Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

com.edgethirteen.www/gateway

REMOTE · WWW.EDGETHIRTEEN.COM · SCANNED SEP 24

All 36 Edge Thirteen MCP tools (SEC filings, WCAG, entity diligence, more) in one endpoint.

−44 this week 25 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability0
Schema Quality & AI Usability0
  • Schema not yet verified: we couldn't read the endpoint's schema.Unverified
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
  • Tool coverage not yet verified: we couldn't read the endpoint's tools.Unverified
Tool Safety0
  • Tool safety not yet verified: we couldn't read the endpoint's tools.Unverified
Capabilities0
  • Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified

Unverified: 5 categories

Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

Install

How do I install the com.edgethirteen.www/gateway MCP server?

com.edgethirteen.www/gateway is a hosted endpoint at https://www.edgethirteen.com/api/mcp/gateway, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · www.edgethirteen.com

# add to Claude Code
claude mcp add --transport http com-edgethirteen-www-gateway 'https://www.edgethirteen.com/api/mcp/gateway'
// .cursor/mcp.json
{
  "mcpServers": {
    "com-edgethirteen-www-gateway": {
      "url": "https://www.edgethirteen.com/api/mcp/gateway"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "com-edgethirteen-www-gateway": {
      "type": "http",
      "url": "https://www.edgethirteen.com/api/mcp/gateway"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.com-edgethirteen-www-gateway]
url = "https://www.edgethirteen.com/api/mcp/gateway"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-edgethirteen-www-gateway": {
      "type": "remote",
      "url": "https://www.edgethirteen.com/api/mcp/gateway",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add com-edgethirteen-www-gateway --url 'https://www.edgethirteen.com/api/mcp/gateway' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  com-edgethirteen-www-gateway:
    url: "https://www.edgethirteen.com/api/mcp/gateway"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "com-edgethirteen-www-gateway": {
      "Transport": "http",
      "Url": "https://www.edgethirteen.com/api/mcp/gateway"
    }
  }
}
# add to Vellum
assistant mcp add com-edgethirteen-www-gateway -t streamable-http -u 'https://www.edgethirteen.com/api/mcp/gateway'
// mcp.json
{
  "mcpServers": {
    "com-edgethirteen-www-gateway": {
      "type": "http",
      "url": "https://www.edgethirteen.com/api/mcp/gateway"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 24 Sept 26 −50
    • Endpoint reachability: reachable → not serving MCP security
    • Stability: 0.23 → unverified security
    • Tool safety: pass → unverified security
    • Authorization: partial → unverified security
    • Transport: pass → fail security
    • Capabilities: pass → unverified functional
    • Tool coverage: 100 → unverified functional
    • First check of Schema quality: unverified functional
  • 23 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

  • 21 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

  • 19 Sept 26 0
    • New tool “sanctions__screen_name” functional
  • 18 Sept 26 +4
    • Schema quality: 5465 → 6290 functional
    • MCP protocol: fail → pass functional
    • MCP protocol version: 2025-03-26 → 2025-11-25 functional
    • New tool “hubspot-dbv__get_hubspot_dbv_info” functional
    • New tool “hubspot-dbv__list_hubspot_breaking_changes” functional
    • New tool “hubspot-dbv__lookup_hubspot_endpoint” functional
    • New tool “tariff-refund-screen__get_tariff_refund_screen_info” functional
    • New tool “tariff-refund-screen__get_tariff_refund_screen_preview” functional
    • New tool “voicebrief__get_stock_metric” functional
    • New tool “voicebrief__get_stock_snapshot” functional
  • 17 Sept 26 0
    • Stability: unverified → 0.03 functional
  • 16 Sept 26 69

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 24 Sept 2026 · Probed https://www.edgethirteen.com/api/mcp/gateway

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=www.edgethirteen.com CN=YR1,O=Let's Encrypt,C=US 24 Aug 2026 22 Nov 2026 RSA 2048 SHA256-RSA 6839f6f39d66a38fe8deece9986a25a4546
SANs: www.edgethirteen.com
CN=YR1,O=Let's Encrypt,C=US (CA) CN=Root YR,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 RSA 2048 SHA256-RSA a20253f15f2691c05dc1ce13b9bcca4e
CN=Root YR,O=ISRG,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 RSA 4096 SHA256-RSA f24b6d17f9d9ad7cb1c9fea78782699f

