# com.thetempleofdoom.hyperion/hyperion (remote · hyperion.thetempleofdoom.com)

Hyperion — MCP tool marketplace for AI agents: web, OSINT, security, research via one key.

- Trust score: 76/100 (medium)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-25

## Components

- remote · `hyperion.thetempleofdoom.com`: 76/100 (this document), [markdown](https://verifymcp.io/servers/com-thetempleofdoom-hyperion-hyperion/hyperion.md), [page](https://verifymcp.io/servers/com-thetempleofdoom-hyperion-hyperion/hyperion)

## Channel facts

- Endpoint: `https://hyperion.thetempleofdoom.com/mcp`
- Transports: `streamable-http`
- Auth: `required`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-25.

- **Endpoint Security**: 63/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 355 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 68/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 12150 tokens (~34/item across 355 items; 355 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 100/100
  - No destabilizing schema changes in the last 30 days.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 75/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "execute_js" implies "execute" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.
  - An AI judge read all 356 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 60/100
  - Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28.

## Install

### How do I install the com.thetempleofdoom.hyperion/hyperion MCP server?

com.thetempleofdoom.hyperion/hyperion is a hosted endpoint at https://hyperion.thetempleofdoom.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http com-thetempleofdoom-hyperion-hyperion 'https://hyperion.thetempleofdoom.com/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "com-thetempleofdoom-hyperion-hyperion": {
      "url": "https://hyperion.thetempleofdoom.com/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-thetempleofdoom-hyperion-hyperion": {
      "type": "http",
      "url": "https://hyperion.thetempleofdoom.com/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.com-thetempleofdoom-hyperion-hyperion]
url = "https://hyperion.thetempleofdoom.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-thetempleofdoom-hyperion-hyperion": {
      "type": "remote",
      "url": "https://hyperion.thetempleofdoom.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-thetempleofdoom-hyperion-hyperion --url 'https://hyperion.thetempleofdoom.com/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-thetempleofdoom-hyperion-hyperion:
    url: "https://hyperion.thetempleofdoom.com/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "com-thetempleofdoom-hyperion-hyperion": {
      "Transport": "http",
      "Url": "https://hyperion.thetempleofdoom.com/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-thetempleofdoom-hyperion-hyperion -t streamable-http -u 'https://hyperion.thetempleofdoom.com/mcp'
```

### Other

```json
{
  "mcpServers": {
    "com-thetempleofdoom-hyperion-hyperion": {
      "type": "http",
      "url": "https://hyperion.thetempleofdoom.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-25 (score 76, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-09-24 (score 76, 0)

- [functional] New tool “fc_map”
- [functional] New tool “fc_scrape”
- [functional] New tool “fc_search”
- [functional] New tool “px_info”
- [functional] New tool “px_order”
- [functional] New tool “px_plans”
- [functional] New tool “re_search”
- [functional] New tool “re_semantic”
- [functional] New tool “re_summarize”

### 2026-09-23 (score 76, +1)

No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-22 (score 75, 0)

We did not load change detail this far back for this component, so this day may have recorded more than is shown.

- [functional improvement] Schema quality: 53 → 34
- [functional] New tool “o_snusbase_hash”
- [functional] New tool “o_punycode”
- [functional] New tool “o_agify”
- [functional] New tool “o_marineweather”
- [functional] New tool “o_trendingwiki”
- [functional] New tool “o_kev”
- [functional] New tool “o_hibp_email”
- [functional] New tool “o_roman”
- [functional] New tool “v_case”
- [functional] New tool “o_pypistats”
- [functional] New tool “o_sitemap”
- [functional] New tool “o_peers”
- [functional] New tool “o_jslibs”
- [functional] New tool “o_redirects”
- [functional] New tool “o_gravatarfull”
- [functional] New tool “o_openphish”
- [functional] New tool “o_openalexwork”
- [functional] New tool “o_dehashed_domain”
- [functional] New tool “o_binarytext”
- [functional] New tool “o_gitlab”
- [functional] New tool “o_maven”
- [functional] New tool “o_cratestats”
- [functional] New tool “o_hnsearch”
- [functional] New tool “v_slug”
- [functional] New tool “o_httping”
- [functional] New tool “o_macvendorlookup”
- [functional] New tool “o_portlookup”
- [functional] New tool “o_trufflehog_url”
- [functional] New tool “o_bluesky”
- [functional] New tool “o_asn”
- [functional] New tool “o_arxiv”
- [functional] New tool “v_htmldec”
- [functional] New tool “o_exploit_cve”
- [functional] New tool “o_quakes”
- [functional] New tool “o_golangpkg”
- [functional] New tool “o_nuget”
- [functional] New tool “o_rot13”
- [functional] New tool “o_macvendor”
- [functional] New tool “o_attack_surface”
- [functional] New tool “o_casify”
- [functional] New tool “o_feodoips”
- [functional] New tool “o_atbash”
- [functional] New tool “o_credential_stuffing”
- [functional] New tool “o_nvdcve”
- [functional] New tool “o_revgeocode”
- [functional] New tool “o_hexdump”
- [functional] New tool “o_c2_infrastructure”
- [functional] New tool “o_cookies”
- [functional] New tool “o_tor”
- [functional] New tool “o_revgeo”
- [functional] New tool “o_ipwhois”
- [functional] New tool “o_reversedns”
- [functional] New tool “o_tlsa”
- [functional] New tool “o_favicon”
- [functional] New tool “o_cdnjs”
- [functional] New tool “o_dnsgraph”
- [functional] New tool “o_semanticscholar”
- [functional] New tool “o_links”
- [functional] New tool “o_cidr”
- [functional] New tool “o_npmorg”
- [functional] New tool “o_passgen”
- [functional] New tool “o_hibp”
- [functional] New tool “o_pluscode”
- [functional] New tool “o_robots”
- [functional] New tool “o_robotsmeta”
- [functional] New tool “o_archiveorg”
- [functional] New tool “o_ipint”
- [functional] New tool “v_uuid”
- [functional] New tool “o_keybase”
- [functional] New tool “o_phoneapps”
- [functional] New tool “o_email”
- [functional] New tool “o_unpaywall”
- [functional] New tool “o_sopostuser”
- [functional] New tool “o_otxip”
- [functional] New tool “o_steam_user”
- [functional] New tool “o_ens”
- [functional] New tool “o_rpki”
- [functional] New tool “o_nstrace”
- [functional] New tool “v_txt2hex”
- [functional] New tool “o_homoglyph”
- [functional] New tool “o_mac”
- [functional] New tool “o_password_dumps”
- [functional] New tool “o_mgrs”
- [functional] New tool “o_telegram_channel”
- [functional] New tool “o_hudsonrock”
- [functional] New tool “o_hostname”
- [functional] New tool “o_securitytxt”
- [functional] New tool “v_json_format”
- [functional] New tool “o_slug”
- [functional] New tool “o_infra_fingerprint”
- [functional] New tool “o_cve_timeline”
- [functional] New tool “o_base32”
- [functional] New tool “o_intelx_email”
- [functional] New tool “o_subbrute”
- [functional] New tool “o_hashid”
- [functional] New tool “o_clickjacking”
- [functional] New tool “o_threatcrowd”
- [functional] New tool “o_supply_chain_risk”
- [functional] New tool “o_breachdirectory”
- [functional] New tool “o_jarm”
- [functional] New tool “o_ip_math”
- [functional] New tool “o_srvlookup”
- [functional] New tool “v_hex2txt”
- [functional] New tool “o_numwords”
- [functional] New tool “v_metrics”
- [functional] New tool “o_datacite”
- [functional] New tool “o_mimetype”
- [functional] New tool “o_uuid_validate”
- [functional] New tool “o_teamcymru”
- [functional] New tool “o_cryptomarket”
- [functional] New tool “o_isexitnode”
- [functional] New tool “o_phonepivot”
- [functional] New tool “o_revimg”
- [functional] New tool “o_ghkeysgpg”
- [functional] New tool “o_holidays”
- [functional] New tool “v_regex”
- [functional] New tool “o_htmlencode”
- [functional] New tool “o_moonphase”
- [functional] New tool “o_genderize”
- [functional] New tool “o_otxdomain”
- [functional] New tool “o_breach_aggregator”
- [functional] New tool “o_asnlookup”
- [functional] New tool “o_rdap_domain”
- [functional] New tool “o_leakcheck”
- [functional] New tool “o_stringmetrics”
- [functional] New tool “o_spacepeople”
- [functional] New tool “o_uuid”
- [functional] New tool “o_npmdl”
- [functional] New tool “o_bgphistory”
- [functional] New tool “o_httpmethods”
- [functional] New tool “o_leet”
- [functional] New tool “o_isotime”
- [functional] New tool “o_isbn”
- [functional] New tool “o_pypi”
- [functional] New tool “o_dnsverify”
- [functional] New tool “o_wordcount”
- [functional] New tool “o_dnsrecon”
- [functional] New tool “o_epss”
- [functional] New tool “o_internetdb”
- [functional] New tool “o_github_code”
- [functional] New tool “v_hash”
- [functional] New tool “o_cors”
- [functional] New tool “o_abusecontact”
- [functional] New tool “o_unicode_lookup”
- [functional] New tool “o_openfoodfacts”
- [functional] New tool “o_uuencode”
- [functional] New tool “o_wikipv”
- [functional] New tool “o_dns”
- [functional] New tool “o_smtpbanner”
- [functional] New tool “o_formaudit”
- [functional] New tool “v_urldec”
- [functional] New tool “v_now”
- [functional] New tool “o_utm”
- [functional] New tool “o_httpcode”
- [functional] New tool “v_json_diff”
- [functional] New tool “o_zenodo”
- [functional] New tool “o_decode”
- [functional] New tool “o_breachdb”
- [functional] New tool “o_cfradar”
- [functional] New tool “o_breachsearch”
- [functional] New tool “o_musicbrainzartist”
- [functional] New tool “o_chesscom”
- [functional] New tool “o_doh”
- [functional] New tool “o_cratedownloads”
- [functional] New tool “o_swagger”
- [functional] New tool “o_suntimes”
- [functional] New tool “v_epoch”
- [functional] New tool “o_btcfees”
- [functional] New tool “o_latlonformat”
- [functional] New tool “o_emailsec”
- [functional] New tool “o_ascii85”
- [functional] New tool “o_onthisday”
- [functional] New tool “o_datauri”
- [functional] New tool “o_gh_secret_scan”
- [functional] New tool “o_wikisummary”
- [functional] New tool “o_phonevcard”
- [functional] New tool “o_isin”
- [functional] New tool “o_port”
- [functional] New tool “o_depsdev”
- [functional] New tool “o_tech”
- [functional] New tool “o_sri_check”
- [functional] New tool “o_base36”
- [functional] New tool “o_manifest”
- [functional] New tool “o_crc32”
- [functional] New tool “o_railfence”
- [functional] New tool “o_caesar”
- [functional] New tool “o_airquality”
- [functional] New tool “o_nationalize”

