Name: Thousand API
Author: thousand-api

Thousand API MCP

Certainty for AI Agents. Deterministic MCP tools for dates, crypto, finance. 84 tools.

Tool-list grade C Remote · Streamable HTTP API key 84 tools v1.2.0

No reviews yet by thousand-api The publisher’s own endpoint — this marketplace is not in the path

78/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Certainty for AI Agents. Deterministic MCP tools for dates, crypto, finance. 84 tools.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http thousand-api-mcp https://mcp.thousand-api.com/mcp --header 'x-api-key: ${X_API_KEY}'

# 2 — ask your agent for something these tools do
#   utility.search_tools, utility.get_tool_schema, utility.get_usage and 81 more

It needs X_API_KEY (API key from https://www.thousand-api.com/dashboard): this sends it in the x-api-key header from your environment, so export it first — its endpoint answers 401 without it.

Thousand API costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

thousand-api1 server

1 category

All 1 server

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Installation

Where are you running it?

Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.

Claude Codedeclared by this listing

This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it. Claude Code reads X_API_KEY (API key from https://www.thousand-api.com/dashboard) from your environment each time it connects and sends it in the x-api-key header — its endpoint answers 401 without it — so the key stays out of its config: export it in your shell profile (macOS, Linux), or run setx X_API_KEY … and open a new terminal (Windows).

claude mcp add --scope user --transport http thousand-api-mcp https://mcp.thousand-api.com/mcp --header 'x-api-key: ${X_API_KEY}'

Reconnect, or start a new session, and the tools appear in the model’s tool list.

Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add — but its publisher asks for a key of their own on every call.

What it asks of you

It reaches a system of yours, so it needs your own credential rather than the publisher’s: x-api-key header — API key from https://www.thousand-api.com/dashboard. You set it in your own client’s config, on your machine — this marketplace never holds it.

What it writes

One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.

What you approve

84 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

[utility] キーワード・カテゴリで MCP ツールを検索（無効ツールは除外） / Searches Thousand API MCP tools by keyword and category; disabled tools are excluded. [use_cases: tool_discovery]

Parameter	Type	Required	Notes
query	string	no	検索キーワード（日本語・英語・ツール名）。省略時はカテゴリ内一覧
category	string	no	カテゴリで絞り込み（datetime / text / convert / data / network / security / utility）
limit	integer	no	最大件数（1〜50、デフォルト 10）

[utility] 指定ツールの inputSchema・outputSchema をオンデマンド取得 / Returns inputSchema and outputSchema for one tool on demand (tools/list omits outputSchema). [use_cases: tool_discovery]

Parameter	Type	Required	Notes
tool	string	yes	スキーマを取得する MCP ツール名（例: data.validate_json）

[utility] プランと月次クォータの使用状況（残量・リセット時刻）を返す / Returns the current API key plan and monthly quota usage before hitting limit_exceeded (429). [use_cases: quota, billing]

No parameter schema on file.

[utility] API疎通・APIキー有効性・無効ツール件数を一括診断（クォータ消費なし） / Runs MCP self-diagnostics: API health via GET /v1/health (no quota), API key check via tool-settings (no quota), and disabled tool counts. [use_cases: tool_discovery, billing]

No parameter schema on file.

[data] 【複数ツール連続の前に検討】tools:[{id,tool,args}] で MCP ツールを最大10件順次実行。{{stepId.field}} で前ステップ結果を参照。関連ツール3〜5本を個別呼び出しすると往復3〜5回＋ツール呼び出しオーバーヘッドが重複するが、execute_batch で1回にまとめコンテキスト消費を大幅削減（概算）。Examples: (1) 今日の日時→祝日→為替 tools:[{id:now,tool:datetime.get_current_datetime,args:{timezone:Asia/Tokyo}},{id:holiday,tool:datetime.is_holiday,args:{country:JP,date:{{now.date}}}},{id:rate,tool:network.get_exchange_rate,arg

Parameter	Type	Required	Notes
tools	array	no	MCPツール名ベースのステップ指定（steps の代替）。各要素は { id, tool, args }
steps	array	no	Steps to execute in order. Alternatively, use tools with MCP tool names instead of HTTP paths.
stop_on_error	boolean	no	Stop executing remaining steps after first failure (default: true)

[datetime] 指定した国・年の祝日一覧を取得します。日程調整や営業日計算の前処理として使えます。レスポンスに cache_ttl（推奨キャッシュ保持秒数）と cached_at（データ取得時刻）を含み、再取得の要否判断に使えます。 / Returns public holidays for a country and year. Responses include cache_ttl (recommended cache duration in seconds) and cached_at (fetch time) to decide whether to refetch. [use_cases: calendar, business_planning]

Parameter	Type	Required	Notes
country	string	yes	国コード（JP: 日本 / US: アメリカ）
year	integer	no	対象年（省略時は当年）

[datetime] 指定した年月の月間カレンダー（曜日・祝日・営業日サマリー） / Returns a monthly calendar with weekday, holiday, and business-day summary for a year and month. [use_cases: calendar, business_planning]

Parameter	Type	Required	Notes
year	integer	yes	年（例: 2026）
month	integer	yes	月（1〜12）
country	string	no	国コード（JP: 日本 / US: アメリカ・デフォルト: JP）

[datetime] 指定した国・日付が祝日かどうかを判定します。祝日名も返します。レスポンスに cache_ttl（推奨キャッシュ保持秒数）と cached_at（データ取得時刻）を含み、再取得の要否判断に使えます。 / Checks whether a date is a public holiday in the given country and returns the holiday name. Responses include cache_ttl and cached_at for refetch decisions. [use_cases: calendar, business_planning]

Parameter	Type	Required	Notes
country	string	yes	国コード
date	string	yes	判定したい日付（YYYY-MM-DD形式）

[datetime] 指定した日付からN営業日後（または前）の日付を計算します。土日・祝日を自動的にスキップします。例: 「3営業日後の納期」「5営業日以内に返答」などの計算に使います。 / Calculates a date N business days after (or before) a start date, skipping weekends and holidays. [use_cases: calendar, business_planning]

Parameter	Type	Required	Notes
country	string	yes	国コード（祝日の基準国）
from	string	yes	起算日（YYYY-MM-DD形式）
days	integer	yes	追加する営業日数。負の値で過去方向に計算できます。

[datetime] 暦日（カレンダー日）の加算・減算（SQL ヒント付き） / Add or subtract calendar days from a date and return a SQL DATE_ADD/DATE_SUB hint. [use_cases: calendar, testing]

