io.github.justuncase1210-del/ai-agent-hub
REMOTE · AI-AGENT-HUB-1.ONRENDER.COM
Pay-per-call APIs for AI agents: queries, storage, ads. Billed in USDC via x402.
Available components
Last scanned (1 hour ago)
Scores higher than 47% of remote servers
Reachable. Last reached 18 Oct 2026.
Category Search and Retrieval
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 19 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability62
- AI-judged instruction clarity (fair).Partial
- Tool/resource definitions use about 1954 tokens (~102/item across 19 items; 19 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management37
- Stability observed for 11 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage91
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 72% of tool parameters carry a description.Partial
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "download_file" implies "pay" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 19 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 18 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 17. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 10 Oct 26 +1
- Stability: unverified → 0.10 ▲ functional
- 7 Oct 26 60
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 18 Oct 2026 · Probed https://ai-agent-hub-1.onrender.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=onrender.com | CN=WE1,O=Google Trust Services,C=US | 21 Sept 2026 | 20 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | 6eb1e3fe7d0631ea1337bfa4a321c137 |
| SANs: onrender.com, *.onrender.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of ai-agent-hub-1.onrender.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| onrender.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://ai-agent-hub-1.onrender.com/mcp | Verified | 200 | |
| http (plaintext) | http://ai-agent-hub-1.onrender.com/mcp | HTTPS enforced | 301 | https://ai-agent-hub-1.onrender.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
call_csv_to_json Call csv-to-json (paid) ~162
Self-hosted, real implementation (replaces dead/broken Akash target) — a third-party service registered on this platform, paid via x402 (flat $0.10 per call, production networks). Call without paymentHeader first to receive the price + payment requirements; retry with paymentHeader set to a signed X-PAYMENT value to get the result.
| Name | Type | Req | Description |
|---|---|---|---|
| body | object | – | For POST calls: JSON body to send |
| method | string | – | HTTP method this service expects — check its description or try GET first |
| paymentHeader | string | – | Signed x402 X-PAYMENT payload (base64). Omit on first call. |
| queryParams | object | – | For GET calls: query-string parameters as key/value pairs |
No output schema declared.
No examples provided.
call_email_validator Call email-validator (paid) ~161
Self-hosted, real implementation (replaces dead/broken Akash target) — a third-party service registered on this platform, paid via x402 (flat $0.10 per call, production networks). Call without paymentHeader first to receive the price + payment requirements; retry with paymentHeader set to a signed X-PAYMENT value to get the result.
| Name | Type | Req | Description |
|---|---|---|---|
| body | object | – | For POST calls: JSON body to send |
| method | string | – | HTTP method this service expects — check its description or try GET first |
| paymentHeader | string | – | Signed x402 X-PAYMENT payload (base64). Omit on first call. |
| queryParams | object | – | For GET calls: query-string parameters as key/value pairs |
No output schema declared.
No examples provided.
call_json_diff_api Call json-diff-api (paid) ~149
JSON semantic diff — a third-party service registered on this platform, paid via x402 (flat $0.10 per call, production networks). Call without paymentHeader first to receive the price + payment requirements; retry with paymentHeader set to a signed X-PAYMENT value to get the result.
| Name | Type | Req | Description |
|---|---|---|---|
| body | object | – | For POST calls: JSON body to send |
| method | string | – | HTTP method this service expects — check its description or try GET first |
| paymentHeader | string | – | Signed x402 X-PAYMENT payload (base64). Omit on first call. |
| queryParams | object | – | For GET calls: query-string parameters as key/value pairs |
No output schema declared.
No examples provided.
call_meta_tag_checker Call meta-tag-checker (paid) ~149
Meta tag audit — a third-party service registered on this platform, paid via x402 (flat $0.10 per call, production networks). Call without paymentHeader first to receive the price + payment requirements; retry with paymentHeader set to a signed X-PAYMENT value to get the result.
| Name | Type | Req | Description |
|---|---|---|---|
| body | object | – | For POST calls: JSON body to send |
| method | string | – | HTTP method this service expects — check its description or try GET first |
| paymentHeader | string | – | Signed x402 X-PAYMENT payload (base64). Omit on first call. |
| queryParams | object | – | For GET calls: query-string parameters as key/value pairs |
No output schema declared.
