com.edgethirteen.www/gateway
REMOTE · WWW.EDGETHIRTEEN.COM · SCANNED SEP 24
All 36 Edge Thirteen MCP tools (SEC filings, WCAG, entity diligence, more) in one endpoint.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the tool list to see what that exposes. View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability0
- Transport check failed: declared streamable-http, but the endpoint returned HTTP 404. See how to fix → View diagnostics → Fail
Schema Quality & AI Usability0
- Schema not yet verified: we couldn't read the endpoint's schema.Unverified
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
- Tool coverage not yet verified: we couldn't read the endpoint's tools.Unverified
Tool Safety0
- Tool safety not yet verified: we couldn't read the endpoint's tools.Unverified
Capabilities0
- Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified
Unverified: 5 categories
Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.
How do I install the com.edgethirteen.www/gateway MCP server?
com.edgethirteen.www/gateway is a hosted endpoint at https://www.edgethirteen.com/api/mcp/gateway, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · www.edgethirteen.com
claude mcp add --transport http com-edgethirteen-www-gateway 'https://www.edgethirteen.com/api/mcp/gateway'
{
"mcpServers": {
"com-edgethirteen-www-gateway": {
"url": "https://www.edgethirteen.com/api/mcp/gateway"
}
}
} {
"servers": {
"com-edgethirteen-www-gateway": {
"type": "http",
"url": "https://www.edgethirteen.com/api/mcp/gateway"
}
}
} [mcp_servers.com-edgethirteen-www-gateway] url = "https://www.edgethirteen.com/api/mcp/gateway"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-edgethirteen-www-gateway": {
"type": "remote",
"url": "https://www.edgethirteen.com/api/mcp/gateway",
"enabled": true
}
}
} openclaw mcp add com-edgethirteen-www-gateway --url 'https://www.edgethirteen.com/api/mcp/gateway' --transport streamable-http
mcp_servers:
com-edgethirteen-www-gateway:
url: "https://www.edgethirteen.com/api/mcp/gateway" {
"McpServers": {
"com-edgethirteen-www-gateway": {
"Transport": "http",
"Url": "https://www.edgethirteen.com/api/mcp/gateway"
}
}
} assistant mcp add com-edgethirteen-www-gateway -t streamable-http -u 'https://www.edgethirteen.com/api/mcp/gateway'
{
"mcpServers": {
"com-edgethirteen-www-gateway": {
"type": "http",
"url": "https://www.edgethirteen.com/api/mcp/gateway"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 24 Sept 26 −50
- Endpoint reachability: reachable → not serving MCP ▼ security
- Stability: 0.23 → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Authorization: partial → unverified ▼ security
- Transport: pass → fail ▼ security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
- 23 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
- 21 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 19 Sept 26 0
- New tool “sanctions__screen_name” functional
- 18 Sept 26 +4
- Schema quality: 5465 → 6290 ▼ functional
- MCP protocol: fail → pass ▲ functional
- MCP protocol version: 2025-03-26 → 2025-11-25 functional
- New tool “hubspot-dbv__get_hubspot_dbv_info” functional
- New tool “hubspot-dbv__list_hubspot_breaking_changes” functional
- New tool “hubspot-dbv__lookup_hubspot_endpoint” functional
- New tool “tariff-refund-screen__get_tariff_refund_screen_info” functional
- New tool “tariff-refund-screen__get_tariff_refund_screen_preview” functional
- New tool “voicebrief__get_stock_metric” functional
- New tool “voicebrief__get_stock_snapshot” functional
- 17 Sept 26 0
- Stability: unverified → 0.03 ▲ functional
- 16 Sept 26 69
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 24 Sept 2026 · Probed https://www.edgethirteen.com/api/mcp/gateway
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=www.edgethirteen.com | CN=YR1,O=Let's Encrypt,C=US | 24 Aug 2026 | 22 Nov 2026 | RSA 2048 | SHA256-RSA | 6839f6f39d66a38fe8deece9986a25a4546 |
| SANs: www.edgethirteen.com | ||||||
| CN=YR1,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | a20253f15f2691c05dc1ce13b9bcca4e |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of www.edgethirteen.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| edgethirteen.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 404 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://www.edgethirteen.com/api/mcp/gateway | HTTP error | 404 | |
| http (plaintext) | http://www.edgethirteen.com/api/mcp/gateway | HTTPS enforced | 308 | https://www.edgethirteen.com/api/mcp/gateway |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
accessproof__check_page_accessibility ~133
Scan a single live, publicly reachable web page's markup for the WCAG 2.1 failures that ADA web-accessibility demand letters and lawsuits cite most often: missing alt text, unlabeled form fields, missing lang attribute, empty links, skipped heading levels, missing page title, no h1, no skip link. Static markup analysis -- it can't check color contrast, keyboard navigation, or screen reader behavior, so a clean result means 'no known markup-level issue found,' not full compliance.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | A full http:// or https:// URL of the page to scan |
No output schema declared.