Parameter	Type	Required	Notes
date	string	yes	Base date (YYYY-MM-DD)
days	integer	yes	Number of calendar days to add (negative to subtract)
timezone	string	no	IANA timezone (default: Asia/Tokyo)

[datetime] テストデータ・DBシーディング用に基準日から複数オフセット（±N日）の日付セットを一括生成（ラベル・SQL INSERT ヒント付き）。datetime.add_calendar_days は単発加算、本ツールは複数オフセットの一括生成 / Generate multiple labeled test dates from one base date and day offsets (batch seeding). Unlike datetime.add_calendar_days (single offset), returns SQL INSERT VALUES hints for factories. [use_cases: testing, calendar]

Parameter	Type	Required	Notes
base_date	string	yes	Base date (YYYY-MM-DD) or "today"
offsets	array	yes	Day offsets from base_date (max 100 items)
timezone	string	no	IANA timezone (default: Asia/Tokyo)
format	string	no	Output date format (default: iso)

[datetime] 営業時間内かどうかを判定（タイムゾーン・祝日対応・デフォルト: Asia/Tokyo） / Checks whether a datetime falls within configured business hours, holidays, and timezone rules. [use_cases: business_planning, scheduling]

Parameter	Type	Required	Notes
datetime	string	yes	Date and time to check (ISO 8601, e.g. 2025-12-25T10:00:00+09:00)
timezone	string	no	IANA timezone (default: Asia/Tokyo)
hours	object	yes	Business hours per day of week (mon–sun). null = closed.
country	string	no	Optional country code for public holiday checks

[datetime] 法定祝日＋カスタム休業日をまとめて判定（複数日・週末対応） / Checks multiple dates against public holidays plus custom non-working days. Returns holiday status, reason (legal/custom/weekend), and name per date. Optionally treats weekends as holidays. [use_cases: batch_test_date, calendar, business_planning]

Parameter	Type	Required	Notes
dates	array	yes	Dates to check (YYYY-MM-DD, max 100 items)
country	string	no	Country code for public holidays (default: JP)
custom_holidays	array	no	Custom non-working days (max 100 items)
include_weekends	boolean	no	Treat Saturdays and Sundays as holidays (default: false)

[datetime] タイムゾーン変換・DST考慮のスケジュール計算 / Converts datetimes across timezones with DST support; add hours, next business day, or next weekday. [use_cases: timezone, scheduling]

Parameter	Type	Required	Notes
base_time	string	yes	基点日時（ISO 8601。例: 2026-05-21T15:00:00Z または 2026-05-21T15:00:00）
from_timezone	string	yes	基点タイムゾーン（IANA。例: Asia/Tokyo）
to_timezone	string	yes	変換先タイムゾーン（IANA。例: America/New_York）
operation	string	yes	操作種別
value	string	no	add_hours: 時間数、next_business_day: 営業日数（省略時1）、next_weekday: 曜日名
country	string	no	next_business_day 時の祝日基準国
at_time	string	no	next_weekday 時の時刻（HH:MM、from_timezone基準）

[datetime] Cron式を解析して次回実行日時を計算（人間向け説明付き・デフォルト: Asia/Tokyo） / Parses a cron expression and returns upcoming run times with a human-readable explanation. [use_cases: scheduling, cron]

Parameter	Type	Required	Notes
expression	string	yes	Cron式（例: 0 9 * * 1-5）
from	string	no	基準日時（ISO 8601）。省略時は現在時刻
count	integer	no	次のN回分を返す（省略時は1）
timezone	string	no	IANAタイムゾーン（例: Asia/Tokyo）。省略時は Asia/Tokyo

[datetime] Laravel スケジュール式を Cron 式に変換し次回実行時刻を計算 / Parses Laravel scheduler expressions and returns cron equivalents with next run times. [use_cases: scheduling, cron]

Parameter	Type	Required	Notes
expression	string	yes	Laravel schedule expression (e.g. dailyAt('03:30'))
base_datetime	string	no	Base datetime (ISO 8601). Defaults to now
timezone	string	no	IANA timezone (default: Asia/Tokyo)
count	integer	no	Number of next runs to return (default: 3)

[network] 2通貨間の為替レートを取得し、指定金額の換算結果を返します。from（基準通貨）から to（換算先通貨）へのレート・換算額・取得時刻を含みます。レスポンスに cache_ttl（推奨キャッシュ保持秒数）と cached_at（データ取得時刻）を含み、再取得の要否判断に使えます。 / Fetches the exchange rate between two currencies and converts an optional amount. Responses include cache_ttl and cached_at for refetch decisions. [use_cases: finance]

Parameter	Type	Required	Notes
from	string	yes	基準通貨（ISO 4217）
to	string	yes	換算先通貨（ISO 4217）
amount	number	no	基準通貨での金額。省略時は 1

[network] 日本の郵便番号↔住所の正引き・逆引き（日本郵便公式データ・最大50件）。レスポンスに cache_ttl（推奨キャッシュ保持秒数）と cached_at（データ取得時刻）を含み、再取得の要否判断に使えます。 / Bidirectional Japanese postal code lookup using official Japan Post data. Responses include cache_ttl and cached_at for refetch decisions. [use_cases: localization, address]

Parameter	Type	Required	Notes
code	string	no	Postal code for forward lookup (e.g. "100-0001" or "1000001")
address	string	no	Address keyword for reverse lookup (partial match on prefecture, city, town, or kana)
country	string	no	Country code (default: JP). Currently only JP is supported.
limit	integer	no	Max results for reverse lookup (default: 10, max: 50)

[network] URLのページ情報（タイトル・説明・OGP・favicon）を取得します。ユーザーが共有したURLの内容確認、リンクの要約、SNSプレビューの生成などに使えます。AIが直接アクセスできないURLの情報を取得する際に有効です。 / Fetches page title, description, OGP tags, and favicon for a URL when the agent cannot browse directly. [use_cases: url_check, scraping]

Parameter	Type	Required	Notes
url	string	yes	情報を取得したいページのURL（http/httpsのみ）

[utility] 2地点の緯度・経度間の地上距離（メートル）を計算します。座標は「緯度,経度」の文字列で1点ずつ渡します。アルゴリズムは hubeny（既定・高速）・球面三角法・測地線航法から選択できます。 / Calculates geodesic distance in meters between two latitude/longitude coordinate pairs. [use_cases: geo, mapping]

