# com.edgethirteen.www/gateway (remote · www.edgethirteen.com)

All 36 Edge Thirteen MCP tools (SEC filings, WCAG, entity diligence, more) in one endpoint.

- Trust score: 25/100 (low)
- Change this week: −44
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-24

## Components

- remote · `www.edgethirteen.com`: 25/100 (this document), [markdown](https://verifymcp.io/servers/com-edgethirteen-www-gateway/api-mcp-gateway.md), [page](https://verifymcp.io/servers/com-edgethirteen-www-gateway/api-mcp-gateway)

## Channel facts

- Endpoint: `https://www.edgethirteen.com/api/mcp/gateway`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-24.

- **Endpoint Security**: 63/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the tool list to see what that exposes.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 0/100
  - Transport check failed: declared streamable-http, but the endpoint returned HTTP 404.
- **Schema Quality & AI Usability**: 0/100
  - Schema not yet verified: we couldn't read the endpoint's schema.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 0/100
  - Tool coverage not yet verified: we couldn't read the endpoint's tools.
- **Tool Safety**: 0/100
  - Tool safety not yet verified: we couldn't read the endpoint's tools.
- **Capabilities**: 0/100
  - Capabilities not yet verified: we couldn't read the endpoint's capabilities.

**Unverified: 5 categories.** Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### How do I install the com.edgethirteen.www/gateway MCP server?

com.edgethirteen.www/gateway is a hosted endpoint at https://www.edgethirteen.com/api/mcp/gateway, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http com-edgethirteen-www-gateway 'https://www.edgethirteen.com/api/mcp/gateway'
```

### Cursor

```json
{
  "mcpServers": {
    "com-edgethirteen-www-gateway": {
      "url": "https://www.edgethirteen.com/api/mcp/gateway"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-edgethirteen-www-gateway": {
      "type": "http",
      "url": "https://www.edgethirteen.com/api/mcp/gateway"
    }
  }
}
```

### Codex

```toml
[mcp_servers.com-edgethirteen-www-gateway]
url = "https://www.edgethirteen.com/api/mcp/gateway"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-edgethirteen-www-gateway": {
      "type": "remote",
      "url": "https://www.edgethirteen.com/api/mcp/gateway",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-edgethirteen-www-gateway --url 'https://www.edgethirteen.com/api/mcp/gateway' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-edgethirteen-www-gateway:
    url: "https://www.edgethirteen.com/api/mcp/gateway"
```

### Netclaw

```json
{
  "McpServers": {
    "com-edgethirteen-www-gateway": {
      "Transport": "http",
      "Url": "https://www.edgethirteen.com/api/mcp/gateway"
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-edgethirteen-www-gateway -t streamable-http -u 'https://www.edgethirteen.com/api/mcp/gateway'
```

### Other

```json
{
  "mcpServers": {
    "com-edgethirteen-www-gateway": {
      "type": "http",
      "url": "https://www.edgethirteen.com/api/mcp/gateway"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-24 (score 25, −50)

- [security regression] Endpoint reachability: reachable → not serving MCP
- [security regression] Stability: 0.23 → unverified
- [security regression] Tool safety: pass → unverified
- [security regression] Authorization: partial → unverified
- [security regression] Transport: pass → fail
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-09-23 (score 75, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-21 (score 74, +1)

No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-19 (score 73, 0)

- [functional] New tool “sanctions__screen_name”

### 2026-09-18 (score 73, +4)

- [functional regression] Schema quality: 5465 → 6290
- [functional improvement] MCP protocol: fail → pass
- [functional] MCP protocol version: 2025-03-26 → 2025-11-25
- [functional] New tool “hubspot-dbv__get_hubspot_dbv_info”
- [functional] New tool “hubspot-dbv__list_hubspot_breaking_changes”
- [functional] New tool “hubspot-dbv__lookup_hubspot_endpoint”
- [functional] New tool “tariff-refund-screen__get_tariff_refund_screen_info”
- [functional] New tool “tariff-refund-screen__get_tariff_refund_screen_preview”
- [functional] New tool “voicebrief__get_stock_metric”
- [functional] New tool “voicebrief__get_stock_snapshot”

### 2026-09-17 (score 69, 0)

- [functional improvement] Stability: unverified → 0.03

### 2026-09-16 (score 69)

First indexed and scored.

