Grandet
REMOTE · GRANDET.AI
Cheapest API for any model across official, inference and relay providers; find free credits
Available components
Last scanned (22 hours ago)
Scores higher than 57% of remote servers
Reachable. Last reached 23 Oct 2026.
Category AI and Machine Learning
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security69
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability55
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2639 tokens (~439/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management20
- Stability observed for 6 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 22 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 20 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Oct 26 0
- Tool “grandet_find_cheapest_api” rewrote its description, which is the text the model reads security
- Tool “grandet_find_free_credits” rewrote its description, which is the text the model reads security
- Tool “grandet_glossary” rewrote its description, which is the text the model reads security
- Stability: unverified → 0.03 ▲ functional
- Tool “grandet_find_cheapest_api” now declares an output schema ▲ functional
- Tool “grandet_find_free_credits” now declares an output schema ▲ functional
- Tool “grandet_glossary” now declares an output schema ▲ functional
- Tool “grandet_list_apps” now declares an output schema ▲ functional
- Tool “grandet_quote_evidence” now declares an output schema ▲ functional
- Tool “grandet_resolve_model” now declares an output schema ▲ functional
- First check of Tool coverage: 100 functional
- “grandet_glossary” added an optional parameter “host” cosmetic
- “grandet_glossary” added an optional parameter “skillBuild” cosmetic
- “grandet_glossary” added an optional parameter “skillVersion” cosmetic
- “grandet_glossary” added an optional parameter “targetApp” cosmetic
- “grandet_find_cheapest_api” reworded the description of “view” cosmetic
- 17 Oct 26 66
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 23 Oct 2026 · Probed https://grandet.ai/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=grandet.ai | CN=WE1,O=Google Trust Services,C=US | 6 Oct 2026 | 4 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | 304c838a7aa77e8d0e8c6e0bff54e2a9 |
| SANs: grandet.ai, *.grandet.ai | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of grandet.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 3799 | 8 | Verified |
| grandet.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000 |
| content-security-policy | default-src 'self'; script-src 'self' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://cloudflareinsights.com; form-action 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none' |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=() |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://grandet.ai/mcp | Verified | 200 | |
| http (plaintext) | http://grandet.ai/mcp | Inconclusive | 405 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
grandet_find_cheapest_api Find a suitable low-cost model API / 寻找便宜且适用的模型 API ~822
Compare Grandet model prices within each unit. Read listings for price-only ordering and conditions; legacy recommended/alternative/cheapest retain their old meanings. Use view=compact for shared connection cards and a short text response. Provide exactly one model or name selector. host records the source only and never selects the inference route. Send targetApp when the user or conversation identifies the intended API application, including explicit use in the current app. With no target, compare directly. An unrecorded app connection permits a price-only recommendation, not a compatibility claim. Omit profile/protocol for a multi-protocol app unless already specified. Existing client remains a legacy target-app alias. Infer coding/chat/long_output from the task; presets are estimates. Use grandet_list_apps only when application facts are needed. Do not request API keys.
| Name | Type | Req | Description |
|---|---|---|---|
| asOf | string | – | Evaluate as of this UTC time (ISO 8601, e.g. "2026-10-16T12:00:00Z"). Omit to evaluate now. |
| channel | string | – | "standard" (default) lists ordinary channels, "declared-nonstandard" only channels the site itself labels nonstandard, "all" both. |
| client | string | – | Legacy alias of targetApp. Prefer targetApp. |
| currency | string | – | Limit to one unit board: USD_CREDIT or CNY_CREDIT (site credit, not cash), USD or CNY (cash). Never compare prices across units. |
| endpointType | string | – | Limit to one API protocol. Send it only when the user named a protocol. |
| host | string | – | The assistant or app making this call, e.g. "claude-code" or "codex". Attribution only; it does not change results. |
| lang | string | – | Answer language: "en" or "zh-CN". |
| limit | integer | – | Rows per block, 1–20 (default 5). |
| mix | string | – | Workload used to blend input, cache and output prices into one price per million total tokens. Presets "chat" (default), "coding" and "long_output", or custom input/cache-read/output/cache-write shar… |
| model | string | – | Model to look up: a catalogue ID, an exact model name or a natural name such as "claude-sonnet-5-5". Send exactly one of model or name. An ambiguous name returns NEEDS_CLARIFICATION with candidates. |
| name | string | – | The catalogue's 20-character hexadecimal raw-name ID (not the name text). Send exactly one of model or name. |
| os | string | – | Operating system the target app runs on, for connection steps: windows, macos, linux or unknown. |
| plans | string | – | "best" (default) keeps one group per site; "all" lists every group of every site. |
| releaseSet | string | – | Pin a published data release by its release-set hash. Omit to use the current release. |
| skillBuild | string | – | Grandet Skill build ID when called from the Skill. Omit otherwise. |
| skillVersion | string | – | Grandet Skill version when called from the Skill, e.g. "0.3.0". Omit otherwise. |
| targetApp | string | – | Catalogue ID of the app that will use the API, e.g. "openclaw", "claude-code" or "codex". Selects compatible protocols and connection steps. Send it only when the user says where the API will be used. |
| targetProfile | string | – | An inference profile ID of the target app (see grandet_list_apps). Only together with targetApp or client. |
| view | string | – | "compact" (default): a short text summary plus the listings, with connection cards shared in integrationCards; about a third of the size. "full": every legacy field, with the whole JSON repeated as t… |
| Name | Type | Req | Description |
|---|---|---|---|
| boards | array | – | – |
| coverage | object | – | – |
| help | object | – | – |
| schema | string | – | – |
| scope | object | – | – |
No examples provided.
