MCP Server for Z.AI - A Model Context Protocol server that provides AI capabilities
Nothing to run from here
Iteratools is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
96/100
trust score
7
downloads a day
local
runs on your machine
172
downloads in 30d
What it does
MCP server for IteraTools — AI agent tools API. Image, video, web scraping, search, TTS, WhatsApp and more.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user iteratools-mcp '--' npx -y iteratools-mcp
# 2 — ask your agent for something these tools do
# image_generate, image_remove_background, video_generate and 80 more
Iteratools costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
FRAll 1 server
fredpsantos331 server
1 category
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. This one runs on your machine: your client starts Iteratools as a process under your own user, with your files and your network, so the tool surface below is what it can do to your computer rather than to a server somewhere else. Its scan result is on the Security tab — read the surface before you approve it.
Claude Codedeclared by this listing
This is a public server: you run it yourself and this marketplace is not in the path. You need Node.js — the current LTS (24) is the safe choice; npx comes with it. Claude Code registers it in one command; --scope user makes it available in every project. The '--' is in quotes so that PowerShell passes it on.
claude mcp add --scope user iteratools-mcp '--' npx -y iteratools-mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it runs from its publisher’s own package: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it asks of you
Nothing is required, but it can take ITERATOOLS_API_KEY (Your IteraTools API key from iteratools.com) if you want to set it.
What it writes
One config entry your client uses to start the process locally. A local server runs with your file system and your network, which is why it is priced without metering.
What you approve
83 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Generate an image using Flux 1.1 Pro AI model. Returns image URL.
No parameter schema on file.
Remove background from an image URL. Returns PNG with transparent background.
No parameter schema on file.
Generate a 5-second video from a prompt using Kling v1.6 Pro.
No parameter schema on file.
Scrape any URL and return clean markdown text. Works on JS-rendered pages.
No parameter schema on file.
Search the web and return real-time results with titles, URLs and snippets.
No parameter schema on file.
Convert text to natural-sounding speech. Returns audio URL.
No parameter schema on file.
Take a screenshot of any website URL. Returns image URL.
No parameter schema on file.
Generate a QR code for any text or URL. Returns image URL.
No parameter schema on file.
Get current weather and forecast for any location.
No parameter schema on file.
Get current cryptocurrency price and 24h stats.
No parameter schema on file.
Validate an email address — checks format, MX records, disposable status.
No parameter schema on file.
Send a transactional email via SMTP. Specify recipient, subject, and body (plain text or HTML). Price: $0.002/request. Note: currently disabled (503) until enabled.
No parameter schema on file.
Send a WhatsApp message to a phone number. Initiates with a template. Returns conversation_id for follow-up replies.
No parameter schema on file.
Send a free-text reply within an active WhatsApp conversation (within 24h window).
No parameter schema on file.
Translate text from one language to another.
No parameter schema on file.
Transcribe audio from a public URL using OpenAI Whisper. Returns plain text transcript.
No parameter schema on file.
Transcribe audio from a URL using Whisper. Returns text transcript.
No parameter schema on file.
Generate a spreadsheet (XLSX or CSV) from data. Returns file URL.
No parameter schema on file.
Lookup DNS records for a domain.
No parameter schema on file.
Get WHOIS registration information for a domain.
No parameter schema on file.
Get public holidays for a country and year.
No parameter schema on file.
Extract frames from a video URL. Returns array of image URLs.
No parameter schema on file.
Transcribe video from URL (YouTube or direct MP4). Downloads audio with yt-dlp, transcribes with OpenAI Whisper. Returns text, language, duration and segments.
No parameter schema on file.
Get geolocation data for an IP address. Omit ip to use the caller\
No parameter schema on file.
Convert an amount between currencies using real-time exchange rates.
No parameter schema on file.
Generate a chart image (bar, line, pie, doughnut). Returns image URL.
No parameter schema on file.
Extract structured content from a URL using an optional JSON schema.
No parameter schema on file.
Crawl a website using BFS and extract content (title, markdown, links) from multiple pages. Useful for documentation scraping, site analysis, and content extraction at scale. Price: $0.010 per job.
No parameter schema on file.
Automate browser actions on a URL (click, fill, navigate, etc.). Optionally returns a screenshot.
No parameter schema on file.
Execute code in a sandboxed environment. Supports Python, JavaScript, and Bash.
No parameter schema on file.
Analyze the sentiment of a text (positive, negative, neutral) with confidence score.
No parameter schema on file.
Summarize a text or URL content into a concise summary.
No parameter schema on file.
Analyze text statistics: word count, character count, sentences, paragraphs, reading time, unique words. $0.001 per request.
No parameter schema on file.
Shorten a URL, optionally with a custom code. Returns shortened URL.
No parameter schema on file.
Generate a PDF from HTML content or a URL. Returns PDF file URL.
No parameter schema on file.