Parameter	Type	Required	Notes
p1	string	yes	始点の座標。形式は「緯度,経度」（例: 35.681236,139.767125）
p2	string	yes	終点の座標。形式は「緯度,経度」
type	string	no	計算方法。省略時は hubeny（ヒュベニの公式）

[utility] Convert geographic coordinates between WGS84 (GPS), Tokyo Datum (旧日本測地系), JGD2011 (測地成果2011), and map tile coordinates (XYZ tile scheme used by GSI, OpenStreetMap, and Google Maps). Essential for Japanese map applications where GPS data and legacy coordinate systems diverge by up to 450 meters. / Convert Coordinates. Developer utilities for calculations and checks. [use_cases: geo, mappi

Parameter	Type	Required	Notes
lat	number	yes	Latitude (-90 to 90)
lng	number	yes	Longitude (-180 to 180)
from	string	yes	Source coordinate system
to	string	yes	Target coordinate system (use tile for map tile XYZ coordinates)
zoom	integer	no	Zoom level (0-25). Required when to is tile

[convert] テキストやURLからQRコード画像を生成します。PNG・JPEG・SVG・EPS形式に対応し、サイズや前景色・背景色を指定できます。MCPでは画像を image コンテンツとして返します。コンテキスト節約のため return: "metadata_only" でサイズ・形式のみ取得できます。 / Generates a QR code image (PNG, JPEG, SVG, EPS) from text or a URL with size and color options. [use_cases: media, data_conversion]

Parameter	Type	Required	Notes
data	string	yes	QRコードに埋め込むデータ（URLやテキストなど）
format	string	yes	出力画像のフォーマット
size	integer	no	画像サイズ（正方形の一辺、ピクセル）。省略時は 250
fg_color	string	no	前景色（QRのドット）を6桁の16進数で指定（例: 00ff00）。省略時は 000000
bg_color	string	no	背景色を6桁の16進数で指定（例: ffffff）。省略時は ffffff
return	string	no	full: 画像データを含む完全なレスポンス（デフォルト）。metadata_only: サイズ・形式等のメタデータのみ（コンテキスト節約）

[network] IPアドレスの地理情報を取得 / Looks up geographic information for an IP address; omit address to use the caller IP. [use_cases: network]

Parameter	Type	Required	Notes
address	string	no	検索するIPアドレス（省略時はリクエスト元のIP）

[text] HTMLからプレーンテキストを抽出（タグ除去・エンティティデコード・空白正規化・リンク一覧オプション） / Extracts plain text from HTML with tag removal and entity decoding. [use_cases: text_processing]

Parameter	Type	Required	Notes
html	string	yes	HTML text to extract plain text from (max 1MB)
max_length	integer	no	Optional maximum character count for the output text
preserve_links	boolean	no	When true, include a list of anchor text and href values

[text] テキストの文字数・単語数・段落数・推定読了時間を計算（ja / en） / Counts characters, words, paragraphs, and estimated reading time for Japanese or English text. [use_cases: text_processing]

Parameter	Type	Required	Notes
text	string	yes	解析するテキスト（最大100KB）
lang	string	no	言語コード（ja: 日本語 / en: 英語・デフォルトen）

[text] テキストのLLMトークン数を近似計算。TOKENを節約するため、HTMLや長文をLLMに渡す前に消費トークン数を事前確認できる / Approximates LLM token usage from text before sending it to a model—save tokens by checking HTML or long documents upfront. Character-type heuristics only; not exact tokenizer output. [use_cases: text_processing, token_estimation]

Parameter	Type	Required	Notes
text	string	yes	トークン数を見積もるテキスト（最大1MB）
model_hint	string	no	モデルヒント（claude / gpt / generic・デフォルトgeneric）

[text] 長文を文・段落の境界を保ったままチャンク分割（LLMコンテキスト・RAG前処理用、overlap対応） / Splits long text into chunks without breaking sentence/paragraph boundaries. Useful for preparing text for LLM context windows or RAG chunking. Combine with text.estimate_tokens to size chunks by token budget (character-based sizing only for now). [use_cases: text_processing, rag, token_estimation]

Parameter	Type	Required	Notes
text	string	yes	Text to split into chunks (max 1MB). An empty string returns chunk_count: 0.
max_chars	integer	yes	Maximum characters per chunk, counted in Unicode code points (integer >= 1)
overlap	integer	no	Characters repeated from the end of the previous chunk at the start of the next (0 <= overlap < max_chars, default 0). Useful for keeping context between RAG chunks.
boundary	string	no	Split unit: sentence (default, splits on 。．.!！?？), paragraph (splits on blank lines), or char (fixed-size slices). Oversized units fall back to finer boundaries automatically.

[text] テキスト内の個人情報（メール・日本の電話番号・クレジットカード）を正規表現＋Luhnで検出してマスキング。固定長マスクで元の長さを漏らさない。正規表現ベースのため偽陽性/偽陰性あり（専用DLPの代替ではない） / Detects and masks PII (email addresses, Japanese phone numbers, credit card numbers) in text using regex + Luhn validation for cards. Uses fixed-length masking (not length-preserving) so masked output doesn't leak the original length. Note: regex-based detection has inherent false-posi

Parameter	Type	Required	Notes
text	string	yes	Text to scan and mask (max 50,000 characters)
types	array	no	PII types to detect. Defaults to all of email, phone_jp, and credit_card when omitted.
mask_char	string	no	Single character used for masking (default "*"). Must be exactly one character (surrogate pairs are not allowed).

[text] 2つのテキストを比較し、unified diff または JSON 形式で差分を返す / Compares two texts and returns unified diff or structured JSON differences. [use_cases: text_processing]

Parameter	Type	Required	Notes
original	string	yes	Original text to compare (max 256KB)
modified	string	yes	Modified text to compare against (max 256KB)
context_lines	integer	no	Number of context lines around changes in unified format (default 3)
format	string	no	Output format: unified diff string or structured JSON chunks (default unified)

[text] 2つの Markdown テーブルをセル単位で比較し、列・行の追加削除とセル変更を構造化して返す / Compares two Markdown tables at the cell level with structured added/changed/removed rows. [use_cases: design_review, text_processing]

Parameter	Type	Required	Notes
before	string	yes	Original Markdown table string to compare (max 100KB)
after	string	yes	Modified Markdown table string to compare against (max 100KB)
key_column		no	Column name or zero-based index used as row identity key (default: first column)