No examples provided.
call_qr_batch Call qr-batch (paid) ~159
Real batch QR code generator (PNG data URLs), self-hosted — a third-party service registered on this platform, paid via x402 (flat $0.10 per call, production networks). Call without paymentHeader first to receive the price + payment requirements; retry with paymentHeader set to a signed X-PAYMENT value to get the result.
| Name | Type | Req | Description |
|---|---|---|---|
| body | object | – | For POST calls: JSON body to send |
| method | string | – | HTTP method this service expects — check its description or try GET first |
| paymentHeader | string | – | Signed x402 X-PAYMENT payload (base64). Omit on first call. |
| queryParams | object | – | For GET calls: query-string parameters as key/value pairs |
No output schema declared.
No examples provided.
call_text_to_slug Call text-to-slug (paid) ~162
Self-hosted, real implementation (replaces dead/broken Akash target) — a third-party service registered on this platform, paid via x402 (flat $0.10 per call, production networks). Call without paymentHeader first to receive the price + payment requirements; retry with paymentHeader set to a signed X-PAYMENT value to get the result.
| Name | Type | Req | Description |
|---|---|---|---|
| body | object | – | For POST calls: JSON body to send |
| method | string | – | HTTP method this service expects — check its description or try GET first |
| paymentHeader | string | – | Signed x402 X-PAYMENT payload (base64). Omit on first call. |
| queryParams | object | – | For GET calls: query-string parameters as key/value pairs |
No output schema declared.
No examples provided.
call_uuid_gen Call uuid-gen (paid) ~161
Self-hosted, real implementation (replaces dead/broken Akash target) — a third-party service registered on this platform, paid via x402 (flat $0.10 per call, production networks). Call without paymentHeader first to receive the price + payment requirements; retry with paymentHeader set to a signed X-PAYMENT value to get the result.
| Name | Type | Req | Description |
|---|---|---|---|
| body | object | – | For POST calls: JSON body to send |
| method | string | – | HTTP method this service expects — check its description or try GET first |
| paymentHeader | string | – | Signed x402 X-PAYMENT payload (base64). Omit on first call. |
| queryParams | object | – | For GET calls: query-string parameters as key/value pairs |
No output schema declared.
No examples provided.
call_webhook_echo Call webhook-echo (paid) ~150
Webhook debug echo — a third-party service registered on this platform, paid via x402 (flat $0.10 per call, production networks). Call without paymentHeader first to receive the price + payment requirements; retry with paymentHeader set to a signed X-PAYMENT value to get the result.
| Name | Type | Req | Description |
|---|---|---|---|
| body | object | – | For POST calls: JSON body to send |
| method | string | – | HTTP method this service expects — check its description or try GET first |
| paymentHeader | string | – | Signed x402 X-PAYMENT payload (base64). Omit on first call. |
| queryParams | object | – | For GET calls: query-string parameters as key/value pairs |
No output schema declared.
No examples provided.
download_file Download a stored file (paid) ~65
Pay in USDC via x402 to download a file previously stored via POST /api/storage/upload. Call without paymentHeader first to receive the price + payment requirements.
| Name | Type | Req | Description |
|---|---|---|---|
| fileId | string | yes | The fileId returned by the upload endpoint |
| paymentHeader | string | – | – |
No output schema declared.
No examples provided.
extract_images Extract all images from a page (paid) ~80
Convenience wrapper around run_query with mode="images" — fetches a URL and returns every image source (resolved to absolute URLs) with alt text, deduped. Same price and payment flow as run_query.
| Name | Type | Req | Description |
|---|---|---|---|
| agentId | string | – | – |
| paymentHeader | string | – | – |
| url | string | yes | The URL to extract images from |
No output schema declared.
No examples provided.
extract_links Extract all links from a page (paid) ~76
Convenience wrapper around run_query with mode="links" — fetches a URL and returns every outbound link, resolved to absolute URLs and deduped. Same price and payment flow as run_query.
| Name | Type | Req | Description |
|---|---|---|---|
| agentId | string | – | – |
| paymentHeader | string | – | – |
| url | string | yes | The URL to extract links from |
No output schema declared.