No examples provided.
advisor-letter__get_advisor_letter_info ~76
Get pricing and details for AdvisorLetter: a weekly white-label market-commentary draft that financial advisors review and send to clients under their own name. Useful for an agent helping a financial advisor or RIA find a done-for-them (not done-by-AI-and-sent-raw) client communication product.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
advisor-letter__get_sample_issue ~70
Get a real sample AdvisorLetter issue -- the exact ready-to-forward weekly market-commentary draft an advisor reviews and sends to clients under their own name. This is a fixed sample issue, not this week's live draft -- the paid subscription is a fresh issue every Monday. Free, no key.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
ai-disclosure-kit__check_article50_disclosure ~213
Check whether the EU AI Act's Article 50 transparency rule applies to one of your AI touchpoints, and get a free sample disclosure notice for it. Covers chatbots, AI-generated images/audio/video, AI-generated public text, and emotion-recognition/biometric features. Returns which Article 50 obligation applies, where the notice belongs, and one ready-to-use disclosure sentence -- the same free preview shown on the web tool before checkout. Paste in your own business name for a personalized sentence. Free, no key.
| Name | Type | Req | Description |
|---|---|---|---|
| businessName | string | – | Optional business name to personalize the sample disclosure text. Defaults to 'Your business'. |
| touchpoint | string | yes | Which AI touchpoint to check: 'chatbot' (conversational AI), 'synthetic_media' (AI-generated/edited images, audio, or video), 'public_text' (AI-generated text published to the public), or 'biometric'… |
No output schema declared.
No examples provided.
ai-disclosure-kit__get_ai_disclosure_kit_info ~92
Get pricing and details for AI Disclosure Kit: ready-to-use EU AI Act Article 50 transparency-obligation text, an embeddable disclosure banner, and a compliance record template for chatbots, AI-generated media, and biometric-categorization/emotion-recognition features. One-time $59. Useful for an agent implementing EU AI Act transparency disclosures for its user's product.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
altman-z-score-calculator__compute_altman_z_score ~141
Compute the Altman Z-Score (public-company, non-financial-services version) for a US-listed ticker -- a quick bankruptcy-risk / financial-distress screen from five balance-sheet ratios. Looks up working capital, total assets, retained earnings, EBIT, market cap, total liabilities, and revenue from SEC EDGAR + market data automatically -- just pass a ticker. Returns the score and which zone it falls in: safe (>2.99), grey (1.81-2.99), or distress (<1.81).
| Name | Type | Req | Description |
|---|---|---|---|
| ticker | string | yes | A US-listed ticker symbol, e.g. GE |
No output schema declared.
No examples provided.