[text] 2つのテキストの類似度を Levenshtein・Jaro-Winkler・Jaccard で数値スコア（0〜1）として返す / Returns Levenshtein, Jaro-Winkler, and Jaccard similarity scores for two texts. [use_cases: text_processing]

Parameter	Type	Required	Notes
text1	string	yes	First text to compare (max 10,000 characters)
text2	string	yes	Second text to compare against (max 10,000 characters)
algorithms	array	no	Algorithms to run (default: all three)

[network] URLの最終リダイレクト先を追跡（短縮URL・アフィリエイトURLの実体確認） / Follows redirects to resolve the final URL—useful for short links and affiliate URLs. [use_cases: url_check]

Parameter	Type	Required	Notes
url	string	yes	追跡するURL（http/httpsのみ）

[convert] MarkdownテキストをHTMLに変換（GFM対応・XSSサニタイズ） / Converts Markdown to HTML with optional GFM support and XSS sanitization. [use_cases: data_conversion]

Parameter	Type	Required	Notes
markdown	string	yes	変換するMarkdownテキスト（最大100KB）
sanitize	boolean	no	HTMLをサニタイズしてXSSを防ぐ（デフォルトtrue・推奨）

[utility] 基準カラーコードからカラーパレットを生成（補色・類似色・トライアド等） / Generates mathematically accurate palettes (complementary, analogous, triad, etc.) from a base color. [use_cases: design]

Parameter	Type	Required	Notes
color	string	yes	基準カラーコード（#RRGGBB形式例: #1976D2）
type	string	no	パレット種別（デフォルト: complementary）

[utility] 2色間のWCAG 2.1コントラスト比とAA/AAA適合判定を計算 / Calculates WCAG 2.1 contrast ratio and AA/AAA compliance between two colors. [use_cases: design]

Parameter	Type	Required	Notes
foreground	string	yes	Foreground color HEX (#RRGGBB, RRGGBB, or 3-digit shorthand)
background	string	yes	Background color HEX (#RRGGBB, RRGGBB, or 3-digit shorthand)

[convert] HEX/RGB/HSL/HSV/CMYK間の色空間変換（RGB中継で一貫性を保証） / Converts colors between HEX, RGB, HSL, HSV, and CMYK via RGB. [use_cases: data_conversion]

Parameter	Type	Required	Notes
color	string	yes	Color value to convert (format depends on from)
from	string	yes	Source color format

[network] URLのヘルスチェック（ステータス・レスポンスタイム・SSL・ヘッダー） / Checks URL health: HTTP status, response time, SSL certificate, and response headers. [use_cases: url_check, network]

Parameter	Type	Required	Notes
url	string	yes	検査するURL（http/httpsのみ）

[security] JWTをデコード（署名検証なし・ヘッダー・ペイロード・有効期限） / Decodes a JWT header and payload without signature verification; returns expiry metadata. [use_cases: security, auth]

Parameter	Type	Required	Notes
token	string	yes	デコードするJWTトークン

[convert] 長さ・重さ・温度・面積・体積・速度・データ量の単位変換（mathjs） / Converts numeric values across length, weight, temperature, area, volume, speed, and data units. [use_cases: data_conversion]

Parameter	Type	Required	Notes
value	number	yes	変換する数値
from	string	yes	変換元単位（例: km, kg, celsius, GB）
to	string	yes	変換先単位（例: mile, lb, fahrenheit, MiB）

[security] テキストからMD5・SHA-1・SHA-256・SHA-512のハッシュ値を生成 / Generates MD5, SHA-1, SHA-256, or SHA-512 hashes from text for checksums and integrity checks. [use_cases: security, crypto]

Parameter	Type	Required	Notes
text	string	yes	ハッシュ化するテキスト（最大100KB）
algorithm	string	no	ハッシュアルゴリズム（デフォルト: sha256）

[security] 暗号学的に安全な UUID v4 を1件以上生成（最大100件） / Generate one or more cryptographically secure UUID v4 strings. Unlike LLM-generated UUIDs, these are guaranteed to be RFC 4122-compliant with proper version and variant bits. Use for database primary keys, job IDs, and any context requiring unique identifiers. [use_cases: security, validation]

Parameter	Type	Required	Notes
count	integer	no	Number of UUIDs to generate (default: 1)
version	string	no	UUID version (only v4 is supported; default: v4)

[security] UUID形式の検証とバージョン（v1-v5）・variant の判定 / Validate whether strings are properly formatted UUIDs and identify their version (v1-v5). Useful for checking user input, validating IDs from external systems, or verifying AI-generated UUIDs before using them as database keys. [use_cases: security, validation]

Parameter	Type	Required	Notes
values	array	yes	Strings to validate as UUIDs (max 100)

[security] ISBN/JANバーコードの検証とISBN-10/ISBN-13変換 / Validates and normalizes barcode formats such as EAN-13, UPC, and ISBN. [use_cases: validation, ecommerce]

Parameter	Type	Required	Notes
code	string	yes	Barcode to validate (hyphens optional, max 100 chars)
type	string	no	Optional type hint: ISBN-10, ISBN-13, JAN-13, EAN-13, or UPC-A

[security] Luhn（mod 10）チェックディジット検証（クレジットカード・IMEI等） / Validates Luhn check digits for credit cards, IMEI, and similar identifiers. [use_cases: validation, ecommerce]

Parameter	Type	Required	Notes
value	string	yes	Number to validate (hyphens and spaces optional, max 200 chars)
format	string	no	Optional format hint for digit-count validation (default: generic)

[security] HMAC署名の生成・検証（SHA-256/512/1/MD5・timing-safe compare） / Generates or verifies HMAC signatures for common hash algorithms. [use_cases: security, crypto]

Parameter	Type	Required	Notes
mode	string	yes	sign to generate a signature, verify to compare one
algorithm	string	yes	HMAC algorithm
secret	string	yes	Secret key for HMAC (max 64KB)
message	string	yes	Message to sign or verify (max 64KB)
encoding	string	no	Output encoding (default: hex)
signature	string	no	Signature to verify (required when mode is verify)

[security] RFC 6238準拠のTOTPコード生成・検証（2FA向け・HMAC-SHA1。任意のtimestampで評価時刻を固定可。QR/otpauthはスコープ外） / Generates or validates RFC 6238 TOTP (time-based one-time password) codes for 2FA implementations. Exact HMAC-SHA1 computation and time-step math are error-prone for LLMs to do by hand. Optional timestamp (UNIX seconds) overrides evaluation time for deterministic tests. QR code / otpauth:// URI generation

Parameter	Type	Required	Notes
action	string	yes	generate a TOTP code, or validate a user-supplied code
secret	string	yes	Shared secret in Base32 encoding (A-Z, 2-7; padding/spaces/lowercase allowed). Never returned in responses.
code	string	no	TOTP code to verify (required when action is validate; digit count must match digits)
period	integer	no	Time-step size in seconds (default: 30)
digits	integer	no	Code length: 6, 7, or 8 (default: 6)
window	integer	no	Allowed time-step skew when validating (±N steps). Default 1 allows about ±30s with period=30. Max 10.
timestamp	number	no	UNIX time in seconds to evaluate (optional). Omit to use the current time. Useful for RFC 6238 test vectors and deterministic replay.