### 2026-09-21 (score 75, +1)

We did not load change detail this far back for this component, so this day may have recorded more than is shown.

### 2026-09-19 (score 74, +1)

We did not load change detail this far back for this component, so this day may have recorded more than is shown.

### 2026-09-17 (score 73, +1)

We did not load change detail this far back for this component, so this day may have recorded more than is shown.

### 2026-09-15 (score 72, +49)

We did not load change detail this far back for this component, so this day may have recorded more than is shown.

## MCP tools (355)

### `search` (~52 tokens)

Synthesize a research answer via local LLM (500 sats/call; free tier 100 calls/mo)

Input parameters:

- `detailLevel` (string): Depth of synthesis.
- `query` (string, required): The search or research query.

### `summarize` (~50 tokens)

Summarize docs, extract entities, sentiment (500 sats/call; free tier 100 calls/mo)

Input parameters:

- `task` (string): Analysis task.
- `text` (string, required): Input document or article text.

### `web_scrape` (~66 tokens)

Fetch any URL → clean markdown + metadata (400 sats/call; free tier 100 calls/mo)

Input parameters:

- `maxLength` (number): Maximum characters to return in markdown (default 8000).
- `url` (string, required): The absolute HTTP or HTTPS URL to fetch and parse.

### `http_client` (~100 tokens)

Universal HTTP request to any API/webhook (300 sats/call; free tier 100 calls/mo)

Input parameters:

- `body` (string): Stringified JSON or text body for POST/PUT/PATCH.
- `headers` (object): Key-value object of request headers.
- `method` (string): HTTP method (default GET).
- `timeoutMs` (number): Request timeout in milliseconds (default 5000).
- `url` (string, required): Target request URL.

### `mcp_discover` (~84 tokens)

Search 1000+ MCP servers by capability (300 sats/call; free tier 100 calls/mo)

Input parameters:

- `limit` (number): Max results to return (default 10, max 50).
- `query` (string, required): Free-text query describing the capability you need (e.g. "payments", "browser automation", "sql database", "image generation").

### `mcp_readme` (~46 tokens)

Fetch setup/config for any MCP server (200 sats/call; free tier 100 calls/mo)

Input parameters:

- `name` (string, required): Server name or GitHub URL to look up.

### `mcp_stats` (~29 tokens)

MCP catalog counts + API-key flags (100 sats/call; free tier 100 calls/mo)

### `execute_js` (~42 tokens)

Run JS in a sandbox, capture output (300 sats/call; free tier 100 calls/mo)

Input parameters:

- `code` (string, required): JavaScript expression or script snippet.

### `math` (~115 tokens)

Eval formulas, stats, finance (200 sats/call; free tier 100 calls/mo)

Input parameters:

- `expression` (string): Math expression e.g., "sqrt(144) + sin(pi / 4) * 50" or array for stats.
- `numbers` (array): Array of numbers for statistical calculations.
- `operation` (string, required): Type of calculation.
- `principal` (number): Principal for compound interest.
- `ratePercent` (number): Annual interest rate percentage.
- `years` (number): Time horizon in years.

### `regex` (~83 tokens)

Test/replace regex patterns (200 sats/call; free tier 100 calls/mo)

Input parameters:

- `flags` (string): Flags like "g", "i", "m" (default "g").
- `pattern` (string, required): Regex pattern string without slashes.
- `replacement` (string): Optional replacement text string.
- `text` (string, required): Input text to search against.

### `data_convert` (~61 tokens)

JSON/CSV/YAML/XML/query-string transforms (200 sats/call; free tier 100 calls/mo)

Input parameters:

- `data` (string, required): Input data payload string.
- `fromFormat` (string, required): Source format.
- `toFormat` (string, required): Target format.

### `encode` (~54 tokens)

Base64/URL/Hex/HTML/JWT encode+decode (200 sats/call; free tier 100 calls/mo)

Input parameters:

- `action` (string, required): Operation to perform.
- `input` (string, required): Text or token string.

### `hash` (~70 tokens)

MD5/SHA/HMAC/UUID/random tokens (250 sats/call; free tier 100 calls/mo)

Input parameters:

- `algorithm` (string, required): Hash or ID generator type.
- `input` (string): Source text string to hash or sign.
- `secretKey` (string): Optional key for HMAC generation.

### `diff` (~49 tokens)

Line-by-line diff of two texts (250 sats/call; free tier 100 calls/mo)

Input parameters:

- `modifiedText` (string, required): Modified text string.
- `originalText` (string, required): Original text string.

### `chart` (~97 tokens)

SVG bar/line/pie/donut charts (350 sats/call; free tier 100 calls/mo)

Input parameters:

- `chartType` (string, required): Visual style of chart.
- `labels` (array, required): X-axis or slice labels.
- `primaryColor` (string): Hex color string (e.g. #3b82f6).
- `title` (string): Chart title header.
- `values` (array, required): Data numerical values corresponding to labels.

### `qr` (~70 tokens)

SVG QR codes + barcodes (250 sats/call; free tier 100 calls/mo)

Input parameters:

- `size` (number): Width/Height size in pixels (default 200).
- `text` (string, required): Text, URL, or payload to encode into QR code.
- `type` (string): Code style.

### `ascii` (~68 tokens)

Text → ASCII art (150 sats/call; free tier 100 calls/mo)

Input parameters:

- `headers` (array): Headers for table style.
- `rows` (array): Rows matrix for table style.
- `style` (string, required): Output layout style.
- `text` (string, required): Main text or title.

