# Coinslot — the vending machine for machines (remote · coinslot.dev)

13 micro-tools for agents: read pages, verify email, convert, validate, diff, extract. AI-operated.

- Trust score: 56/100 (low)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-09

## Components

- remote · `coinslot.dev`: 56/100 (this document), [markdown](https://verifymcp.io/servers/dev-coinslot-coinslot/coinslot.md), [page](https://verifymcp.io/servers/dev-coinslot-coinslot/coinslot)

## Channel facts

- Endpoint: `https://coinslot.dev/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-09.

- **Endpoint Security**: 46/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 13 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS not yet verified: we couldn't determine whether a plaintext access path exists.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 1333 tokens (~102/item across 13 items; 13 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 10/100
  - Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 86/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 57% of tool parameters carry a description.
- **Capabilities**: 60/100
  - Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http dev-coinslot-coinslot https://coinslot.dev/mcp
```

### Codex

```toml
[mcp_servers.dev-coinslot-coinslot]
url = "https://coinslot.dev/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dev-coinslot-coinslot": {
      "type": "remote",
      "url": "https://coinslot.dev/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add dev-coinslot-coinslot --url https://coinslot.dev/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  dev-coinslot-coinslot:
    url: "https://coinslot.dev/mcp"
```

### Other

```json
{
  "mcpServers": {
    "dev-coinslot-coinslot": {
      "type": "http",
      "url": "https://coinslot.dev/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-09 (score 56, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-07 (score 55, +1)

- [functional improvement] Stability: unverified → 0.03

### 2026-08-06 (score 54)

First indexed and scored.

## MCP tools (13)

### `convert` (~95 tokens)

JSON ↔ CSV

Convert an array of JSON objects to CSV (nested keys become dot-path columns) or CSV back to JSON. POST { direction: 'json-to-csv'|'csv-to-json', data }. Price: $0.002/call with credits key; free demo without (2KB input cap).

Input parameters:

- `data` (required): Array of objects (json-to-csv) or CSV string (csv-to-json)
- `direction` (string, required)

### `email_verify` (~82 tokens)

Email Verify

Check an email address: RFC syntax, live MX records via DNS-over-HTTPS, and disposable-domain screening. POST { email } or { emails: [...] } (max 20). Price: $0.003/call with credits key; free demo without (2KB input cap).

Input parameters:

- `email` (string): Single address
- `emails` (array)

### `html_to_markdown` (~87 tokens)

HTML → Markdown

Convert HTML to clean Markdown: headings, links, images, lists, tables, code blocks, emphasis. Strips scripts, styles, and comments. POST { html } (max 500KB). Price: $0.005/call with credits key; free demo without (2KB input cap).

Input parameters:

- `html` (string, required): HTML document or fragment, max 500KB

### `json_schema_validate` (~100 tokens)

JSON Schema Validate

Validate a JSON document against a JSON Schema (draft-07 core subset: types, required, enums, ranges, patterns, nesting, anyOf/allOf/oneOf). Returns all violations with paths. POST { schema, data }. Price: $0.003/call with credits key; free demo without (2KB input cap).

Input parameters:

- `data` (required): Document to validate
- `schema` (object, required): JSON Schema (draft-07 core subset)

### `diff` (~90 tokens)

Text Diff

Line-based diff of two texts. Returns unified diff plus structured changes (added/removed/unchanged counts and hunks). POST { a, b, context? } (max 200KB each). Price: $0.002/call with credits key; free demo without (2KB input cap).

Input parameters:

- `a` (string, required)
- `b` (string, required)
- `context` (integer)

### `cron` (~92 tokens)

Cron Decode

Parse a 5-field cron expression: get a plain-English explanation and the next N run times (UTC). POST { expression, count?, from? }. Price: $0.002/call with credits key; free demo without (2KB input cap).

Input parameters:

- `count` (integer)
- `expression` (string, required): 5-field cron or @alias
- `from` (string): ISO date to project from

### `qr` (~114 tokens)

QR Code (SVG)

Generate a QR code as standalone SVG. POST { text, ecLevel?: 'L'|'M'|'Q'|'H', margin?: 0-8, dark?, light? } (text max 2KB). Price: $0.005/call with credits key; free demo without (2KB input cap).

Input parameters:

- `dark` (string): hex color
- `ecLevel` (string)
- `light` (string): hex color
- `margin` (integer)
- `text` (string, required)

### `feed_to_json` (~99 tokens)

Feed → JSON

Parse an RSS 2.0 or Atom feed into clean JSON: title, items with link/date/summary, HTML stripped. POST { xml } (max 1MB) or { url } to fetch. Price: $0.004/call with credits key; free demo without (2KB input cap).

Input parameters:

- `url` (string): Feed URL to fetch instead
- `xml` (string): Feed XML, max 1MB

### `extract` (~81 tokens)

Extract Pack

Pull structured data out of raw text: emails, URLs, IPv4/IPv6, phone numbers, dates. Deduplicated with counts. POST { text } (max 500KB). Price: $0.003/call with credits key; free demo without (2KB input cap).

Input parameters:

- `text` (string, required): Raw text, max 500KB

### `markdown_to_html` (~82 tokens)

Markdown → HTML

Render Markdown (GitHub-flavored: tables, fenced code, task lists) to clean HTML with raw inline HTML stripped. POST { markdown } (max 500KB). Price: $0.003/call with credits key; free demo without (2KB input cap).

Input parameters:

- `markdown` (string, required): GitHub-flavored Markdown, max 500KB

### `validate_ids` (~112 tokens)

ID Validate Pack

Validate identifiers with real checksum math: credit card (Luhn + brand), IBAN (mod-97), EAN-13/UPC-A, ISBN-10/13, UUID (with version). POST { type, value } or { items: [{type, value}] } (max 50). Price: $0.003/call with credits key; free demo without (2KB input cap).

Input parameters:

- `items` (array)
- `type` (string)
- `value` (string)

### `timezone` (~122 tokens)

Timezone Convert

Convert a timestamp between IANA timezones with DST handled correctly. Returns local times, UTC offsets, weekday, and hour-of-day per zone. POST { time?, from?, to } — to is a zone or array (max 20). Price: $0.002/call with credits key; free demo without (2KB input cap).

Input parameters:

- `from` (string): IANA zone the input wall-clock is in
- `time`: ISO string, epoch, or 'now'
- `to` (required): IANA zone or array of zones (max 20)

### `read_page` (~90 tokens)

Read Page

Fetch a public URL and return its content as clean Markdown plus title and metadata. One call instead of fetch + parse + convert. POST { url, maxBytes? } (default 1MB cap). Price: $0.005/call with credits key; free demo without (2KB input cap).

Input parameters:

- `maxBytes` (integer)
- `url` (string, required): Public http(s) URL

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/dev-coinslot-coinslot/coinslot#diagnostics

## Score history

- 2026-08-09: 56
- 2026-08-08: 55
- 2026-08-07: 55
- 2026-08-06: 54

## Links

- Remote endpoint: https://coinslot.dev/mcp
- Website: https://coinslot.dev/
- Changelog RSS feed: https://verifymcp.io/servers/dev-coinslot-coinslot/coinslot.xml
- Changelog JSON feed: https://verifymcp.io/servers/dev-coinslot-coinslot/coinslot.json
- HTML version of this page: https://verifymcp.io/servers/dev-coinslot-coinslot/coinslot