Extract text content from a PDF URL.
No parameter schema on file.
Resize or convert an image from a URL. Returns new image URL.
No parameter schema on file.
Compress an image with quality control. Supports JPEG, PNG, WebP, and AVIF formats. Optionally resize if wider than max_width. Returns compressed image as base64 data URL with original_size, compressed_size, reduction_pct, format, width, height.
No parameter schema on file.
Validate and format a phone number. Returns validity, type (MOBILE/FIXED_LINE/etc), country, country name, and E.164/international/national formats. Uses libphonenumber-js — no external API, instant response.
No parameter schema on file.
Generate vector embeddings for text using OpenAI text-embedding-3-small (default, 1536 dims) or text-embedding-3-large (3072 dims). Supports single string or batch of up to 100 strings. Returns float arrays ready for semantic search, RAG pipelines, and clustering.
No parameter schema on file.
Generate a fast, low-cost image from a prompt. Returns image URL.
No parameter schema on file.
Extract text from an image URL using OCR.
No parameter schema on file.
Read data from a Google Spreadsheet. Returns headers (first row) and all rows as key-value objects. Supports optional range parameter (e.g. Sheet1!A1:Z100). Price: $0.002/request.
No parameter schema on file.
Write or append rows to an existing Google Spreadsheet. Supports overwrite (default) and append modes. Price: $0.003/request.
No parameter schema on file.
Create a new Google Spreadsheet with optional title and column headers. The sheet is automatically made publicly viewable. Returns spreadsheet_id and shareable URL. Price: $0.005/request.
No parameter schema on file.
Fetch details for any GitHub repository: stars, forks, primary language, topics, open issues, default branch, and last commit (SHA, message, author, date). Works on public repos without a token. Provide a GitHub PAT via the token param to increase rate limits to 5,000 req/h. Price: $0.001/request.
No parameter schema on file.
Create a new GitHub issue on any repository you have write access to. Supports title (required), markdown body, and labels. Requires a GitHub Personal Access Token (PAT) with repo scope for private repos or public_repo scope for public repos. Returns the issue number and URL. Price: $0.002/request.
No parameter schema on file.
Read and decode the text content of any file in a GitHub repository. Automatically decodes GitHub\
No parameter schema on file.
Convert documents between formats using LibreOffice and Pandoc. Supports DOCX→PDF, PPTX→PDF, HTML→PDF, PDF→DOCX, MD→HTML, MD→PDF, HTML→MD. Supply document via URL or inline content (text or base64 for binary formats). Returns a public URL to the converted file. Price: $0.003/conversion.
No parameter schema on file.
Generate a cryptographic hash of any text. Supports MD5, SHA-1, SHA-256, SHA-384, SHA-512. Returns both hex and base64 encodings. Uses Node.js native crypto — no external API, instant response. Perfect for fingerprinting content, integrity checks, or generating unique identifiers.
No parameter schema on file.
Generate barcodes (Code128, Code39, EAN-13, EAN-8, UPC-A, ITF14, DataMatrix) — returns PNG as base64. Price: $0.001
No parameter schema on file.
Chat with an LLM (GPT-4o-mini, Claude Haiku, or Gemini Flash) via a single API. Returns text response and token usage.
No parameter schema on file.
Store or update a text document with vector embedding in a namespace (RAG store). Uses OpenAI text-embedding-3-small (1536 dims). Namespace is automatically isolated per API key — different users cannot access each other\
No parameter schema on file.
Delete all stored vector embeddings in a namespace. This action is irreversible — all documents in the namespace are permanently deleted. Returns the count of deleted documents. Use this to reset agent memory between sessions, clear outdated knowledge bases, or comply with data deletion requests.
No parameter schema on file.
Store a key-value pair in persistent memory, isolated per API key. Value can be any JSON-serializable data. Automatically generates embedding for semantic search via /memory/kv/search. Namespace is optional (default:
No parameter schema on file.
Retrieve a previously stored key-value pair by key and namespace. Returns 404 if the key does not exist. Use to read back agent state, user preferences, or any persisted data.
No parameter schema on file.
Delete a specific key from persistent KV memory. Returns whether the key existed before deletion. Use to clean up stale data, remove expired session data, or delete specific entries.
No parameter schema on file.
Search your stored key-value pairs by semantic similarity using OpenAI embeddings + cosine similarity. Finds the most relevant entries for a natural language query. Great for finding related memories, facts, or data points without knowing the exact key.
No parameter schema on file.
Validate, format, minify, or analyze JSON. Modes: validate (syntax check with error position), format (pretty-print with configurable indent), minify (compact), stats (key count, depth, type map), get (extract value by dot-bracket path like
No parameter schema on file.
Create a new event in Google Calendar. User must provide a valid OAuth2 access token with Google Calendar scope (https://www.googleapis.com/auth/calendar). Returns event_id, html_link, and status.