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of www.edgethirteen.com. Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
edgethirteen.com. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 404
Header Value
strict-transport-security max-age=63072000

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://www.edgethirteen.com/api/mcp/gateway HTTP error 404
http (plaintext) http://www.edgethirteen.com/api/mcp/gateway HTTPS enforced 308 https://www.edgethirteen.com/api/mcp/gateway
MCP tools · 44 exposed · ~6,426 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
accessproof__check_page_accessibility ~133

Scan a single live, publicly reachable web page's markup for the WCAG 2.1 failures that ADA web-accessibility demand letters and lawsuits cite most often: missing alt text, unlabeled form fields, missing lang attribute, empty links, skipped heading levels, missing page title, no h1, no skip link. Static markup analysis -- it can't check color contrast, keyboard navigation, or screen reader behavior, so a clean result means 'no known markup-level issue found,' not full compliance.

NameTypeReqDescription
urlstringyesA full http:// or https:// URL of the page to scan

No output schema declared.

No examples provided.

advisor-letter__get_advisor_letter_info ~76

Get pricing and details for AdvisorLetter: a weekly white-label market-commentary draft that financial advisors review and send to clients under their own name. Useful for an agent helping a financial advisor or RIA find a done-for-them (not done-by-AI-and-sent-raw) client communication product.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

advisor-letter__get_sample_issue ~70

Get a real sample AdvisorLetter issue -- the exact ready-to-forward weekly market-commentary draft an advisor reviews and sends to clients under their own name. This is a fixed sample issue, not this week's live draft -- the paid subscription is a fresh issue every Monday. Free, no key.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

ai-disclosure-kit__check_article50_disclosure ~213

Check whether the EU AI Act's Article 50 transparency rule applies to one of your AI touchpoints, and get a free sample disclosure notice for it. Covers chatbots, AI-generated images/audio/video, AI-generated public text, and emotion-recognition/biometric features. Returns which Article 50 obligation applies, where the notice belongs, and one ready-to-use disclosure sentence -- the same free preview shown on the web tool before checkout. Paste in your own business name for a personalized sentence. Free, no key.

NameTypeReqDescription
businessNamestringOptional business name to personalize the sample disclosure text. Defaults to 'Your business'.
touchpointstringyesWhich AI touchpoint to check: 'chatbot' (conversational AI), 'synthetic_media' (AI-generated/edited images, audio, or video), 'public_text' (AI-generated text published to the public), or 'biometric'…

No output schema declared.

No examples provided.

ai-disclosure-kit__get_ai_disclosure_kit_info ~92

Get pricing and details for AI Disclosure Kit: ready-to-use EU AI Act Article 50 transparency-obligation text, an embeddable disclosure banner, and a compliance record template for chatbots, AI-generated media, and biometric-categorization/emotion-recognition features. One-time $59. Useful for an agent implementing EU AI Act transparency disclosures for its user's product.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

altman-z-score-calculator__compute_altman_z_score ~141

Compute the Altman Z-Score (public-company, non-financial-services version) for a US-listed ticker -- a quick bankruptcy-risk / financial-distress screen from five balance-sheet ratios. Looks up working capital, total assets, retained earnings, EBIT, market cap, total liabilities, and revenue from SEC EDGAR + market data automatically -- just pass a ticker. Returns the score and which zone it falls in: safe (>2.99), grey (1.81-2.99), or distress (<1.81).

NameTypeReqDescription
tickerstringyesA US-listed ticker symbol, e.g. GE

No output schema declared.