### `netutils` (~67 tokens)

URL/subnet/user-agent analysis (300 sats/call; free tier 100 calls/mo)

Input parameters:

- `action` (string, required): Utility function.
- `target` (string, required): URL, IP CIDR (e.g. 192.168.1.0/24), or user agent string.

### `cron` (~68 tokens)

Explain/validate/next-run cron expressions (150 sats/call; free tier 100 calls/mo)

Input parameters:

- `count` (number): Number of upcoming execution times to calculate (default 5).
- `expression` (string, required): 5-part cron string e.g. "*/15 * * * *".

### `styx_beacon` (~30 tokens)

Tor gateway status + current exit IP (50 sats/call; free tier 100 calls/mo)

### `styx_fetch` (~29 tokens)

Fetch a URL through the Tor network (300 sats/call; free tier 100 calls/mo)

### `styx_renew` (~31 tokens)

Rotate to a fresh Tor circuit/identity (100 sats/call; free tier 100 calls/mo)

### `mobsf_scans` (~29 tokens)

List recent mobile app security scans (200 sats/call; free tier 100 calls/mo)

### `mobsf_report` (~30 tokens)

Fetch a mobile app security report by hash (400 sats/call; free tier 100 calls/mo)

### `titan_beacon` (~30 tokens)

Check RTX 4080 GPU compute status (0 sats/call; free tier 100 calls/mo)

### `titan_order` (~31 tokens)

Buy GPU compute credits (BTCPay invoice) (0 sats/call; free tier 100 calls/mo)

### `titan_generate` (~36 tokens)

Run LLM inference on the RTX 4080 (needs titan key) (0 sats/call; free tier 100 calls/mo)

### `echo_beacon` (~28 tokens)

Check voice/TTS API status (0 sats/call; free tier 100 calls/mo)

### `echo_tts` (~32 tokens)

Synthesize speech from text (needs echo key) (0 sats/call; free tier 100 calls/mo)

### `echo_order` (~30 tokens)

Buy voice credits (BTCPay invoice) (0 sats/call; free tier 100 calls/mo)

### `lynx_inspect` (~42 tokens)

Inspect a file: hashes/entropy/strings/PE/PDF/Office (base64) (200 sats/call; free tier 100 calls/mo)

### `lynx_steg` (~37 tokens)

Decode hidden data (steghide + zsteg LSB) (300 sats/call; free tier 100 calls/mo)

### `lynx_recon` (~42 tokens)

Recon external target (nmap/subfinder/nuclei/theHarvester/dnsrecon) (400 sats/call; free tier 100 calls/mo)

### `v_json_format` (~27 tokens)

Validate + pretty-print JSON (100 sats/call; free tier 100 calls/mo)

### `v_json_csv` (~30 tokens)

Flatten a JSON array of objects to CSV (100 sats/call; free tier 100 calls/mo)

### `v_json_diff` (~33 tokens)

Diff two JSON values (added/removed/changed) (100 sats/call; free tier 100 calls/mo)

### `v_jwt` (~28 tokens)

Decode a JWT header + payload (100 sats/call; free tier 100 calls/mo)

### `v_hash` (~35 tokens)

MD5/SHA1/SHA256/SHA512 of a string (100 sats/call; free tier 100 calls/mo)

### `v_b64enc` (~28 tokens)

Base64-encode text (100 sats/call; free tier 100 calls/mo)

### `v_b64dec` (~31 tokens)

Base64-decode to text + hex (100 sats/call; free tier 100 calls/mo)

### `v_urlenc` (~27 tokens)

Percent-encode a string (100 sats/call; free tier 100 calls/mo)

### `v_urldec` (~29 tokens)

Percent-decode a string (100 sats/call; free tier 100 calls/mo)

### `v_urlparse` (~31 tokens)

Split a URL into scheme/host/path/query (100 sats/call; free tier 100 calls/mo)

### `v_hex2txt` (~28 tokens)

Decode hex bytes to text (100 sats/call; free tier 100 calls/mo)

### `v_txt2hex` (~27 tokens)

Encode text to hex (100 sats/call; free tier 100 calls/mo)

### `v_uuid` (~27 tokens)

Generate a random UUID v4 (100 sats/call; free tier 100 calls/mo)

### `v_regex` (~29 tokens)

Test a regex, return matches + groups (100 sats/call; free tier 100 calls/mo)

### `v_cron` (~30 tokens)

Break down a 5-field cron expression (100 sats/call; free tier 100 calls/mo)

### `v_slug` (~34 tokens)

Slugify text (lowercase, dashes, ascii) (100 sats/call; free tier 100 calls/mo)

### `v_case` (~34 tokens)

camel/snake/kebab/pascal/title/upper/lower (100 sats/call; free tier 100 calls/mo)

### `v_metrics` (~30 tokens)

Length/word/line counts + Shannon entropy (100 sats/call; free tier 100 calls/mo)

### `v_htmldec` (~27 tokens)

Decode HTML entities (100 sats/call; free tier 100 calls/mo)

### `v_baseconv` (~31 tokens)

Convert a number between bases 2-36 (100 sats/call; free tier 100 calls/mo)

### `v_epoch` (~29 tokens)

Convert a unix epoch to UTC + relative (100 sats/call; free tier 100 calls/mo)

### `v_now` (~27 tokens)

Current unix time (UTC) (100 sats/call; free tier 100 calls/mo)

### `o_abusecontact` (~33 tokens)

Authoritative abuse email (RIPEstat finder) (200 sats/call; free tier 100 calls/mo)

### `o_agify` (~33 tokens)

Predict age from a first name (agify.io) (200 sats/call; free tier 100 calls/mo)

### `o_airquality` (~44 tokens)

PM2.5/PM10/European AQI at coords (Open-Meteo, no key) (200 sats/call; free tier 100 calls/mo)

### `o_antipode` (~33 tokens)

Opposite point on Earth for coords (offline) (200 sats/call; free tier 100 calls/mo)

### `o_api_key_scan` (~37 tokens)

Scan GitHub/Pastebin/Google for exposed API keys/secrets (200 sats/call; free tier 100 calls/mo)

### `o_archiveorg` (~26 tokens)

Internet Archive item metadata (200 sats/call; free tier 100 calls/mo)

### `o_arxiv` (~33 tokens)

arXiv paper search by title/author/keyword (200 sats/call; free tier 100 calls/mo)

### `o_ascii85` (~31 tokens)

Ascii85 encode/decode (offline) (200 sats/call; free tier 100 calls/mo)

### `o_asn` (~29 tokens)

ASN details or prefixes for an IP (200 sats/call; free tier 100 calls/mo)

### `o_asnlookup` (~34 tokens)

ASN org/country/prefixes via RIPEstat (200 sats/call; free tier 100 calls/mo)

### `o_asrank` (~29 tokens)

Global ASN ranking + customer cone size (200 sats/call; free tier 100 calls/mo)

### `o_atbash` (~37 tokens)

Atbash A↔Z mirror cipher (offline, self-inverse) (200 sats/call; free tier 100 calls/mo)

### `o_attack_surface` (~31 tokens)

Map attack surface: services + endpoints + API (200 sats/call; free tier 100 calls/mo)

### `o_barcode` (~35 tokens)

EAN-13 / UPC-A check digit validation (offline) (200 sats/call; free tier 100 calls/mo)

### `o_base32` (~31 tokens)

RFC 4648 Base32 encode or decode (200 sats/call; free tier 100 calls/mo)

### `o_base36` (~36 tokens)

Encode int <-> base36, autodetecting direction (offline) (200 sats/call; free tier 100 calls/mo)

### `o_base64` (~31 tokens)

Auto decode/encode base64 (offline) (200 sats/call; free tier 100 calls/mo)

### `o_base_convert` (~34 tokens)

Binary/octal/decimal/hex number conversion (offline) (200 sats/call; free tier 100 calls/mo)

### `o_bgphistory` (~31 tokens)

Routing origin history (RIPE Stat) (200 sats/call; free tier 100 calls/mo)

### `o_bimi` (~30 tokens)

Brand-indicator (logo) DNS record (200 sats/call; free tier 100 calls/mo)

### `o_binarytext` (~32 tokens)

Text ↔ 8-bit binary (offline) (200 sats/call; free tier 100 calls/mo)

### `o_blockheight` (~28 tokens)

Current Bitcoin + Ethereum block height (200 sats/call; free tier 100 calls/mo)