No parameter schema on file.
List events from a Google Calendar for a date range. Returns events with id, summary, start, end, location, and attendee count.
No parameter schema on file.
Check free/busy status of a Google Calendar using the Freebusy API. Returns list of busy time slots and whether the calendar is completely free.
No parameter schema on file.
Delete an event from Google Calendar by event_id. This action is irreversible. Requires OAuth2 access token with write scope.
No parameter schema on file.
Fetch and parse RSS/Atom feed URLs into structured JSON. Perfect for monitoring news, blogs, podcasts, and content feeds.
No parameter schema on file.
Start a WhatsApp market research session. Send a questionnaire to multiple contacts and collect structured responses automatically. Sends first question immediately after greeting. Returns research_id to track progress.
No parameter schema on file.
Get status of a WhatsApp research session (FREE, no auth required). Returns total contacts, how many have responded, and per-contact status.
No parameter schema on file.
Get the structured report for a WhatsApp research session (FREE, no auth required). Returns all answers per contact with question-answer pairs and completion statistics.
No parameter schema on file.
Generate professional PPTX presentations from JSON data with customizable themes (minimal/dark/corporate). Returns base64-encoded PPTX file ready to download.
No parameter schema on file.
Agentic WhatsApp market research: pass a natural language task → agent discovers contacts on Google Maps, extracts questions via LLM (GPT-4o-mini), and runs full WhatsApp survey automatically. Returns research_id immediately (fully async). $0.050/contact, minimum $0.50/job.
No parameter schema on file.
Check the status of a WhatsApp Research Agent job started with whatsapp_research_agent. Returns current phase (discovering/searching/researching/in_progress/error), contacts found, city, niche, questions, and inner research_id for polling with whatsapp_research_status.
No parameter schema on file.
Send a Slack message via Incoming Webhook URL (simple, no OAuth scopes needed) or Bot Token (xoxb-..., requires channel). Supports plain text and Block Kit blocks. No credentials are stored. $0.001 per request.
No parameter schema on file.
Read the latest messages from a Slack channel using a Bot Token with channels:history (public) or groups:history (private) scope. Returns messages with timestamp, user ID, and text. $0.002 per request.
No parameter schema on file.
Create a new public or private Slack channel using a Bot Token with channels:manage (public) or groups:write (private) scope. Channel name is auto-sanitized to lowercase alphanumeric + hyphens. $0.002 per request.
No parameter schema on file.
Pay-per-use AI agent tools API. 41+ tools: web scraping, image gen, video gen, TTS, WhatsApp, code execution, browser automation, and more. Pay per call from $0.001.
No parameter schema on file.
No parameter schema on file.
No parameter schema on file.
No parameter schema on file.
No parameter schema on file.
No parameter schema on file.
No parameter schema on file.
No parameter schema on file.
No parameter schema on file.
No parameter schema on file.
Free
$0 forever
- Every tool, no call limit
- No card, and mcprush charges nothing for it
- Source published under MIT
- Runs on your machine — nothing of it reaches our gateway
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install Iteratools or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
ATrust score 96 / 100
Release 1.0.5 · scanned 14 Oct 2026
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
Threat score100
Client score96
Findings0 threat · 1 capability
Capabilitymoderate
Coveragesource
Verificationrepo
Surface digestf7cfa4d6ab356ce15a04fc5c857da4cf64f7c353e05e1b01e2625cbff16950b8
Score vectorthreat 100 → client 96
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | moderate | capability blast radius (moderate) — client exposure if the model is manipulated | −3 |
| verification-discount | repo | publisher verification (public source) — no provenance, but the source is public and inspectable | −1 |
| coverage-honesty | source | inspection depth (source) — how much of the target the scan could see | −0 |
score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
Tool surfaceread
Implementation sourceread
Package metadataread
Live transportnot available
Tools were statically extracted from the published source (14 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| generate_image | no tags | |
| fast_image | no tags | |
| web_search | untrusted-input | untrusted-input: keyword "web_search" |
| scrape_url | untrusted-input | untrusted-input: keyword "scrape" |
| text_to_speech | no tags | |
| screenshot | no tags | |
| qr_code | no tags | |
| weather | no tags | |
| crypto_price | no tags | |
| email_validate | no tags | |
| url_shorten | no tags | |
| calendar_holidays | no tags | |
| sentiment_analysis | no tags | |
| summarize | no tags |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.
Supply chain and provenance
Integrityfirst-seen
Surface digestf7cfa4d6ab356ce1
Scanned2026-10-14
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
Always latest — the install command names no version, so it installs the newest release when it runs; the current release on file is 1.0.5. Pin a release below and the command asks for exactly that one.
1.0.41
undated
- The version this listing was on when mcprush began following its releases. The registry was not asked when it shipped, so this row carries no date.
1.0.5
13 Mar 2026
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish Iteratools can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.