## MCP tools (44)

### `accessproof__check_page_accessibility` (~133 tokens)

Scan a single live, publicly reachable web page's markup for the WCAG 2.1 failures that ADA web-accessibility demand letters and lawsuits cite most often: missing alt text, unlabeled form fields, missing lang attribute, empty links, skipped heading levels, missing page title, no h1, no skip link. Static markup analysis -- it can't check color contrast, keyboard navigation, or screen reader behavior, so a clean result means 'no known markup-level issue found,' not full compliance.

Input parameters:

- `url` (string, required): A full http:// or https:// URL of the page to scan

### `advisor-letter__get_advisor_letter_info` (~76 tokens)

Get pricing and details for AdvisorLetter: a weekly white-label market-commentary draft that financial advisors review and send to clients under their own name. Useful for an agent helping a financial advisor or RIA find a done-for-them (not done-by-AI-and-sent-raw) client communication product.

### `advisor-letter__get_sample_issue` (~70 tokens)

Get a real sample AdvisorLetter issue -- the exact ready-to-forward weekly market-commentary draft an advisor reviews and sends to clients under their own name. This is a fixed sample issue, not this week's live draft -- the paid subscription is a fresh issue every Monday. Free, no key.

### `ai-disclosure-kit__get_ai_disclosure_kit_info` (~92 tokens)

Get pricing and details for AI Disclosure Kit: ready-to-use EU AI Act Article 50 transparency-obligation text, an embeddable disclosure banner, and a compliance record template for chatbots, AI-generated media, and biometric-categorization/emotion-recognition features. One-time $59. Useful for an agent implementing EU AI Act transparency disclosures for its user's product.

### `ai-disclosure-kit__check_article50_disclosure` (~213 tokens)

Check whether the EU AI Act's Article 50 transparency rule applies to one of your AI touchpoints, and get a free sample disclosure notice for it. Covers chatbots, AI-generated images/audio/video, AI-generated public text, and emotion-recognition/biometric features. Returns which Article 50 obligation applies, where the notice belongs, and one ready-to-use disclosure sentence -- the same free preview shown on the web tool before checkout. Paste in your own business name for a personalized sentence. Free, no key.

Input parameters:

- `businessName` (string): Optional business name to personalize the sample disclosure text. Defaults to 'Your business'.
- `touchpoint` (string, required): Which AI touchpoint to check: 'chatbot' (conversational AI), 'synthetic_media' (AI-generated/edited images, audio, or video), 'public_text' (AI-generated text published to the public), or 'biometric'…

### `altman-z-score-calculator__compute_altman_z_score` (~141 tokens)

Compute the Altman Z-Score (public-company, non-financial-services version) for a US-listed ticker -- a quick bankruptcy-risk / financial-distress screen from five balance-sheet ratios. Looks up working capital, total assets, retained earnings, EBIT, market cap, total liabilities, and revenue from SEC EDGAR + market data automatically -- just pass a ticker. Returns the score and which zone it falls in: safe (>2.99), grey (1.81-2.99), or distress (<1.81).

Input parameters:

- `ticker` (string, required): A US-listed ticker symbol, e.g. GE

### `apidrift__get_apidrift_info` (~99 tokens)

Get pricing and details for APIDrift: weekly plus same-day urgent email alerts tracking deprecations, breaking schema changes, and pricing shifts across OpenAI, Anthropic, Google, xAI, Together, Mistral, Groq, Cloudflare Workers AI, and AWS Bedrock. Useful for an agent helping an engineering team that depends on LLM provider APIs avoid getting blindsided by an upstream breaking change.

### `apidrift__get_recent_breaking_changes` (~123 tokens)

Get real, dated example entries of the kind of LLM-provider breaking change APIDrift catches -- model retirements, endpoint shutdowns, and schema/pricing changes across OpenAI, Anthropic, Google, xAI, Together, Mistral, Groq, Cloudflare Workers AI, and AWS Bedrock, each with what actually broke and what to check. These are illustrative sample entries, not a live feed -- the paid subscription is the ongoing weekly digest plus same-day urgent alerts as new changes ship. Free, no key.

