# Toolcall (remote · toolcall.click)

30 pay-per-call APIs for AI agents: compliance, trade, safety, web, data. USDC on Base via x402.

- Trust score: 62/100 (medium)
- Change this week: +2
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `toolcall.click`: 62/100 (this document), [markdown](https://verifymcp.io/servers/click-toolcall-toolcall/toolcall.md), [page](https://verifymcp.io/servers/click-toolcall-toolcall/toolcall)

## Channel facts

- Endpoint: `https://toolcall.click/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 46/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 30 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS not yet verified: we couldn't determine whether a plaintext access path exists.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 3922 tokens (~130/item across 30 items; 30 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 99% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http click-toolcall-toolcall https://toolcall.click/mcp
```

### Codex

```toml
[mcp_servers.click-toolcall-toolcall]
url = "https://toolcall.click/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "click-toolcall-toolcall": {
      "type": "remote",
      "url": "https://toolcall.click/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add click-toolcall-toolcall --url https://toolcall.click/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  click-toolcall-toolcall:
    url: "https://toolcall.click/mcp"
```

### Other

```json
{
  "mcpServers": {
    "click-toolcall-toolcall": {
      "type": "http",
      "url": "https://toolcall.click/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 62, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-01 (score 61, +1)

No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-31 (score 60, −2)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 62, +1)

No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-28 (score 61, +1)

- [security] Tool “med-device” rewrote its description, which is the text the model reads
- [security] Tool “med-drug” rewrote its description, which is the text the model reads
- [security] Tool “recall-check” rewrote its description, which is the text the model reads
- [security] Tool “sanctions-screen” rewrote its description, which is the text the model reads
- [security] Tool “pdf-extract” rewrote its description, which is the text the model reads
- [security] Tool “company-verify” rewrote its description, which is the text the model reads
- [security] Tool “crypto-spot” rewrote its description, which is the text the model reads
- [security] Tool “legal-cases” rewrote its description, which is the text the model reads

### 2026-07-27 (score 60, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 59)

First indexed and scored.

## MCP tools (30)

### `crypto-spot` (~109 tokens)

Live spot prices for cryptocurrencies with 24h change. Query by CoinGecko ids (comma-separated, e.g. bitcoin,ethereum) and a fiat vs currency. Fresh within 60 seconds. JSON response. [Paid: $0.001 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `ids` (string, required): Comma-separated CoinGecko coin ids, max 25
- `vs` (string): Fiat or crypto quote currency, default usd

### `crypto-gas` (~69 tokens)

Current gas price and latest block for Base or Ethereum mainnet, straight from public RPC. Fresh within 15 seconds. JSON response. [Paid: $0.002 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `chain` (string, required): Chain to query

### `fx-rates` (~86 tokens)

Foreign exchange reference rates from the European Central Bank. Base currency plus optional symbols filter. Updated daily on ECB schedule. JSON response. [Paid: $0.002 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `base` (string): Base currency code, default USD
- `symbols` (string): Comma-separated target currency codes, optional

### `domain-check` (~103 tokens)

Due-diligence check on any domain: registration age via RDAP, registrar, DNS posture (A/MX/NS), SPF and DMARC presence, SSL certificate history, and risk flags like newly-registered or no-mail-setup. One call, one JSON verdict. [Paid: $0.008 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `domain` (string, required): Domain to check, e.g. example.com

### `email-validate` (~100 tokens)

Email verification and deliverability check without sending anything: syntax, MX records, disposable-domain detection (121k+ known domains), role-account and free-provider flags. JSON verdict with a bounce/deliverability risk level. Validate emails for signup fraud prevention, list hygiene and lead qualification. [Paid: $0.004 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `email` (string, required): Email address to validate

### `news-search` (~99 tokens)

Recent news headlines for any company, topic or query: deduplicated titles with source, link and publish date from a broad news index. Window configurable 1-30 days. JSON response. [Paid: $0.01 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `days` (integer): Lookback window in days, default 7
- `q` (string, required): Search query, company or topic