apidrift__get_apidrift_info ~99
Get pricing and details for APIDrift: weekly plus same-day urgent email alerts tracking deprecations, breaking schema changes, and pricing shifts across OpenAI, Anthropic, Google, xAI, Together, Mistral, Groq, Cloudflare Workers AI, and AWS Bedrock. Useful for an agent helping an engineering team that depends on LLM provider APIs avoid getting blindsided by an upstream breaking change.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
apidrift__get_recent_breaking_changes ~123
Get real, dated example entries of the kind of LLM-provider breaking change APIDrift catches -- model retirements, endpoint shutdowns, and schema/pricing changes across OpenAI, Anthropic, Google, xAI, Together, Mistral, Groq, Cloudflare Workers AI, and AWS Bedrock, each with what actually broke and what to check. These are illustrative sample entries, not a live feed -- the paid subscription is the ongoing weekly digest plus same-day urgent alerts as new changes ship. Free, no key.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
bank-stress-dataset__get_bank_stress_dataset_info ~109
Get details and pricing for the US Bank Regulatory Stress Dataset: a flat CSV covering every FDIC-insured bank's balance-sheet stress metrics (AOCI burden on capital, uninsured deposit ratio, non-performing loan ratio, and core balance-sheet figures) computed directly from each bank's own public FFIEC Call Report. Useful for an agent building a bank-screening or credit-risk model that needs a licensable raw data input instead of scraping regulatory filings itself.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
bank-stress-dataset__lookup_bank_stress_metrics ~184
Look up one US bank's balance-sheet stress metrics, computed from that bank's own FFIEC Call Report and citable as an official-source figure: AOCI burden on capital (how much of equity unrealised securities losses have eaten), uninsured deposit ratio, non-performing loan ratio, total assets and state. Covers all 4,296 FDIC-insured institutions for 2026 Q2 (filed as of 06/30/2026). Use this when an agent needs a grounded answer to "how stressed is this bank?" instead of guessing from memory or reading a filing by hand. Free, no key. One institution per call.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Institution name or a distinctive part of it, e.g. "CITIBANK, N.A." or "Zions". Minimum 3 characters. |
No output schema declared.
No examples provided.
chargeback-response__draft_chargeback_response_checklist ~357
Given a chargeback/dispute reason code category and order details, return the evidence checklist for that reason code (what to attach: tracking numbers, prior-order signals, refund records, etc.) and a preview of the response letter. Covers Visa 10.4/13.1/13.3/13.7/13.6/12.6.1 and the equivalent Mastercard reason codes. The full formatted dispute-response letter is a separate $39 product at https://www.edgethirteen.com/tools/chargeback-response. Not legal advice.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | – | Disputed amount |
| category | string | yes | The dispute reason category: fraud_card_absent (“I didn't make this purchase” (Visa 10.4, Mastercard 4837 — fraud)); not_received (“I never got it” (Visa 13.1, Mastercard 4855 — product/service not r… |
| currency | string | – | Currency code, defaults to USD |
| merchant_name | string | – | Merchant/business name |
| order_date | string | – | Order date |
| order_id | string | – | Order or transaction ID |
| product_description | string | – | What was sold |
No output schema declared.
No examples provided.
cloakcheck__check_page_for_agent_hijacking ~163
Fetch a URL and scan it for content planted to hijack an AI agent visiting it rather than to inform a human: invisible unicode (zero-width joiners, steganographic tag-block characters), CSS-hidden text (display:none, opacity:0, off-screen) paired with instruction-shaped language ('ignore previous instructions', 'add to cart and checkout', fake system-role text), and instruction-shaped phrases in alt/title/aria-label attributes or meta tags. Call this before an autonomous browsing or checkout flow acts on instructions found on a page. A clean result means no known hijack pattern found, not a full content-safety guarantee.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | Full URL (http:// or https://) of the page to scan |
No output schema declared.
No examples provided.
commentlettercheck__check_sec_comment_letters ~100
Look up whether a US-listed ticker has any SEC comment-letter correspondence on file (staff review letters and company responses, form types UPLOAD/CORRESP). Returns a free-tier preview: filing count and most recent filing date, sourced live from SEC EDGAR. Does not include letter content or severity scoring -- that's the paid full report.
| Name | Type | Req | Description |
|---|---|---|---|
| ticker | string | yes | A US-listed stock ticker symbol, e.g. AAPL |
No output schema declared.
No examples provided.
dcf-calculator__compute_dcf ~218
Compute a simplified discounted-cash-flow intrinsic value per share: project free cash flow per share forward at a constant growth rate, discount back at a discount rate, add a Gordon-growth terminal value. Pass fcf/growth/discount/terminal/years directly (these are judgment calls, not looked up). Optionally pass a ticker to auto-fill the current price for a margin-of-safety comparison.
| Name | Type | Req | Description |
|---|---|---|---|
| discount | number | yes | Discount rate, in percent, e.g. 10 |
| fcf | number | yes | Free cash flow per share |
| growth | number | yes | Growth rate for the projection years, in percent, e.g. 8 |
| price | number | – | Current price, used instead of a ticker lookup |
| terminal | number | yes | Terminal growth rate, in percent, e.g. 2.5 |
| ticker | string | – | Optional ticker, used only to fetch the current price |
| years | number | yes | Number of projection years, e.g. 10 |
No output schema declared.