No examples provided.

apidrift__get_apidrift_info ~99

Get pricing and details for APIDrift: weekly plus same-day urgent email alerts tracking deprecations, breaking schema changes, and pricing shifts across OpenAI, Anthropic, Google, xAI, Together, Mistral, Groq, Cloudflare Workers AI, and AWS Bedrock. Useful for an agent helping an engineering team that depends on LLM provider APIs avoid getting blindsided by an upstream breaking change.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

apidrift__get_recent_breaking_changes ~123

Get real, dated example entries of the kind of LLM-provider breaking change APIDrift catches -- model retirements, endpoint shutdowns, and schema/pricing changes across OpenAI, Anthropic, Google, xAI, Together, Mistral, Groq, Cloudflare Workers AI, and AWS Bedrock, each with what actually broke and what to check. These are illustrative sample entries, not a live feed -- the paid subscription is the ongoing weekly digest plus same-day urgent alerts as new changes ship. Free, no key.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

bank-stress-dataset__get_bank_stress_dataset_info ~109

Get details and pricing for the US Bank Regulatory Stress Dataset: a flat CSV covering every FDIC-insured bank's balance-sheet stress metrics (AOCI burden on capital, uninsured deposit ratio, non-performing loan ratio, and core balance-sheet figures) computed directly from each bank's own public FFIEC Call Report. Useful for an agent building a bank-screening or credit-risk model that needs a licensable raw data input instead of scraping regulatory filings itself.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

bank-stress-dataset__lookup_bank_stress_metrics ~184

Look up one US bank's balance-sheet stress metrics, computed from that bank's own FFIEC Call Report and citable as an official-source figure: AOCI burden on capital (how much of equity unrealised securities losses have eaten), uninsured deposit ratio, non-performing loan ratio, total assets and state. Covers all 4,296 FDIC-insured institutions for 2026 Q2 (filed as of 06/30/2026). Use this when an agent needs a grounded answer to "how stressed is this bank?" instead of guessing from memory or reading a filing by hand. Free, no key. One institution per call.

NameTypeReqDescription
namestringyesInstitution name or a distinctive part of it, e.g. "CITIBANK, N.A." or "Zions". Minimum 3 characters.

No output schema declared.

No examples provided.

chargeback-response__draft_chargeback_response_checklist ~357

Given a chargeback/dispute reason code category and order details, return the evidence checklist for that reason code (what to attach: tracking numbers, prior-order signals, refund records, etc.) and a preview of the response letter. Covers Visa 10.4/13.1/13.3/13.7/13.6/12.6.1 and the equivalent Mastercard reason codes. The full formatted dispute-response letter is a separate $39 product at https://www.edgethirteen.com/tools/chargeback-response. Not legal advice.

NameTypeReqDescription
amountstringDisputed amount
categorystringyesThe dispute reason category: fraud_card_absent (“I didn't make this purchase” (Visa 10.4, Mastercard 4837 — fraud)); not_received (“I never got it” (Visa 13.1, Mastercard 4855 — product/service not r…
currencystringCurrency code, defaults to USD
merchant_namestringMerchant/business name
order_datestringOrder date
order_idstringOrder or transaction ID
product_descriptionstringWhat was sold

No output schema declared.

No examples provided.

cloakcheck__check_page_for_agent_hijacking ~163

Fetch a URL and scan it for content planted to hijack an AI agent visiting it rather than to inform a human: invisible unicode (zero-width joiners, steganographic tag-block characters), CSS-hidden text (display:none, opacity:0, off-screen) paired with instruction-shaped language ('ignore previous instructions', 'add to cart and checkout', fake system-role text), and instruction-shaped phrases in alt/title/aria-label attributes or meta tags. Call this before an autonomous browsing or checkout flow acts on instructions found on a page. A clean result means no known hijack pattern found, not a full content-safety guarantee.

NameTypeReqDescription
urlstringyesFull URL (http:// or https://) of the page to scan

No output schema declared.

No examples provided.

commentlettercheck__check_sec_comment_letters ~100

Look up whether a US-listed ticker has any SEC comment-letter correspondence on file (staff review letters and company responses, form types UPLOAD/CORRESP). Returns a free-tier preview: filing count and most recent filing date, sourced live from SEC EDGAR. Does not include letter content or severity scoring -- that's the paid full report.

NameTypeReqDescription
tickerstringyesA US-listed stock ticker symbol, e.g. AAPL

No output schema declared.