[convert] CSVとJSONの相互変換（ヘッダー・区切り文字・UTF-8 BOM対応・最大1MB） / Converts CSV to JSON or JSON to CSV with delimiter and header options. [use_cases: data_conversion]

Parameter	Type	Required	Notes
input	string	yes	変換するデータ（CSVまたはJSON文字列・最大1MB）
from	string	yes	変換元形式
to	string	yes	変換先形式
has_header	boolean	no	CSVの1行目をヘッダーとして扱う（デフォルト: true）
delimiter	string	no	CSVの区切り文字（デフォルト: カンマ）
bom	boolean	no	CSV出力時にUTF-8 BOM（U+FEFF）を先頭に付与する（デフォルト: false）。Excelで開く場合は true を推奨

[convert] YAMLとJSONの相互変換（JSON出力時のインデント指定・最大1MB） / Converts between YAML and JSON deterministically. [use_cases: data_conversion]

Parameter	Type	Required	Notes
input	string	yes	変換するデータ（YAMLまたはJSON文字列・最大1MB）
from	string	yes	変換元形式
to	string	yes	変換先形式
indent	integer	no	JSON出力時のインデント数（0〜10・デフォルト: 2）

[convert] TOMLとJSONの相互変換（ネストテーブル・テーブル配列対応・最大1MB） / Converts between TOML and JSON. [use_cases: data_conversion]

Parameter	Type	Required	Notes
input	string	yes	String to convert (TOML or JSON text, max 1MB)
direction	string	yes	Conversion direction: to_json parses TOML to JSON; to_toml serializes JSON to TOML
indent	integer	no	JSON output indentation when direction is to_json (0–8, default 2)

[convert] XMLとJSONの相互変換（属性プレフィックス・ネスト要素対応・最大1MB） / Converts between XML and JSON. [use_cases: data_conversion]

Parameter	Type	Required	Notes
input	string	yes	String to convert (XML or JSON text, max 1MB)
direction	string	yes	Conversion direction: to_json parses XML to JSON; to_xml serializes JSON to XML
indent	integer	no	Output indentation (0–8, default 2). JSON spacing when to_json; XML indent when to_xml
attribute_prefix	string	no	Attribute key prefix when direction is to_json (default @)

[convert] Base64エンコード/デコード（URL-safe対応・UTF-8/hex/base64入力） / Encodes or decodes Base64 with optional URL-safe mode and input encodings. [use_cases: data_conversion]

Parameter	Type	Required	Notes
data	string	yes	String to encode or decode (max 512KB)
direction	string	yes	Processing direction: encode or decode
url_safe	boolean	no	Use URL-safe Base64 (+ → -, / → _, strip padding on encode)
input_encoding	string	no	Input encoding when direction is encode (default: utf8)

[convert] URLパーセントエンコード/デコード（component=encodeURIComponent / uri=encodeURI・不正%シーケンスは明確なエラー） / Encodes or decodes URL percent-encoding (encodeURIComponent/decodeURIComponent or encodeURI/decodeURI). Handles multi-byte UTF-8 characters (e.g. Japanese) correctly and returns a clear error on malformed percent-sequences instead of throwing. [use_cases: data_conversion]

Parameter	Type	Required	Notes
text	string	yes	String to encode or decode (max 100,000 characters). Empty string is allowed.
direction	string	yes	Processing direction: encode or decode
component	string	no	Encoding scope (default: component). "component" uses encodeURIComponent/decodeURIComponent and encodes reserved characters such as ?, =, &, /, #. "uri" uses encodeURI/decodeURI and preserves URL stru

[convert] JSONハブで CSV/YAML/TOML/XML/Base64 を相互変換（convert_csv 等の統合代替） / Convert between JSON and CSV, YAML, TOML, XML, or Base64 in one tool. All conversions go through JSON (no direct csv→yaml). Can replace convert_csv, convert_yaml, convert_toml, convert_xml, and JSON↔Base64 workflows. Consolidates per-format conversion tools into a single interface; individual tools remain available for now. [us

Parameter	Type	Required	Notes
data		yes	Data to convert (string for to_json; JSON object or string for from_json)
format	string	yes	Target format: csv, yaml, toml, xml, or base64
direction	string	yes	to_json: parse format string to JSON; from_json: serialize JSON to format string
options	object	no	Format-specific options (has_header, delimiter, bom, indent, attribute_prefix, url_safe, etc.)

[utility] 数式・計算式の安全な評価（mathjs・変数バインディング・精度指定） / Safely evaluates mathematical expressions with optional variables. [use_cases: dev]

Parameter	Type	Required	Notes
expression	string	yes	Mathematical expression to evaluate (max 500 characters)
variables	object	no	Optional variable bindings for the expression
precision	integer	no	Decimal places for numeric results (0–15, optional)

[utility] 日本の消費税計算（標準10%・軽減8%・端数処理・複数品目合算・税抜↔税込変換） / Calculates Japanese consumption tax with configurable rates, rounding, and multi-item totals. [use_cases: accounting, billing]

Parameter	Type	Required	Notes
amount	number	no	Single amount in yen (mutually exclusive with items)
rate	number	no	Tax rate in percent (default: 10). Used as fallback when item.rate is omitted.
rounding	string	no	Rounding mode for tax amounts (default: floor)
direction	string	no	exclusive_to_inclusive: net→gross (default). inclusive_to_exclusive: gross→net.
items	array	no	Multiple line items with optional per-item rates (mutually exclusive with amount)

[utility] ローン返済計算（元利均等・元金均等・返済計画表・円単位端数調整） / Calculates loan repayment (equal payment or equal principal method), including monthly breakdown of principal/interest. LLMs frequently make rounding errors in compound interest math; this returns exact yen-rounded figures with correct final-month adjustment. [use_cases: finance, billing]

Parameter	Type	Required	Notes
principal	number	yes	Loan principal amount in yen (must be positive)
annual_rate	number	yes	Annual interest rate in percent (e.g. 3.5 means 3.5% per year, not 0.035)
term_months	integer	yes	Repayment term in months (1–600; 600 = 50 years)
method	string	no	equal_payment = fixed monthly payment (元利均等, default). equal_principal = fixed monthly principal (元金均等; payment varies by month).
include_schedule	boolean	no	When true, include the full amortization schedule. Omitted / false returns summary totals only (default: false).