No examples provided.
drop-compliance-kit__check_drop_next_deadline ~150
Given a California data broker's DROP registration/start date, return the next 45-day DROP (Delete Request and Opt-out Platform) check-in deadline and the first two items of the compliance checklist. Missing a cycle costs $200/day per unprocessed deletion request, required starting August 1, 2026. The full 20-cycle calendar file, deletion-log template, and complete checklist are a separate $49 product at https://www.edgethirteen.com/tools/drop-compliance-kit. Not legal advice.
| Name | Type | Req | Description |
|---|---|---|---|
| business_name | string | – | Business name |
| registration_date | string | yes | Data broker registration date (or today, if unsure), YYYY-MM-DD |
No output schema declared.
No examples provided.
exploitwatch__check_dependencies_against_kev ~161
Check a comma-separated list of software dependency/product names against CISA's live Known Exploited Vulnerabilities (KEV) catalog. Returns any matches with the CVE, vulnerability name, and why it matched. Call this before shipping or during a dependency/security review to catch actively-exploited components, or when working out whether an EU Cyber Resilience Act Article 14 reporting obligation (the 24h early warning / 72h notification / 14-day final report clock) has been triggered. Matching is by name and deliberately errs towards over-matching, so review each hit before acting on it.
| Name | Type | Req | Description |
|---|---|---|---|
| dependencies | string | yes | Comma-separated dependency/product names, e.g. "express, lodash, openssl" |
No output schema declared.
No examples provided.
graham-number-calculator__compute_graham_number ~170
Compute Benjamin Graham's fair-value ceiling (sqrt(22.5 * EPS * book value per share)) for a US-listed ticker, and the margin of safety against its current price. Looks up EPS, book value per share, and price from SEC EDGAR + market data automatically -- just pass a ticker. You can also pass eps/bvps/price directly to compute it for a hypothetical company with no ticker.
| Name | Type | Req | Description |
|---|---|---|---|
| bvps | number | – | Book value per share, used instead of a ticker lookup |
| eps | number | – | Earnings per share, used instead of a ticker lookup |
| price | number | – | Current price, used to compute margin of safety |
| ticker | string | – | A US-listed ticker symbol, e.g. AAPL |
No output schema declared.
No examples provided.
hubspot-dbv__get_hubspot_dbv_info ~97
Get background and pricing for the HubSpot legacy-to-date-based-versioning (DBV) migration map: what's going unsupported, when, and where the full free map and $29/mo DBV Watch monitoring live. Useful for an agent helping a developer or agency plan a HubSpot API migration off v1-v4 before HubSpot's own per-endpoint docs ship in March 2027.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
hubspot-dbv__list_hubspot_breaking_changes ~106
List HubSpot API operations whose date-based-versioning replacement is BREAKING (a caller-visible field or parameter difference) or REMOVED (no date-based counterpart exists at all), optionally filtered by API name (e.g. 'CRM', 'Webhooks'). Useful for scoping how big a given migration is before starting it.
| Name | Type | Req | Description |
|---|---|---|---|
| api | string | – | Optional substring filter on the HubSpot API name, e.g. 'webhooks'. |
No output schema declared.
No examples provided.
hubspot-dbv__lookup_hubspot_endpoint ~157
Look up a legacy HubSpot API path (e.g. '/crm/v3/objects/contacts' or just 'contacts') and get its date-based-versioning replacement, whether the change is breaking, and the exact field-level differences (removed params, newly-required fields, changed types). Derived by diffing HubSpot's own public OpenAPI specs -- not a guess. Free, no key, full data (this map has no paid tier gating it).
| Name | Type | Req | Description |
|---|---|---|---|
| method | string | – | Optional HTTP method filter, e.g. GET, POST. |
| path | string | yes | A legacy HubSpot API path or fragment, e.g. '/crm/v3/objects/contacts' or 'contacts'. |
No output schema declared.