No examples provided.

dcf-calculator__compute_dcf ~218

Compute a simplified discounted-cash-flow intrinsic value per share: project free cash flow per share forward at a constant growth rate, discount back at a discount rate, add a Gordon-growth terminal value. Pass fcf/growth/discount/terminal/years directly (these are judgment calls, not looked up). Optionally pass a ticker to auto-fill the current price for a margin-of-safety comparison.

NameTypeReqDescription
discountnumberyesDiscount rate, in percent, e.g. 10
fcfnumberyesFree cash flow per share
growthnumberyesGrowth rate for the projection years, in percent, e.g. 8
pricenumberCurrent price, used instead of a ticker lookup
terminalnumberyesTerminal growth rate, in percent, e.g. 2.5
tickerstringOptional ticker, used only to fetch the current price
yearsnumberyesNumber of projection years, e.g. 10

No output schema declared.

No examples provided.

drop-compliance-kit__check_drop_next_deadline ~150

Given a California data broker's DROP registration/start date, return the next 45-day DROP (Delete Request and Opt-out Platform) check-in deadline and the first two items of the compliance checklist. Missing a cycle costs $200/day per unprocessed deletion request, required starting August 1, 2026. The full 20-cycle calendar file, deletion-log template, and complete checklist are a separate $49 product at https://www.edgethirteen.com/tools/drop-compliance-kit. Not legal advice.

NameTypeReqDescription
business_namestringBusiness name
registration_datestringyesData broker registration date (or today, if unsure), YYYY-MM-DD

No output schema declared.

No examples provided.

exploitwatch__check_dependencies_against_kev ~161

Check a comma-separated list of software dependency/product names against CISA's live Known Exploited Vulnerabilities (KEV) catalog. Returns any matches with the CVE, vulnerability name, and why it matched. Call this before shipping or during a dependency/security review to catch actively-exploited components, or when working out whether an EU Cyber Resilience Act Article 14 reporting obligation (the 24h early warning / 72h notification / 14-day final report clock) has been triggered. Matching is by name and deliberately errs towards over-matching, so review each hit before acting on it.

NameTypeReqDescription
dependenciesstringyesComma-separated dependency/product names, e.g. "express, lodash, openssl"

No output schema declared.

No examples provided.

graham-number-calculator__compute_graham_number ~170

Compute Benjamin Graham's fair-value ceiling (sqrt(22.5 * EPS * book value per share)) for a US-listed ticker, and the margin of safety against its current price. Looks up EPS, book value per share, and price from SEC EDGAR + market data automatically -- just pass a ticker. You can also pass eps/bvps/price directly to compute it for a hypothetical company with no ticker.

NameTypeReqDescription
bvpsnumberBook value per share, used instead of a ticker lookup
epsnumberEarnings per share, used instead of a ticker lookup
pricenumberCurrent price, used to compute margin of safety
tickerstringA US-listed ticker symbol, e.g. AAPL

No output schema declared.

No examples provided.

hubspot-dbv__get_hubspot_dbv_info ~97

Get background and pricing for the HubSpot legacy-to-date-based-versioning (DBV) migration map: what's going unsupported, when, and where the full free map and $29/mo DBV Watch monitoring live. Useful for an agent helping a developer or agency plan a HubSpot API migration off v1-v4 before HubSpot's own per-endpoint docs ship in March 2027.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

hubspot-dbv__list_hubspot_breaking_changes ~106

List HubSpot API operations whose date-based-versioning replacement is BREAKING (a caller-visible field or parameter difference) or REMOVED (no date-based counterpart exists at all), optionally filtered by API name (e.g. 'CRM', 'Webhooks'). Useful for scoping how big a given migration is before starting it.

NameTypeReqDescription
apistringOptional substring filter on the HubSpot API name, e.g. 'webhooks'.

No output schema declared.

No examples provided.

hubspot-dbv__lookup_hubspot_endpoint ~157

Look up a legacy HubSpot API path (e.g. '/crm/v3/objects/contacts' or just 'contacts') and get its date-based-versioning replacement, whether the change is breaking, and the exact field-level differences (removed params, newly-required fields, changed types). Derived by diffing HubSpot's own public OpenAPI specs -- not a guess. Free, no key, full data (this map has no paid tier gating it).

