logo`
- `published`
- `source`
- `version`

### `security_mta_sts_validator` (~132 tokens)

Security Mta Sts Validator

Checks MTA-STS for a mail domain: the _mta-sts TXT record (v=STSv1 and id) and the HTTPS policy file (mode enforce, testing or none, the MX patterns and max_age). Reports whether the record and the policy are both present and whether the policy's version is valid. Does not test the mail servers themselves. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Mail domain such as gmail.com (required)

Output parameters:

- `checkedAt`
- `dnsRecord`
- `domain`
- `policy`
- `source`
- `validPolicy`

### `security_dns_caa_records` (~125 tokens)

Security Dns Caa Records

Lists the CAA (Certification Authority Authorization) records published on a domain: which CAs may issue certificates (issue), wildcard certificates (issuewild) and the incident-report address (iodef). Shows the records on the exact name only; CAA is inherited from parent domains when a name has none, which this tool does not walk. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as google.com (required)

Output parameters:

- `authorizedIssuers`
- `checkedAt`
- `domain`
- `hasCaa`
- `records`
- `source`
- `wildcardIssuers`

### `security_tls_alpn_detector` (~141 tokens)

Security Tls Alpn Detector

Reports which newer HTTP protocols a site advertises: HTTP/3 (h3) and older draft or HTTP/2 alternatives in its Alt-Svc response header, and the Alt-Svc max-age. This is what the server announces, not a TLS ALPN negotiation: the fetch this tool makes cannot choose the protocol, so a site that negotiates but does not send Alt-Svc will show as not advertised. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as example.com (required)

Output parameters:

- `advertised`
- `altSvc`
- `altSvcMaxAgeSeconds`
- `checkedAt`
- `domain`
- `finalUrl`
- `http3Advertised`
- `httpStatus`
- `source`

### `security_cert_revocation_crl` (~131 tokens)

Security Cert Revocation Crl

For a domain's current certificate (taken from public Certificate Transparency data via CertSpotter): reads its CRL Distribution Point, downloads that public CRL, and reports whether the certificate's serial number is on it, plus the CRL's thisUpdate and nextUpdate. OCSP is not queried. Revocation status is as of the CRL's publication time. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as wikipedia.org (required)

Output parameters:

- `certificate`
- `checkedAt`
- `crlEntries`
- `crlNextUpdate`
- `crlThisUpdate`
- `crlUrl`
- `domain`
- `revoked`
- `source`

### `security_mitre_attck_matrix` (~132 tokens)

Security Mitre Attck Matrix

Looks up one MITRE ATT&CK technique (e.g. T1059 or T1059.001) on its official public page: its name, the tactic-level summary text and the page title. Reads one page per call; it does not return the whole matrix or a technique's sub-techniques list. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `technique` (string, required): ATT&CK technique ID such as T1059 or T1059.001 (required)

Output parameters:

- `checkedAt`
- `name`
- `source`
- `summary`
- `technique`
- `title`

### `security_epss_exploit_score` (~137 tokens)

Security Epss Exploit Score

EPSS (Exploit Prediction Scoring System) for one CVE from FIRST's public API: the estimated probability (0 to 1) of exploitation in the next 30 days, its percentile among all scored CVEs and the scoring date. EPSS predicts; it does not say an exploit exists (see cisa-known-exploits). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `cveId` (string, required): CVE identifier such as CVE-2021-44228 (required)

Output parameters:

- `checkedAt`
- `cveId`
- `date`
- `epss`
- `percentile`
- `scored`
- `source`

### `security_cve_details_feed` (~286 tokens)

Security Cve Details Feed

Vulnerability trend for a vendor (optionally one product) from the NIST NVD: CVEs published in the last N days (default 7, up to 120; a big vendor over a long window can take NVD 30+ seconds) naming the vendor (or mapped to its CPE with match=cpe), counts by severity, average and maximum CVSS score, CVEs per week, top CWE weaknesses and the highest-scored CVEs with score, severity, vector, date and description. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `days` (string): Look-back window in days, 1 to 120 (default 7)
- `match` (string): keyword (default: vendor/product words in the CVE text) or cpe (only CVEs NVD has mapped to the vendor CPE)
- `product` (string): Optional CPE product name, e.g. windows_11_24h2, http_server, fortios
- `top` (string): How many top-scored CVEs to list, 1 to 50 (default 10)
- `vendor` (string, required): CPE vendor name, e.g. microsoft, apache, cisco, fortinet (required)

Output parameters:

- `analysed`
- `averageScore`
- `bySeverity`
- `checkedAt`
- `days`
- `from`
- `match`
- `maxScore`
- `perWeek`
- `product`
- `source`
- `to`
- `topCves`
- `topWeaknesses`
- `totalCves`
- `vendor`

### `security_jwt_token_inspector` (~146 tokens)

Security Jwt Token Inspector

Decodes a JWT you supply (header and payload, base64url JSON) and reports its algorithm, key id, claims, and time checks (exp, nbf, iat). Flags alg none, symmetric HS algorithms, missing exp and a jku/x5u key reference. It does not verify the signature, because no key is given, and it does not fetch the key URL. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `token` (string, required): A JWT in compact form: header.payload.signature (required, max 8 KB)