### `hubspot-dbv__get_hubspot_dbv_info` (~97 tokens)

Get background and pricing for the HubSpot legacy-to-date-based-versioning (DBV) migration map: what's going unsupported, when, and where the full free map and $29/mo DBV Watch monitoring live. Useful for an agent helping a developer or agency plan a HubSpot API migration off v1-v4 before HubSpot's own per-endpoint docs ship in March 2027.

### `hubspot-dbv__lookup_hubspot_endpoint` (~157 tokens)

Look up a legacy HubSpot API path (e.g. '/crm/v3/objects/contacts' or just 'contacts') and get its date-based-versioning replacement, whether the change is breaking, and the exact field-level differences (removed params, newly-required fields, changed types). Derived by diffing HubSpot's own public OpenAPI specs -- not a guess. Free, no key, full data (this map has no paid tier gating it).

Input parameters:

- `method` (string): Optional HTTP method filter, e.g. GET, POST.
- `path` (string, required): A legacy HubSpot API path or fragment, e.g. '/crm/v3/objects/contacts' or 'contacts'.

### `hubspot-dbv__list_hubspot_breaking_changes` (~106 tokens)

List HubSpot API operations whose date-based-versioning replacement is BREAKING (a caller-visible field or parameter difference) or REMOVED (no date-based counterpart exists at all), optionally filtered by API name (e.g. 'CRM', 'Webhooks'). Useful for scoping how big a given migration is before starting it.

Input parameters:

- `api` (string): Optional substring filter on the HubSpot API name, e.g. 'webhooks'.

### `bank-stress-dataset__get_bank_stress_dataset_info` (~109 tokens)

Get details and pricing for the US Bank Regulatory Stress Dataset: a flat CSV covering every FDIC-insured bank's balance-sheet stress metrics (AOCI burden on capital, uninsured deposit ratio, non-performing loan ratio, and core balance-sheet figures) computed directly from each bank's own public FFIEC Call Report. Useful for an agent building a bank-screening or credit-risk model that needs a licensable raw data input instead of scraping regulatory filings itself.

### `bank-stress-dataset__lookup_bank_stress_metrics` (~184 tokens)

Look up one US bank's balance-sheet stress metrics, computed from that bank's own FFIEC Call Report and citable as an official-source figure: AOCI burden on capital (how much of equity unrealised securities losses have eaten), uninsured deposit ratio, non-performing loan ratio, total assets and state. Covers all 4,296 FDIC-insured institutions for 2026 Q2 (filed as of 06/30/2026). Use this when an agent needs a grounded answer to "how stressed is this bank?" instead of guessing from memory or reading a filing by hand. Free, no key. One institution per call.

Input parameters:

- `name` (string, required): Institution name or a distinctive part of it, e.g. "CITIBANK, N.A." or "Zions". Minimum 3 characters.

### `chargeback-response__draft_chargeback_response_checklist` (~357 tokens)

Given a chargeback/dispute reason code category and order details, return the evidence checklist for that reason code (what to attach: tracking numbers, prior-order signals, refund records, etc.) and a preview of the response letter. Covers Visa 10.4/13.1/13.3/13.7/13.6/12.6.1 and the equivalent Mastercard reason codes. The full formatted dispute-response letter is a separate $39 product at https://www.edgethirteen.com/tools/chargeback-response. Not legal advice.

Input parameters:

- `amount` (string): Disputed amount
- `category` (string, required): The dispute reason category: fraud_card_absent (“I didn't make this purchase” (Visa 10.4, Mastercard 4837 — fraud)); not_received (“I never got it” (Visa 13.1, Mastercard 4855 — product/service not r…
- `currency` (string): Currency code, defaults to USD
- `merchant_name` (string): Merchant/business name
- `order_date` (string): Order date
- `order_id` (string): Order or transaction ID
- `product_description` (string): What was sold

### `cloakcheck__check_page_for_agent_hijacking` (~163 tokens)

Fetch a URL and scan it for content planted to hijack an AI agent visiting it rather than to inform a human: invisible unicode (zero-width joiners, steganographic tag-block characters), CSS-hidden text (display:none, opacity:0, off-screen) paired with instruction-shaped language ('ignore previous instructions', 'add to cart and checkout', fake system-role text), and instruction-shaped phrases in alt/title/aria-label attributes or meta tags. Call this before an autonomous browsing or checkout flow acts on instructions found on a page. A clean result means no known hijack pattern found, not a full content-safety guarantee.