NameTypeReqDescription
methodstringOptional HTTP method filter, e.g. GET, POST.
pathstringyesA legacy HubSpot API path or fragment, e.g. '/crm/v3/objects/contacts' or 'contacts'.

No output schema declared.

No examples provided.

industry-primers__get_industry_primer_info ~103

Get details and pricing for Edge Thirteen's current Industry Primer report: a one-time research report on a single investable industry theme, with real revenue/margin/growth figures pulled from each covered company's own SEC 10-K (not modeled or estimated), plus the analytical read on industry structure and competitive positioning. Useful for an agent helping with investment research that needs a sourced industry-level writeup instead of an LLM-generated summary.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

industry-primers__get_primer_preview_table ~123

Get the free FY2025 preview table from Edge Thirteen's current Industry Primer: ticker, FY2025 revenue, YoY growth, gross margin, and net margin for each covered company, sourced to that company's own 10-K via SEC EDGAR's XBRL company-facts API. This is the same free table already on the tool page -- the paid report adds FY2023-FY2024 comparatives, exact XBRL tag/accession sourcing per figure, and the written analysis. Free, no key.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

kdpcheck__check_manuscript_for_ai_slop_patterns ~150

Analyze manuscript text for patterns associated with AI-generated prose: cliche-phrase density, unnaturally uniform sentence-length rhythm, repeated paragraph openers, and overused transition words. Returns a 0-100 score, a high/medium/low band, and the single most severe flag -- the full flag breakdown with fix guidance for every flag is the paid $29 report at https://www.edgethirteen.com/tools/kdpcheck. Not a claim about authorship, just a pattern scan a writer can use to self-edit before publishing.

NameTypeReqDescription
textstringyesThe manuscript or excerpt text to analyze (longer excerpts score more reliably)

No output schema declared.

No examples provided.

killcord__get_killcord ~199

Get the killcord script: a dead-man's switch for Anthropic API spend. Self-hosted, dependency-free Node script that polls Anthropic's real Admin Usage & Cost API and deactivates the API key the instant spend crosses a limit -- for stopping a runaway agent loop, not just alerting on it. Returns the full script source plus a ready-to-run setup snippet, optionally pre-filled with the workspace/limit/keys you provide, so it can be written straight into the project being worked on.

NameTypeReqDescription
keysstringComma-separated Anthropic API key IDs to deactivate when tripped, e.g. apikey_...
limitUsdnumberSpend threshold in USD that trips the kill switch
webhookUrlstringOptional webhook URL to notify on trip/reset
workspaceIdstringAnthropic Workspace ID to watch, e.g. wrkspc_...

No output schema declared.

No examples provided.

meterkit__get_meterkit_bug_fix_sample ~111

Get a free, real code sample from MeterKit: the fix for a common Stripe webhook bug where access is only revoked on customer.subscription.deleted, missing that a card decline usually transitions a subscription via .updated first (sometimes without .deleted ever firing). This is the same free sample already on the tool page -- the paid kit is the surrounding webhook route plus the event-sourced credit ledger and Meter Events reporting/reconciliation, which this sample does not include. Free, no key.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

meterkit__get_meterkit_info ~106

Get pricing and details for MeterKit: a drop-in, event-sourced credit ledger plus a correct 2026 Stripe Billing Meter Events API integration for Next.js AI/SaaS products (the old usage_type: "metered" price approach was retired as of Stripe API version 2025-03-31.basil). Zero runtime dependencies, one-time $99, buyer owns the code. Useful for an agent implementing Stripe usage-based billing for its user.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

numbercheck__check_financial_numbers ~109

Check $CASHTAG-style ticker mentions (e.g. $AAPL) in a piece of financial writing against SEC EDGAR's own XBRL company-facts data for that company's most recent 10-K -- EPS, book value per share, revenue, market cap, total assets, total liabilities. Flags numeric claims that don't match the filed figures.

NameTypeReqDescription
textstringyesThe draft text to check, with $TICKER cashtags for each company mentioned.