### `o_bluesky` (~27 tokens)

AT Protocol public profile (200 sats/call; free tier 100 calls/mo)

### `o_breach_aggregator` (~39 tokens)

Aggregate breach databases (XposedOrNot, LeakCheck, etc) (200 sats/call; free tier 100 calls/mo)

### `o_breachdb` (~28 tokens)

Aggregated breach collection search (200 sats/call; free tier 100 calls/mo)

### `o_breachdirectory` (~33 tokens)

ProxyNova COMB dataset search for credential exposure (200 sats/call; free tier 100 calls/mo)

### `o_breachsearch` (~30 tokens)

Public HIBP breach metadata search (200 sats/call; free tier 100 calls/mo)

### `o_btcaddr` (~31 tokens)

Bitcoin balance/tx via mempool.space (200 sats/call; free tier 100 calls/mo)

### `o_btcfees` (~35 tokens)

Recommended Bitcoin fees sat/vB (mempool.space) (200 sats/call; free tier 100 calls/mo)

### `o_c2_infrastructure` (~30 tokens)

Detect C2 infrastructure + hosting (200 sats/call; free tier 100 calls/mo)

### `o_caesar` (~36 tokens)

ROT-N / Caesar brute force, all 25 shifts (offline) (200 sats/call; free tier 100 calls/mo)

### `o_casify` (~38 tokens)

snake/camel/Pascal/kebab/CONSTANT case (offline) (200 sats/call; free tier 100 calls/mo)

### `o_cdnjs` (~29 tokens)

Hosted JS library version + assets (200 sats/call; free tier 100 calls/mo)

### `o_cfradar` (~31 tokens)

Domain rank + categories from Cloudflare Radar (200 sats/call; free tier 100 calls/mo)

### `o_checksum` (~33 tokens)

CRC32 + Adler32 checksum of input text (offline) (200 sats/call; free tier 100 calls/mo)

### `o_chesscom` (~28 tokens)

Public player profile + ratings (200 sats/call; free tier 100 calls/mo)

### `o_cidr` (~37 tokens)

Subnet calc: network, mask, host range, count (offline) (200 sats/call; free tier 100 calls/mo)

### `o_circlhash` (~34 tokens)

Known-file lookup (CIRCL hashlookup) (200 sats/call; free tier 100 calls/mo)

### `o_clickjacking` (~35 tokens)

X-Frame-Options + CSP frame-ancestors check (200 sats/call; free tier 100 calls/mo)

### `o_cloud` (~32 tokens)

AWS/GCP/Azure/etc. detection + hosting flag (200 sats/call; free tier 100 calls/mo)

### `o_codeberg` (~29 tokens)

Codeberg/Gitea public user (200 sats/call; free tier 100 calls/mo)

### `o_codeforces` (~29 tokens)

Codeforces competitive programmer rating & rank (200 sats/call; free tier 100 calls/mo)

### `o_color` (~34 tokens)

hex/rgb -> rgb/hsl + nearest name (offline) (200 sats/call; free tier 100 calls/mo)

### `o_cookies` (~31 tokens)

Secure/HttpOnly/SameSite flag review (200 sats/call; free tier 100 calls/mo)

### `o_cors` (~29 tokens)

Origin-reflection / wildcard misconfig (200 sats/call; free tier 100 calls/mo)

### `o_cratedownloads` (~30 tokens)

Download totals for a Rust crate (200 sats/call; free tier 100 calls/mo)

### `o_crates` (~27 tokens)

Rust crate stats + downloads (200 sats/call; free tier 100 calls/mo)

### `o_cratestats` (~34 tokens)

Rust crate downloads, version, repo (no key) (200 sats/call; free tier 100 calls/mo)

### `o_crc32` (~28 tokens)

Compute CRC-32 of input (200 sats/call; free tier 100 calls/mo)

### `o_credential_stuffing` (~30 tokens)

Check breach + stuffing risk (200 sats/call; free tier 100 calls/mo)

### `o_crossrefauthor` (~32 tokens)

Works by author/keyword (Crossref) (200 sats/call; free tier 100 calls/mo)

### `o_crypto` (~28 tokens)

BTC/ETH balance & tx history (200 sats/call; free tier 100 calls/mo)

### `o_cryptomarket` (~40 tokens)

Global market cap, BTC dominance, 24h volume (CoinGecko) (200 sats/call; free tier 100 calls/mo)

### `o_csp_parse` (~32 tokens)

Content-Security-Policy header analysis & grade (200 sats/call; free tier 100 calls/mo)

### `o_cve` (~36 tokens)

CVE detail + CVSS (CIRCL, no key) (200 sats/call; free tier 100 calls/mo)

### `o_cve_poc_checker` (~37 tokens)

Check if a CVE has public POC/exploit code (200 sats/call; free tier 100 calls/mo)

### `o_cve_severity` (~36 tokens)

CVSS + EPSS + KEV for a CVE (200 sats/call; free tier 100 calls/mo)

### `o_cve_timeline` (~38 tokens)

When a CVE was discussed (Twitter/Reddit/News) (200 sats/call; free tier 100 calls/mo)

### `o_cvedetail` (~36 tokens)

Full CVE record (CVSS, refs) via CIRCL (200 sats/call; free tier 100 calls/mo)

### `o_datacite` (~30 tokens)

Research datasets/DOIs by keyword (200 sats/call; free tier 100 calls/mo)

### `o_datauri` (~29 tokens)

Parse or create data: URIs (200 sats/call; free tier 100 calls/mo)

### `o_decode` (~33 tokens)

Auto base64/hex/URL-decode + refang (200 sats/call; free tier 100 calls/mo)

### `o_dehashed_domain` (~33 tokens)

DeHashed public page scrape for domain breach exposure (200 sats/call; free tier 100 calls/mo)

### `o_depsdev` (~30 tokens)

Open-source insights: versions, default (200 sats/call; free tier 100 calls/mo)

### `o_devto` (~28 tokens)

Forem/dev.to public profile (200 sats/call; free tier 100 calls/mo)

### `o_dirlisting` (~30 tokens)

Open directory-index exposure (per-target) (200 sats/call; free tier 100 calls/mo)

### `o_disasters` (~38 tokens)

Active worldwide disasters: quakes/cyclones/floods (feeds globe) (200 sats/call; free tier 100 calls/mo)

### `o_dns` (~37 tokens)

A/AAAA/MX/NS/TXT/CNAME/SOA/CAA records (200 sats/call; free tier 100 calls/mo)

### `o_dnsbl` (~35 tokens)

Spamhaus/Barracuda/SORBS/SpamCop check (200 sats/call; free tier 100 calls/mo)

### `o_dnsgraph` (~27 tokens)

Hurricane Electric DNS delegation info (200 sats/call; free tier 100 calls/mo)

### `o_dnsmx` (~31 tokens)

MX records via Google DNS-over-HTTPS (200 sats/call; free tier 100 calls/mo)

### `o_dnsprop` (~33 tokens)

Compare A records across Google/Cloudflare/Quad9 (200 sats/call; free tier 100 calls/mo)

### `o_dnsquery` (~30 tokens)

DNS A record lookup via Google DoH (200 sats/call; free tier 100 calls/mo)

### `o_dnsrecon` (~30 tokens)

Query ALL DNS record types at once (200 sats/call; free tier 100 calls/mo)

### `o_dnsverify` (~34 tokens)

Which SaaS a domain is enrolled in (TXT tokens) (200 sats/call; free tier 100 calls/mo)

### `o_dockerhub` (~36 tokens)

Docker Hub repo pulls, stars, last update (no key) (200 sats/call; free tier 100 calls/mo)

### `o_doh` (~40 tokens)

Uncommon DNS records (HTTPS/SVCB/TLSA/SRV/NAPTR…) (200 sats/call; free tier 100 calls/mo)

### `o_doi` (~29 tokens)

Crossref publication metadata for a DOI (200 sats/call; free tier 100 calls/mo)

### `o_ean` (~36 tokens)

EAN/UPC check digit + GS1 country prefix (offline) (200 sats/call; free tier 100 calls/mo)

### `o_elevation` (~32 tokens)

Ground elevation in metres (Open-Meteo) (200 sats/call; free tier 100 calls/mo)

### `o_email` (~28 tokens)

Gravatar, MX, disposable detection (200 sats/call; free tier 100 calls/mo)