Input parameters:

- `url` (string, required): Full URL (http:// or https://) of the page to scan

### `commentlettercheck__check_sec_comment_letters` (~100 tokens)

Look up whether a US-listed ticker has any SEC comment-letter correspondence on file (staff review letters and company responses, form types UPLOAD/CORRESP). Returns a free-tier preview: filing count and most recent filing date, sourced live from SEC EDGAR. Does not include letter content or severity scoring -- that's the paid full report.

Input parameters:

- `ticker` (string, required): A US-listed stock ticker symbol, e.g. AAPL

### `dcf-calculator__compute_dcf` (~218 tokens)

Compute a simplified discounted-cash-flow intrinsic value per share: project free cash flow per share forward at a constant growth rate, discount back at a discount rate, add a Gordon-growth terminal value. Pass fcf/growth/discount/terminal/years directly (these are judgment calls, not looked up). Optionally pass a ticker to auto-fill the current price for a margin-of-safety comparison.

Input parameters:

- `discount` (number, required): Discount rate, in percent, e.g. 10
- `fcf` (number, required): Free cash flow per share
- `growth` (number, required): Growth rate for the projection years, in percent, e.g. 8
- `price` (number): Current price, used instead of a ticker lookup
- `terminal` (number, required): Terminal growth rate, in percent, e.g. 2.5
- `ticker` (string): Optional ticker, used only to fetch the current price
- `years` (number, required): Number of projection years, e.g. 10

### `drop-compliance-kit__check_drop_next_deadline` (~150 tokens)

Given a California data broker's DROP registration/start date, return the next 45-day DROP (Delete Request and Opt-out Platform) check-in deadline and the first two items of the compliance checklist. Missing a cycle costs $200/day per unprocessed deletion request, required starting August 1, 2026. The full 20-cycle calendar file, deletion-log template, and complete checklist are a separate $49 product at https://www.edgethirteen.com/tools/drop-compliance-kit. Not legal advice.

Input parameters:

- `business_name` (string): Business name
- `registration_date` (string, required): Data broker registration date (or today, if unsure), YYYY-MM-DD

### `exploitwatch__check_dependencies_against_kev` (~161 tokens)

Check a comma-separated list of software dependency/product names against CISA's live Known Exploited Vulnerabilities (KEV) catalog. Returns any matches with the CVE, vulnerability name, and why it matched. Call this before shipping or during a dependency/security review to catch actively-exploited components, or when working out whether an EU Cyber Resilience Act Article 14 reporting obligation (the 24h early warning / 72h notification / 14-day final report clock) has been triggered. Matching is by name and deliberately errs towards over-matching, so review each hit before acting on it.

Input parameters:

- `dependencies` (string, required): Comma-separated dependency/product names, e.g. "express, lodash, openssl"

### `graham-number-calculator__compute_graham_number` (~170 tokens)

Compute Benjamin Graham's fair-value ceiling (sqrt(22.5 * EPS * book value per share)) for a US-listed ticker, and the margin of safety against its current price. Looks up EPS, book value per share, and price from SEC EDGAR + market data automatically -- just pass a ticker. You can also pass eps/bvps/price directly to compute it for a hypothetical company with no ticker.

Input parameters:

- `bvps` (number): Book value per share, used instead of a ticker lookup
- `eps` (number): Earnings per share, used instead of a ticker lookup
- `price` (number): Current price, used to compute margin of safety
- `ticker` (string): A US-listed ticker symbol, e.g. AAPL

### `industry-primers__get_industry_primer_info` (~103 tokens)

Get details and pricing for Edge Thirteen's current Industry Primer report: a one-time research report on a single investable industry theme, with real revenue/margin/growth figures pulled from each covered company's own SEC 10-K (not modeled or estimated), plus the analytical read on industry structure and competitive positioning. Useful for an agent helping with investment research that needs a sourced industry-level writeup instead of an LLM-generated summary.

