# 1cent Web Intelligence for AI Agents (remote · 1cent.maxzoa.ru)

SSRF-safe web intelligence: 4 outcomes, 32 paid x402 tools, 3 free tools and a URL preview.

- Trust score: 75/100 (medium)
- Change this week: +63
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `1cent.maxzoa.ru`: 75/100 (this document), [markdown](https://verifymcp.io/servers/ru-maxzoa-1cent/1cent.md), [page](https://verifymcp.io/servers/ru-maxzoa-1cent/1cent)

## Channel facts

- Endpoint: `https://1cent.maxzoa.ru/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.7.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 80/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 82/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 4625 tokens (~128/item across 36 items; 35 tools + 1 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 13/100
  - Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http ru-maxzoa-1cent https://1cent.maxzoa.ru/mcp
```

### Codex

```toml
[mcp_servers.ru-maxzoa-1cent]
url = "https://1cent.maxzoa.ru/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ru-maxzoa-1cent": {
      "type": "remote",
      "url": "https://1cent.maxzoa.ru/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ru-maxzoa-1cent --url https://1cent.maxzoa.ru/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  ru-maxzoa-1cent:
    url: "https://1cent.maxzoa.ru/mcp"
```

### Other

```json
{
  "mcpServers": {
    "ru-maxzoa-1cent": {
      "type": "http",
      "url": "https://1cent.maxzoa.ru/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 75, +57)

- [security improvement] Authorization: unverified → partial
- [security improvement] HTTPS: unverified → pass
- [security improvement] Transport: fail → pass
- [security improvement] HSTS header: fail → pass
- [security] The server rewrote its instructions, which are the text every model session reads
- [functional improvement] Endpoint reachability: not serving MCP → reachable
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Stability: unverified → 0.10
- [functional improvement] Schema quality: unverified → 100
- [functional improvement] Tool coverage: unverified → 100

### 2026-08-01 (score 18, −56)

- [security regression] Endpoint reachability: reachable → not serving MCP
- [security regression] Stability: 0.03 → unverified
- [security regression] HTTPS: pass → unverified
- [security regression] Authorization: partial → unverified
- [security regression] Transport: pass → fail
- [security regression] HSTS header: pass → fail
- [functional regression] Schema quality: 100 → unverified
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified

### 2026-07-31 (score 74, +3)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 71, +59)

- [security improvement] HTTPS: unverified → pass
- [security improvement] Authorization: unverified → partial
- [security improvement] HSTS header: fail → pass
- [security improvement] Transport: fail → pass
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] Schema quality: unverified → 100
- [functional improvement] MCP protocol: unverified → pass
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: excellent
- [functional] First check of Tool coverage: 100
- [functional] First check of Tool coverage: 100
- [functional] First check of Schema quality: fail

### 2026-07-27 (score 12, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 12)

First indexed and scored.

## MCP tools (35)

### `catalog.tools.search` (~76 tokens)

Start here: find a 1cent tool and current price

Start here before choosing a paid operation. Search the local 1cent catalog without fetching a URL or requiring payment. Returns up to five matching tools with purpose, current atomic Base USDC price and REST path.

Input parameters:

- `query` (string, required): Short capability phrase such as 'redirect chain', 'security headers' or 'extract article text'.

Output parameters:

- `results` (array)

### `demo.url.pulse` (~47 tokens)

Free demo: preview a URL Pulse result

Return a precomputed example of 1cent URL Pulse output without payment, database access or any network request. This fixed demonstration never accepts a URL and never fetches an external resource.

Output parameters:

- `demo` (boolean)
- `network_request_performed` (boolean)
- `payment_required` (boolean)
- `reachable` (boolean)
- `source` (string)
- `status_code` (integer)
- `summary` (string)
- `title` (string)
- `url` (string)

### `demo.live.pulse` (~52 tokens)

Free live demo: check fixed example.com

Run the real SSRF-protected URL Pulse service against the fixed https://example.com/ target without payment. The tool accepts no URL, is rate-limited per client and preserves normal cache and audit behavior.

Output parameters:

- `demo` (boolean)
- `fixed_target` (string)
- `payment_required` (boolean)
- `rate_limit_per_hour` (integer)
- `result`

### `web.url.pulse` (~150 tokens)

URL Pulse

Check a public HTTP or HTTPS URL before expensive browsing or AI processing. Returns availability, redirects, content type, page metadata, language, cache state, content hash, robots policy, and access restrictions. Does not execute JavaScript. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to reuse cache; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `auth_required` (boolean)
- `canonical_url`
- `checked_at` (string)
- `content_hash` (string)
- `content_length` (integer)
- `content_type` (string)
- `from_cache` (boolean)
- `language`
- `quality`
- `reachable` (boolean)
- `redirect_count` (integer)
- `request_id` (string)
- `requires_javascript` (boolean)
- `response_time_ms` (integer)
- `robots_allowed` (boolean)
- `status_code` (integer)
- `suspected_paywall` (boolean)
- `title`
- `url_final` (string)
- `url_requested` (string)

### `web.url.passport` (~155 tokens)

URL Passport

Inspect a public HTTP or HTTPS URL and return a structured site passport. Includes pulse fields, registrable domain, robots and sitemap discovery, feeds, OpenAPI hints, and page metadata. Uses at most eight external HTTP requests and does not execute JavaScript. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to reuse cache; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `auth_required` (boolean)
- `canonical_url`
- `checked_at` (string)
- `content_hash` (string)
- `content_length` (integer)
- `content_type` (string)
- `discovery`
- `from_cache` (boolean)
- `language`
- `metadata`
- `quality`
- `reachable` (boolean)
- `redirect_count` (integer)
- `request_id` (string)
- `requires_javascript` (boolean)
- `response_time_ms` (integer)
- `robots_allowed` (boolean)
- `site`
- `status_code` (integer)
- `suspected_paywall` (boolean)
- `title`
- `url_final` (string)
- `url_requested` (string)

