SiteCheck Web Intel
REMOTE · API.WEBINTEL-API.WORKERS.DEV
129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402
Available components
Last scanned (1 hour ago)
Scores higher than 58% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Search and Retrieval
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS check failed: the endpoint is reachable over plaintext HTTP. See how to fix → View diagnostics → Fail
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability71
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 18886 tokens (~146/item across 129 items; 129 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management43
- Stability observed for 13 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 129 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 130 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Nov 26 +1
- Tool “search_news_across_the_web” rewrote its description, which is the text the model reads security
- 31 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 30 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “search_shopify_metadata” rewrote its description, which is the text the model reads security
- 29 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Oct 26 +1
- Tool “search_reuters_articles” rewrote its description, which is the text the model reads security
- “search_reuters_articles” added an optional parameter “days” cosmetic
- “search_reuters_articles” reworded the description of “q” cosmetic
- 25 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 24 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Stability: unverified → 0.03 ▲ functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://api.webintel-api.workers.dev/mcp?ref=registry
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=webintel-api.workers.dev | CN=YE1,O=Let's Encrypt,C=US | 19 Oct 2026 | 17 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 529f64cdabf01417afe11cbdcd40a9d7e04 |
| SANs: *.webintel-api.workers.dev, webintel-api.workers.dev | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of api.webintel-api.workers.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| workers.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.webintel-api.workers.dev/mcp?ref=registry | Verified | 200 | |
| http (plaintext) | http://api.webintel-api.workers.dev/mcp?ref=registry | Served over HTTP | 200 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
search_semafor_articles Search Semafor Articles ~114
Semafor articles from its public RSS feed (keyword filter on title/summary/categories). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | How many items, 1 to 30 (default 10) |
| q | string | – | Words that must all appear in the title or summary (optional, max 200 characters) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| count | – | – | – |
| items | – | – | – |
| q | – | – | – |
| source | – | – | – |
No examples provided.
search_seo_audit_tool Search Seo Audit Tool ~131
On-page SEO audit of one public page from its HTML only: title and description length, one H1, canonical link, language, viewport, robots meta, Open Graph tags, images without alt text, internal and external links, word count. Returns each check with its value and pass or fail. No Core Web Vitals, backlinks or keyword volumes. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Full http or https address of the page to audit |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| checks | – | – | – |
| description | – | – | – |
| failed | – | – | – |
| httpStatus | – | – | – |
| links | – | – | – |
| passed | – | – | – |
| responseMs | – | – | – |
| score | – | – | – |
| source | – | – | – |
| title | – | – | – |
| url | – | – | – |
| wordCount | – | – | – |
No examples provided.
search_shanghai_arwu_rankings Search Shanghai Arwu Rankings ~131
ShanghaiRanking ARWU 2026 world university ranking (public table on shanghairanking.com, no key): world position, institution, national rank, total score and the six indicator scores (Alumni, Award, HiCi, N&S, PUB, PCP). The public page shows the top 30 only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | How many universities from the top, 1 to 30 (default 10) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| count | – | – | – |
| edition | – | – | – |
| items | – | – | – |
| source | – | – | – |
No examples provided.
search_shanghai_gras_rankings Search Shanghai Gras Rankings ~223
ShanghaiRanking Global Ranking of Academic Subjects (GRAS): for a subject (55, e.g. Mathematics, Computer Science, Clinical Medicine, Economics) and year, ranked universities with rank or band, total score, the five indicator scores, country and institution URL. Filter by country or university name. Without a subject, lists the subjects and their codes. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | – | Optional country/region as ShanghaiRanking writes it, e.g. United States, China, Türkiye |
| limit | string | – | Rows to return, 1 to 500 (default 50) |
| subject | string | – | Subject name or code, e.g. Mathematics or AS0101 (omit to list subjects) |
| university | string | – | Optional part of a university name |
| year | string | – | Ranking year, 2017 to 2026 (default: newest for the subject) |
| Name | Type | Req | Description |
|---|---|---|---|
| category | – | – | – |
| checkedAt | – | – | – |
| code | – | – | – |
| indicators | – | – | – |
| matches | – | – | – |
| ranked | – | – | – |
| rankings | – | – | – |
| source | – | – | – |
| subject | – | – | – |
| year | – | – | – |
No examples provided.