### `o_emailrep` (~40 tokens)

emailrep.io: malicious/spam/breach flags for email (no key, limited) (200 sats/call; free tier 100 calls/mo)

### `o_emailsec` (~30 tokens)

SPF / DMARC / DKIM posture (200 sats/call; free tier 100 calls/mo)

### `o_ens` (~30 tokens)

ENS name <-> ETH address + avatar (200 sats/call; free tier 100 calls/mo)

### `o_epoch` (~27 tokens)

Unix timestamp <-> UTC datetime (200 sats/call; free tier 100 calls/mo)

### `o_epss` (~31 tokens)

Exploitation probability (FIRST EPSS) (200 sats/call; free tier 100 calls/mo)

### `o_exploit_cve` (~37 tokens)

Exploit-DB + GitHub POCs for a CVE (200 sats/call; free tier 100 calls/mo)

### `o_favicon` (~31 tokens)

favicon md5/sha256 for pivoting (200 sats/call; free tier 100 calls/mo)

### `o_feeds` (~29 tokens)

Discover syndication feeds on a site (200 sats/call; free tier 100 calls/mo)

### `o_feodoips` (~35 tokens)

Is IP on abuse.ch Feodo botnet C2 list (200 sats/call; free tier 100 calls/mo)

### `o_flightsnear` (~35 tokens)

Live aircraft within ~1° of coords (OpenSky) (200 sats/call; free tier 100 calls/mo)

### `o_formaudit` (~34 tokens)

Enumerate forms/inputs (login/upload) — attack surface (200 sats/call; free tier 100 calls/mo)

### `o_genderize` (~33 tokens)

Predict gender from a first name (genderize.io) (200 sats/call; free tier 100 calls/mo)

### `o_geocode` (~33 tokens)

Place name → coordinates (OSM Nominatim) (200 sats/call; free tier 100 calls/mo)

### `o_gh_dorking` (~36 tokens)

GitHub code search for target string exposure in public repos (200 sats/call; free tier 100 calls/mo)

### `o_gh_secret_scan` (~35 tokens)

Scan GitHub user's public repos for leaked secrets/passwords (200 sats/call; free tier 100 calls/mo)

### `o_ghkeysgpg` (~33 tokens)

Whether a user publishes a GPG key (200 sats/call; free tier 100 calls/mo)

### `o_github_code` (~34 tokens)

GitHub unauthenticated code search (10 results) (200 sats/call; free tier 100 calls/mo)

### `o_githubsearch` (~29 tokens)

Search GitHub repos by keyword (200 sats/call; free tier 100 calls/mo)

### `o_gitlab` (~25 tokens)

Public user profile (200 sats/call; free tier 100 calls/mo)

### `o_gleif_name` (~36 tokens)

GLEIF fuzzy legal-entity name → LEI codes (200 sats/call; free tier 100 calls/mo)

### `o_golangpkg` (~29 tokens)

Latest version of a Go module (200 sats/call; free tier 100 calls/mo)

### `o_goproxy` (~36 tokens)

Latest version of a Go module via module proxy (no key) (200 sats/call; free tier 100 calls/mo)

### `o_gravatarfull` (~31 tokens)

Full public Gravatar profile + linked accounts (200 sats/call; free tier 100 calls/mo)

### `o_greynoise` (~36 tokens)

Is the IP a known internet scanner — benign/malicious (200 sats/call; free tier 100 calls/mo)

### `o_hackernews` (~30 tokens)

Profile: karma, age, activity (200 sats/call; free tier 100 calls/mo)

### `o_hashid` (~29 tokens)

Guess hash algorithm from length/charset (200 sats/call; free tier 100 calls/mo)

### `o_hashtext` (~38 tokens)

md5/sha1/sha256/sha512 of text (offline) (200 sats/call; free tier 100 calls/mo)

### `o_headers` (~27 tokens)

Headers + security-header scorecard (200 sats/call; free tier 100 calls/mo)

### `o_hexdump` (~36 tokens)

Offset/hex/ASCII hexdump of input (offline) (200 sats/call; free tier 100 calls/mo)

### `o_hibp` (~42 tokens)

Check if a password appeared in breaches via HIBP k-anonymity (no key) (200 sats/call; free tier 100 calls/mo)

### `o_hibp_email` (~40 tokens)

Email breach exposure via XposedOrNot (HIBP-compatible, no key) (200 sats/call; free tier 100 calls/mo)

### `o_hnsearch` (~28 tokens)

Search Hacker News stories/comments (200 sats/call; free tier 100 calls/mo)

### `o_hnuser` (~33 tokens)

HN profile: karma, created, submission count (200 sats/call; free tier 100 calls/mo)

### `o_holidays` (~32 tokens)

Country public holidays this year (nager.at) (200 sats/call; free tier 100 calls/mo)

### `o_homoglyph` (~36 tokens)

Detect confusable/mixed-script spoofing chars (offline) (200 sats/call; free tier 100 calls/mo)

### `o_hostname` (~27 tokens)

IP → hostname via reverse DNS (200 sats/call; free tier 100 calls/mo)

### `o_hstspreload` (~34 tokens)

Is the domain on the browser HSTS preload list (200 sats/call; free tier 100 calls/mo)

### `o_htmlcomments` (~32 tokens)

Extract HTML comments — leaked TODOs/paths/software (200 sats/call; free tier 100 calls/mo)

### `o_htmlencode` (~27 tokens)

HTML entity encode/decode (200 sats/call; free tier 100 calls/mo)

### `o_httpcode` (~31 tokens)

HTTP status code meaning & family (offline) (200 sats/call; free tier 100 calls/mo)

### `o_httping` (~27 tokens)

Reachability + response timing (200 sats/call; free tier 100 calls/mo)

### `o_httpmethods` (~31 tokens)

Allowed methods + TRACE/risky-verb check (200 sats/call; free tier 100 calls/mo)

### `o_hudsonrock` (~36 tokens)

Stealer-log exposure check via HudsonRock Cavalier free API (200 sats/call; free tier 100 calls/mo)

### `o_huggingface` (~32 tokens)

HuggingFace user profile or model card (200 sats/call; free tier 100 calls/mo)

### `o_imagerev` (~36 tokens)

Google Lens / Yandex / Bing / TinEye search links (200 sats/call; free tier 100 calls/mo)

### `o_infra_fingerprint` (~29 tokens)

Infrastructure fingerprinting + hosting (200 sats/call; free tier 100 calls/mo)

### `o_intelx_email` (~45 tokens)

Email breach exposure — breach names, data types, paste hits (XposedOrNot, no key) (200 sats/call; free tier 100 calls/mo)

### `o_internetdb` (~38 tokens)

Open ports, CPEs, tags, known CVEs for a host (200 sats/call; free tier 100 calls/mo)

### `o_ioc_reputation` (~31 tokens)

Cross-check IP/domain/hash across feeds (200 sats/call; free tier 100 calls/mo)

### `o_ip_math` (~36 tokens)

CIDR: network/broadcast/range/host count (offline) (200 sats/call; free tier 100 calls/mo)

### `o_ipfull` (~32 tokens)

Rich geo+ASN+proxy/mobile/hosting flags (200 sats/call; free tier 100 calls/mo)

### `o_ipgeo` (~32 tokens)

Geo, ISP, ASN, proxy/hosting flags (200 sats/call; free tier 100 calls/mo)

### `o_ipint` (~33 tokens)

IPv4 ↔ integer ↔ hex (offline) (200 sats/call; free tier 100 calls/mo)

### `o_ipv4classify` (~39 tokens)

Classify IP: private/loopback/multicast/global (offline) (200 sats/call; free tier 100 calls/mo)

### `o_ipwhois` (~30 tokens)

Network owner, range, abuse contact (200 sats/call; free tier 100 calls/mo)

### `o_isbn` (~30 tokens)

Book metadata (OpenLibrary) + checksum (200 sats/call; free tier 100 calls/mo)

### `o_isexitnode` (~30 tokens)

Is this a Tor exit node? (200 sats/call; free tier 100 calls/mo)

### `o_isin` (~32 tokens)

Validate ISIN security identifier check digit (offline) (200 sats/call; free tier 100 calls/mo)

### `o_isotime` (~31 tokens)

Parse/convert a timestamp (offline) (200 sats/call; free tier 100 calls/mo)