No examples provided.
industry-primers__get_industry_primer_info ~103
Get details and pricing for Edge Thirteen's current Industry Primer report: a one-time research report on a single investable industry theme, with real revenue/margin/growth figures pulled from each covered company's own SEC 10-K (not modeled or estimated), plus the analytical read on industry structure and competitive positioning. Useful for an agent helping with investment research that needs a sourced industry-level writeup instead of an LLM-generated summary.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
industry-primers__get_primer_preview_table ~123
Get the free FY2025 preview table from Edge Thirteen's current Industry Primer: ticker, FY2025 revenue, YoY growth, gross margin, and net margin for each covered company, sourced to that company's own 10-K via SEC EDGAR's XBRL company-facts API. This is the same free table already on the tool page -- the paid report adds FY2023-FY2024 comparatives, exact XBRL tag/accession sourcing per figure, and the written analysis. Free, no key.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
kdpcheck__check_manuscript_for_ai_slop_patterns ~150
Analyze manuscript text for patterns associated with AI-generated prose: cliche-phrase density, unnaturally uniform sentence-length rhythm, repeated paragraph openers, and overused transition words. Returns a 0-100 score, a high/medium/low band, and the single most severe flag -- the full flag breakdown with fix guidance for every flag is the paid $29 report at https://www.edgethirteen.com/tools/kdpcheck. Not a claim about authorship, just a pattern scan a writer can use to self-edit before publishing.
| Name | Type | Req | Description |
|---|---|---|---|
| text | string | yes | The manuscript or excerpt text to analyze (longer excerpts score more reliably) |
No output schema declared.
No examples provided.
killcord__get_killcord ~199
Get the killcord script: a dead-man's switch for Anthropic API spend. Self-hosted, dependency-free Node script that polls Anthropic's real Admin Usage & Cost API and deactivates the API key the instant spend crosses a limit -- for stopping a runaway agent loop, not just alerting on it. Returns the full script source plus a ready-to-run setup snippet, optionally pre-filled with the workspace/limit/keys you provide, so it can be written straight into the project being worked on.
| Name | Type | Req | Description |
|---|---|---|---|
| keys | string | – | Comma-separated Anthropic API key IDs to deactivate when tripped, e.g. apikey_... |
| limitUsd | number | – | Spend threshold in USD that trips the kill switch |
| webhookUrl | string | – | Optional webhook URL to notify on trip/reset |
| workspaceId | string | – | Anthropic Workspace ID to watch, e.g. wrkspc_... |
No output schema declared.
No examples provided.
meterkit__get_meterkit_bug_fix_sample ~111
Get a free, real code sample from MeterKit: the fix for a common Stripe webhook bug where access is only revoked on customer.subscription.deleted, missing that a card decline usually transitions a subscription via .updated first (sometimes without .deleted ever firing). This is the same free sample already on the tool page -- the paid kit is the surrounding webhook route plus the event-sourced credit ledger and Meter Events reporting/reconciliation, which this sample does not include. Free, no key.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
meterkit__get_meterkit_info ~106
Get pricing and details for MeterKit: a drop-in, event-sourced credit ledger plus a correct 2026 Stripe Billing Meter Events API integration for Next.js AI/SaaS products (the old usage_type: "metered" price approach was retired as of Stripe API version 2025-03-31.basil). Zero runtime dependencies, one-time $99, buyer owns the code. Useful for an agent implementing Stripe usage-based billing for its user.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
numbercheck__check_financial_numbers ~109
Check $CASHTAG-style ticker mentions (e.g. $AAPL) in a piece of financial writing against SEC EDGAR's own XBRL company-facts data for that company's most recent 10-K -- EPS, book value per share, revenue, market cap, total assets, total liabilities. Flags numeric claims that don't match the filed figures.
| Name | Type | Req | Description |
|---|---|---|---|
| text | string | yes | The draft text to check, with $TICKER cashtags for each company mentioned. |
No output schema declared.