search_shopify_metadata Search Shopify Metadata ~152
Public product metadata of a Shopify store from its storefront products.json feed (no key): title, handle, vendor, product type, tags, publish and update times, price range, variant and image counts and product link. Only stores that expose products.json; stores that block it return 404. Takes about 20 s; allow a 45 s timeout. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Store domain, e.g. allbirds.com (no path) |
| limit | string | – | How many products, 1 to 30 (default 10) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| count | – | – | – |
| domain | – | – | – |
| products | – | – | – |
| source | – | – | – |
No examples provided.
search_techcrunch_articles Search Techcrunch Articles ~117
TechCrunch latest articles from its public RSS feed (keyword filter on title/summary/tags). Headlines and excerpts only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | How many items, 1 to 30 (default 10) |
| q | string | – | Words that must all appear in the title or summary (optional, max 200 characters) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| count | – | – | – |
| items | – | – | – |
| q | – | – | – |
| source | – | – | – |
No examples provided.
search_theintercept_articles Search Theintercept Articles ~114
The Intercept articles from its public RSS feed (keyword filter on title/summary/categories). Latest items only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | How many items, 1 to 30 (default 10) |
| q | string | – | Words that must all appear in the title or summary (optional, max 200 characters) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| count | – | – | – |
| items | – | – | – |
| q | – | – | – |
| source | – | – | – |
No examples provided.
search_university_rankings_mega_pack Search University Rankings Mega Pack ~233
University rankings side by side from ShanghaiRanking ARWU (rank, national rank, total and six indicator scores) and Times Higher Education World University Rankings (rank, overall, teaching, research, citations, industry and international scores, students, student/staff ratio, % international, female:male). Search by university name and/or country; years selectable. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| arwuYear | string | – | ARWU edition, 2003 to 2026 (default 2026) |
| country | string | – | Country as the rankings write it, e.g. United Kingdom, China, Turkey/Türkiye |
| limit | string | – | Rows per ranking, 1 to 200 (default 20) |
| theYear | string | – | THE edition, e.g. 2026 (default 2026) |
| university | string | – | Part of a university name, e.g. Oxford, Tsinghua, Bogazici |
| Name | Type | Req | Description |
|---|---|---|---|
| arwu | – | – | – |
| checkedAt | – | – | – |
| query | – | – | – |
| sources | – | – | – |
| the | – | – | – |
No examples provided.
search_unpaywall Search Unpaywall ~119
Unpaywall open-access lookup by DOI (free API; it requires a contact e-mail set in UNPAYWALL_EMAIL, not a key): is the paper open access, OA status, best free full-text link, journal and publisher. Returns metadata and links only, not the PDF. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| doi | string | yes | DOI such as 10.1038/nature12373 |
| Name | Type | Req | Description |
|---|---|---|---|
| bestFreeUrl | – | – | – |
| checkedAt | – | – | – |
| doi | – | – | – |
| isOpenAccess | – | – | – |
| journal | – | – | – |
| license | – | – | – |
| oaStatus | – | – | – |
| publisher | – | – | – |
| source | – | – | – |
| title | – | – | – |
| year | – | – | – |
No examples provided.
search_usda_market_news Search Usda Market News ~237
USDA AMS Market News (official MyMarketNews API): search the catalogue of livestock, grain, dairy, fruit/vegetable and other market reports by title, or pass a report slug id to get its latest published rows (prices, volumes, report date). Data straight from USDA; needs the owner's free MARS API key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | How many reports or rows, 1 to 200 (default 25) |
| q | string | – | Words that must all appear in the report title (catalogue search; optional, max 100 characters) |
| section | string | – | With slug: which report section to return rows from, e.g. "Report Details" (default: the first section after the header; the catalogue lists each report's sections) |
| slug | string | – | Report slug id (number from the catalogue, e.g. 3926) to get its latest report: header, narrative and data rows instead of searching |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| count | – | – | – |
| q | – | – | – |
| reports | – | – | – |
| source | – | – | – |
| total | – | – | – |
No examples provided.