grandet_find_free_credits Find free API credit / 查找免费 API 额度 ~449
Find current official free tiers, application-based credits and relay free groups. Return the stated benefit, six requirements, deadline, original observation and claim link. userCanMeet=no_card excludes explicit required/conditional card entries; unknown card requirements remain clearly labelled unknown. Application categories describe programs, not the user’s eligibility. Follow pagination.
| Name | Type | Req | Description |
|---|---|---|---|
| asOf | string | – | Evaluate as of this UTC time (ISO 8601, e.g. "2026-10-16T12:00:00Z"). Omit to evaluate now. |
| host | string | – | The assistant or app making this call, e.g. "claude-code" or "codex". Attribution only; it does not change results. |
| kind | string | – | "official" free tiers and credits, "relay" free groups, or "all". |
| lang | string | – | Answer language: "en" or "zh-CN". |
| limit | integer | – | Results per page, 1–20. |
| page | integer | – | Result page, starting at 1. |
| q | string | – | Model, vendor or site to search, e.g. "gemini". |
| releaseSet | string | – | Pin a published data release by its release-set hash. Omit to use the current release. |
| skillBuild | string | – | Grandet Skill build ID when called from the Skill. Omit otherwise. |
| skillVersion | string | – | Grandet Skill version when called from the Skill, e.g. "0.3.0". Omit otherwise. |
| targetApp | string | – | Catalogue ID of the app that will use the API, e.g. "openclaw", "claude-code" or "codex". Selects compatible protocols and connection steps. Send it only when the user says where the API will be used. |
| userCanMeet | string | – | Only offers the user can meet: "any", "no_card" (no payment card) or "student". |
| view | string | – | "compact" (default): about 18 KB for a typical query. "full": every field, often over 250 KB. |
| Name | Type | Req | Description |
|---|---|---|---|
| coverage | object | – | – |
| help | object | – | – |
| offers | array | – | – |
| qualification | object | – | – |
| schema | string | – | – |
| total | number | – | – |
No examples provided.
grandet_glossary Relay terminology / 中转站术语 ~285
Look up the published Grandet relay glossary. Site labels are source claims and glossary terms explain them; they do not verify quality. Query q or category and follow pagination. Unknown terms include up to three related FAQ links.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Limit to one glossary category. |
| host | string | – | The assistant or app making this call, e.g. "claude-code" or "codex". Attribution only; it does not change results. |
| lang | string | – | Answer language: "en" or "zh-CN". |
| limit | integer | – | Results per page, 1–20. |
| page | integer | – | Result page, starting at 1. |
| q | string | – | Term or phrase to look up, e.g. "倍率" or "token group". |
| skillBuild | string | – | Grandet Skill build ID when called from the Skill. Omit otherwise. |
| skillVersion | string | – | Grandet Skill version when called from the Skill, e.g. "0.3.0". Omit otherwise. |
| targetApp | string | – | Catalogue ID of the app that will use the API, e.g. "openclaw", "claude-code" or "codex". Selects compatible protocols and connection steps. Send it only when the user says where the API will be used. |
| Name | Type | Req | Description |
|---|---|---|---|
| faq | array | – | – |
| pagination | object | – | – |
| schema | string | – | – |
| suggestions | array | – | – |
| terms | array | – | – |
No examples provided.
grandet_list_apps Grandet application profiles / Grandet 应用接入清单 ~252
Read the shared Grandet application list and inference profiles before selecting a supplier. App profiles determine API compatibility; MCP capability alone does not prove an inference route or Skill installation. Use only when the target app ID, supported protocol or configuration variant is uncertain.