### `o_jarm` (~41 tokens)

Shodan InternetDB: ports, CPEs, vulns, tags (no key) (200 sats/call; free tier 100 calls/mo)

### `o_jslibs` (~34 tokens)

Enumerate <script> sources + detect JS libs/versions (200 sats/call; free tier 100 calls/mo)

### `o_kev` (~33 tokens)

Is the CVE actively exploited (KEV catalog) (200 sats/call; free tier 100 calls/mo)

### `o_keybase` (~28 tokens)

Crypto identity + linked social proofs (200 sats/call; free tier 100 calls/mo)

### `o_latlonformat` (~37 tokens)

DD ↔ DMS ↔ DM coordinate format conversion (offline) (200 sats/call; free tier 100 calls/mo)

### `o_leakcheck` (~36 tokens)

Breach exposure via leakcheck.io public endpoint (no key) (200 sats/call; free tier 100 calls/mo)

### `o_leaklookup` (~43 tokens)

Infostealer compromise check — stealer logs, credential count (Hudson Rock, no key) (200 sats/call; free tier 100 calls/mo)

### `o_leet` (~29 tokens)

Leetspeak transform (offline) (200 sats/call; free tier 100 calls/mo)

### `o_leetcode_user` (~32 tokens)

LeetCode solved problems, ranking, badges (200 sats/call; free tier 100 calls/mo)

### `o_links` (~31 tokens)

All links + external domains + emails on a page (200 sats/call; free tier 100 calls/mo)

### `o_linktree` (~31 tokens)

Extract destination links from a linktr.ee profile (200 sats/call; free tier 100 calls/mo)

### `o_lobsters` (~28 tokens)

Public user profile + karma (200 sats/call; free tier 100 calls/mo)

### `o_mac` (~26 tokens)

OUI → hardware vendor (200 sats/call; free tier 100 calls/mo)

### `o_macvalid` (~31 tokens)

MAC address parser (colon/dash/plain) (200 sats/call; free tier 100 calls/mo)

### `o_macvendor` (~38 tokens)

MAC vendor + local/multicast bits from local OUI table (offline) (200 sats/call; free tier 100 calls/mo)

### `o_macvendorlookup` (~33 tokens)

OUI → hardware vendor (macvendors.com) (200 sats/call; free tier 100 calls/mo)

### `o_maidenhead` (~33 tokens)

Coords → ham-radio grid locator (offline) (200 sats/call; free tier 100 calls/mo)

### `o_manifest` (~30 tokens)

Web app manifest: name, icons, theme (200 sats/call; free tier 100 calls/mo)

### `o_marineweather` (~34 tokens)

Wave height/period/direction + sea temp at coords (200 sats/call; free tier 100 calls/mo)

### `o_maven` (~32 tokens)

Java artifact: 'group:artifact' or name (200 sats/call; free tier 100 calls/mo)

### `o_medium` (~27 tokens)

Author feed: recent post titles (200 sats/call; free tier 100 calls/mo)

### `o_metatags` (~32 tokens)

OpenGraph / Twitter-card / generator meta tags (200 sats/call; free tier 100 calls/mo)

### `o_mgrs` (~35 tokens)

Lat/lon → MGRS military grid reference (offline) (200 sats/call; free tier 100 calls/mo)

### `o_mimetype` (~30 tokens)

File extension → MIME type (offline) (200 sats/call; free tier 100 calls/mo)

### `o_moonphase` (~31 tokens)

Current moon phase & illumination (offline) (200 sats/call; free tier 100 calls/mo)

### `o_morse` (~34 tokens)

Morse encode/decode, autodetecting direction (offline) (200 sats/call; free tier 100 calls/mo)

### `o_mtasts` (~28 tokens)

Inbound-mail TLS enforcement policy (200 sats/call; free tier 100 calls/mo)

### `o_musicbrainz` (~32 tokens)

Artist search: type, country, MBID (200 sats/call; free tier 100 calls/mo)

### `o_musicbrainzartist` (~30 tokens)

Artist type, country, lifespan (200 sats/call; free tier 100 calls/mo)

### `o_nationalize` (~33 tokens)

Predict nationality from a name (nationalize.io) (200 sats/call; free tier 100 calls/mo)

### `o_nato` (~32 tokens)

Spell text in NATO phonetic alphabet (offline) (200 sats/call; free tier 100 calls/mo)

### `o_nearbywiki` (~29 tokens)

Wikipedia places near a coordinate (200 sats/call; free tier 100 calls/mo)

### `o_npm` (~27 tokens)

Packages published by an author (200 sats/call; free tier 100 calls/mo)

### `o_npmdl` (~28 tokens)

npm download counts day/week/month (200 sats/call; free tier 100 calls/mo)

### `o_npmdownloads` (~37 tokens)

npm package download counts, last week + month (no key) (200 sats/call; free tier 100 calls/mo)

### `o_npmorg` (~29 tokens)

npm organization: all published packages (200 sats/call; free tier 100 calls/mo)

### `o_npmpkg` (~31 tokens)

npm package version, deps, maintainers (200 sats/call; free tier 100 calls/mo)

### `o_nstrace` (~33 tokens)

Trace NS delegation: TLD → registrar → authoritative (200 sats/call; free tier 100 calls/mo)

### `o_nuget` (~29 tokens)

.NET package stats + downloads (200 sats/call; free tier 100 calls/mo)

### `o_numlookup` (~39 tokens)

Validity, region, carrier, line type, timezones (libphonenumber) (200 sats/call; free tier 100 calls/mo)

### `o_numwords` (~29 tokens)

Integer → English words (offline) (200 sats/call; free tier 100 calls/mo)

### `o_nvdcve` (~34 tokens)

Full NVD record: CVSS, CWE, references (200 sats/call; free tier 100 calls/mo)

### `o_onthisday` (~36 tokens)

Historical events on a date (Wikipedia; MM/DD or today) (200 sats/call; free tier 100 calls/mo)

### `o_openalexauthor` (~31 tokens)

Author works count, h-index, institution (200 sats/call; free tier 100 calls/mo)

### `o_openalexwork` (~32 tokens)

Scholarly work: citations, concepts, OA (200 sats/call; free tier 100 calls/mo)

### `o_openfoodfacts` (~33 tokens)

EAN/UPC -> product, brand, nutrition (200 sats/call; free tier 100 calls/mo)

### `o_openphish` (~29 tokens)

Community phishing-URL feed membership (200 sats/call; free tier 100 calls/mo)

### `o_osv` (~35 tokens)

Known package vulns (OSV.dev). 'eco:name' (200 sats/call; free tier 100 calls/mo)

### `o_otxdomain` (~32 tokens)

AlienVault OTX threat pulses for a domain (200 sats/call; free tier 100 calls/mo)

### `o_otxip` (~32 tokens)

AlienVault OTX threat pulses for an IP (200 sats/call; free tier 100 calls/mo)

### `o_pageinfo` (~27 tokens)

Common Crawl capture index lookup (200 sats/call; free tier 100 calls/mo)

### `o_passgen` (~32 tokens)

Generate strong random passwords + passphrase (offline) (200 sats/call; free tier 100 calls/mo)

### `o_password_dumps` (~33 tokens)

Search Dehashed for leaked passwords (query-only) (200 sats/call; free tier 100 calls/mo)

### `o_paste_domain` (~38 tokens)

Find domain in public pastes via psbdmp.ws (no key) (200 sats/call; free tier 100 calls/mo)

### `o_paste_email` (~41 tokens)

Find email in public pastes via Wayback CDX + search links (no key) (200 sats/call; free tier 100 calls/mo)

### `o_peers` (~29 tokens)

Upstream/downstream BGP neighbours (200 sats/call; free tier 100 calls/mo)

### `o_permissions_pol` (~32 tokens)

Permissions-Policy: camera/mic/geo controls (200 sats/call; free tier 100 calls/mo)

### `o_pgp` (~31 tokens)

Public key published on keys.openpgp.org (200 sats/call; free tier 100 calls/mo)

### `o_phishing_intel` (~31 tokens)

Phishing kit tracking + URL detection (200 sats/call; free tier 100 calls/mo)

### `o_phoneapps` (~33 tokens)

WhatsApp / Telegram / Viber / Signal deep links (200 sats/call; free tier 100 calls/mo)