### `industry-primers__get_primer_preview_table` (~123 tokens)

Get the free FY2025 preview table from Edge Thirteen's current Industry Primer: ticker, FY2025 revenue, YoY growth, gross margin, and net margin for each covered company, sourced to that company's own 10-K via SEC EDGAR's XBRL company-facts API. This is the same free table already on the tool page -- the paid report adds FY2023-FY2024 comparatives, exact XBRL tag/accession sourcing per figure, and the written analysis. Free, no key.

### `tariff-refund-screen__get_tariff_refund_screen_info` (~130 tokens)

Get details and pricing for Edge Thirteen's Tariff Refund Screen: a one-time CSV of US-listed companies disclosing IEEPA tariff-refund figures in their own SEC 10-Q/10-K filings since the Supreme Court struck down IEEPA tariff authority. These dollar figures are gain contingencies under ASC 450-30, so they carry no XBRL tag and don't appear on any stock screener -- they exist only as footnote prose. Useful for an agent doing investment research that needs to find a disclosure no numeric screen can surface.

### `tariff-refund-screen__get_tariff_refund_screen_preview` (~104 tokens)

Get the free top-10 preview from the Tariff Refund Screen: ticker, company, disclosed amount, whether it's paid/accepted/received, and IEEPA refund as a percentage of shareholders' equity, ranked by materiality. This is the same free table already on the tool page -- the paid CSV adds the other 150 cited companies plus the exact citation sentence and filing URL for every figure. Free, no key.

### `kdpcheck__check_manuscript_for_ai_slop_patterns` (~150 tokens)

Analyze manuscript text for patterns associated with AI-generated prose: cliche-phrase density, unnaturally uniform sentence-length rhythm, repeated paragraph openers, and overused transition words. Returns a 0-100 score, a high/medium/low band, and the single most severe flag -- the full flag breakdown with fix guidance for every flag is the paid $29 report at https://www.edgethirteen.com/tools/kdpcheck. Not a claim about authorship, just a pattern scan a writer can use to self-edit before publishing.

Input parameters:

- `text` (string, required): The manuscript or excerpt text to analyze (longer excerpts score more reliably)

### `killcord__get_killcord` (~199 tokens)

Get the killcord script: a dead-man's switch for Anthropic API spend. Self-hosted, dependency-free Node script that polls Anthropic's real Admin Usage & Cost API and deactivates the API key the instant spend crosses a limit -- for stopping a runaway agent loop, not just alerting on it. Returns the full script source plus a ready-to-run setup snippet, optionally pre-filled with the workspace/limit/keys you provide, so it can be written straight into the project being worked on.

Input parameters:

- `keys` (string): Comma-separated Anthropic API key IDs to deactivate when tripped, e.g. apikey_...
- `limitUsd` (number): Spend threshold in USD that trips the kill switch
- `webhookUrl` (string): Optional webhook URL to notify on trip/reset
- `workspaceId` (string): Anthropic Workspace ID to watch, e.g. wrkspc_...

### `meterkit__get_meterkit_info` (~106 tokens)

Get pricing and details for MeterKit: a drop-in, event-sourced credit ledger plus a correct 2026 Stripe Billing Meter Events API integration for Next.js AI/SaaS products (the old usage_type: "metered" price approach was retired as of Stripe API version 2025-03-31.basil). Zero runtime dependencies, one-time $99, buyer owns the code. Useful for an agent implementing Stripe usage-based billing for its user.

### `meterkit__get_meterkit_bug_fix_sample` (~111 tokens)

Get a free, real code sample from MeterKit: the fix for a common Stripe webhook bug where access is only revoked on customer.subscription.deleted, missing that a card decline usually transitions a subscription via .updated first (sometimes without .deleted ever firing). This is the same free sample already on the tool page -- the paid kit is the surrounding webhook route plus the event-sourced credit ledger and Meter Events reporting/reconciliation, which this sample does not include. Free, no key.