| Name | Type | Req | Description |
|---|---|---|---|
| app | string | – | Catalogue app ID to show, e.g. "openclaw". Omit to list every app. |
| host | string | – | The assistant or app making this call, e.g. "claude-code" or "codex". Attribution only; it does not change results. |
| lang | string | – | Answer language: "en" or "zh-CN". |
| skillBuild | string | – | Grandet Skill build ID when called from the Skill. Omit otherwise. |
| skillVersion | string | – | Grandet Skill version when called from the Skill, e.g. "0.3.0". Omit otherwise. |
| targetApp | string | – | Catalogue ID of the app that will use the API, e.g. "openclaw", "claude-code" or "codex". Selects compatible protocols and connection steps. Send it only when the user says where the API will be used. |
| Name | Type | Req | Description |
|---|---|---|---|
| apps | array | – | – |
| schema | string | – | – |
No examples provided.
grandet_quote_evidence Inspect a provider quote / 查看报价依据 ~465
Read one provider's paged public declarations for a model and optional rowId. Use only when a detail matters, not before every recommendation. A missing row on one page is not proof of absence; follow pagination if needed. This does not test model quality or spend money.
| Name | Type | Req | Description |
|---|---|---|---|
| asOf | string | – | Evaluate as of this UTC time (ISO 8601, e.g. "2026-10-16T12:00:00Z"). Omit to evaluate now. |
| host | string | – | The assistant or app making this call, e.g. "claude-code" or "codex". Attribution only; it does not change results. |
| lang | string | – | Answer language: "en" or "zh-CN". |
| model | string | – | Model to look up: a catalogue ID, an exact model name or a natural name such as "claude-sonnet-5-5". Send exactly one of model or name. An ambiguous name returns NEEDS_CLARIFICATION with candidates. |
| name | string | – | The catalogue's 20-character hexadecimal raw-name ID (not the name text). Send exactly one of model or name. |
| offerPage | integer | – | Page of this provider's declarations, starting at 1. Follow it when rowId is absent. |
| provider | string | yes | The sourceId of the row to inspect (the site host, e.g. "api.example.com"), not the operator ID. |
| releaseSet | string | – | Pin a published data release by its release-set hash. Omit to use the current release. |
| rowId | string | – | The rowId of the selected row, to read that exact declaration. |
| skillBuild | string | – | Grandet Skill build ID when called from the Skill. Omit otherwise. |
| skillVersion | string | – | Grandet Skill version when called from the Skill, e.g. "0.3.0". Omit otherwise. |
| targetApp | string | – | Catalogue ID of the app that will use the API, e.g. "openclaw", "claude-code" or "codex". Selects compatible protocols and connection steps. Send it only when the user says where the API will be used. |
| Name | Type | Req | Description |
|---|---|---|---|
| pagination | object | – | – |
| rows | array | – | – |
| schema | string | – | – |
| websiteUrl | string | – | – |
No examples provided.
grandet_resolve_model Resolve a model name / 识别模型名称 ~258
Look up public model identifiers when a requested name is ambiguous. Results are a page of candidates, not a cheapest-provider ranking. Prefer an exact officialId match; do not silently substitute a different model generation.
| Name | Type | Req | Description |
|---|---|---|---|
| host | string | – | The assistant or app making this call, e.g. "claude-code" or "codex". Attribution only; it does not change results. |
| lang | string | – | Answer language: "en" or "zh-CN". |
| name | string | yes | Model name text to look up, e.g. "sonnet" or "deepseek v4". |
| page | integer | – | Result page, starting at 1. |
| skillBuild | string | – | Grandet Skill build ID when called from the Skill. Omit otherwise. |
| skillVersion | string | – | Grandet Skill version when called from the Skill, e.g. "0.3.0". Omit otherwise. |
| targetApp | string | – | Catalogue ID of the app that will use the API, e.g. "openclaw", "claude-code" or "codex". Selects compatible protocols and connection steps. Send it only when the user says where the API will be used. |
| Name | Type | Req | Description |
|---|---|---|---|
| candidates | array | – | – |
| help | object | – | – |
| pagination | object | – | – |
| schema | string | – | – |
| status | – | – | – |
No examples provided.
How do I install the Grandet MCP server?
Grandet is a hosted endpoint at https://grandet.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · grandet.ai
claude mcp add --transport http hanzohanzhe-grandet 'https://grandet.ai/mcp'
What is the Grandet MCP server?
Grandet is an MCP server listed in the public MCP registry as io.github.hanzohanzhe/grandet. Cheapest API for any model across official, inference and relay providers; find free credits. This page covers its hosted endpoint (https://grandet.ai/mcp).
Is the Grandet MCP server safe to use?
Grandet scores 68 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Grandet MCP server expose?
Grandet exposes 6 tools: grandet_find_cheapest_api, grandet_list_apps, grandet_resolve_model, grandet_quote_evidence, grandet_glossary, grandet_find_free_credits. Their descriptions and schemas cost roughly 2,531 tokens of context every time the server is loaded.
Does the Grandet MCP server require authentication?
No. We connected to Grandet without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Grandet MCP server still maintained?
Grandet is still listed as active in the MCP registry. We last reached this channel on 23 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.