### `youtube-transcript` (~87 tokens)

Full plain-text transcript of a YouTube video, de-duplicated and cleaned from the captions. Accepts a video id or URL. Ideal for feeding video content to LLMs. JSON response. [Paid: $0.01 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `v` (string, required): YouTube video id or full URL

### `pdf-extract` (~81 tokens)

Extract clean text from any public PDF URL (papers, filings, reports). Up to 10 MB per document. Returns page count and full text as JSON. [Paid: $0.005 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `url` (string, required): Public URL of the PDF, max 10 MB

### `web-search` (~90 tokens)

Keyless web search for agents: pass a query, get a concise web-grounded answer plus the top source results (title, URL, snippet). Live web access, no API key or account needed. JSON response. [Paid: $0.008 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `q` (string, required): Search query, 1-300 chars

### `brand-visibility` (~127 tokens)

See what AI models say about a brand right now. Runs category and reputation prompts across multiple AI engines (one web-grounded), then reports whether the brand is mentioned, its position vs competitors, sentiment, the exact descriptors used, gaps, and concrete recommendations. JSON report. [Paid: $0.25 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `brand` (string, required): Brand or product name
- `category` (string): Market category for best-of prompts, optional
- `domain` (string): Brand website, optional, improves accuracy

### `screenshot` (~110 tokens)

Full-fidelity screenshot of any public web page, captured by a real Chrome browser. Viewport or full-page, configurable width. Returns a base64 PNG. JSON response. [Paid: $0.015 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `full` (string): 1 for full-page, else viewport
- `url` (string, required): Public page URL
- `width` (integer): Viewport width 320-2000, default 1280

### `reader` (~104 tokens)

Turn any public web page, including JavaScript-heavy ones, into clean readable markdown (or text/html) with title and byline. Rendered by a real browser then stripped to the main content. Ideal for feeding pages to LLMs. JSON response. [Paid: $0.006 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `format` (string): Output format, default markdown
- `url` (string, required): Public page URL

### `chem-safety` (~147 tokens)

Full safety profile for any chemical by CAS number or name: GHS hazard classification (signal word, pictograms, H-statements, P-codes), first-aid measures for inhalation/skin/eye/ingestion, fire-fighting guidance, UN transport number, PPE, and CAMEO reactivity profile. Sourced live from PubChem (NIH) authoritative annotations. JSON response. [Paid: $0.03 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `cas` (string): CAS registry number, e.g. 7681-52-9
- `name` (string): Chemical name, alternative to cas

### `chem-compat` (~133 tokens)

Can chemical A be safely mixed or stored with chemical B? Pass two CAS numbers or names. Returns a verdict (incompatible / caution / no_known_hazard), the reason, expected effects (gas evolution, heat, fire, toxic fumes) and confidence, from expert reasoning over PubChem GHS data and CAMEO-derived reactivity profiles. JSON response. [Paid: $0.03 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `a` (string, required): First chemical: CAS number or name
- `b` (string, required): Second chemical: CAS number or name

### `recall-check` (~167 tokens)

One call checks product recalls and safety alerts across US federal agencies: NHTSA vehicle recalls (by VIN, auto-decoded, or make/model/year), CPSC consumer product recalls, and FDA food, drug and device enforcement actions. Query by vin=, upc=, query= (product name), or brand=. Unified JSON list with hazard, remedy, date and official links. [Paid: $0.01 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `brand` (string): Manufacturer or brand name
- `query` (string): Product name or keyword
- `upc` (string): Product UPC/EAN barcode, 8-14 digits
- `vin` (string): Vehicle VIN, decoded via NHTSA vPIC

### `med-drug` (~121 tokens)

Complete FDA intelligence on any drug by brand name, generic name or NDC: label facts (indications, warnings, interactions, dosage), manufacturer, current shortage status, recent recalls with classification, and total adverse-event report count (FAERS). Aggregated live from openFDA in one call. JSON response. [Paid: $0.02 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `name` (string): Brand or generic drug name
- `ndc` (string): National Drug Code, alternative to name