Output parameters:

- `algorithm`
- `audience`
- `checkedAt`
- `claims`
- `expired`
- `expiresAt`
- `issuedAt`
- `issuer`
- `issues`
- `keyId`
- `notBefore`
- `signatureVerified`
- `source`
- `subject`
- `type`

### `security_csp_evaluator_audit` (~133 tokens)

Security Csp Evaluator Audit

Reads the Content-Security-Policy header of a site's home page and lists weak points: 'unsafe-inline' and 'unsafe-eval' in script sources, bare wildcards, data: or http: script sources, a missing default-src or script-src, and a missing policy altogether. Reports directives. Header only; a CSP in a meta tag is not read. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as github.com (required)

Output parameters:

- `checkedAt`
- `directives`
- `domain`
- `issues`
- `present`
- `reportOnly`
- `source`

### `security_referrer_policy_audit` (~123 tokens)

Security Referrer Policy Audit

Reads a site's Referrer-Policy header and its <meta name=referrer> tag from the home page, works out the policy a browser would apply, and rates how much of the URL it sends to other sites (strict, moderate or leaky). One GET; links on other pages can set their own policy. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as github.com (required)

Output parameters:

- `checkedAt`
- `domain`
- `effectivePolicy`
- `header`
- `httpStatus`
- `metaTag`
- `rating`
- `source`

### `security_crossdomain_xml_test` (~117 tokens)

Security Crossdomain Xml Test

Reads a site's public crossdomain.xml (Adobe Flash) and clientaccesspolicy.xml (Silverlight) if they exist, lists the origins they allow, and flags wildcard grants ('*'). Old policies are rarely needed now, so a wildcard here mostly means leftovers; absence is the normal case. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Domain name such as www.adobe.com (required)

Output parameters:

- `checkedAt`
- `clientAccessPolicyXml`
- `crossdomainXml`
- `domain`
- `source`

### `search_website_content_crawler` (~144 tokens)

Search Website Content Crawler

Reads one public web page and returns its title, description and main text as Markdown (headings, links, lists), plus link counts. Reads only the page you name: no crawling of other pages, no JavaScript rendering, so pages that build their text in the browser may come back short. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `maxChars` (string): Longest Markdown returned, 500 to 40000 characters (default 8000)
- `url` (string, required): Full http or https address of a public page

Output parameters:

- `checkedAt`
- `description`
- `httpStatus`
- `links`
- `markdown`
- `markdownChars`
- `source`
- `title`
- `truncated`
- `url`

### `search_wayback_cdx` (~138 tokens)

Search Wayback Cdx

Internet Archive Wayback Machine CDX index: archived snapshots of a URL or domain (timestamp, original URL, MIME type, HTTP status, length) with a link to each capture. Public, no key; the index lists captures, not page text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many snapshots, 1 to 50 (default 10)
- `url` (string, required): URL or domain to look up, e.g. example.com or https://example.com/page

Output parameters:

- `checkedAt`
- `count`
- `snapshots`
- `source`
- `url`

### `search_google_search` (~180 tokens)

Search Google Search

Organic web search results from the Brave Search API (an independent web index, not Google's): rank, title, URL, snippet, site name, page age and language for the first page of results. Optional country and freshness filters. No ads or SERP features. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `country` (string): Optional 2-letter country for local results, e.g. us, gb, de
- `freshness` (string): Optional: pd (past day), pw (past week), pm (past month), py (past year)
- `limit` (string): How many results, 1 to 20 (default 10)
- `q` (string, required): Search query (1 to 200 characters)

### `search_google_ads` (~223 tokens)

Search Google Ads

Google Ads Transparency Center: search advertisers by name or domain (verified name, advertiser ID, country, approximate ad count), or list the ads of an advertiser ID or website domain (creative ID, format, first and last shown dates, days shown, preview URL, Transparency Center link), optionally for one country; plus the approximate total number of ads. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `advertiserId` (string): Advertiser ID (AR + 20 digits) to list its ads
- `domain` (string): Website domain to list ads pointing to it, e.g. nike.com
- `limit` (string): Ads to return, 1 to 100 (default 40)
- `q` (string): Advertiser name or domain to search, e.g. nike (returns advertisers)
- `region` (string): Optional country code (US, GB, DE, TR...) or Google geo criteria ID for ads shown there

### `search_wsj_articles` (~130 tokens)

Search Wsj Articles

WSJ World News headlines from the public Dow Jones RSS feed (latest items; keyword filter on title/summary). Headlines and short summaries only; full articles are paywalled and not returned. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_bing_search` (~128 tokens)

Search Bing Search

Bing web search results (Bing's public RSS search output, no key): result title, URL and snippet, in Bing's ranking order. Shows the first page of results Bing returns for the query; no paging, no ad or SERP-feature data. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many results, 1 to 30 (default 10)
- `q` (string, required): Search query (1 to 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_google_news` (~125 tokens)