### `o_phonecc` (~32 tokens)

Country, trunk & intl dialing prefixes (offline) (200 sats/call; free tier 100 calls/mo)

### `o_phonefmt` (~37 tokens)

E.164 / national / international / RFC3966 formats (offline) (200 sats/call; free tier 100 calls/mo)

### `o_phonepivot` (~35 tokens)

Caller-ID / reputation site links (Truecaller, Sync.me…) (200 sats/call; free tier 100 calls/mo)

### `o_phonespam` (~32 tokens)

Robocall / scam report-database links (200 sats/call; free tier 100 calls/mo)

### `o_phonevcard` (~33 tokens)

Generate a .vcf contact card (offline) (200 sats/call; free tier 100 calls/mo)

### `o_pluscode` (~35 tokens)

Coords → Open Location Code / Google Plus Code (offline) (200 sats/call; free tier 100 calls/mo)

### `o_port` (~29 tokens)

Service + exposure notes for a port number (200 sats/call; free tier 100 calls/mo)

### `o_portlookup` (~31 tokens)

IANA port → service name (offline) (200 sats/call; free tier 100 calls/mo)

### `o_pubmed` (~31 tokens)

PubMed biomedical paper search (NCBI) (200 sats/call; free tier 100 calls/mo)

### `o_punycode` (~40 tokens)

IDN domain ↔ Punycode (xn--) homograph check (offline) (200 sats/call; free tier 100 calls/mo)

### `o_pypi` (~28 tokens)

Python package metadata + links (200 sats/call; free tier 100 calls/mo)

### `o_pypiproject` (~30 tokens)

PyPI version/license/links (200 sats/call; free tier 100 calls/mo)

### `o_pypistats` (~29 tokens)

PyPI recent download counts (200 sats/call; free tier 100 calls/mo)

### `o_quakes` (~38 tokens)

USGS recent quakes — global or near coords (M2.5+) (200 sats/call; free tier 100 calls/mo)

### `o_quoted_printable` (~31 tokens)

Quoted-printable encode/decode (200 sats/call; free tier 100 calls/mo)

### `o_railfence` (~35 tokens)

Rail-fence cipher over 3 rails (offline) (200 sats/call; free tier 100 calls/mo)

### `o_rdap` (~36 tokens)

Structured domain registration record (RDAP/IANA bootstrap, no key) (200 sats/call; free tier 100 calls/mo)

### `o_rdap_domain` (~29 tokens)

RDAP structured domain registration data (200 sats/call; free tier 100 calls/mo)

### `o_rdapip` (~31 tokens)

Authoritative RDAP record for an IP (200 sats/call; free tier 100 calls/mo)

### `o_redirects` (~26 tokens)

Full HTTP redirect chain (200 sats/call; free tier 100 calls/mo)

### `o_referrer_pol` (~32 tokens)

Referrer-Policy header — URL leakage risk (200 sats/call; free tier 100 calls/mo)

### `o_regdomain` (~35 tokens)

Extract eTLD+1 registered domain from URL (offline) (200 sats/call; free tier 100 calls/mo)

### `o_reversedns` (~27 tokens)

PTR record / hostname (200 sats/call; free tier 100 calls/mo)

### `o_revgeo` (~34 tokens)

lat,lon -> address (OSM Nominatim) (200 sats/call; free tier 100 calls/mo)

### `o_revgeocode` (~31 tokens)

Coordinates → nearest address (OSM) (200 sats/call; free tier 100 calls/mo)

### `o_revimg` (~36 tokens)

Reverse-image-search links (Lens/Yandex/TinEye/Bing) (200 sats/call; free tier 100 calls/mo)

### `o_robots` (~29 tokens)

Disallowed paths + sitemaps (200 sats/call; free tier 100 calls/mo)

### `o_robotsmeta` (~41 tokens)

meta-robots + X-Robots-Tag: noindex/nofollow/noarchive (200 sats/call; free tier 100 calls/mo)

### `o_roman` (~35 tokens)

Convert int <-> roman numeral, autodetecting (offline) (200 sats/call; free tier 100 calls/mo)

### `o_rot13` (~28 tokens)

ROT-13 encode/decode (200 sats/call; free tier 100 calls/mo)

### `o_rot47` (~33 tokens)

ROT47 ASCII cipher (offline, self-inverse) (200 sats/call; free tier 100 calls/mo)

### `o_rpki` (~30 tokens)

Route-origin validation for the covering prefix (200 sats/call; free tier 100 calls/mo)

### `o_rubygemrev` (~31 tokens)

Reverse dependencies of a RubyGem (200 sats/call; free tier 100 calls/mo)

### `o_rubygems` (~29 tokens)

Ruby gem stats + downloads (200 sats/call; free tier 100 calls/mo)

### `o_s3buckets` (~35 tokens)

S3/GCS/Azure buckets named for the domain (200 sats/call; free tier 100 calls/mo)

### `o_securitytxt` (~30 tokens)

RFC 9116 disclosure policy & contacts (200 sats/call; free tier 100 calls/mo)

### `o_semanticscholar` (~31 tokens)

Paper TLDR, citations, influence (200 sats/call; free tier 100 calls/mo)

### `o_semver` (~28 tokens)

Parse and validate semantic versioning (200 sats/call; free tier 100 calls/mo)

### `o_sitemap` (~28 tokens)

Fetch sitemap.xml + list URLs (200 sats/call; free tier 100 calls/mo)

### `o_slug` (~29 tokens)

Text → URL-safe slug (offline) (200 sats/call; free tier 100 calls/mo)

### `o_smtpbanner` (~39 tokens)

SMTP banner & EHLO capabilities (ports 25/587/465) (200 sats/call; free tier 100 calls/mo)

### `o_snusbase_hash` (~43 tokens)

Reverse MD5/SHA1 hash via breach-sourced hash DB (md5decrypt.net) (200 sats/call; free tier 100 calls/mo)

### `o_social` (~28 tokens)

Direct profile URLs across 20 platforms (200 sats/call; free tier 100 calls/mo)

### `o_sopostuser` (~31 tokens)

SO profile + reputation by numeric id (200 sats/call; free tier 100 calls/mo)

### `o_spacepeople` (~33 tokens)

Who is in space right now (names + craft) (200 sats/call; free tier 100 calls/mo)

### `o_sri_check` (~32 tokens)

Subresource Integrity: external scripts without integrity= (200 sats/call; free tier 100 calls/mo)

### `o_srvlookup` (~33 tokens)

SIP/XMPP/mail/CalDAV SRV record discovery (200 sats/call; free tier 100 calls/mo)

### `o_stackoverflow` (~30 tokens)

SO/SE user search by display name (200 sats/call; free tier 100 calls/mo)

### `o_steam_user` (~29 tokens)

Steam community profile via public XML (200 sats/call; free tier 100 calls/mo)

### `o_stringmetrics` (~28 tokens)

Length, entropy, character breakdown (200 sats/call; free tier 100 calls/mo)

### `o_subbrute` (~34 tokens)

Resolve a common-subdomain wordlist (per-target) (200 sats/call; free tier 100 calls/mo)

### `o_suntimes` (~35 tokens)

Sunrise/sunset/twilight for a coordinate (UTC) (200 sats/call; free tier 100 calls/mo)

### `o_supply_chain_risk` (~32 tokens)

Dependency vulns + typosquatting (200 sats/call; free tier 100 calls/mo)

### `o_swagger` (~33 tokens)

Exposed API docs at common paths (per-target) (200 sats/call; free tier 100 calls/mo)

### `o_teamcymru` (~36 tokens)

IP → ASN via Team Cymru DNS (fastest ASN lookup) (200 sats/call; free tier 100 calls/mo)

### `o_tech` (~26 tokens)

CMS/framework/server detection (200 sats/call; free tier 100 calls/mo)

### `o_telegram_channel` (~30 tokens)

Public channel preview: subscribers, description (200 sats/call; free tier 100 calls/mo)

### `o_threatcrowd` (~30 tokens)

OTX passive DNS resolution history (200 sats/call; free tier 100 calls/mo)

### `o_tldinfo` (~34 tokens)

TLD registry operator, type, purpose (offline) (200 sats/call; free tier 100 calls/mo)

### `o_tls` (~32 tokens)

Live cert: issuer, validity, SANs, cipher (200 sats/call; free tier 100 calls/mo)