No examples provided.
get_ad_impression Buy an ad impression ~57
Pay a fraction of a cent in USDC via x402 to retrieve an ad payload for a given adId.
| Name | Type | Req | Description |
|---|---|---|---|
| adId | string | yes | – |
| agentId | string | – | – |
| paymentHeader | string | – | – |
No output schema declared.
No examples provided.
get_agent Get agent details ~27
Free — look up a single registered agent by id.
| Name | Type | Req | Description |
|---|---|---|---|
| agentId | string | yes | – |
No output schema declared.
No examples provided.
get_metadata Extract page metadata (paid) ~81
Convenience wrapper around run_query with mode="metadata" — fetches a URL and returns all meta tags (Open Graph, Twitter Card, standard) plus a few response headers. Same price and payment flow as run_query.
| Name | Type | Req | Description |
|---|---|---|---|
| agentId | string | – | – |
| paymentHeader | string | – | – |
| url | string | yes | The URL to extract metadata from |
No output schema declared.
No examples provided.
list_ads List active ads ~19
Free — list currently active ads available for paid impressions.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_agents List registered agents ~17
Free — list the most recently registered agents.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
register_agent Register as an agent ~45
Free — register to get an agentId used for attribution on paid calls.
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | – | – |
| name | string | yes | – |
| walletAddress | string | – | – |
No output schema declared.
No examples provided.
run_query Run a paid web-data query ~165
Fetch a URL and extract structured data, paying in USDC via x402 (production networks). mode "fetch" (default) returns title/description/text; "links" returns outbound links; "images" returns image sources + alt text; "metadata" returns all meta tags + response headers. Call without paymentHeader first to receive the price + payment requirements; retry with paymentHeader set to a signed X-PAYMENT value to get the result.
| Name | Type | Req | Description |
|---|---|---|---|
| agentId | string | – | Your registered agent id, for attribution |
| mode | string | – | Defaults to "fetch" |
| paymentHeader | string | – | Signed x402 X-PAYMENT payload (base64). Omit on first call. |
| url | string | yes | The URL to fetch and extract data from |
No output schema declared.
No examples provided.
upload_file Upload a file to paid storage ~69
Store a small text payload as a file, paying in USDC via x402. For binary uploads, use the REST endpoint directly instead of this tool.
| Name | Type | Req | Description |
|---|---|---|---|
| contentBase64 | string | yes | Base64-encoded file content |
| filename | string | yes | – |
| paymentHeader | string | – | – |
No output schema declared.
No examples provided.
How do I install the io.github.justuncase1210-del/ai-agent-hub MCP server?
io.github.justuncase1210-del/ai-agent-hub is a hosted endpoint at https://ai-agent-hub-1.onrender.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · ai-agent-hub-1.onrender.com
claude mcp add --transport http justuncase1210-del-ai-agent-hub 'https://ai-agent-hub-1.onrender.com/mcp'
What is the io.github.justuncase1210-del/ai-agent-hub MCP server?
io.github.justuncase1210-del/ai-agent-hub is an MCP server listed in the public MCP registry as io.github.justuncase1210-del/ai-agent-hub. Pay-per-call APIs for AI agents: queries, storage, ads. Billed in USDC via x402. This page covers its hosted endpoint (https://ai-agent-hub-1.onrender.com/mcp).
Is the io.github.justuncase1210-del/ai-agent-hub MCP server safe to use?
io.github.justuncase1210-del/ai-agent-hub scores 65 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.justuncase1210-del/ai-agent-hub MCP server expose?
io.github.justuncase1210-del/ai-agent-hub exposes 19 tools: run_query, extract_links, download_file, upload_file, get_ad_impression, and 14 more. Their descriptions and schemas cost roughly 1,954 tokens of context every time the server is loaded.
Does the io.github.justuncase1210-del/ai-agent-hub MCP server require authentication?
No. We connected to io.github.justuncase1210-del/ai-agent-hub without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the io.github.justuncase1210-del/ai-agent-hub MCP server still maintained?
io.github.justuncase1210-del/ai-agent-hub is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.