### `web.url.extract` (~180 tokens)

URL Extract

Extract normalized main text and optional links from a public HTTP or HTTPS document. Returns title, author, publication time, language, content hash, truncation and cache state. Output size and fetch time are bounded; JavaScript is not executed. Pass url as an absolute public HTTP(S) URL. Set include_links=true only when normalized links are needed. Keep fresh=false to reuse cache.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `include_links` (boolean): Set true to include bounded normalized links in extraction output; false returns the main document text without the optional link list.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `author`
- `checked_at` (string)
- `content_hash` (string)
- `from_cache` (boolean)
- `language`
- `links` (array)
- `published_at`
- `quality`
- `request_id` (string)
- `text` (string)
- `text_length` (integer)
- `title`
- `truncated` (boolean)
- `url_final` (string)

### `web.url.changed` (~142 tokens)

URL Changed

Compare a public HTTP or HTTPS URL with its previously stored normalized content hash. Creates a baseline on first use, then reports whether content changed and returns current and previous hashes with timestamps. JavaScript is not executed. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to reuse cache; set fresh=true only for a new fetch.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `baseline_created` (boolean)
- `changed`
- `checked_at` (string)
- `current_hash` (string)
- `first_seen_at`
- `previous_checked_at`
- `previous_hash`
- `quality`

### `web.url.status` (~134 tokens)

Url Status

Check HTTP reachability, status and final URL. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.redirects` (~132 tokens)

Url Redirects

Return the safely validated redirect chain. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.headers` (~131 tokens)

Url Headers

Return allowlisted response headers only. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.timing` (~133 tokens)

Url Timing

Return measured end-to-end fetch timing. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.content_type` (~136 tokens)

Url Content Type

Classify MIME type, charset and bounded content length. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.canonical` (~136 tokens)

Url Canonical

Resolve requested, final and declared canonical URLs with evidence. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.language` (~133 tokens)

Url Language

Report declared and heuristically detected document language. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.hash` (~135 tokens)

Url Hash

Compute a versioned SHA-256 of normalized content. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.metadata` (~136 tokens)

Url Metadata

Extract title, description, author, dates and canonical metadata. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.social_cards` (~134 tokens)

Url Social Cards

Extract bounded Open Graph and Twitter Card fields. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.jsonld` (~135 tokens)

Url Jsonld

Extract bounded JSON-LD blocks without executing scripts. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.headings` (~137 tokens)

Url Headings

Return the bounded heading hierarchy from h1 through h6. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.word_stats` (~135 tokens)

Url Word Stats

Estimate words, characters, sentences and reading time. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.links` (~133 tokens)

Url Links

Extract up to 200 normalized safe links. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.images` (~135 tokens)

Url Images

List up to 100 image references without downloading images. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.text` (~130 tokens)

Url Text

Return bounded normalized readable text. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.markdown` (~133 tokens)

Url Markdown

Convert readable HTML content to bounded Markdown. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.rag_chunks` (~136 tokens)

Url Rag Chunks

Split readable text into deterministic bounded RAG chunks. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.diff` (~134 tokens)

Url Diff

Return a bounded normalized diff against the previous snapshot. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.site.robots` (~134 tokens)

Site Robots

Fetch and parse the origin robots.txt policy. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.site.sitemaps` (~134 tokens)

Site Sitemaps

Discover up to five bounded sitemap resources. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.site.feeds` (~132 tokens)

Site Feeds

Discover declared RSS and Atom feeds. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.site.llms_txt` (~136 tokens)

Site Llms Txt

Return bounded llms.txt text when publicly available. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.site.security_txt` (~134 tokens)

Site Security Txt

Parse public security.txt fields without following contacts. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.site.openapi` (~133 tokens)

Site Openapi

Discover and summarize bounded public OpenAPI documents. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.security_headers` (~134 tokens)

Url Security Headers

Assess common response security headers as static evidence. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.tls` (~135 tokens)

Url Tls

Inspect the public HTTPS certificate on port 443. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

### `web.url.access_flags` (~137 tokens)

Url Access Flags

Report heuristic authentication, paywall and JavaScript access flags. Use only for public HTTP(S) resources; it does not execute JavaScript or bypass access controls. Pass url as an absolute public HTTP(S) URL. Keep fresh=false to allow cache reuse; set fresh=true only when a new upstream fetch is required.

Input parameters:

- `fresh` (boolean): Set true only when a new upstream fetch is required; false allows the bounded cached result and is cheaper for the origin.
- `url` (string, required): Absolute public HTTP or HTTPS URL to inspect. Private, loopback, link-local, metadata-service and otherwise SSRF-sensitive destinations are rejected.

Output parameters:

- `checked_at` (string)
- `content_hash` (string)
- `data` (object)
- `from_cache` (boolean)
- `quality`
- `request_id` (string)
- `tool` (string)
- `url_final` (string)
- `url_requested` (string)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/ru-maxzoa-1cent/1cent#diagnostics

## Score history

- 2026-08-03: 75
- 2026-08-02: 75
- 2026-08-01: 18
- 2026-07-31: 74
- 2026-07-30: 71
- 2026-07-29: 12
- 2026-07-28: 12
- 2026-07-27: 12
- 2026-07-26: 12

## Links

- Remote endpoint: https://1cent.maxzoa.ru/mcp
- Website: https://1cent.maxzoa.ru/
- Changelog RSS feed: https://verifymcp.io/servers/ru-maxzoa-1cent/1cent/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/ru-maxzoa-1cent/1cent/changelog.json
- HTML version of this page: https://verifymcp.io/servers/ru-maxzoa-1cent/1cent