No output schema declared.

No examples provided.

postingcheck__check_job_posting_pay_transparency ~180

Scan a job posting's text against the free-preview subset of US state salary-range-disclosure laws (CA, CO, NY, WA) and flag exactly which required element (salary range, benefits description) is detectably missing, with the statute citation. The full 15-state + DC report (CT, HI, IL, MD, MA, MN, NV, NJ, RI, VT, VA, DC too) is a separate $49 report at https://www.edgethirteen.com/tools/postingcheck. Conservative: never certifies a posting as compliant, only flags what's missing. Not legal advice.

NameTypeReqDescription
employee_countnumberEmployer's total employee count, used for laws with a minimum-employee threshold (optional)
posting_textstringyesThe full text of the job posting

No output schema declared.

No examples provided.

pumpcheck__check_npm_download_trust ~156

Check whether an npm package's public download count reflects real adoption. Detects 'download pumping' -- the documented supply-chain technique where a package is published in hundreds of rapid-fire versions so registry mirrors and security scanners inflate its download counter, making an unused or malicious package look popular. Returns npm's headline 30-day count, a spike-resistant estimate of sustained real usage, the share of the month falling on the busiest single day, recent version-flood bursts, and a verdict of clean, unreliable or inflated. Use before adding or recommending a dependency, especially a new or unfamiliar one.

NameTypeReqDescription
packagestringyesThe npm package name, e.g. express or @upstash/context7-mcp.

No output schema declared.

No examples provided.

renewal-matrix__check_renewal_cancellation_compliance ~284

Score a subscription business's signup/cancellation flow against US click-to-cancel and auto-renewal law (federal FTC Section 5/ROSCA, plus California AB 2863, Colorado SB25-145, Vermont, and Oregon). Returns the federal-level result now; the full state-by-state breakdown with statute citations is a separate $49 report at https://www.edgethirteen.com/tools/renewal-matrix. Not legal advice.

NameTypeReqDescription
b2b_customers_coloradobooleanDoes the business have B2B customers in Colorado?
long_term_or_discounted_trialbooleanIs this a 1+ year term, or a discounted/free trial converting to full price?
online_cancelbooleanyesCan a customer cancel online, in the same medium used to sign up?
online_signupbooleanCan a customer sign up online?
phone_or_email_requiredbooleanIs a phone call or email required to cancel?
prechecked_consentbooleanIs the auto-renewal consent box pre-checked by default?
renewal_notice_daysnumberDays of advance notice given before a renewal charge, if any
sells_statesstringyesComma-separated state codes the business sells to, or 'nationwide'

No output schema declared.

No examples provided.

rewardsguard__check_tiktok_rewards_risk ~158

Spot-check a TikTok creator's exported video list for TikTok Creator Rewards Program disqualification-risk signals: repetitive/duplicate captions, unnaturally regular posting cadence, ineligible formats (duet/stitch/photo), and under-duration videos. Returns a 0-100 risk score, a band (low/medium/high), and the single highest-severity flag -- the full flag breakdown is the paid product at edgethirteen.com/tools/rewards-guard. Input is the same caption/postedAt/durationSeconds/format rows TikTok Studio's own analytics export gives a creator about their own account.

NameTypeReqDescription
videosarrayyes1-60 rows of the creator's own video data

No output schema declared.

No examples provided.

sanctions__screen_name ~136

Screen a person or company name against OFAC's SDN and Consolidated Sanctions lists (19,874 entities, 21,320 aliases) via SanctionRail, for an agent checking a counterparty before a transaction, vendor onboarding, or payment approval. Returns fuzzy matches banded exact/strong/probable/weak with the sanctions programme, source list, and a common-name-collision flag so a common name like 'Maria Garcia' is surfaced, not silently suppressed. Free tier: 25 lookups/day per caller IP, no key required.

NameTypeReqDescription
namestringyesPerson or company name to screen.

No output schema declared.