Search Google News

Google News search (public Google News RSS search feed, no key, English/US edition): headline, publisher, publish time and the Google News link for the newest matching stories. Google News links redirect to the publisher; article text is not returned. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many stories, 1 to 30 (default 10)
- `q` (string, required): Search query (1 to 200 characters)

### `search_pr_newswire` (~118 tokens)

Search Pr Newswire

PR Newswire latest news-release list from its public RSS feed (keyword filter on title/summary). Press release headlines and summaries. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_beehiiv_newsletter` (~224 tokens)

Search Beehiiv Newsletter

Post archive of a beehiiv newsletter (by beehiiv subdomain, e.g. superhuman, or the newsletter's own domain if hosted on beehiiv): newsletter name, total posts, and per post title, subtitle, URL, publish time, authors, free/premium audience, tags and reading time, 10 per page, newest first. Optional word filter within the page. Public archive data, no key; post bodies are not returned. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `newsletter` (string, required): beehiiv subdomain (superhuman → superhuman.beehiiv.com) or the newsletter's domain/URL (e.g. www.superhuman.ai)
- `page` (string): Archive page, 1 or more (default 1), 10 posts per page
- `q` (string): Words that must all appear in the title or subtitle (filters this page only; optional)

Output parameters:

- `checkedAt`
- `count`
- `description`
- `newsletter`
- `page`
- `posts`
- `source`
- `totalPages`
- `totalPosts`
- `website`

### `search_benzinga` (~198 tokens)

Search Benzinga

Latest Benzinga financial news (the public JSON feed behind benzinga.com): headline, teaser, author, time, URL, tickers, channels and tags. Filter by stock tickers (e.g. AAPL,TSLA) and/or words in the headline/teaser. Newest first, up to 100 stories; no paging into older news, no full article text. Public, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many stories, 1 to 100 (default 20)
- `q` (string): Words that must all appear in the headline or teaser (optional, max 200 characters)
- `tickers` (string): Comma-separated stock tickers, up to 10 (optional), e.g. AAPL,TSLA

Output parameters:

- `checkedAt`
- `count`
- `q`
- `source`
- `stories`
- `tickers`

### `search_markdown_to_pdf_mcp` (~141 tokens)

Search Markdown To Pdf Mcp

npm registry search for MCP servers that convert Markdown to PDF (public npm search API, no key): package name, version, description, publisher, last publish date, monthly and weekly downloads, and npm link. Lists packages as npm reports them; quality is not checked. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many packages, 1 to 20 (default 5)
- `q` (string): Search words (1 to 100 characters, default markdown-to-pdf-mcp)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`
- `total`

### `search_unpaywall` (~119 tokens)

Search Unpaywall

Unpaywall open-access lookup by DOI (free API; it requires a contact e-mail set in UNPAYWALL_EMAIL, not a key): is the paper open access, OA status, best free full-text link, journal and publisher. Returns metadata and links only, not the PDF. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `doi` (string, required): DOI such as 10.1038/nature12373

Output parameters:

- `bestFreeUrl`
- `checkedAt`
- `doi`
- `isOpenAccess`
- `journal`
- `license`
- `oaStatus`
- `publisher`
- `source`
- `title`
- `year`

### `search_reuters_articles` (~170 tokens)

Search Reuters Articles

Latest Reuters articles: headline, publication time and link, newest first, optionally matching search words, from the last 1-30 days. Found through Google News's public RSS index of reuters.com (Reuters blocks automated clients); links are Google News redirect links to the Reuters article. Headlines only, no article text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `days` (string): Only articles from the last N days, 1 to 30 (default 7)
- `limit` (string): How many articles, 1 to 50 (default 10)
- `q` (string): Optional words to search for in Reuters articles (up to 150 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_fifa_team_rankings` (~169 tokens)

Search Fifa Team Rankings

FIFA men's national team world ranking (FIFA public ranking API, no key): position, team, country code, total points, previous points and previous rank for one ranking date. Default date is the latest one listed on FIFA's site when built (2026-10-20); pass dateId to read another listed date. Men's ranking only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `dateId` (string): Ranking date id such as id14870 (letters, digits and underscore, up to 40 characters; default id14870)
- `limit` (string): How many teams from the top, 1 to 211 (default 20)

Output parameters:

- `checkedAt`
- `count`
- `dateId`
- `rankings`
- `source`
- `teamCount`

### `search_university_rankings_mega_pack` (~233 tokens)

Search University Rankings Mega Pack

University rankings side by side from ShanghaiRanking ARWU (rank, national rank, total and six indicator scores) and Times Higher Education World University Rankings (rank, overall, teaching, research, citations, industry and international scores, students, student/staff ratio, % international, female:male). Search by university name and/or country; years selectable. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `arwuYear` (string): ARWU edition, 2003 to 2026 (default 2026)
- `country` (string): Country as the rankings write it, e.g. United Kingdom, China, Turkey/Türkiye
- `limit` (string): Rows per ranking, 1 to 200 (default 20)
- `theYear` (string): THE edition, e.g. 2026 (default 2026)
- `university` (string): Part of a university name, e.g. Oxford, Tsinghua, Bogazici