search_wayback_cdx Search Wayback Cdx ~138
Internet Archive Wayback Machine CDX index: archived snapshots of a URL or domain (timestamp, original URL, MIME type, HTTP status, length) with a link to each capture. Public, no key; the index lists captures, not page text. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | How many snapshots, 1 to 50 (default 10) |
| url | string | yes | URL or domain to look up, e.g. example.com or https://example.com/page |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| count | – | – | – |
| snapshots | – | – | – |
| source | – | – | – |
| url | – | – | – |
No examples provided.
search_website_content_crawler Search Website Content Crawler ~144
Reads one public web page and returns its title, description and main text as Markdown (headings, links, lists), plus link counts. Reads only the page you name: no crawling of other pages, no JavaScript rendering, so pages that build their text in the browser may come back short. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| maxChars | string | – | Longest Markdown returned, 500 to 40000 characters (default 8000) |
| url | string | yes | Full http or https address of a public page |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| description | – | – | – |
| httpStatus | – | – | – |
| links | – | – | – |
| markdown | – | – | – |
| markdownChars | – | – | – |
| source | – | – | – |
| title | – | – | – |
| truncated | – | – | – |
| url | – | – | – |
No examples provided.
search_wechat_articles Search Wechat Articles ~163
WeChat Official Account (公众号) articles matching a query, from Sogou WeChat search (weixin.sogou.com): title, summary, account name, publish time and link, 10 per page. Links are Sogou redirect links that open the mp.weixin.qq.com article in a browser. Sogou may show a captcha under heavy use; that returns 503. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| page | string | – | Result page 1 to 10 (default 1), 10 articles per page |
| q | string | yes | Search words, Chinese or English (1 to 80 characters) |
| Name | Type | Req | Description |
|---|---|---|---|
| articles | – | – | – |
| checkedAt | – | – | – |
| count | – | – | – |
| page | – | – | – |
| q | – | – | – |
| source | – | – | – |
No examples provided.
search_wikimedia_commons_image Search Wikimedia Commons Image ~125
Wikimedia Commons image search (MediaWiki API, public, no key): file title, direct image URL, size, MIME type, license, author and description for free-licensed files. Returns file metadata only, not image bytes. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | How many images, 1 to 20 (default 5) |
| q | string | yes | Search words (1 to 200 characters) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| count | – | – | – |
| items | – | – | – |
| q | – | – | – |
| source | – | – | – |
No examples provided.
search_wordpress_articles Search Wordpress Articles ~117
WordPress.org news posts from the official WordPress news RSS feed (keyword filter on title/summary/categories). Latest posts only. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | How many items, 1 to 30 (default 10) |
| q | string | – | Words that must all appear in the title or summary (optional, max 200 characters) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| count | – | – | – |
| items | – | – | – |
| q | – | – | – |
| source | – | – | – |
No examples provided.
search_world_rugby_rankings Search World Rugby Rankings ~117
World Rugby men's 15s world rankings (official rankings API, public, no key): position, team, country code, rating points and previous position and points, from the current table. Men's rankings only; the table is updated by World Rugby. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | How many teams from the top, 1 to 100 (default 20) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| count | – | – | – |
| rankings | – | – | – |
| source | – | – | – |
| table | – | – | – |
| teamCount | – | – | – |
No examples provided.
search_wsj_articles Search Wsj Articles ~130
WSJ World News headlines from the public Dow Jones RSS feed (latest items; keyword filter on title/summary). Headlines and short summaries only; full articles are paywalled and not returned. Public feed, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | string | – | How many items, 1 to 30 (default 10) |
| q | string | – | Words that must all appear in the title or summary (optional, max 200 characters) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| count | – | – | – |
| items | – | – | – |
| q | – | – | – |
| source | – | – | – |
No examples provided.