No examples provided.

site-audit__audit_site_accessibility_and_agent_safety ~167

Discover a website's pages from its sitemap (or a homepage crawl as fallback) and sweep a free sample through two engines: WCAG 2.1 accessibility checks and AI-agent prompt-injection checks. Returns how many pages exist, how many were sampled, severity counts, and which categories of problem were found -- not the finding text or which page it's on. Call this before launch or handoff to catch site-wide accessibility and agent-hijacking exposure a single-page scan would miss. The full 40-page report with exact locations and a worst-first remediation order is a separate $499 product at https://www.edgethirteen.com/tools/site-audit.

NameTypeReqDescription
sitestringyesA website address, e.g. example.com

No output schema declared.

No examples provided.

slopcheck__check_youtube_channel_slop_risk ~160

Check a YouTube channel's recent uploads against YouTube's 2026 inauthentic-content ('AI slop') policy: title/description repetition, upload-cadence regularity, and AI-disclosure language. Returns an overall risk band (low/medium/high), a numeric score, and the single most severe flag found. This is a heuristic proxy for YouTube's own review process, not a simulation of it. The full flag-by-flag report with exact numbers and suggested fixes is a separate paid product at https://www.edgethirteen.com/tools/slopcheck.

NameTypeReqDescription
channelstringyesYouTube channel handle (e.g. @somechannel), URL, or channel ID

No output schema declared.

No examples provided.

stackledger__audit_saas_subscriptions ~167

Get an instant monthly/annual spend total for a pasted list of SaaS subscriptions, one per line as 'Name, monthly cost, category' (category is optional -- common tools like Slack or Notion are auto-recognized), plus a count of categories with likely overlap (e.g. two project-management tools). This is the free-tier preview -- the per-category breakdown, which line items are priced high for their category, and a consolidation-savings estimate are the $49 paid report at https://www.edgethirteen.com/tools/stackledger.

NameTypeReqDescription
subscriptionsstringyesOne subscription per line as "Name, cost[, category]", e.g. "Notion, 10\nAsana, 13\nSlack, 8.75"

No output schema declared.

No examples provided.

tariff-refund-screen__get_tariff_refund_screen_info ~130

Get details and pricing for Edge Thirteen's Tariff Refund Screen: a one-time CSV of US-listed companies disclosing IEEPA tariff-refund figures in their own SEC 10-Q/10-K filings since the Supreme Court struck down IEEPA tariff authority. These dollar figures are gain contingencies under ASC 450-30, so they carry no XBRL tag and don't appear on any stock screener -- they exist only as footnote prose. Useful for an agent doing investment research that needs to find a disclosure no numeric screen can surface.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

tariff-refund-screen__get_tariff_refund_screen_preview ~104

Get the free top-10 preview from the Tariff Refund Screen: ticker, company, disclosed amount, whether it's paid/accepted/received, and IEEPA refund as a percentage of shareholders' equity, ranked by materiality. This is the same free table already on the tool page -- the paid CSV adds the other 150 cited companies plus the exact citation sentence and filing URL for every figure. Free, no key.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

triageshield__verify_vulnerability_report ~150

Check a vulnerability report's concrete claims (file paths, file:line references, function names) against a real public GitHub repo's current contents. Flags claims that don't check out -- the file doesn't exist, the line is past EOF, the function isn't in the file -- which is the most common signature of an AI-generated fabricated vuln report. Does not judge whether a real, verifiable claim describes an actual security bug; it only checks whether the claim is honest about the codebase.

NameTypeReqDescription
repostringyesA github.com/owner/name URL for the public repo being reported against
reportstringyesThe full text of the vulnerability report to check

No output schema declared.

No examples provided.

us-diligence__screen_us_company ~158

Due diligence on a US company, from official federal records. Screens a company name against SEC EDGAR (is it a registered filer, under what CIK, state of incorporation and SIC code), the US Treasury OFAC SDN sanctions list, USAspending.gov federal contract and grant awards, and federal court dockets via CourtListener/RECAP. Use before onboarding a vendor, signing a supplier, screening a counterparty or qualifying a sales lead. Free screen returns how many records each source holds plus one sample record each; sources that cannot be reached are reported as not-checked rather than as clean.

NameTypeReqDescription
namestringyesThe US company's legal name, e.g. "Palantir Technologies Inc."