Output parameters:

- `arwu`
- `checkedAt`
- `query`
- `sources`
- `the`

### `search_freightwaves` (~119 tokens)

Search Freightwaves

FreightWaves latest news from its public RSS feed (keyword filter on title/summary/categories). Feed carries only the latest few items. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_crossref` (~121 tokens)

Search Crossref

Crossref works search (public REST API, no key): DOI, title, type, container (journal or book), year, authors and link for matching scholarly records. Metadata only; abstracts are not always present in Crossref. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `q` (string, required): Search words (1 to 200 characters)
- `rows` (string): How many records, 1 to 20 (default 5)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`
- `total`

### `search_bbc_news_articles` (~123 tokens)

Search Bbc News Articles

BBC News top stories from the public BBC RSS feed (latest items; keyword filter on title/summary). Headlines and summaries only, no full article text. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_article_extractor` (~146 tokens)

Search Article Extractor

Extracts one article from a public news or blog page: headline (og:title or h1), author, published and modified times, description and the article body as Markdown. Reads the page you name only; paywalled text is not returned and body text depends on the page using <article> or <main>. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `maxChars` (string): Longest body returned, 500 to 40000 characters (default 8000)
- `url` (string, required): Full http or https address of an article page

Output parameters:

- `author`
- `body`
- `bodyChars`
- `checkedAt`
- `description`
- `headline`
- `modified`
- `published`
- `source`
- `truncated`
- `url`

### `search_owgr_golf_rankings` (~115 tokens)

Search Owgr Golf Rankings

Official World Golf Ranking (OWGR public ranking API, no key): current men's position, player name, country, total points, average points and last week's position for the top players. Current ranking only; no tour or event history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many players from the top, 1 to 50 (default 10)

Output parameters:

- `checkedAt`
- `count`
- `rankings`
- `source`
- `totalRankings`

### `search_techcrunch_articles` (~117 tokens)

Search Techcrunch Articles

TechCrunch latest articles from its public RSS feed (keyword filter on title/summary/tags). Headlines and excerpts only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_prnewswire_press_releases` (~118 tokens)

Search Prnewswire Press Releases

PR Newswire health-category press releases from its public RSS feed (keyword filter on title/summary). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_emedicine_articles` (~344 tokens)

Search Emedicine Articles

Medscape eMedicine (Medscape Reference) clinical articles by specialty: title, topic category, article id and URL from the public specialty index, filtered by words in the title. With details=true the first 5 matches also get summary, author, last-reviewed date and paywall flag from the article page. Metadata only, no article text (Medscape articles need a free login). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `details` (string): true = add summary, author and last-reviewed date for the first 5 results (default false)
- `limit` (string): How many articles, 1 to 200 (default 25)
- `q` (string): Words that must all appear in the article title (optional, max 100 characters)
- `specialty` (string, required): Specialty index, one of: allergy_immunology, cardiology, clinical_procedures, critical_care, dermatology, emergency_medicine, endocrinology, gastroenterology, general_surgery, genomics, hematology, i…

Output parameters:

- `articles`
- `checkedAt`
- `count`
- `matches`
- `q`
- `source`
- `specialty`
- `totalInIndex`

### `search_openprescribing` (~246 tokens)

Search Openprescribing

NHS England primary-care prescribing for a drug (official NHSBSA English Prescribing Dataset, monthly, ~2 months behind; the raw data behind OpenPrescribing.net): items, actual cost (GBP) and quantity, grouped by region, ICB, GP practice or product presentation, largest first. Match on BNF chemical substance or presentation name. Open Government Licence, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `area` (string): Only rows whose ICB or region name contains this text, e.g. manchester (optional)
- `drug` (string, required): Drug name contained in the BNF chemical substance or presentation name, e.g. metformin, atorvastatin, semaglutide (2 to 60 characters)
- `groupBy` (string): region, icb, practice or presentation (default icb)
- `limit` (string): How many groups, 1 to 100 (default 20)
- `month` (string): Month as YYYYMM, e.g. 202608 (default latest published)

Output parameters:

- `area`
- `checkedAt`
- `count`
- `drug`
- `groupBy`
- `groups`
- `month`
- `source`

### `search_ft_com_articles` (~205 tokens)

Search Ft Com Articles

Financial Times headlines from the public FT RSS feeds: international homepage or any section/topic stream (world, markets, companies, technology, opinion, global-economy, us, uk, climate-capital...). Keyword filter on title/summary. Headlines and standfirsts only; full articles are paywalled and not returned. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)
- `section` (string): FT section or topic slug from the ft.com address, e.g. world, markets, companies, technology, opinion, global-economy, us, uk, climate-capital (default home = international homepage)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `section`
- `source`

### `search_wechat_articles` (~163 tokens)

Search Wechat Articles

WeChat Official Account (公众号) articles matching a query, from Sogou WeChat search (weixin.sogou.com): title, summary, account name, publish time and link, 10 per page. Links are Sogou redirect links that open the mp.weixin.qq.com article in a browser. Sogou may show a captcha under heavy use; that returns 503. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `page` (string): Result page 1 to 10 (default 1), 10 articles per page
- `q` (string, required): Search words, Chinese or English (1 to 80 characters)

