# FreeToolBoxes Agent Tools (remote · api.freetoolboxes.com)

Exactly 50 data transformation and live web verification tools for AI agents.

- Trust score: 18/100 (low)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-25

## Components

- remote · `api.freetoolboxes.com`: 18/100 (this document), [markdown](https://verifymcp.io/servers/damediaco-agent-tools/api.md), [page](https://verifymcp.io/servers/damediaco-agent-tools/api)

## Channel facts

- Endpoint: `https://api.freetoolboxes.com/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-25.

- **Endpoint Security**: 46/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the tool list to see what that exposes.
  - HTTPS enforcement could not be verified: the plaintext port answered with HTTP 410, which proves neither a plaintext path nor enforcement.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 0/100
  - Transport check failed: declared streamable-http, but the endpoint returned HTTP 410.
- **Schema Quality & AI Usability**: 0/100
  - Schema not yet verified: we couldn't read the endpoint's schema.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 0/100
  - Tool coverage not yet verified: we couldn't read the endpoint's tools.
- **Capabilities**: 0/100
  - Capabilities not yet verified: we couldn't read the endpoint's capabilities.

**Unverified: 4 categories.** Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### How do I install the FreeToolBoxes Agent Tools MCP server?

FreeToolBoxes Agent Tools is a hosted endpoint at https://api.freetoolboxes.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http damediaco-agent-tools 'https://api.freetoolboxes.com/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "damediaco-agent-tools": {
      "url": "https://api.freetoolboxes.com/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "damediaco-agent-tools": {
      "type": "http",
      "url": "https://api.freetoolboxes.com/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.damediaco-agent-tools]
url = "https://api.freetoolboxes.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "damediaco-agent-tools": {
      "type": "remote",
      "url": "https://api.freetoolboxes.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add damediaco-agent-tools --url 'https://api.freetoolboxes.com/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  damediaco-agent-tools:
    url: "https://api.freetoolboxes.com/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "damediaco-agent-tools": {
      "Transport": "http",
      "Url": "https://api.freetoolboxes.com/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add damediaco-agent-tools -t streamable-http -u 'https://api.freetoolboxes.com/mcp'
```

### Other

```json
{
  "mcpServers": {
    "damediaco-agent-tools": {
      "type": "http",
      "url": "https://api.freetoolboxes.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-23 (score 18, −44)

- [security regression] Endpoint reachability: reachable → not serving MCP
- [security regression] Stability: 0.03 → unverified
- [security regression] Authorization: partial → unverified
- [security regression] Transport: pass → fail
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-08-22 (score 62, +1)

- [functional improvement] Stability: unverified → 0.03

### 2026-08-21 (score 61)

First indexed and scored.

## MCP tools (50)

### `dns_lookup` (~35 tokens)

DNS Lookup

Use this when you need current public DNS records for a domain.

Input parameters:

- `domain` (string, required)
- `type` (string)

Output parameters:

- `meta` (object)
- `result` (object)

### `rdap_domain_lookup` (~33 tokens)

RDAP Domain Lookup

Use this when you need current domain registration data from the authoritative RDAP service.

Input parameters:

- `domain` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `redirect_trace` (~29 tokens)

Redirect Trace

Use this when you need the complete HTTPS redirect path and final response.

Input parameters:

- `url` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `http_status_check` (~32 tokens)

HTTP Status Check

Use this when you need the live status and latency of a public HTTPS URL.

Input parameters:

- `url` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `response_headers_inspect` (~32 tokens)

Response Headers Inspect

Use this when you need normalized live response headers from a public HTTPS URL.

Input parameters:

- `url` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `page_metadata_extract` (~40 tokens)

Page Metadata Extract

Use this when you need title, description, canonical, robots, language, and social metadata from a live HTML page.

Input parameters:

- `url` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `page_links_extract` (~41 tokens)

Page Links Extract

Use this when you need deduplicated internal and external links from a live HTML page.

Input parameters:

- `limit` (integer)
- `url` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `structured_data_extract` (~34 tokens)

Structured Data Extract

Use this when you need JSON-LD and supported microdata types from a live page.

Input parameters:

- `url` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `canonical_check` (~31 tokens)

Canonical Check

Use this when you need to verify a page canonical against its final live URL.

Input parameters:

- `url` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `robots_fetch_analyze` (~42 tokens)

Robots Fetch Analyze

Use this when you need the live robots.txt rules and sitemap declarations for a site.

Input parameters:

- `origin` (string, required)
- `user_agent` (string)

Output parameters:

- `meta` (object)
- `result` (object)

### `sitemap_fetch_analyze` (~39 tokens)

Sitemap Fetch Analyze

Use this when you need to inspect a live XML sitemap or sitemap index.

Input parameters:

- `limit` (integer)
- `url` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `url_indexability_check` (~37 tokens)

URL Indexability Check

Use this when you need a live technical assessment of whether a URL is crawlable and indexable.