### `med-device` (~120 tokens)

FDA intelligence on any medical device by name or UDI: GUDID identity, device class and regulation, 510(k) clearances, PMA approvals, recent recalls, and adverse-event report count (MAUDE). Aggregated live from openFDA in one call. JSON response. [Paid: $0.02 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `name` (string): Device, brand or generic name
- `udi` (string): Unique Device Identifier (DI), alternative to name

### `hs-classify` (~142 tokens)

Classify any product to its HS / HTS customs code from a plain-English description. Expert LLM classification grounded in the live official USITC Harmonized Tariff Schedule: returns the 10-digit HTS code, international HS6, official description path, US duty rate (general + special programs), confidence, reasoning and alternates. JSON response. [Paid: $0.04 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `desc` (string, required): Plain-English product description, max 500 chars
- `dest` (string): Destination country ISO code, default US (duty shown is US MFN)

### `sanctions-screen` (~189 tokens)

AML / KYC sanctions screening: check a person, company or vessel name against the four major official sanctions lists in one call: OFAC SDN (US), UN Consolidated, EU Consolidated (FSF) and the UK Sanctions List (FCDO). Fuzzy matching across primary names and aliases with a match score, entry details (type, programs, country, DOB) and list freshness. Refreshed daily from primary sources. Built for compliance and counterparty checks. JSON response. [Paid: $0.01 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `country` (string): Optional country filter (name or fragment)
- `limit` (integer): Max hits, default 10
- `name` (string, required): Person, company or vessel name, 2-120 chars
- `type` (string): Optional type filter

### `company-verify` (~230 tokens)

Verify a business in one call: EU VAT validation against official VIES, legal-entity lookup via the GLEIF LEI registry (name, status, jurisdiction, company number, direct parent), and official UK Companies House data (profile by company number, or name search) with status, incorporation date, SIC codes and registered address. Query by vat= (e.g. DE811569869), lei=, name= (+country=), or number= (UK). JSON response. [Paid: $0.01 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `country` (string): ISO country filter for name search
- `lei` (string): 20-char LEI code, alternative to vat
- `name` (string): Company name search via GLEIF (and Companies House when country=GB), alternative to vat/lei
- `number` (string): UK Companies House company number, e.g. 00445790
- `vat` (string): EU VAT number with country prefix, e.g. DE811569869

### `product-barcode` (~133 tokens)

Full product truth from an EAN/UPC barcode: name, brand, quantity, categories, complete ingredients, allergens, additives, nutrition per 100g, Nutri-Score / NOVA / Eco-Score, packaging materials with recycling info, plus any linked CPSC or FDA recall for the same barcode. Covers food, general products and cosmetics (Open Food/Products/Beauty Facts). JSON response. [Paid: $0.02 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `ean` (string, required): EAN/UPC barcode, 8-14 digits

### `legal-cases` (~157 tokens)

US litigation footprint of a company or person in one call: federal court dockets (PACER/RECAP) with case name, court, nature of suit, filing date and judge; bankruptcy filings with chapter; and published court opinions with citations. Optional court and filed-after filters. Data from the Free Law Project (CourtListener). US-focused. JSON response. [Paid: $0.03 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `court` (string): CourtListener court id filter, optional (e.g. cand, nysd)
- `filedAfter` (string): YYYY-MM-DD, only matters filed after this date
- `q` (string, required): Company or person name

### `part-lookup` (~141 tokens)

Everything about an electronic component from its manufacturer part number: live distributor stock and price breaks across DigiKey, Mouser, Farnell, RS, Arrow and more, lifecycle status, MOQ, packaging, lead times, datasheet link, key specs and drop-in alternates. Optional country= for regional pricing. One call instead of checking each distributor. JSON response. [Paid: $0.04 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `country` (string): ISO country for regional pricing, default US
- `mpn` (string, required): Manufacturer part number, e.g. LM358MX/NOPB

### `job-search` (~152 tokens)

Live job postings without scraping: company= returns an employer's current openings straight from their official ATS board (Greenhouse, Lever, Ashby, SmartRecruiters) with title, location, department, type and apply URL; query= searches remote-heavy job APIs (Remotive, Arbeitnow) by keyword. Optional location= filter. JSON response. [Paid: $0.02 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `company` (string): Employer name; reads their public ATS job board
- `limit` (integer)
- `location` (string): Location filter substring, optional
- `query` (string): Keyword search across job APIs, alternative to company