[utility] Semverバージョン比較・ソート・レンジ判定 / Compares semantic version strings and reports ordering. [use_cases: dev]

Parameter	Type	Required	Notes
versions	array	no	List of versions to sort and find latest from (max 100 items)
compare	string	no	Source version for comparison (must be paired with against)
against	string	no	Target version for comparison (must be paired with compare)
include_prerelease	boolean	no	Include prerelease versions in sorted/latest (default: false)
satisfies	object	no	Map of range pattern to version to check (key=range, value=version)

[utility] ページネーション計算（offset/limit/from/to/page_range 等を一括算出） / Calculates pagination offsets, page counts, and slice boundaries. [use_cases: dev]

Parameter	Type	Required	Notes
total_items	integer	yes	Total number of items across all pages
current_page	integer	yes	Current page number (1-based). Named current_page because some MCP clients reject a property named page.
per_page	integer	no	Items per page (default: 20)
window_size	integer	no	Number of page numbers to include in page_range (default: 5)

[network] ドメインのDNSレコード取得（A / AAAA / CNAME / MX / TXT / NS・type=all対応） / Resolves DNS records (A, AAAA, MX, TXT, etc.) for a domain or hostname. [use_cases: network]

Parameter	Type	Required	Notes
domain	string	yes	検索するドメイン名（例: example.com）
type	string	no	レコードタイプ（デフォルト: all）

[network] IPv4 CIDR/IPレンジ計算（ネットワーク・ブロードキャスト・マスク・ホスト数） / Calculates network address, broadcast, host range, and subnet details from CIDR notation. [use_cases: network]

Parameter	Type	Required	Notes
cidr	string	yes	IPv4 CIDR notation (e.g. "192.168.1.0/24")

[network] 指定IPv4が複数CIDRレンジに含まれるかをビット演算で判定。calc_cidrでレンジ情報取得→check_ip_in_rangeでIP判定の連携が可能。セキュリティグループルール検証・VPC設計支援向け / Checks whether an IPv4 address falls within one or more CIDR blocks using bit-mask arithmetic. [use_cases: network]

Parameter	Type	Required	Notes
ip	string	yes	IPv4 address to check (e.g. "192.168.1.100")
ranges	string	yes	Comma-separated CIDR notations, max 100 (e.g. "192.168.1.0/24,10.0.0.0/8")

[network] ドメイン名のRFC 1035/1123形式検証（ラベル・TLD・IDN/Punycode）。DNS解決は行わない（解決はnetwork.dns_lookup）。tldは末尾ラベルのみ（PSL非対応） / Validates whether a string is a well-formed domain name per RFC 1035/1123 (label length, character set, IDN/Punycode). Format validation only — does NOT perform DNS resolution (use network.dns_lookup for that). TLD field is the raw last label, not a public-suffix-list-aware effective TLD

Parameter	Type	Required	Notes
domain	string	yes	Domain name to validate (e.g. "example.com", "例え.com"). Format check only — does not resolve DNS (use network.dns_lookup for lookup).

[network] 外部URLへHTTPリクエストを送信しレスポンスを返す。GET/POST/PUT/PATCH/DELETE/HEAD対応。認証付きAPI呼び出し向け。Starterプラン以上が必要 / Send an HTTP request to an external URL and return the response. Supports GET/POST/PUT/PATCH/DELETE/HEAD methods with custom headers and body. Useful for calling authenticated APIs on behalf of the agent. Requires Starter plan or above. [use_cases: network]

Parameter	Type	Required	Notes
url	string	yes	Request URL (http:// or https:// only)
method	string	no	HTTP method (default: GET)
headers	object	no	Optional request headers (Host, X-Forwarded-* are stripped)
body	string	no	Optional request body for POST/PUT/PATCH
timeout_ms	integer	no	Request timeout in milliseconds (default: 10000, max: 30000)

[data] JSONPathクエリでJSONデータから値を抽出（フィルタ式対応・最大1MB） / Extracts values from JSON using JSONPath, including filter expressions. [use_cases: json_validation, data_extraction]

Parameter	Type	Required	Notes
json		yes	クエリ対象のJSONデータ（オブジェクト・配列・最大1MB）
query	string	yes	JSONPathクエリ（例: $.users[*].name / $.items[?(@.price < 100)].name）

[data] 数値配列の統計値を計算（平均・中央値・最頻値・分散・標準偏差・パーセンタイル・最大1000要素） / Computes mean, median, standard deviation, percentiles, and related stats for numeric arrays. [use_cases: data_extraction, analytics]

Parameter	Type	Required	Notes
values	array	yes	統計計算する数値配列（最大1000要素）

[data] IPv4/IPv6/CIDR・メール・URL・クレジットカード・日本の電話番号の形式検証 / Validates IPv4/IPv6/CIDR, email, URL, credit card, and Japanese phone formats. [use_cases: validation, schema_check]

Parameter	Type	Required	Notes
type	string	yes	バリデーションの種類
value	string	yes	バリデーションする値

[convert] データサイズ単位変換（SI 1000進 / binary 1024進を一括換算） / Converts data sizes between SI (1000-based) and binary (1024-based) units. [use_cases: data_conversion]

Parameter	Type	Required	Notes
value	number	yes	Numeric value to convert
from	string	yes	Source data size unit

[convert] 数値のロケール別フォーマット（通貨・パーセント・単位付き） / Formats numbers with locale, currency, percent, and precision options. [use_cases: data_conversion]

Parameter	Type	Required	Notes
value	number	yes	フォーマットする数値
locale	string	no	ロケール（例: ja-JP / en-US / de-DE・デフォルト: en-US）
style	string	no	フォーマットスタイル（デフォルト: decimal）
currency	string	no	通貨コード（style=currencyの場合必須例: JPY / USD / EUR）
unit	string	no	単位（style=unitの場合必須例: kilometer / celsius / byte）
minimum_fraction_digits	integer	no	小数点以下の最小桁数（0〜20）
maximum_fraction_digits	integer	no	小数点以下の最大桁数（0〜20）