security_abuseipdb_check Security Abuseipdb Check ~123
AbuseIPDB reputation for an IPv4 address over the last 90 days: abuse confidence score (0-100), number of abuse reports, last report date, ISP, usage type and country. Needs a free AbuseIPDB key configured by the operator; reports are crowd-sourced. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| ip | string | yes | IPv4 address such as 185.220.101.1 (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| abuseConfidenceScore | – | – | – |
| checkedAt | – | – | – |
| countryCode | – | – | – |
| distinctReporters | – | – | – |
| domain | – | – | – |
| ip | – | – | – |
| isTor | – | – | – |
| isWhitelisted | – | – | – |
| isp | – | – | – |
| lastReportedAt | – | – | – |
| source | – | – | – |
| totalReports | – | – | – |
| usageType | – | – | – |
No examples provided.
security_asn_peers_upstream Security Asn Peers Upstream ~138
For an autonomous system (e.g. AS13335): how many upstream (transit) and downstream neighbours RIPEstat sees in BGP, the top upstreams ranked by 'power' with their IPv4 and IPv6 peer counts, and the top downstreams. Built from RIS route collector paths, so it is an observed view, not the contract. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| asn | string | yes | AS number such as AS13335 or 13335 (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| asn | – | – | – |
| checkedAt | – | – | – |
| counts | – | – | – |
| downstreams | – | – | – |
| source | – | – | – |
| upstreams | – | – | – |
No examples provided.
security_barracuda_reputation Security Barracuda Reputation ~145
Checks an IPv4 mail-sending address against the Barracuda Reputation Block List (b.barracudacentral.org) through public DNS. Listed addresses return a 127.0.0.x code; unlisted ones return no record. The list is updated continuously, so this is a point-in-time answer. Domain reputation is not covered. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| ip | string | yes | IPv4 address such as 127.0.0.2 (test entry) or a sending IP (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| ip | – | – | – |
| listed | – | – | – |
| returnCodes | – | – | – |
| source | – | – | – |
| zone | – | – | – |
No examples provided.
security_bgp_prefix_origin Security Bgp Prefix Origin ~161
For an IPv4 prefix (e.g. 8.8.8.0/24): the origin AS seen announcing it now across RIPE RIS peers, its RPKI status for that origin (valid, invalid or unknown), route objects, visibility, and how many more-specific and less-specific prefixes are seen. An 'invalid' RPKI status is a hijack warning sign; it is not proof of a hijack. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| prefix | string | yes | IPv4 prefix in CIDR form, e.g. 8.8.8.0/24 (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| currentOrigin | – | – | – |
| firstSeenOrigin | – | – | – |
| lastSeenAt | – | – | – |
| lessSpecifics | – | – | – |
| moreSpecifics | – | – | – |
| prefix | – | – | – |
| routeObjects | – | – | – |
| rpkiAlert | – | – | – |
| rpkiStatus | – | – | – |
| source | – | – | – |
| totalRisPeers | – | – | – |
| visibleOnRisPeers | – | – | – |
No examples provided.
security_bimi_record_audit Security Bimi Record Audit ~132
Reads a domain's BIMI record (default._bimi.<domain> TXT): whether it is published, the SVG logo URL (l=) and the certificate URL (a=, a VMC or CMC for mailbox providers). Checks the v=BIMI1 tag and that the URLs are https. It does not download the logo or validate the certificate. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain name such as ebay.com (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| certificate | – | – | – |
| checkedAt | – | – | – |
| domain | – | – | – |
| issues | – | – | – |
| logo | – | – | – |
| published | – | – | – |
| source | – | – | – |
| version | – | – | – |
No examples provided.