### `numbercheck__check_financial_numbers` (~109 tokens)

Check $CASHTAG-style ticker mentions (e.g. $AAPL) in a piece of financial writing against SEC EDGAR's own XBRL company-facts data for that company's most recent 10-K -- EPS, book value per share, revenue, market cap, total assets, total liabilities. Flags numeric claims that don't match the filed figures.

Input parameters:

- `text` (string, required): The draft text to check, with $TICKER cashtags for each company mentioned.

### `postingcheck__check_job_posting_pay_transparency` (~180 tokens)

Scan a job posting's text against the free-preview subset of US state salary-range-disclosure laws (CA, CO, NY, WA) and flag exactly which required element (salary range, benefits description) is detectably missing, with the statute citation. The full 15-state + DC report (CT, HI, IL, MD, MA, MN, NV, NJ, RI, VT, VA, DC too) is a separate $49 report at https://www.edgethirteen.com/tools/postingcheck. Conservative: never certifies a posting as compliant, only flags what's missing. Not legal advice.

Input parameters:

- `employee_count` (number): Employer's total employee count, used for laws with a minimum-employee threshold (optional)
- `posting_text` (string, required): The full text of the job posting

### `pumpcheck__check_npm_download_trust` (~156 tokens)

Check whether an npm package's public download count reflects real adoption. Detects 'download pumping' -- the documented supply-chain technique where a package is published in hundreds of rapid-fire versions so registry mirrors and security scanners inflate its download counter, making an unused or malicious package look popular. Returns npm's headline 30-day count, a spike-resistant estimate of sustained real usage, the share of the month falling on the busiest single day, recent version-flood bursts, and a verdict of clean, unreliable or inflated. Use before adding or recommending a dependency, especially a new or unfamiliar one.

Input parameters:

- `package` (string, required): The npm package name, e.g. express or @upstash/context7-mcp.

### `renewal-matrix__check_renewal_cancellation_compliance` (~284 tokens)

Score a subscription business's signup/cancellation flow against US click-to-cancel and auto-renewal law (federal FTC Section 5/ROSCA, plus California AB 2863, Colorado SB25-145, Vermont, and Oregon). Returns the federal-level result now; the full state-by-state breakdown with statute citations is a separate $49 report at https://www.edgethirteen.com/tools/renewal-matrix. Not legal advice.

Input parameters:

- `b2b_customers_colorado` (boolean): Does the business have B2B customers in Colorado?
- `long_term_or_discounted_trial` (boolean): Is this a 1+ year term, or a discounted/free trial converting to full price?
- `online_cancel` (boolean, required): Can a customer cancel online, in the same medium used to sign up?
- `online_signup` (boolean): Can a customer sign up online?
- `phone_or_email_required` (boolean): Is a phone call or email required to cancel?
- `prechecked_consent` (boolean): Is the auto-renewal consent box pre-checked by default?
- `renewal_notice_days` (number): Days of advance notice given before a renewal charge, if any
- `sells_states` (string, required): Comma-separated state codes the business sells to, or 'nationwide'

### `rewardsguard__check_tiktok_rewards_risk` (~158 tokens)

Spot-check a TikTok creator's exported video list for TikTok Creator Rewards Program disqualification-risk signals: repetitive/duplicate captions, unnaturally regular posting cadence, ineligible formats (duet/stitch/photo), and under-duration videos. Returns a 0-100 risk score, a band (low/medium/high), and the single highest-severity flag -- the full flag breakdown is the paid product at edgethirteen.com/tools/rewards-guard. Input is the same caption/postedAt/durationSeconds/format rows TikTok Studio's own analytics export gives a creator about their own account.

Input parameters:

- `videos` (array, required): 1-60 rows of the creator's own video data

### `site-audit__audit_site_accessibility_and_agent_safety` (~167 tokens)

Discover a website's pages from its sitemap (or a homepage crawl as fallback) and sweep a free sample through two engines: WCAG 2.1 accessibility checks and AI-agent prompt-injection checks. Returns how many pages exist, how many were sampled, severity counts, and which categories of problem were found -- not the finding text or which page it's on. Call this before launch or handoff to catch site-wide accessibility and agent-hijacking exposure a single-page scan would miss. The full 40-page report with exact locations and a worst-first remediation order is a separate $499 product at https://www.edgethirteen.com/tools/site-audit.