No examples provided.
postingcheck__check_job_posting_pay_transparency ~180
Scan a job posting's text against the free-preview subset of US state salary-range-disclosure laws (CA, CO, NY, WA) and flag exactly which required element (salary range, benefits description) is detectably missing, with the statute citation. The full 15-state + DC report (CT, HI, IL, MD, MA, MN, NV, NJ, RI, VT, VA, DC too) is a separate $49 report at https://www.edgethirteen.com/tools/postingcheck. Conservative: never certifies a posting as compliant, only flags what's missing. Not legal advice.
| Name | Type | Req | Description |
|---|---|---|---|
| employee_count | number | – | Employer's total employee count, used for laws with a minimum-employee threshold (optional) |
| posting_text | string | yes | The full text of the job posting |
No output schema declared.
No examples provided.
pumpcheck__check_npm_download_trust ~156
Check whether an npm package's public download count reflects real adoption. Detects 'download pumping' -- the documented supply-chain technique where a package is published in hundreds of rapid-fire versions so registry mirrors and security scanners inflate its download counter, making an unused or malicious package look popular. Returns npm's headline 30-day count, a spike-resistant estimate of sustained real usage, the share of the month falling on the busiest single day, recent version-flood bursts, and a verdict of clean, unreliable or inflated. Use before adding or recommending a dependency, especially a new or unfamiliar one.
| Name | Type | Req | Description |
|---|---|---|---|
| package | string | yes | The npm package name, e.g. express or @upstash/context7-mcp. |
No output schema declared.
No examples provided.
renewal-matrix__check_renewal_cancellation_compliance ~284
Score a subscription business's signup/cancellation flow against US click-to-cancel and auto-renewal law (federal FTC Section 5/ROSCA, plus California AB 2863, Colorado SB25-145, Vermont, and Oregon). Returns the federal-level result now; the full state-by-state breakdown with statute citations is a separate $49 report at https://www.edgethirteen.com/tools/renewal-matrix. Not legal advice.
| Name | Type | Req | Description |
|---|---|---|---|
| b2b_customers_colorado | boolean | – | Does the business have B2B customers in Colorado? |
| long_term_or_discounted_trial | boolean | – | Is this a 1+ year term, or a discounted/free trial converting to full price? |
| online_cancel | boolean | yes | Can a customer cancel online, in the same medium used to sign up? |
| online_signup | boolean | – | Can a customer sign up online? |
| phone_or_email_required | boolean | – | Is a phone call or email required to cancel? |
| prechecked_consent | boolean | – | Is the auto-renewal consent box pre-checked by default? |
| renewal_notice_days | number | – | Days of advance notice given before a renewal charge, if any |
| sells_states | string | yes | Comma-separated state codes the business sells to, or 'nationwide' |
No output schema declared.
No examples provided.
rewardsguard__check_tiktok_rewards_risk ~158
Spot-check a TikTok creator's exported video list for TikTok Creator Rewards Program disqualification-risk signals: repetitive/duplicate captions, unnaturally regular posting cadence, ineligible formats (duet/stitch/photo), and under-duration videos. Returns a 0-100 risk score, a band (low/medium/high), and the single highest-severity flag -- the full flag breakdown is the paid product at edgethirteen.com/tools/rewards-guard. Input is the same caption/postedAt/durationSeconds/format rows TikTok Studio's own analytics export gives a creator about their own account.
| Name | Type | Req | Description |
|---|---|---|---|
| videos | array | yes | 1-60 rows of the creator's own video data |
No output schema declared.
No examples provided.
sanctions__screen_name ~136
Screen a person or company name against OFAC's SDN and Consolidated Sanctions lists (19,874 entities, 21,320 aliases) via SanctionRail, for an agent checking a counterparty before a transaction, vendor onboarding, or payment approval. Returns fuzzy matches banded exact/strong/probable/weak with the sanctions programme, source list, and a common-name-collision flag so a common name like 'Maria Garcia' is surfaced, not silently suppressed. Free tier: 25 lookups/day per caller IP, no key required.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Person or company name to screen. |
No output schema declared.