security_blocklist_de Security Blocklist De ~116
Checks an IPv4 address against the Blocklist.de 'all' list of IPs reported for attacks such as failed logins, SSH and mail abuse (about 24,000 addresses). A hit means it was reported recently; the list keeps only current reports. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| ip | string | yes | IPv4 address such as 1.10.176.3 (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| ip | – | – | – |
| listSize | – | – | – |
| listed | – | – | – |
| source | – | – | – |
No examples provided.
security_censys_exposure Security Censys Exposure ~118
Censys host view for an IPv4 address: the services, ports and protocols Censys has observed on it with their last scan time and detected software, plus autonomous system, location, network owner and reverse DNS, from the Censys Platform API. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| ip | string | yes | IPv4 address such as 8.8.8.8 (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| autonomousSystem | – | – | – |
| checkedAt | – | – | – |
| ip | – | – | – |
| location | – | – | – |
| organization | – | – | – |
| reverseDns | – | – | – |
| serviceCount | – | – | – |
| services | – | – | – |
| source | – | – | – |
No examples provided.
security_cert_revocation_crl Security Cert Revocation Crl ~131
For a domain's current certificate (taken from public Certificate Transparency data via CertSpotter): reads its CRL Distribution Point, downloads that public CRL, and reports whether the certificate's serial number is on it, plus the CRL's thisUpdate and nextUpdate. OCSP is not queried. Revocation status is as of the CRL's publication time. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain name such as wikipedia.org (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| certificate | – | – | – |
| checkedAt | – | – | – |
| crlEntries | – | – | – |
| crlNextUpdate | – | – | – |
| crlThisUpdate | – | – | – |
| crlUrl | – | – | – |
| domain | – | – | – |
| revoked | – | – | – |
| source | – | – | – |
No examples provided.
security_ciarmy_bad_ips Security Ciarmy Bad Ips ~121
Checks an IPv4 address against the CI Army (CINS Score) bad-IP list, a collective-intelligence list of addresses that recently showed hostile activity across a sensor network (about 15,000 entries). Listed means it is on the current list; the list is a snapshot. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| ip | string | yes | IPv4 address such as 1.117.61.172 (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| ip | – | – | – |
| listSize | – | – | – |
| listed | – | – | – |
| source | – | – | – |
No examples provided.
security_cisa_known_exploits Security Cisa Known Exploits ~167
CISA's Known Exploited Vulnerabilities catalog (public JSON). With cveId: whether that CVE is on the list, with vendor, product, date added, federal due date, required action and ransomware-use flag. Without it: catalog size, release date and the newest additions (up to 50). Listing means exploitation was reported, not a risk score. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| cveId | string | – | CVE identifier to look up (optional) |
| limit | string | – | How many newest additions to list when no cveId is given, 1 to 50 (default 10) |
| Name | Type | Req | Description |
|---|---|---|---|
| catalogSize | – | – | – |
| catalogVersion | – | – | – |
| checkedAt | – | – | – |
| cveId | – | – | – |
| entry | – | – | – |
| listed | – | – | – |
| released | – | – | – |
| source | – | – | – |
No examples provided.
security_cookie_security Security Cookie Security ~108
Lists the cookies a site sets on its public home page (one anonymous GET, no login) with their Secure, HttpOnly and SameSite flags, and flags the ones missing a flag. Cookies set later, after login or on other pages, are not seen. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain name such as github.com (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| cookieCount | – | – | – |
| cookies | – | – | – |
| cookiesWithIssues | – | – | – |
| domain | – | – | – |
| finalUrl | – | – | – |
| httpStatus | – | – | – |
| source | – | – | – |
No examples provided.
security_cors_misconfig Security Cors Misconfig ~127
Checks how a site's home page answers a cross-origin request from a made-up origin: whether it echoes that origin back, sends a wildcard (*), and whether credentials are allowed with it. Echoing an arbitrary origin together with credentials is the risky case. One GET of the home page; it does not test API routes or the null origin. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain name such as httpbin.org (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| allowCredentials | – | – | – |
| allowOrigin | – | – | – |
| checkedAt | – | – | – |
| domain | – | – | – |
| finalUrl | – | – | – |
| httpStatus | – | – | – |
| probeOrigin | – | – | – |
| source | – | – | – |
| verdict | – | – | – |
No examples provided.