[text] 日本語テキストをひらがな・カタカナ・ローマ字に変換（kuromoji） / Converts Japanese text between hiragana, katakana, and half-width forms. [use_cases: text_processing]

Parameter	Type	Required	Notes
text	string	yes	変換する日本語テキスト（最大1000文字）
to	string	yes	変換先（hiragana: ひらがな / katakana: カタカナ / romaji: ローマ字）

[text] テキスト（日本語含む）をURLセーフなスラッグに変換（ヘボン式ローマ字化 + 正規化） / Generates URL-safe slugs from text with locale-aware rules. [use_cases: text_processing]

Parameter	Type	Required	Notes
text	string	yes	Text to slugify (max 1000 characters)
locale	string	no	Locale (default: ja). Use ja to romanize Japanese first; en or other skips romanization.
separator	string	no	Word separator (default: -)
max_length	integer	no	Maximum slug length (1–200)
lowercase	boolean	no	Lowercase the slug (default: true)

[datetime] 指定タイムゾーンの現在日時（ISO / Unix / 曜日・デフォルト: Asia/Tokyo） / Returns the current date and time in a given IANA timezone for accurate "today" calculations. [use_cases: timezone, scheduling]

Parameter	Type	Required	Notes
timezone	string	no	IANAタイムゾーン（例: Asia/Tokyo・デフォルト: Asia/Tokyo）
format	string	no	返却フォーマット（デフォルト: all）

[datetime] 2つの日時の差分を年・月・週・日・時間・分・秒で計算（デフォルト: Asia/Tokyo） / Calculates the difference between two datetimes in multiple units. [use_cases: timezone, scheduling]

Parameter	Type	Required	Notes
from	string	yes	開始日時（ISO8601形式例: 2026-01-01T00:00:00Z）
to	string	yes	終了日時（ISO8601形式）
timezone	string	no	タイムゾーン（例: Asia/Tokyo・デフォルト: Asia/Tokyo）

[datetime] 絶対日時を「3時間前」「昨日」等の相対・自然言語表現に変換（7日超は絶対日付） / Formats an absolute datetime as locale-aware relative phrases like "3 hours ago", with absolute-date fallback beyond 7 days. [use_cases: timezone, scheduling, localization]

Parameter	Type	Required	Notes
datetime	string	yes	対象日時（ISO 8601）
reference	string	no	基準日時（ISO 8601・省略時はサーバー現在時刻）
locale	string	no	BCP 47 ロケール（デフォルト: ja-JP）
style	string	no	相対表現のスタイル（デフォルト: long）
timezone	string	no	IANA タイムゾーン（7日超フォールバック時の日付表示用・デフォルト: Asia/Tokyo）

[datetime] 和暦↔西暦変換（明治・大正・昭和・平成・令和、元号境界日対応） / Converts between Japanese era names and Gregorian dates. [use_cases: calendar, localization]

Parameter	Type	Required	Notes
direction	string	yes	Conversion direction
era	string	no	Era name (reiwa/heisei/showa/taisho/meiji or Japanese labels). Required for to_gregorian
era_year	integer	no	Era year (1-based; year 1 = 元年). Required for to_gregorian
month	integer	no	Month (1-12, default 1). Used for to_gregorian
day	integer	no	Day (1-31, default 1). Used for to_gregorian
date	string	no	Gregorian date YYYY-MM-DD. Required for to_japanese_era

[datetime] ISO 8601 Duration のパース・フォーマット（PT1H30M ↔ 成分・秒数） / Converts ISO 8601 duration strings to and from human-readable forms. [use_cases: scheduling, data_conversion]

Parameter	Type	Required	Notes
direction	string	yes	Conversion direction
duration	string	no	ISO 8601 duration string. Required when direction is parse
days	number	no	Days component. Used when direction is format
hours	number	no	Hours component. Used when direction is format
minutes	number	no	Minutes component. Used when direction is format
seconds	number	no	Seconds component (decimals allowed, max 3 places). Used when direction is format
years	number	no	Years component (calendar-dependent). Used when direction is format with include_months_years
months	number	no	Months component (calendar-dependent). Used when direction is format with include_months_years
include_months_years	boolean	no	Allow calendar-dependent years/months (approximate: 1 year = 365 days, 1 month = 30 days). Default false

[text] 文字列ケース変換（camel / snake / kebab / pascal 等・入力ケース自動検出・to=all 対応） / Converts string case (camelCase, snake_case, kebab-case, etc.). [use_cases: text_processing]

Parameter	Type	Required	Notes
text	string	yes	変換する文字列（例: helloWorld / hello_world / hello-world）
to	string	yes	変換先ケース。"all"で全ケースを一括取得。

[text] 暗号学的に安全なランダム文字列生成（文字セット・長さ・個数指定） / Generates random strings with configurable charset and length. [use_cases: text_processing]

Parameter	Type	Required	Notes
length	integer	no	文字数（デフォルト: 16・最大: 128）
charset	string	no	文字セット（デフォルト: alphanumeric）
count	integer	no	生成する個数（デフォルト: 1・最大: 10）

[data] JSON文字列のパース・JSON Schema（Draft-07）検証・構文エラーの自動修復 / Parses JSON and optionally validates against Draft-07 JSON Schema with optional auto-repair. [use_cases: json_validation, schema_check]

Parameter	Type	Required	Notes
json_str	string	yes	検証するJSON文字列
schema	object	no	JSON Schemaオブジェクト（省略時はパースのみ）
auto_repair	boolean	no	構文エラーの自動修復（デフォルト false）

[data] パース済みJSONデータの本格的なJSON Schema（Draft-07）検証（format/pattern/min-max等・schema_path付きエラー）。data.validate_json（構文チェック+自動修復）とは別。2段階: validate_json→validate_schema / Validate Schema. Structured data validation, query, and transformation. [use_cases: data_processing]

Parameter	Type	Required	Notes
data		yes	JSON data to validate (any JSON value; null is allowed)
schema	object	yes	JSON Schema object (Draft-07)
all_errors	boolean	no	Return all validation errors (default false: first error only)

[data] JSON/UUID/Luhn/バーコードを type で指定して統合検証（個別 validate_* の代替） / Unified validation for JSON, UUID, Luhn checksum, and barcodes (ISBN/JAN/UPC). Specify type and value; pass type-specific options (schema, format, type hint). Can replace validate_json, validate_uuid, validate_luhn, and validate_barcode. Consolidates per-type validators into one interface; individual tools remain available for now. [