Input parameters:

- `site` (string, required): A website address, e.g. example.com

### `slopcheck__check_youtube_channel_slop_risk` (~160 tokens)

Check a YouTube channel's recent uploads against YouTube's 2026 inauthentic-content ('AI slop') policy: title/description repetition, upload-cadence regularity, and AI-disclosure language. Returns an overall risk band (low/medium/high), a numeric score, and the single most severe flag found. This is a heuristic proxy for YouTube's own review process, not a simulation of it. The full flag-by-flag report with exact numbers and suggested fixes is a separate paid product at https://www.edgethirteen.com/tools/slopcheck.

Input parameters:

- `channel` (string, required): YouTube channel handle (e.g. @somechannel), URL, or channel ID

### `stackledger__audit_saas_subscriptions` (~167 tokens)

Get an instant monthly/annual spend total for a pasted list of SaaS subscriptions, one per line as 'Name, monthly cost, category' (category is optional -- common tools like Slack or Notion are auto-recognized), plus a count of categories with likely overlap (e.g. two project-management tools). This is the free-tier preview -- the per-category breakdown, which line items are priced high for their category, and a consolidation-savings estimate are the $49 paid report at https://www.edgethirteen.com/tools/stackledger.

Input parameters:

- `subscriptions` (string, required): One subscription per line as "Name, cost[, category]", e.g. "Notion, 10\nAsana, 13\nSlack, 8.75"

### `triageshield__verify_vulnerability_report` (~150 tokens)

Check a vulnerability report's concrete claims (file paths, file:line references, function names) against a real public GitHub repo's current contents. Flags claims that don't check out -- the file doesn't exist, the line is past EOF, the function isn't in the file -- which is the most common signature of an AI-generated fabricated vuln report. Does not judge whether a real, verifiable claim describes an actual security bug; it only checks whether the claim is honest about the codebase.

Input parameters:

- `repo` (string, required): A github.com/owner/name URL for the public repo being reported against
- `report` (string, required): The full text of the vulnerability report to check

### `us-diligence__screen_us_company` (~158 tokens)

Due diligence on a US company, from official federal records. Screens a company name against SEC EDGAR (is it a registered filer, under what CIK, state of incorporation and SIC code), the US Treasury OFAC SDN sanctions list, USAspending.gov federal contract and grant awards, and federal court dockets via CourtListener/RECAP. Use before onboarding a vendor, signing a supplier, screening a counterparty or qualifying a sales lead. Free screen returns how many records each source holds plus one sample record each; sources that cannot be reached are reported as not-checked rather than as clean.

Input parameters:

- `name` (string, required): The US company's legal name, e.g. "Palantir Technologies Inc."

### `voicebrief__get_stock_metric` (~138 tokens)

Answer one financial metric for a US public company, spoken as a single natural-language sentence grounded in that company's most recent SEC 10-K filing (via EDGAR's XBRL data) -- not a guess. Use for a specific spoken question like "what's Tesla's revenue" or "what's Apple's earnings per share". Metric must be one of: revenue, eps, book_value_per_share, market_cap, total_assets, total_liabilities, price.

Input parameters:

- `company` (string, required): Company name or ticker, e.g. "Apple" or "AAPL".
- `metric` (string, required): Which figure to report.

### `voicebrief__get_stock_snapshot` (~93 tokens)

Give a short spoken financial snapshot of a US public company (revenue, earnings per share, market cap, book value per share) grounded in its most recent SEC 10-K filing. Use for a broad spoken question like "tell me about Apple's financials" rather than one specific figure.

Input parameters:

- `company` (string, required): Company name or ticker, e.g. "Apple" or "AAPL".

### `valuefeed__get_valuefeed_info` (~77 tokens)

Get pricing and details for ValueFeed: a weekly SEC-sourced value-investing research packet (screens, metrics, filing excerpts) licensed for independent newsletter writers and content creators to build their own commentary on top of. Useful for an agent helping a finance content creator find raw research inputs instead of raw LLM-generated numbers.