Output parameters:

- `articles`
- `checkedAt`
- `count`
- `page`
- `q`
- `source`

### `search_hacker_news` (~119 tokens)

Search Hacker News

Hacker News story search through the official HN Search API (Algolia, public, no key): title, article URL, author, points, comment count and discussion link. Returns stories only, most relevant first. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many stories, 1 to 30 (default 10)
- `q` (string, required): Search words (1 to 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `nbHits`
- `q`
- `source`

### `search_drive_com_au_news` (~184 tokens)

Search Drive Com Au News

Latest Drive.com.au (Australia) articles: headline, publisher, publish time and link, newest first, optionally matching search words, from the last 1-30 days. Found through Google News's public RSS index of drive.com.au (the site blocks automated clients); links are Google News redirect links to the article. Headlines only, no article text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `days` (string): Only articles from the last N days, 1 to 30 (default 7)
- `limit` (string): How many articles, 1 to 100 (default 20)
- `q` (string): Words to search for within the site (optional, max 150 characters), e.g. Toyota

### `search_gtex_gene_expression` (~140 tokens)

Search Gtex Gene Expression

GTEx Portal gene expression (public API v2, no key): median TPM of one gene in human tissues, sorted highest first, with the GENCODE id it was matched to. Uses GTEx v8 data; unknown gene symbols return 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `gene` (string, required): Gene symbol such as BRCA1 (letters, digits and dash, up to 20 characters)
- `limit` (string): How many tissues, 1 to 54 (default 10)

Output parameters:

- `checkedAt`
- `dataset`
- `gencodeId`
- `gene`
- `source`
- `tissueCount`
- `tissues`
- `unit`

### `search_cnbc` (~112 tokens)

Search Cnbc

CNBC top news from CNBC's public RSS feed (keyword filter on title/summary). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_dappradar_rankings` (~230 tokens)

Search Dappradar Rankings

Top 50 dapps from DappRadar's public rankings page: rank, name, token symbol, chains, market cap, token price, price change, trading volume, unique active wallets (UAW) and TVL, for 24h/7d/30d, optionally for one chain (eth, solana, bnb, base, polygon, arbitrum, tron...). Values in USD as shown by DappRadar; missing values are null. Public page, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `chain` (string): DappRadar chain slug, e.g. eth, solana, bnb, base, polygon, arbitrum, avalanche, tron, ton (optional, default all chains)
- `limit` (string): How many dapps, 1 to 50 (default 25)
- `period` (string): 24h, 7d or 30d (default 24h)

Output parameters:

- `chain`
- `checkedAt`
- `count`
- `dapps`
- `period`
- `source`

### `search_german_impressum` (~124 tokens)

Search German Impressum

Reads the Impressum (legal notice required on German websites, §5 TMG/DDG) at the page URL you give: e-mail addresses, phone numbers, postal address lines and the notice text as Markdown. Values are read from the page as published; no check that the operator is correct. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `url` (string, required): Full http or https address of the Impressum page of a German website

Output parameters:

- `addressLines`
- `checkedAt`
- `emails`
- `notice`
- `phones`
- `source`
- `title`
- `url`

### `search_datacite_metadata` (~118 tokens)

Search Datacite Metadata

DataCite DOI search (public REST API, no key): DOI, title, publication year, resource type, publisher, creators and landing page for datasets, software and other research outputs. Metadata only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many records, 1 to 25 (default 5)
- `q` (string, required): Search words (1 to 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`
- `total`

### `search_al_jazeera_articles` (~115 tokens)

Search Al Jazeera Articles

Al Jazeera latest articles from its public RSS feed (keyword filter on title/summary/categories). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_defector_articles` (~121 tokens)

Search Defector Articles

Defector articles from its public RSS feed (keyword filter on title/summary/tags). Latest items only; excerpts are as published in the feed. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_doj_press_releases` (~118 tokens)

Search Doj Press Releases

US Department of Justice press releases from the justice.gov public RSS feed (keyword filter on title/summary). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_nyt_articles` (~121 tokens)

Search Nyt Articles

New York Times home page headlines from the public NYT RSS feed (latest items; keyword filter on title/summary/categories). Headlines and abstracts only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_ap_news_articles` (~182 tokens)

Search Ap News Articles

Latest Associated Press (AP News) articles: headline, publisher, publish time and link, newest first, optionally matching search words, from the last 1-30 days. Found through Google News's public RSS index of apnews.com (the site blocks automated clients); links are Google News redirect links to the article. Headlines only, no article text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `days` (string): Only articles from the last N days, 1 to 30 (default 7)
- `limit` (string): How many articles, 1 to 100 (default 20)
- `q` (string): Words to search for within the site (optional, max 150 characters), e.g. election