No output schema declared.

No examples provided.

valuefeed__get_sample_screen ~117

Get a real sample run of ValueFeed's Graham/Buffett-style value screen: per-name metrics (P/E, P/B, Graham fair value, margin of safety, ROE, current ratio, debt/equity, yield, years of positive EPS) for two names, plus an SEC 10-K/10-Q filing excerpt for one of them. This is a fixed illustrative sample, not a live run across the whole market -- the paid subscription is a fresh weekly screen every Monday. Free, no key.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

valuefeed__get_valuefeed_info ~77

Get pricing and details for ValueFeed: a weekly SEC-sourced value-investing research packet (screens, metrics, filing excerpts) licensed for independent newsletter writers and content creators to build their own commentary on top of. Useful for an agent helping a finance content creator find raw research inputs instead of raw LLM-generated numbers.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

vercelpycheck__check_vercel_python_project ~231

Scan pasted project files for known Vercel Python-runtime deploy footguns: conflicting requirements.txt/pyproject.toml manifests, a dependency manifest missing from the project root, sibling-module imports that need sys.path, multiple top-level ASGI apps under api/, streaming/SSE responses that can crash the Python runtime, oversized dependencies (torch/tensorflow/etc.), and unrouted .well-known/ files. Static analysis over file contents -- it doesn't run a real build, so a clean result means 'no known footgun found,' not a deploy guarantee. To scan a public GitHub repo automatically instead of pasting files, use the $29 checkout at https://www.edgethirteen.com/tools/vercelpycheck.

NameTypeReqDescription
filesstringyesProject files bundled as repeated '### FILE: path' markers followed by that file's content, e.g. '### FILE: requirements.txt\nfastapi\n### FILE: api/index.py\n...'. Include api/*.py files plus root m…

No output schema declared.

No examples provided.

voicebrief__get_stock_metric ~138

Answer one financial metric for a US public company, spoken as a single natural-language sentence grounded in that company's most recent SEC 10-K filing (via EDGAR's XBRL data) -- not a guess. Use for a specific spoken question like "what's Tesla's revenue" or "what's Apple's earnings per share". Metric must be one of: revenue, eps, book_value_per_share, market_cap, total_assets, total_liabilities, price.

NameTypeReqDescription
companystringyesCompany name or ticker, e.g. "Apple" or "AAPL".
metricstringyesWhich figure to report.

No output schema declared.

No examples provided.

voicebrief__get_stock_snapshot ~93

Give a short spoken financial snapshot of a US public company (revenue, earnings per share, market cap, book value per share) grounded in its most recent SEC 10-K filing. Use for a broad spoken question like "tell me about Apple's financials" rather than one specific figure.

NameTypeReqDescription
companystringyesCompany name or ticker, e.g. "Apple" or "AAPL".

No output schema declared.

No examples provided.

Common questions

What is the com.edgethirteen.www/gateway MCP server?

com.edgethirteen.www/gateway is an MCP server listed in the public MCP registry as com.edgethirteen.www/gateway. All 36 Edge Thirteen MCP tools (SEC filings, WCAG, entity diligence, more) in one endpoint. This page covers its hosted endpoint (https://www.edgethirteen.com/api/mcp/gateway).

Is the com.edgethirteen.www/gateway MCP server safe to use?

com.edgethirteen.www/gateway scores 25 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the com.edgethirteen.www/gateway MCP server expose?

com.edgethirteen.www/gateway exposes 44 tools: accessproof__check_page_accessibility, advisor-letter__get_advisor_letter_info, advisor-letter__get_sample_issue, ai-disclosure-kit__get_ai_disclosure_kit_info, ai-disclosure-kit__check_article50_disclosure, and 39 more. Their descriptions and schemas cost roughly 6,426 tokens of context every time the server is loaded.

Does the com.edgethirteen.www/gateway MCP server require authentication?

No. We connected to com.edgethirteen.www/gateway without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the com.edgethirteen.www/gateway MCP server still maintained?

com.edgethirteen.www/gateway is still listed as active in the MCP registry. We last reached this channel on 24 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.