No examples provided.
site-audit__audit_site_accessibility_and_agent_safety ~167
Discover a website's pages from its sitemap (or a homepage crawl as fallback) and sweep a free sample through two engines: WCAG 2.1 accessibility checks and AI-agent prompt-injection checks. Returns how many pages exist, how many were sampled, severity counts, and which categories of problem were found -- not the finding text or which page it's on. Call this before launch or handoff to catch site-wide accessibility and agent-hijacking exposure a single-page scan would miss. The full 40-page report with exact locations and a worst-first remediation order is a separate $499 product at https://www.edgethirteen.com/tools/site-audit.
| Name | Type | Req | Description |
|---|---|---|---|
| site | string | yes | A website address, e.g. example.com |
No output schema declared.
No examples provided.
slopcheck__check_youtube_channel_slop_risk ~160
Check a YouTube channel's recent uploads against YouTube's 2026 inauthentic-content ('AI slop') policy: title/description repetition, upload-cadence regularity, and AI-disclosure language. Returns an overall risk band (low/medium/high), a numeric score, and the single most severe flag found. This is a heuristic proxy for YouTube's own review process, not a simulation of it. The full flag-by-flag report with exact numbers and suggested fixes is a separate paid product at https://www.edgethirteen.com/tools/slopcheck.
| Name | Type | Req | Description |
|---|---|---|---|
| channel | string | yes | YouTube channel handle (e.g. @somechannel), URL, or channel ID |
No output schema declared.
No examples provided.
stackledger__audit_saas_subscriptions ~167
Get an instant monthly/annual spend total for a pasted list of SaaS subscriptions, one per line as 'Name, monthly cost, category' (category is optional -- common tools like Slack or Notion are auto-recognized), plus a count of categories with likely overlap (e.g. two project-management tools). This is the free-tier preview -- the per-category breakdown, which line items are priced high for their category, and a consolidation-savings estimate are the $49 paid report at https://www.edgethirteen.com/tools/stackledger.
| Name | Type | Req | Description |
|---|---|---|---|
| subscriptions | string | yes | One subscription per line as "Name, cost[, category]", e.g. "Notion, 10\nAsana, 13\nSlack, 8.75" |
No output schema declared.
No examples provided.
tariff-refund-screen__get_tariff_refund_screen_info ~130
Get details and pricing for Edge Thirteen's Tariff Refund Screen: a one-time CSV of US-listed companies disclosing IEEPA tariff-refund figures in their own SEC 10-Q/10-K filings since the Supreme Court struck down IEEPA tariff authority. These dollar figures are gain contingencies under ASC 450-30, so they carry no XBRL tag and don't appear on any stock screener -- they exist only as footnote prose. Useful for an agent doing investment research that needs to find a disclosure no numeric screen can surface.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
tariff-refund-screen__get_tariff_refund_screen_preview ~104
Get the free top-10 preview from the Tariff Refund Screen: ticker, company, disclosed amount, whether it's paid/accepted/received, and IEEPA refund as a percentage of shareholders' equity, ranked by materiality. This is the same free table already on the tool page -- the paid CSV adds the other 150 cited companies plus the exact citation sentence and filing URL for every figure. Free, no key.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
triageshield__verify_vulnerability_report ~150
Check a vulnerability report's concrete claims (file paths, file:line references, function names) against a real public GitHub repo's current contents. Flags claims that don't check out -- the file doesn't exist, the line is past EOF, the function isn't in the file -- which is the most common signature of an AI-generated fabricated vuln report. Does not judge whether a real, verifiable claim describes an actual security bug; it only checks whether the claim is honest about the codebase.
| Name | Type | Req | Description |
|---|---|---|---|
| repo | string | yes | A github.com/owner/name URL for the public repo being reported against |
| report | string | yes | The full text of the vulnerability report to check |
No output schema declared.
No examples provided.
us-diligence__screen_us_company ~158
Due diligence on a US company, from official federal records. Screens a company name against SEC EDGAR (is it a registered filer, under what CIK, state of incorporation and SIC code), the US Treasury OFAC SDN sanctions list, USAspending.gov federal contract and grant awards, and federal court dockets via CourtListener/RECAP. Use before onboarding a vendor, signing a supplier, screening a counterparty or qualifying a sales lead. Free screen returns how many records each source holds plus one sample record each; sources that cannot be reached are reported as not-checked rather than as clean.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | The US company's legal name, e.g. "Palantir Technologies Inc." |
No output schema declared.