### `search_usda_market_news` (~237 tokens)

Search Usda Market News

USDA AMS Market News (official MyMarketNews API): search the catalogue of livestock, grain, dairy, fruit/vegetable and other market reports by title, or pass a report slug id to get its latest published rows (prices, volumes, report date). Data straight from USDA; needs the owner's free MARS API key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many reports or rows, 1 to 200 (default 25)
- `q` (string): Words that must all appear in the report title (catalogue search; optional, max 100 characters)
- `section` (string): With slug: which report section to return rows from, e.g. "Report Details" (default: the first section after the header; the catalogue lists each report's sections)
- `slug` (string): Report slug id (number from the catalogue, e.g. 3926) to get its latest report: header, narrative and data rows instead of searching

Output parameters:

- `checkedAt`
- `count`
- `q`
- `reports`
- `source`
- `total`

### `search_dev_to_articles` (~130 tokens)

Search Dev To Articles

DEV Community (dev.to) latest articles for one tag (public DEV API, no key): title, author, publish time, reactions, comments, reading time and link. Search by tag only; the public API has no free-text search. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many articles, 1 to 30 (default 10)
- `tag` (string, required): One tag name, letters and digits only, e.g. javascript

Output parameters:

- `checkedAt`
- `count`
- `items`
- `source`
- `tag`

### `search_europe_pmc_articles` (~132 tokens)

Search Europe Pmc Articles

Europe PMC literature search (public REST API, no key): PMID or source id, title, authors, journal, year, DOI, cited-by count and Europe PMC link. Covers life-science papers including preprints; abstracts are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many articles, 1 to 25 (default 5)
- `q` (string, required): Search words or Europe PMC query syntax (1 to 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`
- `total`

### `search_gcaptain_maritime_news` (~116 tokens)

Search Gcaptain Maritime News

gCaptain maritime news from its public RSS feed (keyword filter on title/summary/categories). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_figshare_articles` (~122 tokens)

Search Figshare Articles

Figshare public article search (public API, no key): id, title, DOI, publication date, item type and public page link for research articles, datasets and figures. Searches titles and metadata; file contents are not returned. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many articles, 1 to 25 (default 5)
- `q` (string, required): Search words (1 to 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_pubmed_article_metadata` (~116 tokens)

Search Pubmed Article Metadata

PubMed article metadata by PMID (NCBI E-utilities esummary, public, no key): title, journal, publication date, authors and DOI for up to 20 ids. Summary fields only, no abstracts. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `pmids` (string, required): One to 20 PubMed ids separated by commas, e.g. 12345678,31978945

Output parameters:

- `checkedAt`
- `count`
- `items`
- `source`

### `search_wordpress_articles` (~117 tokens)

Search Wordpress Articles

WordPress.org news posts from the official WordPress news RSS feed (keyword filter on title/summary/categories). Latest posts only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_crossref_academic_paper` (~102 tokens)

Search Crossref Academic Paper

Crossref DOI lookup (public REST API, no key): title, authors, journal, publication date, cited-by count, publisher and link for one paper. Unknown DOIs return 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `doi` (string, required): DOI such as 10.1038/nature12373

Output parameters:

- `authors`
- `checkedAt`
- `citedBy`
- `doi`
- `journal`
- `published`
- `publisher`
- `source`
- `title`
- `type`
- `url`

### `search_bingx_markets` (~125 tokens)

Search Bingx Markets

BingX perpetual swap market ticker (public open API, no key): last price, 24h change, high, low, open, base and quote volume and the time of the last candle close for one symbol such as BTC-USDT. Read-only market data; no trading. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `symbol` (string): Swap symbol like BTC-USDT (letters, digits and dash, up to 20 characters)

Output parameters:

- `askPrice`
- `bidPrice`
- `candleCloseTime`
- `changePercent24h`
- `checkedAt`
- `highPrice`
- `lastPrice`
- `lowPrice`
- `openPrice`
- `source`
- `symbol`
- `volumeBase`
- `volumeQuote`

### `search_gdelt_news` (~183 tokens)

Search Gdelt News

Recent news articles (last ~72 hours) that match a query, from GDELT's public Context 2.0 API (DOC 2.0 API as fallback), no key: title, URL, domain, language, time seen and the matching sentence. Supports GDELT query syntax ("exact phrase", sourcelang:english, domain:bbc.co.uk). Covers the sources GDELT monitors, not every outlet. Rate-limited or slow GDELT answers return 503. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many articles, 1 to 50 (default 10)
- `q` (string, required): Search words or GDELT query (1 to 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_theintercept_articles` (~114 tokens)

Search Theintercept Articles

The Intercept articles from its public RSS feed (keyword filter on title/summary/categories). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_shanghai_arwu_rankings` (~131 tokens)

Search Shanghai Arwu Rankings

ShanghaiRanking ARWU 2026 world university ranking (public table on shanghairanking.com, no key): world position, institution, national rank, total score and the six indicator scores (Alumni, Award, HiCi, N&S, PUB, PCP). The public page shows the top 30 only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many universities from the top, 1 to 30 (default 10)

Output parameters:

