# io.github.lordbasilaiassistant-sudo/broke2built-skills-mcp (npm · broke2built-skills-mcp)

29 live data skills for agents: email/DNS/domain intel, web audits, EVM reads. Free tier.

- Trust score: 69/100 (medium)
- Change this week: +23
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `broke2built-skills-mcp`: 69/100 (this document), [markdown](https://verifymcp.io/servers/lordbasilaiassistant-sudo-broke2built-skills-mcp/broke2built-skills-mcp.md), [page](https://verifymcp.io/servers/lordbasilaiassistant-sudo-broke2built-skills-mcp/broke2built-skills-mcp)

## Channel facts

- Registry: `npm`
- Package: `broke2built-skills-mcp`
- Version: `1.1.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 86/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 15 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 1952 tokens (~67/item across 29 items; 29 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add lordbasilaiassistant-sudo-broke2built-skills-mcp -- npx -y broke2built-skills-mcp
```

### Codex

```bash
codex mcp add lordbasilaiassistant-sudo-broke2built-skills-mcp -- npx -y broke2built-skills-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "lordbasilaiassistant-sudo-broke2built-skills-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "broke2built-skills-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add lordbasilaiassistant-sudo-broke2built-skills-mcp --command npx --arg -y --arg broke2built-skills-mcp
```

### Hermes

```yaml
mcp_servers:
  lordbasilaiassistant-sudo-broke2built-skills-mcp:
    command: "npx"
    args: ["-y", "broke2built-skills-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "lordbasilaiassistant-sudo-broke2built-skills-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "broke2built-skills-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-02 (score 68, +47)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Stability: unverified → 0.20
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] License: unverified → pass
- [functional] Licence: MIT

### 2026-07-31 (score 21, −7)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 28, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 46)

First indexed and scored.

## MCP tools (29)

### `verify_email` (~54 tokens)

Live email verification: syntax + MX + disposable + role-account. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `email` (string, required): The email to analyze

### `email_auth` (~61 tokens)

Email authentication audit: SPF, DMARC, DKIM (common selectors) + spoofability verdict. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `domain` (string, required): The domain to analyze

### `domain_intel` (~58 tokens)

Domain intelligence: mail provider + deliverability + tech stack + metadata + signals. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `domain` (string, required): The domain to analyze

### `dns_lookup` (~67 tokens)

All-in-one DNS: A, AAAA, MX, TXT, NS, CNAME, CAA records in one call. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `domain` (string, required): The domain to analyze

### `whois_rdap` (~63 tokens)

Domain registration intel via RDAP: created/expires, age, registrar, status, nameservers. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `domain` (string, required): The domain to analyze

### `ip_geo` (~61 tokens)

Resolve a domain/host to its IP and return geolocation + ASN/ISP + hosting org. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `domain` (string, required): The domain to analyze

### `seo_audit` (~66 tokens)

On-page SEO snapshot: title/meta, H1 count, canonical, OpenGraph, image-alt coverage + graded issues. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `security_headers` (~68 tokens)

HTTP security-header audit (HSTS, CSP, X-Frame, X-Content-Type, Referrer-Policy…) + grade. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `broken_links` (~61 tokens)

Fetch a page, extract links, HEAD-check each — report every broken/dead link with status. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `redirect_trace` (~58 tokens)

Trace the full redirect chain for a URL — every hop, status, final destination. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `url_metadata` (~60 tokens)

Page metadata: title, description, canonical, OpenGraph, Twitter card, favicon, lang. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `tech_detect` (~60 tokens)

Tech-stack fingerprint: CDN, server, framework/CMS, analytics, payment + hosting signals. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `sitemap_extract` (~59 tokens)

Find + parse a site's sitemap → list of URLs with count (follows sitemap-index). (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `domain` (string, required): The domain to analyze

### `robots_analyze` (~60 tokens)

Parse robots.txt: per-user-agent rules, declared sitemaps, path crawlability. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `domain` (string, required): The domain to analyze