No examples provided.
valuefeed__get_sample_screen ~117
Get a real sample run of ValueFeed's Graham/Buffett-style value screen: per-name metrics (P/E, P/B, Graham fair value, margin of safety, ROE, current ratio, debt/equity, yield, years of positive EPS) for two names, plus an SEC 10-K/10-Q filing excerpt for one of them. This is a fixed illustrative sample, not a live run across the whole market -- the paid subscription is a fresh weekly screen every Monday. Free, no key.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
valuefeed__get_valuefeed_info ~77
Get pricing and details for ValueFeed: a weekly SEC-sourced value-investing research packet (screens, metrics, filing excerpts) licensed for independent newsletter writers and content creators to build their own commentary on top of. Useful for an agent helping a finance content creator find raw research inputs instead of raw LLM-generated numbers.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
vercelpycheck__check_vercel_python_project ~231
Scan pasted project files for known Vercel Python-runtime deploy footguns: conflicting requirements.txt/pyproject.toml manifests, a dependency manifest missing from the project root, sibling-module imports that need sys.path, multiple top-level ASGI apps under api/, streaming/SSE responses that can crash the Python runtime, oversized dependencies (torch/tensorflow/etc.), and unrouted .well-known/ files. Static analysis over file contents -- it doesn't run a real build, so a clean result means 'no known footgun found,' not a deploy guarantee. To scan a public GitHub repo automatically instead of pasting files, use the $29 checkout at https://www.edgethirteen.com/tools/vercelpycheck.
| Name | Type | Req | Description |
|---|---|---|---|
| files | string | yes | Project files bundled as repeated '### FILE: path' markers followed by that file's content, e.g. '### FILE: requirements.txt\nfastapi\n### FILE: api/index.py\n...'. Include api/*.py files plus root m… |
No output schema declared.
No examples provided.
voicebrief__get_stock_metric ~138
Answer one financial metric for a US public company, spoken as a single natural-language sentence grounded in that company's most recent SEC 10-K filing (via EDGAR's XBRL data) -- not a guess. Use for a specific spoken question like "what's Tesla's revenue" or "what's Apple's earnings per share". Metric must be one of: revenue, eps, book_value_per_share, market_cap, total_assets, total_liabilities, price.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | yes | Company name or ticker, e.g. "Apple" or "AAPL". |
| metric | string | yes | Which figure to report. |
No output schema declared.
No examples provided.
voicebrief__get_stock_snapshot ~93
Give a short spoken financial snapshot of a US public company (revenue, earnings per share, market cap, book value per share) grounded in its most recent SEC 10-K filing. Use for a broad spoken question like "tell me about Apple's financials" rather than one specific figure.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | yes | Company name or ticker, e.g. "Apple" or "AAPL". |
No output schema declared.
No examples provided.
What is the com.edgethirteen.www/gateway MCP server?
com.edgethirteen.www/gateway is an MCP server listed in the public MCP registry as com.edgethirteen.www/gateway. All 36 Edge Thirteen MCP tools (SEC filings, WCAG, entity diligence, more) in one endpoint. This page covers its hosted endpoint (https://www.edgethirteen.com/api/mcp/gateway).
Is the com.edgethirteen.www/gateway MCP server safe to use?
com.edgethirteen.www/gateway scores 25 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the com.edgethirteen.www/gateway MCP server expose?
com.edgethirteen.www/gateway exposes 44 tools: accessproof__check_page_accessibility, advisor-letter__get_advisor_letter_info, advisor-letter__get_sample_issue, ai-disclosure-kit__get_ai_disclosure_kit_info, ai-disclosure-kit__check_article50_disclosure, and 39 more. Their descriptions and schemas cost roughly 6,426 tokens of context every time the server is loaded.
Does the com.edgethirteen.www/gateway MCP server require authentication?
No. We connected to com.edgethirteen.www/gateway without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the com.edgethirteen.www/gateway MCP server still maintained?
com.edgethirteen.www/gateway is still listed as active in the MCP registry. We last reached this channel on 24 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.