- `checkedAt`
- `count`
- `edition`
- `items`
- `source`

### `search_press_release_multi_wire` (~180 tokens)

Search Press Release Multi Wire

Latest press releases merged from public wire feeds: PR Newswire (all news), Business Wire (mergers & acquisitions) and Newswire.com. Newest first, de-duplicated, keyword filter on title/summary, each item tagged with its wire. Headlines, links, dates and summaries only. Public RSS, no key. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 50 (default 20)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)
- `wires` (string): Comma-separated wires to use: prnewswire, businesswire, newswire (default all three)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `wires`

### `search_news_across_the_web` (~197 tokens)

Search News Across The Web

Search news across the web in one call: Google News RSS, Bing News RSS and GDELT's Context 2.0 API (public, no keys), merged, de-duplicated by headline and sorted newest first. Each item has title, publisher, URL, time and which engines found it, plus a per-engine status. Headlines and snippets only, no full text. Google links are Google News redirect links. Takes about 15 s; allow a 45 s timeout. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `engines` (string): Comma-separated: google, bing, gdelt (default all three)
- `limit` (string): How many items, 1 to 60 (default 20)
- `q` (string, required): Search words (1 to 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `engines`
- `items`
- `q`

### `search_semafor_articles` (~114 tokens)

Search Semafor Articles

Semafor articles from its public RSS feed (keyword filter on title/summary/categories). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many items, 1 to 30 (default 10)
- `q` (string): Words that must all appear in the title or summary (optional, max 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_world_rugby_rankings` (~117 tokens)

Search World Rugby Rankings

World Rugby men's 15s world rankings (official rankings API, public, no key): position, team, country code, rating points and previous position and points, from the current table. Men's rankings only; the table is updated by World Rugby. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many teams from the top, 1 to 100 (default 20)

Output parameters:

- `checkedAt`
- `count`
- `rankings`
- `source`
- `table`
- `teamCount`

### `search_hackernews_items` (~108 tokens)

Search Hackernews Items

One Hacker News item by numeric id from the official HN API (Firebase, public, no key): type, title, author, time, score, comment count, link and plain text. Deleted or unknown ids return 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `id` (string, required): Numeric HN item id, e.g. 8863

Output parameters:

- `by`
- `checkedAt`
- `comments`
- `hnUrl`
- `id`
- `replyCount`
- `score`
- `source`
- `text`
- `time`
- `title`
- `type`
- `url`

### `search_bleacher_report_articles` (~182 tokens)

Search Bleacher Report Articles

Latest Bleacher Report articles: headline, publisher, publish time and link, newest first, optionally matching search words, from the last 1-30 days. Found through Google News's public RSS index of bleacherreport.com (the site blocks automated clients); links are Google News redirect links to the article. Headlines only, no article text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `days` (string): Only articles from the last N days, 1 to 30 (default 7)
- `limit` (string): How many articles, 1 to 100 (default 20)
- `q` (string): Words to search for within the site (optional, max 150 characters), e.g. NFL trade

### `search_leiden_ranking` (~353 tokens)

Search Leiden Ranking

CWTS Leiden Ranking Open Edition 2025 (publication-based, about 2,800 universities, OpenAlex data): for a country or continent, field and period (2006-2009 to 2020-2023), each university's rank, name, country and the indicators of the chosen dimension: scientific impact (P, top 1%), collaboration (international, industry) or open access (P(OA), PP(OA)). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `continent` (string): Instead of country: AF, AS, EU, NA, OC or SA
- `country` (string): 2-letter country code, e.g. TR, DE, US (omit for world)
- `dimension` (string): impact (default), collaboration or openaccess
- `field` (string): all (default), biomedical, life, math, physical or social
- `indicator` (string): Indicator set within the dimension, 1 to 5 (default 1; collaboration: 1 all, 2 international, 3 industry, 4 <100 km, 5 >5000 km)
- `limit` (string): Rows to return, 1 to 1000 (default 50)
- `minPublications` (string): 0, 50, 100 (default), 500, 1000, 5000 or 10000
- `period` (string): Last year of the 4-year window, 2009 to 2023 (default 2023 = 2020-2023)

Output parameters:

- `checkedAt`
- `columns`
- `continent`
- `country`
- `dimension`
- `edition`
- `field`
- `period`
- `rows`
- `source`
- `universities`

### `search_shanghai_gras_rankings` (~223 tokens)

Search Shanghai Gras Rankings

ShanghaiRanking Global Ranking of Academic Subjects (GRAS): for a subject (55, e.g. Mathematics, Computer Science, Clinical Medicine, Economics) and year, ranked universities with rank or band, total score, the five indicator scores, country and institution URL. Filter by country or university name. Without a subject, lists the subjects and their codes. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `country` (string): Optional country/region as ShanghaiRanking writes it, e.g. United States, China, Türkiye
- `limit` (string): Rows to return, 1 to 500 (default 50)
- `subject` (string): Subject name or code, e.g. Mathematics or AS0101 (omit to list subjects)
- `university` (string): Optional part of a university name
- `year` (string): Ranking year, 2017 to 2026 (default: newest for the subject)

Output parameters:

- `category`
- `checkedAt`
- `code`
- `indicators`
- `matches`
- `ranked`
- `rankings`
- `source`
- `subject`
- `year`