Input parameters:

- `url` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `security_headers_audit` (~35 tokens)

Security Headers Audit

Use this when you need a focused audit of important HTTP security headers on a live URL.

Input parameters:

- `url` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `well_known_discover` (~34 tokens)

Well-Known Discover

Use this when you need to find standard machine-readable discovery documents on a public site.

Input parameters:

- `origin` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `currency_convert_current` (~48 tokens)

Currency Convert Current

Use this when you need a current, source-attributed currency conversion using ECB reference rates.

Input parameters:

- `amount` (number, required)
- `from` (string, required)
- `to` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `exchange_rates_list` (~26 tokens)

Exchange Rates List

Use this when you need the current currencies and EUR reference rates published by the ECB.

Output parameters:

- `meta` (object)
- `result` (object)

### `json_validate` (~31 tokens)

JSON Validate

Use this when you need exact JSON syntax validation and the top-level value type.

Input parameters:

- `text` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `json_format` (~42 tokens)

JSON Format

Use this when you need deterministic JSON formatting or minification.

Input parameters:

- `indent` (integer)
- `sort_keys` (boolean)
- `text` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `json_pointer_get` (~39 tokens)

JSON Pointer Get

Use this when you need the exact value addressed by an RFC 6901 JSON Pointer.

Input parameters:

- `document` (required)
- `pointer` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `json_patch_apply` (~39 tokens)

JSON Patch Apply

Use this when you need to safely apply RFC 6902 operations to a JSON document.

Input parameters:

- `document` (required)
- `patch` (array, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `json_diff` (~37 tokens)

JSON Diff

Use this when you need deterministic RFC 6902 operations that transform one JSON value into another.

Input parameters:

- `after` (required)
- `before` (required)

Output parameters:

- `meta` (object)
- `result` (object)

### `json_schema_validate` (~35 tokens)

JSON Schema Validate

Use this when you need local JSON Schema validation without fetching remote references.

Input parameters:

- `data` (required)
- `schema` (object, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `openapi_validate` (~34 tokens)

OpenAPI Validate

Use this when you need structural validation of an OpenAPI 3.x document without resolving remote references.

Input parameters:

- `document` (required)

Output parameters:

- `meta` (object)
- `result` (object)

### `yaml_to_json` (~28 tokens)

YAML to JSON

Use this when you need safe YAML converted to structured JSON.

Input parameters:

- `yaml` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `json_to_yaml` (~27 tokens)

JSON to YAML

Use this when you need a JSON value serialized as deterministic YAML.

Input parameters:

- `value` (required)

Output parameters:

- `meta` (object)
- `result` (object)

### `csv_to_json` (~46 tokens)

CSV to JSON

Use this when you need quoted CSV parsed into JSON rows with explicit size limits.

Input parameters:

- `csv` (string, required)
- `delimiter` (string)
- `headers` (boolean)

Output parameters:

- `meta` (object)
- `result` (object)

### `json_to_csv` (~40 tokens)

JSON to CSV

Use this when you need an array of flat JSON objects serialized as standards-compatible CSV.

Input parameters:

- `delimiter` (string)
- `rows` (array, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `xml_format` (~40 tokens)

XML Format

Use this when you need XML syntax checked and deterministically formatted without DTD or entities.

Input parameters:

- `indent` (integer)
- `xml` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `xml_to_json` (~34 tokens)

XML to JSON

Use this when you need XML converted to JSON while blocking DTD and entity expansion attacks.

Input parameters:

- `xml` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `query_string_parse` (~31 tokens)

Query String Parse

Use this when you need a URL query string parsed with duplicate values preserved.

Input parameters:

- `query` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `query_string_build` (~31 tokens)

Query String Build

Use this when you need deterministic URL query encoding from scalar or array values.

Input parameters:

- `parameters` (object, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `text_diff` (~38 tokens)

Text Diff

Use this when you need an exact line-level difference between two bounded text values.

Input parameters:

- `after` (string, required)
- `before` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `regex_test` (~55 tokens)

Regex Test

Use this when you need safe RE2-compatible matching without catastrophic backtracking or backreferences.

Input parameters:

- `flags` (string)
- `max_matches` (integer)
- `pattern` (string, required)
- `text` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `semver_compare` (~41 tokens)

SemVer Compare

Use this when you need exact Semantic Version precedence comparison.

Input parameters:

- `a` (string, required)
- `b` (string, required)
- `loose` (boolean)

Output parameters:

- `meta` (object)
- `result` (object)

### `semver_satisfies` (~49 tokens)

SemVer Satisfies

Use this when you need to test a Semantic Version against a range.

Input parameters:

- `include_prerelease` (boolean)
- `range` (string, required)
- `version` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `cron_describe` (~32 tokens)

Cron Describe

Use this when you need an exact field-by-field explanation of a cron expression.

Input parameters:

- `expression` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `cron_next_runs` (~56 tokens)

Cron Next Runs

Use this when you need deterministic upcoming times for a cron expression in an IANA time zone.