security_crossdomain_xml_test Security Crossdomain Xml Test ~117
Reads a site's public crossdomain.xml (Adobe Flash) and clientaccesspolicy.xml (Silverlight) if they exist, lists the origins they allow, and flags wildcard grants ('*'). Old policies are rarely needed now, so a wildcard here mostly means leftovers; absence is the normal case. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain name such as www.adobe.com (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| clientAccessPolicyXml | – | – | – |
| crossdomainXml | – | – | – |
| domain | – | – | – |
| source | – | – | – |
No examples provided.
security_crtsh_transparency Security Crtsh Transparency ~126
Subdomain names found in public Certificate Transparency logs for a domain (via CertSpotter): unique host names and wildcard names, issuers, latest issue date and how many listed certificates are still valid. Returns the first page only (up to 100 certificates) and lists at most 100 names; wildcard names are shown as *.domain. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain name such as wikipedia.org (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| certificatesListed | – | – | – |
| checkedAt | – | – | – |
| domain | – | – | – |
| issuers | – | – | – |
| latestIssued | – | – | – |
| nameCount | – | – | – |
| names | – | – | – |
| source | – | – | – |
| validCertificates | – | – | – |
No examples provided.
security_csp_evaluator_audit Security Csp Evaluator Audit ~133
Reads the Content-Security-Policy header of a site's home page and lists weak points: 'unsafe-inline' and 'unsafe-eval' in script sources, bare wildcards, data: or http: script sources, a missing default-src or script-src, and a missing policy altogether. Reports directives. Header only; a CSP in a meta tag is not read. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain name such as github.com (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| directives | – | – | – |
| domain | – | – | – |
| issues | – | – | – |
| present | – | – | – |
| reportOnly | – | – | – |
| source | – | – | – |
No examples provided.
security_cve_details_feed Security Cve Details Feed ~286
Vulnerability trend for a vendor (optionally one product) from the NIST NVD: CVEs published in the last N days (default 7, up to 120; a big vendor over a long window can take NVD 30+ seconds) naming the vendor (or mapped to its CPE with match=cpe), counts by severity, average and maximum CVSS score, CVEs per week, top CWE weaknesses and the highest-scored CVEs with score, severity, vector, date and description. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| days | string | – | Look-back window in days, 1 to 120 (default 7) |
| match | string | – | keyword (default: vendor/product words in the CVE text) or cpe (only CVEs NVD has mapped to the vendor CPE) |
| product | string | – | Optional CPE product name, e.g. windows_11_24h2, http_server, fortios |
| top | string | – | How many top-scored CVEs to list, 1 to 50 (default 10) |
| vendor | string | yes | CPE vendor name, e.g. microsoft, apache, cisco, fortinet (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| analysed | – | – | – |
| averageScore | – | – | – |
| bySeverity | – | – | – |
| checkedAt | – | – | – |
| days | – | – | – |
| from | – | – | – |
| match | – | – | – |
| maxScore | – | – | – |
| perWeek | – | – | – |
| product | – | – | – |
| source | – | – | – |
| to | – | – | – |
| topCves | – | – | – |
| topWeaknesses | – | – | – |
| totalCves | – | – | – |
| vendor | – | – | – |
No examples provided.
security_cve_nvd_lookup Security Cve Nvd Lookup ~166
One CVE record from the NIST National Vulnerability Database: description, published and last-modified dates, NVD status, primary CVSS score and severity (v4.0, 3.1, 3.0 or 2.0, whichever NVD marks primary first), CWE weakness IDs and up to 5 reference URLs. It does not say whether the CVE is being exploited (use cisa-known-exploits or epss-exploit-score for that). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| cveId | string | yes | CVE identifier such as CVE-2021-44228 (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| cvss | – | – | – |
| cwe | – | – | – |
| description | – | – | – |
| id | – | – | – |
| lastModified | – | – | – |
| published | – | – | – |
| references | – | – | – |
| source | – | – | – |
| status | – | – | – |
No examples provided.