### `search_cran_r_packages` (~110 tokens)

Search Cran R Packages

CRAN R package metadata (crandb JSON mirror of CRAN, public, no key): name, version, title, description, license, maintainer, publication date, dependencies and CRAN page link. Unknown packages return 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `name` (string, required): Exact CRAN package name, e.g. ggplot2

Output parameters:

- `checkedAt`
- `depends`
- `description`
- `license`
- `maintainer`
- `name`
- `published`
- `source`
- `title`
- `url`
- `version`

### `seo_linkedin_ad_library` (~205 tokens)

Seo Linkedin Ad Library

LinkedIn Ad Library search (ads LinkedIn discloses publicly, including EU/EEA): up to 24 ads per page with ad id, advertiser, format (single image, video, carousel, document), creative type, tagline, ad text, links and detail link. Search by keyword and/or advertiser, optionally one country and a time window. From linkedin.com/ad-library via a residential proxy. Price: $0.01 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `advertiser` (string): Advertiser (company) name, e.g. Microsoft
- `country` (string): Optional two-letter country code where the ad ran, e.g. US, DE
- `keyword` (string): Words in the ad, e.g. software, cybersecurity
- `period` (string): Optional: last-30-days, current-month, current-year, last-year

### `search_wikimedia_commons_image` (~125 tokens)

Search Wikimedia Commons Image

Wikimedia Commons image search (MediaWiki API, public, no key): file title, direct image URL, size, MIME type, license, author and description for free-licensed files. Returns file metadata only, not image bytes. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many images, 1 to 20 (default 5)
- `q` (string, required): Search words (1 to 200 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `q`
- `source`

### `search_seo_audit_tool` (~131 tokens)

Search Seo Audit Tool

On-page SEO audit of one public page from its HTML only: title and description length, one H1, canonical link, language, viewport, robots meta, Open Graph tags, images without alt text, internal and external links, word count. Returns each check with its value and pass or fail. No Core Web Vitals, backlinks or keyword volumes. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `url` (string, required): Full http or https address of the page to audit

Output parameters:

- `checkedAt`
- `checks`
- `description`
- `failed`
- `httpStatus`
- `links`
- `passed`
- `responseMs`
- `score`
- `source`
- `title`
- `url`
- `wordCount`

### `search_shopify_metadata` (~152 tokens)

Search Shopify Metadata

Public product metadata of a Shopify store from its storefront products.json feed (no key): title, handle, vendor, product type, tags, publish and update times, price range, variant and image counts and product link. Only stores that expose products.json; stores that block it return 404. Takes about 20 s; allow a 45 s timeout. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `domain` (string, required): Store domain, e.g. allbirds.com (no path)
- `limit` (string): How many products, 1 to 30 (default 10)

Output parameters:

- `checkedAt`
- `count`
- `domain`
- `products`
- `source`

### `search_mangadex_manga` (~120 tokens)

Search Mangadex Manga

MangaDex manga search by title (public API, no key): id, title, year, publication status, content rating, genre tags, last chapter and page link. Metadata only; no chapter pages. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.

Input parameters:

- `limit` (string): How many manga, 1 to 20 (default 5)
- `title` (string, required): Title words (1 to 100 characters)

Output parameters:

- `checkedAt`
- `count`
- `items`
- `source`
- `title`
- `total`

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/bck-stack-sitecheck-web-intel/api#diagnostics

## Score history

- 2026-11-04: 72
- 2026-11-03: 71
- 2026-11-02: 71
- 2026-11-01: 70
- 2026-10-31: 70
- 2026-10-30: 69
- 2026-10-29: 69
- 2026-10-28: 68
- 2026-10-27: 68
- 2026-10-26: 67
- 2026-10-25: 67
- 2026-10-24: 66
- 2026-10-23: 66

## Common questions

### What is the SiteCheck Web Intel MCP server?

SiteCheck Web Intel is an MCP server listed in the public MCP registry as io.github.bck-stack/sitecheck-web-intel. 129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402. This page covers its hosted endpoint (https://api.webintel-api.workers.dev/mcp?ref=registry).

### Is the SiteCheck Web Intel MCP server safe to use?

SiteCheck Web Intel scores 72 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the SiteCheck Web Intel MCP server expose?

SiteCheck Web Intel exposes 129 tools: security_dns_records, security_whois_rdap, security_ssl_cert_chain, security_crtsh_transparency, security_ip_geolocation_asn, and 124 more. Their descriptions and schemas cost roughly 18,736 tokens of context every time the server is loaded.

### Does the SiteCheck Web Intel MCP server require authentication?

No. We connected to SiteCheck Web Intel without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the SiteCheck Web Intel MCP server still maintained?

SiteCheck Web Intel is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://api.webintel-api.workers.dev/mcp?ref=registry
- Website: https://api.webintel-api.workers.dev/
- Changelog RSS feed: https://verifymcp.io/servers/bck-stack-sitecheck-web-intel/api.xml
- Changelog JSON feed: https://verifymcp.io/servers/bck-stack-sitecheck-web-intel/api.json
- HTML version of this page: https://verifymcp.io/servers/bck-stack-sitecheck-web-intel/api