Parameter	Type	Required	Notes
type	string	yes	Validation target: json, uuid, luhn, or barcode
value	string	yes	Value to validate
options	object	no	Type-specific options (schema, auto_repair, format, type/barcode hint)

[data] JSONオブジェクトのdeep mergeまたはRFC 6902 JSON Patch適用（変更キー一覧付き） / Deep-merges two JSON objects or applies RFC 6902 JSON Patch operations. [use_cases: json_validation, workflow]

Parameter	Type	Required	Notes
mode	string	yes	merge: deep merge two objects; patch: RFC 6902 JSON Patch
base		yes	Base JSON value (object for merge mode; any JSON for patch mode)
patch	object	no	Object to merge into base (required when mode is merge)
array_strategy	string	no	How to merge arrays in merge mode (default replace)
null_overwrites	boolean	no	Whether patch null overwrites base values (default true)
operations	array	no	RFC 6902 operations (required when mode is patch)

[data] 2つの配列を比較し added / removed / unchanged を返す（プリミティブ配列・key指定オブジェクト配列・順序無視比較） / Compares two arrays and returns added, removed, and unchanged elements. [use_cases: data_extraction, workflow]

Parameter	Type	Required	Notes
before	array	yes	Source array to compare from
after	array	yes	Target array to compare to
key	string	no	Object key field for ID-based comparison (omit for primitive arrays)
ignore_order	boolean	no	Compare as sets ignoring element order (default false)

[data] JSONオブジェクト配列を複数キー・昇順/降順混在で安定ソート（ドット記法のネストキー対応・欠損/null/型不一致は末尾） / Sorts an array of JSON objects by one or more keys, with independent ascending/descending order per key. Uses a stable sort, so LLMs no longer need to hand-write multi-key comparator logic (a common source of bugs). [use_cases: data_processing, workflow]

Parameter	Type	Required	Notes
items	array	yes	Array of JSON objects to sort (max 1000 elements)
sort_keys	array	yes	Sort keys evaluated in order; earlier keys take precedence, later keys break ties

[convert] URLから画像を取得しWebP/JPEG/PNG/AVIF変換・リサイズ・圧縮（MCPはimageコンテンツ返却。return: metadata_onlyでコンテキスト節約可） / Fetches an image from a URL and converts format, resizes, or compresses it to Base64. [use_cases: media, data_conversion]

Parameter	Type	Required	Notes
url	string	yes	HTTPS URL of the source image
format	string	no	Output format (default: webp)
width	integer	no	Target width in pixels
height	integer	no	Target height in pixels
quality	integer	no	Compression quality for webp/jpeg/avif (default: 80)
fit	string	no	Resize fit mode when width and/or height are set (default: inside)
return	string	no	full: 画像データを含む完全なレスポンス（デフォルト）。metadata_only: サイズ・形式等のメタデータのみ（コンテキスト節約）

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install Thousand API or to call it, at any volume.

CTool-list grade · score 78 / 100

Release 1.2.0 · scanned 23 Oct 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score85

Client score78

Findings1 threat · 6 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digest1dec8a4f3a53498bb354a13dc42eea6456adca92c162a518dc3e2f8fb9c3fa4b

Score vectorthreat 85 → client 78

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
utility.search_tools	no tags
utility.get_tool_schema	no tags
utility.get_usage	no tags
utility.diagnose_mcp	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
data.execute_batch	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
datetime.get_holidays	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
datetime.get_calendar_month	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
datetime.is_holiday	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
datetime.add_business_days	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
datetime.add_calendar_days	no tags
datetime.generate_test_dates	no tags
datetime.check_business_hours	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
datetime.check_custom_holidays	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
datetime.calc_schedule	no tags
datetime.get_cron_next	no tags
datetime.parse_laravel_schedule	no tags
network.get_exchange_rate	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
network.lookup_postal_code	no tags
network.get_page_meta	untrusted-input	untrusted-input: keyword "get_page", declares openWorldHint: true (interacts with entities outside the server)
utility.get_distance	no tags
utility.convert_coordinates	no tags
convert.get_qrcode	no tags
network.get_ip_info	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
text.extract_text_from_html	no tags
text.get_text_stats	no tags
text.estimate_tokens	no tags
text.split_text	no tags
text.mask_pii	no tags
text.diff_text	no tags
text.diff_markdown_tables	no tags
text.calc_text_similarity	no tags
network.resolve_url	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
convert.markdown	no tags
utility.generate_color_palette	no tags
utility.calc_color_contrast	no tags
convert.color	no tags
network.inspect_url	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
security.decode_jwt	no tags
convert.unit	no tags
security.generate_hash	no tags
security.generate_uuid	no tags
security.validate_uuid	no tags
security.validate_barcode	no tags
security.validate_luhn	no tags
security.generate_hmac	no tags
security.generate_totp	no tags
convert.csv	no tags
convert.yaml	no tags
convert.toml	no tags
convert.xml	no tags
convert.base64	no tags
convert.url_encoding	no tags
convert.format	no tags
utility.calc_expression	no tags
utility.calc_tax	no tags
utility.calc_loan	no tags
utility.compare_versions	no tags
utility.calc_pagination	no tags
network.dns_lookup	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
network.calc_cidr	no tags
network.check_ip_in_range	no tags
network.check_domain_format	no tags
network.http_fetch	untrusted-inputexternal-sink	untrusted-input: keyword "fetch"; external-sink: keyword "http_request", declares readOnlyHint: false, openWorldHint: true
data.query_json	no tags
data.calc_stats	no tags
data.validate_format	no tags
convert.data_size	no tags
convert.format_number	no tags
text.convert_japanese	no tags
text.generate_slug	no tags
datetime.get_current_datetime	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
datetime.calc_datetime_diff	no tags
datetime.format_relative_time	no tags
datetime.convert_japanese_era	no tags
datetime.convert_iso_duration	no tags
text.convert_string_case	no tags
text.generate_random_string	no tags
data.validate_json	no tags
data.validate_schema	no tags
data.validate_all	no tags
data.merge_json	no tags
data.diff_arrays	no tags
data.sort_json	no tags
convert.transform_image	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

flow-1

Untrusted input can drive an external action even though no sensitive source is exposed.

Supply chain and provenance

Integrityfirst-seen

Surface digest1dec8a4f3a53498b

Scanned2026-10-23

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.