Input parameters:

- `after` (string)
- `count` (integer)
- `expression` (string, required)
- `timezone` (string)

Output parameters:

- `meta` (object)
- `result` (object)

### `timestamp_convert` (~40 tokens)

Timestamp Convert

Use this when you need an ISO date, Unix seconds, and Unix milliseconds for the same instant.

Input parameters:

- `unit` (string)
- `value` (required)

Output parameters:

- `meta` (object)
- `result` (object)

### `timezone_convert` (~38 tokens)

Timezone Convert

Use this when you need one instant represented in a specific IANA time zone.

Input parameters:

- `datetime` (string, required)
- `timezone` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `date_difference` (~36 tokens)

Date Difference

Use this when you need the exact elapsed duration between two instants.

Input parameters:

- `end` (string, required)
- `start` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `duration_parse` (~30 tokens)

Duration Parse

Use this when you need an ISO or human duration normalized to exact units.

Input parameters:

- `duration` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `unit_convert` (~55 tokens)

Unit Convert

Use this when you need an exact conversion among supported length, mass, volume, data, speed, angle, or temperature units.

Input parameters:

- `from` (string, required)
- `to` (string, required)
- `value` (number, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `hash_digest` (~49 tokens)

Hash Digest

Use this when you need a cryptographic digest of UTF-8 text using a Web Crypto algorithm.

Input parameters:

- `algorithm` (string)
- `encoding` (string)
- `text` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `uuid_generate` (~32 tokens)

UUID Generate

Use this when you need one or more cryptographically random UUID version 4 identifiers.

Input parameters:

- `count` (integer)

Output parameters:

- `meta` (object)
- `result` (object)

### `jwt_decode` (~32 tokens)

JWT Decode

Use this when you need to inspect JWT header and payload claims without verifying its signature.

Input parameters:

- `token` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `jwt_expiry_check` (~46 tokens)

JWT Expiry Check

Use this when you need to inspect exp, nbf, and iat timing without verifying the JWT signature.

Input parameters:

- `at` (string)
- `token` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

### `base64_encode` (~49 tokens)

Base64 Encode

Use this when you need UTF-8 text encoded as standard or URL-safe Base64.

Input parameters:

- `padding` (boolean)
- `text` (string, required)
- `url_safe` (boolean)

Output parameters:

- `meta` (object)
- `result` (object)

### `base64_decode` (~45 tokens)

Base64 Decode

Use this when you need Base64 decoded to UTF-8 text with invalid UTF-8 reported.

Input parameters:

- `base64` (string, required)
- `url_safe` (boolean)

Output parameters:

- `meta` (object)
- `result` (object)

### `text_chunk` (~54 tokens)

Text Chunk

Use this when you need deterministic bounded text chunks with optional overlap for downstream AI processing.

Input parameters:

- `max_size` (integer, required)
- `overlap` (integer)
- `text` (string, required)
- `unit` (string)

Output parameters:

- `meta` (object)
- `result` (object)

### `redact_sensitive_data` (~38 tokens)

Redact Sensitive Data

Use this when you need common secrets and personal identifiers replaced before further processing.

Input parameters:

- `categories` (array)
- `text` (string, required)

Output parameters:

- `meta` (object)
- `result` (object)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/damediaco-agent-tools/api#diagnostics

## Score history

- 2026-08-25: 18
- 2026-08-24: 18
- 2026-08-23: 18
- 2026-08-22: 62
- 2026-08-21: 61

## Common questions

### What is the FreeToolBoxes Agent Tools MCP server?

FreeToolBoxes Agent Tools is an MCP server listed in the public MCP registry as io.github.DAMediaCo/agent-tools. Exactly 50 data transformation and live web verification tools for AI agents. This page covers its hosted endpoint (https://api.freetoolboxes.com/mcp).

### Is the FreeToolBoxes Agent Tools MCP server safe to use?

FreeToolBoxes Agent Tools scores 18 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the FreeToolBoxes Agent Tools MCP server expose?

FreeToolBoxes Agent Tools exposes 50 tools: dns_lookup, rdap_domain_lookup, redirect_trace, http_status_check, response_headers_inspect, and 45 more. Their descriptions and schemas cost roughly 1,917 tokens of context every time the server is loaded.

### Does the FreeToolBoxes Agent Tools MCP server require authentication?

No. We connected to FreeToolBoxes Agent Tools without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the FreeToolBoxes Agent Tools MCP server still maintained?

FreeToolBoxes Agent Tools is still listed as active in the MCP registry. We last reached this channel on 25 August 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://api.freetoolboxes.com/mcp
- Repository: https://github.com/DAMediaCo/freetoolboxes
- Website: https://freetoolboxes.com/ai-agent-tools
- Changelog RSS feed: https://verifymcp.io/servers/damediaco-agent-tools/api.xml
- Changelog JSON feed: https://verifymcp.io/servers/damediaco-agent-tools/api.json
- HTML version of this page: https://verifymcp.io/servers/damediaco-agent-tools/api