security_cymru_asn_lookup Security Cymru Asn Lookup ~118
Maps an IPv4 address to its origin AS number, the BGP prefix that covers it, the country, the registry and the allocation date, using Team Cymru's public IP-to-ASN DNS service. Returns no origin when Cymru has no mapping for the address. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| ip | string | yes | IPv4 address such as 8.8.8.8 (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| allocated | – | – | – |
| asn | – | – | – |
| checkedAt | – | – | – |
| country | – | – | – |
| ip | – | – | – |
| mapped | – | – | – |
| prefix | – | – | – |
| registry | – | – | – |
| source | – | – | – |
No examples provided.
security_dkim_key_checker Security Dkim Key Checker ~155
Reads the DKIM public key published at <selector>._domainkey.<domain>: key type, whether it is revoked (empty p=), decoded key size in bytes and a strength hint (about 1024-bit vs 2048-bit RSA), and basic syntax (v=DKIM1). Follows one CNAME, which large providers use. Does not check a signed message. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Sending domain such as mailchimp.com (required) |
| selector | string | yes | DKIM selector such as k1 or google (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| cnameTarget | – | – | – |
| domain | – | – | – |
| found | – | – | – |
| keyBytes | – | – | – |
| keyType | – | – | – |
| revoked | – | – | – |
| selector | – | – | – |
| source | – | – | – |
| strength | – | – | – |
| syntaxOk | – | – | – |
| version | – | – | – |
No examples provided.
security_dmarc_spf_dkim Security Dmarc Spf Dkim ~164
Email authentication DNS records for a domain: DMARC policy (p, sp, pct, rua), SPF record and its all-mechanism, and DKIM public keys for a selector you give or for 8 common selectors (revoked keys and CNAME-delegated keys are reported). Reads the published DNS records only; it does not check alignment against a real message. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain name such as google.com (required) |
| selector | string | – | DKIM selector such as google, selector1 or k1 (optional; common selectors are tried when empty) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| dkim | – | – | – |
| dkimSelectorsTried | – | – | – |
| dmarc | – | – | – |
| domain | – | – | – |
| source | – | – | – |
| spf | – | – | – |
No examples provided.
security_dns_caa_records Security Dns Caa Records ~125
Lists the CAA (Certification Authority Authorization) records published on a domain: which CAs may issue certificates (issue), wildcard certificates (issuewild) and the incident-report address (iodef). Shows the records on the exact name only; CAA is inherited from parent domains when a name has none, which this tool does not walk. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain name such as google.com (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| authorizedIssuers | – | – | – |
| checkedAt | – | – | – |
| domain | – | – | – |
| hasCaa | – | – | – |
| records | – | – | – |
| source | – | – | – |
| wildcardIssuers | – | – | – |
No examples provided.
security_dns_propagation Security Dns Propagation ~148
Asks two independent public DNS resolvers (AdGuard DNS and NextDNS) for the same name and record type right now and reports whether they agree, with each answer set and its lowest TTL. It shows cache and geo-DNS differences between resolvers; it is two vantage points, not a worldwide propagation survey. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Host or domain name, e.g. example.com (required) |
| type | string | – | A, AAAA, MX, NS, TXT or CNAME (default A) |
| Name | Type | Req | Description |
|---|---|---|---|
| agree | – | – | – |
| checkedAt | – | – | – |
| name | – | – | – |
| resolvers | – | – | – |
| source | – | – | – |
| type | – | – | – |
No examples provided.