### `local-search` (~184 tokens)

Find local businesses and places by category and location: pharmacies, restaurants, hotels, plumbers, lawyers, gyms and 40+ more categories, or any name keyword. Pass what= plus city= (geocoded automatically) or lat=&lon= with a radius. Returns name, category, address, phone, website, opening hours and coordinates from OpenStreetMap. JSON response. [Paid: $0.02 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `city` (string): City or place name, geocoded automatically
- `lat` (number): Latitude, alternative to city
- `lon` (number): Longitude, alternative to city
- `radius` (integer): Search radius in meters, default 5000
- `what` (string, required): Business category (pharmacy, plumber, hotel...) or name keyword

### `package-check` (~157 tokens)

Is this dependency safe to use? Pass a package name (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet) and optional version: returns known vulnerabilities (OSV/CVE with CVSS and fixed-in version), deprecation status, license, latest version, repo health (stars, OpenSSF Scorecard) and an overall ok/caution/avoid verdict. JSON response. [Paid: $0.01 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `eco` (string): Ecosystem, default npm
- `name` (string, required): Package name, e.g. express or @scope/pkg
- `version` (string): Version to check, default latest

### `web-history` (~121 tokens)

The archived history of any website from the Internet Archive Wayback Machine: first-seen date, last-seen date, total snapshots, how many distinct versions the page went through, and a timeline of snapshot links (one per month). Great for domain due-diligence, brand history and change tracking. JSON response. [Paid: $0.02 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `limit` (integer): Max snapshots, default 25
- `url` (string, required): URL or domain to look up

### `tech-stack` (~119 tokens)

Detect the technologies a website runs: CMS (WordPress, Shopify, Webflow...), JS framework (Next.js, React, Vue, Angular...), analytics and marketing tools, payments, CDN, hosting, server, language, UI libraries and fonts. Plus server header, generator meta and security-header posture. Pass url= or domain=. Signature-based from the live homepage. JSON response. [Paid: $0.02 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `url` (string, required): URL or domain to fingerprint

### `sec-financials` (~123 tokens)

Key financials for any US-listed company by ticker, straight from SEC EDGAR XBRL filings: latest annual revenue, gross profit, operating and net income, total assets, liabilities, stockholders equity, cash and diluted EPS, plus up to 5 years of history for each. Official as-reported 10-K figures. Pass ticker=. JSON response. [Paid: $0.03 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `ticker` (string, required): US-listed ticker symbol, e.g. AAPL

### `holidays` (~152 tokens)

Public holidays for any country and year, plus optional business-day checking. Pass country= (ISO alpha-2) and year=; add date= to learn whether that day is a business day, whether it is a weekend or public holiday, the holiday name, and the next business day. Covers 100+ countries. JSON response. [Paid: $0.01 USDC per call via x402 on Base; the calling client pays automatically.]

Input parameters:

- `country` (string, required): ISO 3166 alpha-2 country code, e.g. US, GB, DE
- `date` (string): YYYY-MM-DD to run a business-day check, optional
- `year` (integer): Year, default current

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/click-toolcall-toolcall/toolcall#diagnostics

## Score history

- 2026-08-03: 62
- 2026-08-02: 61
- 2026-08-01: 61
- 2026-07-31: 60
- 2026-07-30: 62
- 2026-07-29: 61
- 2026-07-28: 61
- 2026-07-27: 60
- 2026-07-26: 59

## Links

- Remote endpoint: https://toolcall.click/mcp
- Repository: https://github.com/BeneIstvan/toolcall-mcp
- Website: https://toolcall.click/
- Changelog RSS feed: https://verifymcp.io/servers/click-toolcall-toolcall/toolcall/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/click-toolcall-toolcall/toolcall/changelog.json
- HTML version of this page: https://verifymcp.io/servers/click-toolcall-toolcall/toolcall