### `valuefeed__get_sample_screen` (~117 tokens)

Get a real sample run of ValueFeed's Graham/Buffett-style value screen: per-name metrics (P/E, P/B, Graham fair value, margin of safety, ROE, current ratio, debt/equity, yield, years of positive EPS) for two names, plus an SEC 10-K/10-Q filing excerpt for one of them. This is a fixed illustrative sample, not a live run across the whole market -- the paid subscription is a fresh weekly screen every Monday. Free, no key.

### `vercelpycheck__check_vercel_python_project` (~231 tokens)

Scan pasted project files for known Vercel Python-runtime deploy footguns: conflicting requirements.txt/pyproject.toml manifests, a dependency manifest missing from the project root, sibling-module imports that need sys.path, multiple top-level ASGI apps under api/, streaming/SSE responses that can crash the Python runtime, oversized dependencies (torch/tensorflow/etc.), and unrouted .well-known/ files. Static analysis over file contents -- it doesn't run a real build, so a clean result means 'no known footgun found,' not a deploy guarantee. To scan a public GitHub repo automatically instead of pasting files, use the $29 checkout at https://www.edgethirteen.com/tools/vercelpycheck.

Input parameters:

- `files` (string, required): Project files bundled as repeated '### FILE: path' markers followed by that file's content, e.g. '### FILE: requirements.txt\nfastapi\n### FILE: api/index.py\n...'. Include api/*.py files plus root m…

### `sanctions__screen_name` (~136 tokens)

Screen a person or company name against OFAC's SDN and Consolidated Sanctions lists (19,874 entities, 21,320 aliases) via SanctionRail, for an agent checking a counterparty before a transaction, vendor onboarding, or payment approval. Returns fuzzy matches banded exact/strong/probable/weak with the sanctions programme, source list, and a common-name-collision flag so a common name like 'Maria Garcia' is surfaced, not silently suppressed. Free tier: 25 lookups/day per caller IP, no key required.

Input parameters:

- `name` (string, required): Person or company name to screen.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-edgethirteen-www-gateway/api-mcp-gateway#diagnostics

## Score history

- 2026-09-24: 25
- 2026-09-23: 75
- 2026-09-22: 74
- 2026-09-21: 74
- 2026-09-20: 73
- 2026-09-19: 73
- 2026-09-18: 73
- 2026-09-17: 69
- 2026-09-16: 69

## Common questions

### What is the com.edgethirteen.www/gateway MCP server?

com.edgethirteen.www/gateway is an MCP server listed in the public MCP registry as com.edgethirteen.www/gateway. All 36 Edge Thirteen MCP tools (SEC filings, WCAG, entity diligence, more) in one endpoint. This page covers its hosted endpoint (https://www.edgethirteen.com/api/mcp/gateway).

### Is the com.edgethirteen.www/gateway MCP server safe to use?

com.edgethirteen.www/gateway scores 25 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the com.edgethirteen.www/gateway MCP server expose?

com.edgethirteen.www/gateway exposes 44 tools: accessproof__check_page_accessibility, advisor-letter__get_advisor_letter_info, advisor-letter__get_sample_issue, ai-disclosure-kit__get_ai_disclosure_kit_info, ai-disclosure-kit__check_article50_disclosure, and 39 more. Their descriptions and schemas cost roughly 6,426 tokens of context every time the server is loaded.

### Does the com.edgethirteen.www/gateway MCP server require authentication?

No. We connected to com.edgethirteen.www/gateway without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the com.edgethirteen.www/gateway MCP server still maintained?

com.edgethirteen.www/gateway is still listed as active in the MCP registry. We last reached this channel on 24 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://www.edgethirteen.com/api/mcp/gateway
- Website: https://www.edgethirteen.com/tools
- Changelog RSS feed: https://verifymcp.io/servers/com-edgethirteen-www-gateway/api-mcp-gateway.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-edgethirteen-www-gateway/api-mcp-gateway.json
- HTML version of this page: https://verifymcp.io/servers/com-edgethirteen-www-gateway/api-mcp-gateway