security_dns_records Security Dns Records ~165
DNS records of a domain (A, AAAA, MX, NS, TXT, CNAME, CAA, SOA) resolved live through the public AdGuard DNS JSON resolver (NextDNS as backup). Shows answers as they resolve now, with TTLs; it does not walk the delegation chain or query the authoritative servers directly. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Domain name, e.g. example.com (required) |
| types | string | – | Comma list of record types from A,AAAA,MX,NS,TXT,CNAME,CAA,SOA (default A,AAAA,MX,NS,TXT) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| name | – | – | – |
| nameservers | – | – | – |
| rcode | – | – | – |
| records | – | – | – |
| resolver | – | – | – |
| source | – | – | – |
No examples provided.
security_dnssec_validator Security Dnssec Validator ~122
DNSSEC check for a domain: whether a DS record exists at the parent zone (the domain is signed), and whether two public validating resolvers (AdGuard DNS, NextDNS) return its A answer with the AD (authenticated) flag. It reads the resolvers' verdict; it does not validate the signature chain itself. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain name such as example.com (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| domain | – | – | – |
| dsAtParent | – | – | – |
| resolvers | – | – | – |
| source | – | – | – |
| verdict | – | – | – |
No examples provided.
security_domain_typosquatting Security Domain Typosquatting ~138
For a brand domain, generates up to 24 lookalike names (letter omission, doubling and swapping, plus .co/.net/.org/.io swaps) and checks which ones have name servers in DNS right now. Registered-looking names are listed with their name servers. A lookalike with no name servers may still be registered without DNS, and this is not a trademark or phishing verdict. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Brand domain such as github.com (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| brand | – | – | – |
| candidatesChecked | – | – | – |
| checkedAt | – | – | – |
| registeredLookalikes | – | – | – |
| source | – | – | – |
No examples provided.
security_email_disposable Security Email Disposable ~122
Checks whether an email address's domain (or a domain you give) is on the community disposable and temporary email blocklist (about 9,900 domains). Only the domain is checked, never the mailbox, and a domain missing from the list is not proven to be permanent. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | Email address or domain, e.g. user@mailinator.com or mailinator.com (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| disposable | – | – | – |
| domain | – | – | – |
| listSize | – | – | – |
| source | – | – | – |
No examples provided.
security_epss_exploit_score Security Epss Exploit Score ~137
EPSS (Exploit Prediction Scoring System) for one CVE from FIRST's public API: the estimated probability (0 to 1) of exploitation in the next 30 days, its percentile among all scored CVEs and the scoring date. EPSS predicts; it does not say an exploit exists (see cisa-known-exploits). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
| Name | Type | Req | Description |
|---|---|---|---|
| cveId | string | yes | CVE identifier such as CVE-2021-44228 (required) |
| Name | Type | Req | Description |
|---|---|---|---|
| checkedAt | – | – | – |
| cveId | – | – | – |
| date | – | – | – |
| epss | – | – | – |
| percentile | – | – | – |
| scored | – | – | – |
| source | – | – | – |
No examples provided.
How do I install the SiteCheck Web Intel MCP server?
SiteCheck Web Intel is a hosted endpoint at https://api.webintel-api.workers.dev/mcp?ref=registry, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.webintel-api.workers.dev
claude mcp add --transport http bck-stack-sitecheck-web-intel 'https://api.webintel-api.workers.dev/mcp?ref=registry'
What is the SiteCheck Web Intel MCP server?
SiteCheck Web Intel is an MCP server listed in the public MCP registry as io.github.bck-stack/sitecheck-web-intel. 129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402. This page covers its hosted endpoint (https://api.webintel-api.workers.dev/mcp?ref=registry).
Is the SiteCheck Web Intel MCP server safe to use?
SiteCheck Web Intel scores 72 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the SiteCheck Web Intel MCP server expose?
SiteCheck Web Intel exposes 129 tools: security_dns_records, security_whois_rdap, security_ssl_cert_chain, security_crtsh_transparency, security_ip_geolocation_asn, and 124 more. Their descriptions and schemas cost roughly 18,736 tokens of context every time the server is loaded.
Does the SiteCheck Web Intel MCP server require authentication?
No. We connected to SiteCheck Web Intel without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the SiteCheck Web Intel MCP server still maintained?
SiteCheck Web Intel is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.