### `o_tlsa` (~31 tokens)

Certificate-pinning DANE records on :443 (200 sats/call; free tier 100 calls/mo)

### `o_tlsscan` (~32 tokens)

Which SSL/TLS protocols the host accepts (200 sats/call; free tier 100 calls/mo)

### `o_tor` (~30 tokens)

Is the IP a known Tor exit node (200 sats/call; free tier 100 calls/mo)

### `o_transform` (~32 tokens)

rot13/base32/morse/reverse (offline) (200 sats/call; free tier 100 calls/mo)

### `o_trendingwiki` (~28 tokens)

Most-read Wikipedia articles today (200 sats/call; free tier 100 calls/mo)

### `o_trufflehog_url` (~39 tokens)

Scan raw URL content for API keys, tokens, private keys, JWTs (200 sats/call; free tier 100 calls/mo)

### `o_unicode_lookup` (~35 tokens)

Unicode codepoint: name, category, HTML entity (offline) (200 sats/call; free tier 100 calls/mo)

### `o_unpaywall` (~32 tokens)

Is a DOI open-access? Direct PDF link (200 sats/call; free tier 100 calls/mo)

### `o_urlparse` (~29 tokens)

Parse URL into components + query params (200 sats/call; free tier 100 calls/mo)

### `o_urlscan` (~38 tokens)

Past scans, verdicts, infra (IP/ASN/server) for a site (200 sats/call; free tier 100 calls/mo)

### `o_urlscansearch` (~32 tokens)

Public urlscan.io scan history for a domain (200 sats/call; free tier 100 calls/mo)

### `o_useragent` (~32 tokens)

Parse a User-Agent into OS/browser (offline) (200 sats/call; free tier 100 calls/mo)

### `o_username` (~27 tokens)

Presence across 16 public sites (200 sats/call; free tier 100 calls/mo)

### `o_utm` (~36 tokens)

Lat/lon → UTM coordinates (WGS84, offline) (200 sats/call; free tier 100 calls/mo)

### `o_uuencode` (~28 tokens)

Unix-to-Unix encoding (200 sats/call; free tier 100 calls/mo)

### `o_uuid` (~33 tokens)

Version/variant + v1 timestamp/MAC (offline) (200 sats/call; free tier 100 calls/mo)

### `o_uuid_validate` (~31 tokens)

UUID v1-v5 version and variant detector (200 sats/call; free tier 100 calls/mo)

### `o_waf` (~31 tokens)

Detect WAF/CDN from headers & cookies (200 sats/call; free tier 100 calls/mo)

### `o_wayback_leaks` (~36 tokens)

Search Wayback Machine for historically exposed .env/config/secrets (200 sats/call; free tier 100 calls/mo)

### `o_weather` (~32 tokens)

Current weather at a coordinate (Open-Meteo) (200 sats/call; free tier 100 calls/mo)

### `o_wellknown` (~30 tokens)

Which /.well-known/* resources exist (200 sats/call; free tier 100 calls/mo)

### `o_whois` (~32 tokens)

Registration, status, nameservers, DNSSEC (200 sats/call; free tier 100 calls/mo)

### `o_whoisserver` (~38 tokens)

TLD → WHOIS server mapping (offline + IANA fallback) (200 sats/call; free tier 100 calls/mo)

### `o_wikidata` (~33 tokens)

Search Wikidata entities by label (no key) (200 sats/call; free tier 100 calls/mo)

### `o_wikidatasearch` (~32 tokens)

Free-text → Wikidata entities (200 sats/call; free tier 100 calls/mo)

### `o_wikipedia` (~35 tokens)

Wikipedia REST summary: extract, type, coords (no key) (200 sats/call; free tier 100 calls/mo)

### `o_wikipv` (~30 tokens)

Page length, last edit, editor (200 sats/call; free tier 100 calls/mo)

### `o_wikisummary` (~30 tokens)

Page extract/description for a topic (200 sats/call; free tier 100 calls/mo)

### `o_wordcount` (~36 tokens)

Text stats: words/chars/lines/reading time (offline) (200 sats/call; free tier 100 calls/mo)

### `o_zenodo` (~30 tokens)

Zenodo open-research records search (200 sats/call; free tier 100 calls/mo)

### `re_search` (~38 tokens)

Search a private crawled+indexed knowledge cloud (OpenSearch+Qdrant) (200 sats/call; free tier 100 calls/mo)

### `re_semantic` (~31 tokens)

Vector/semantic search over the private knowledge cloud (250 sats/call; free tier 100 calls/mo)

### `re_summarize` (~36 tokens)

LLM summary of specific URLs (pass urls=comma-separated) (400 sats/call; free tier 100 calls/mo)

### `re_report` (~52 tokens)

Cited multi-source research report. Call with {q} -> job_id, poll with {job_id} until done (charged on completion poll) (1500 sats/call; free tier 100 calls/mo)

### `fc_scrape` (~33 tokens)

Scrape any URL to clean markdown (JS rendering) (300 sats/call; free tier 100 calls/mo)

### `fc_search` (~27 tokens)

Web search returning clean page content (300 sats/call; free tier 100 calls/mo)

### `fc_map` (~28 tokens)

Map all links/routes of a website (350 sats/call; free tier 100 calls/mo)

### `px_plans` (~29 tokens)

List residential proxy plans + sats pricing (50 sats/call; free tier 100 calls/mo)

### `px_info` (~29 tokens)

Proxy service capabilities, auth, billing info (50 sats/call; free tier 100 calls/mo)

### `px_order` (~30 tokens)

Check proxy order payment/fulfilment status (50 sats/call; free tier 100 calls/mo)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-thetempleofdoom-hyperion-hyperion/hyperion#diagnostics

## Score history

- 2026-09-25: 76
- 2026-09-24: 76
- 2026-09-23: 76
- 2026-09-22: 75
- 2026-09-21: 75
- 2026-09-20: 74
- 2026-09-19: 74
- 2026-09-18: 73
- 2026-09-17: 73
- 2026-09-16: 72
- 2026-09-15: 72
- 2026-09-14: 23
- 2026-09-13: 71
- 2026-09-12: 71
- 2026-09-11: 70
- 2026-09-10: 70
- 2026-09-09: 69
- 2026-09-08: 69
- 2026-09-07: 68
- 2026-09-06: 23
- 2026-09-05: 67
- 2026-09-04: 67
- 2026-09-03: 66
- 2026-09-02: 66
- 2026-09-01: 66
- 2026-08-31: 65
- 2026-08-30: 65
- 2026-08-29: 64
- 2026-08-28: 64
- 2026-08-27: 61

## Common questions

### What is the com.thetempleofdoom.hyperion/hyperion MCP server?

com.thetempleofdoom.hyperion/hyperion is an MCP server listed in the public MCP registry as com.thetempleofdoom.hyperion/hyperion. Hyperion, MCP tool marketplace for AI agents: web, OSINT, security, research via one key. This page covers its hosted endpoint (https://hyperion.thetempleofdoom.com/mcp).

### Is the com.thetempleofdoom.hyperion/hyperion MCP server safe to use?

com.thetempleofdoom.hyperion/hyperion scores 76 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the com.thetempleofdoom.hyperion/hyperion MCP server expose?

com.thetempleofdoom.hyperion/hyperion exposes 355 tools: search, summarize, web_scrape, http_client, mcp_discover, and 350 more. Their descriptions and schemas cost roughly 12,113 tokens of context every time the server is loaded.

### Does the com.thetempleofdoom.hyperion/hyperion MCP server require authentication?

No. We connected to com.thetempleofdoom.hyperion/hyperion without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the com.thetempleofdoom.hyperion/hyperion MCP server still maintained?

com.thetempleofdoom.hyperion/hyperion is still listed as active in the MCP registry. We last reached this channel on 25 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://hyperion.thetempleofdoom.com/mcp
- Authorisation metadata: https://hyperion.thetempleofdoom.com/.well-known/oauth-protected-resource/mcp
- Website: https://hyperion.thetempleofdoom.com/
- Changelog RSS feed: https://verifymcp.io/servers/com-thetempleofdoom-hyperion-hyperion/hyperion.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-thetempleofdoom-hyperion-hyperion/hyperion.json
- HTML version of this page: https://verifymcp.io/servers/com-thetempleofdoom-hyperion-hyperion/hyperion