### `structured_data` (~58 tokens)

Extract JSON-LD / schema.org structured data — @types present + parsed objects. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `readability` (~63 tokens)

Extract the main article text (strips nav/ads/boilerplate) + word count + reading time. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `rss_to_json` (~63 tokens)

Fetch an RSS/Atom feed and return clean JSON (title, link, date, summary per item). (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `html_table` (~57 tokens)

Extract HTML tables from a page as clean JSON (headers mapped to row objects). (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `brand_assets` (~61 tokens)

Extract a site's brand assets: favicon, apple-touch-icon, og:image, theme-color, icons. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `lang_hreflang` (~59 tokens)

Detect a page's language + charset + hreflang alternate-language versions. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `json_repair` (~60 tokens)

Repair broken/malformed JSON (esp. truncated LLM output) into valid parsed JSON. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `json` (string, required): The json to analyze

### `text_entities` (~63 tokens)

Extract entities from text: emails, URLs, IPs, phones, dates, hashtags, mentions, money. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `text` (string, required): The text to analyze

### `evm_address_intel` (~107 tokens)

EVM address intel: contract vs wallet (EOA), bytecode size, native balance. ?chain=eth|base|arbitrum|optimism|polygon. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `address` (string, required): The address to analyze
- `chain` (string): eth|base|arbitrum|optimism|polygon (or "all" for gas-tracker)

### `token_metadata` (~90 tokens)

ERC-20 token metadata on-chain: name, symbol, decimals, total supply. ?chain=… (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `address` (string, required): The address to analyze
- `chain` (string): eth|base|arbitrum|optimism|polygon (or "all" for gas-tracker)

### `multichain_balance` (~86 tokens)

Native balance for one address across 5 EVM chains in one call. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `address` (string, required): The address to analyze
- `chain` (string): eth|base|arbitrum|optimism|polygon (or "all" for gas-tracker)

### `tx_status` (~92 tokens)

EVM transaction status: success/failed, block, confirmations, from/to, gas used. ?chain=… (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `chain` (string): eth|base|arbitrum|optimism|polygon (or "all" for gas-tracker)
- `hash` (string, required): The hash to analyze

### `gas_tracker` (~84 tokens)

Live gas price in gwei for EVM chains (eth|base|arbitrum|optimism|polygon|all). (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `chain` (string, required): eth|base|arbitrum|optimism|polygon (or "all" for gas-tracker)

### `source_verify` (~81 tokens)

Verify a cited source URL: live status + final URL + title + whether the domain is an OFFICIAL publisher (curated EU/BE/NL legal-source list + official-TLD heuristics). (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `url` (string, required): The url to analyze

### `vies_check` (~72 tokens)

Verify an EU VAT number against the official EC VIES registry: valid?, registered name + address. e.g. vat=BE0403170701. (free taste tier: 20 calls/day/IP — set ALLY_KEY env for 100/day free)

Input parameters:

- `vat` (string, required): The vat to analyze

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/lordbasilaiassistant-sudo-broke2built-skills-mcp/broke2built-skills-mcp#diagnostics

## Score history

- 2026-08-03: 69
- 2026-08-02: 68
- 2026-08-01: 21
- 2026-07-31: 21
- 2026-07-30: 28
- 2026-07-28: 46
- 2026-07-27: 46

## Links

- npm package: https://www.npmjs.com/package/broke2built-skills-mcp
- Socket report: https://socket.dev/npm/package/broke2built-skills-mcp
- Repository: https://github.com/lordbasilaiassistant-sudo/broke2built-skills-mcp
- Changelog RSS feed: https://verifymcp.io/servers/lordbasilaiassistant-sudo-broke2built-skills-mcp/broke2built-skills-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/lordbasilaiassistant-sudo-broke2built-skills-mcp/broke2built-skills-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/lordbasilaiassistant-sudo-broke2built-skills-mcp/broke2built-skills-mcp