Name: Vera
Author: waggle

Vera MCP

Scrape, search and extract the public web. 3,000 free credits at https://vera.waggle.ae/signup

Tool-list grade A Remote · Streamable HTTP API key 8 tools v0.2.0

No reviews yet by waggle The publisher’s own endpoint — this marketplace is not in the path

93/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Scrape, search and extract the public web. 3,000 free credits at https://vera.waggle.ae/signup

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http waggle-vera-mcp https://vera.waggle.ae/v1/mcp --header 'Authorization: Bearer ${AUTHORIZATION}'

# 2 — ask your agent for something these tools do
#   scrape, search, extract_contacts and 5 more

It needs AUTHORIZATION (Your Vera API key as a Bearer token. Create a key, with 3,000 free credits, at https://vera.waggle.ae/signup): this sends it in the Authorization header from your environment, so export it first — its endpoint answers 401 without it.

Vera costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

waggle3 servers

3 categories

All 3 servers

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Installation

Where are you running it?

Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.

Claude Codedeclared by this listing

This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it. Claude Code reads AUTHORIZATION (Your Vera API key as a Bearer token. Create a key, with 3,000 free credits, at https://vera.waggle.ae/signup) from your environment each time it connects and sends it in the Authorization header — its endpoint answers 401 without it — so the key stays out of its config: export it in your shell profile (macOS, Linux), or run setx AUTHORIZATION … and open a new terminal (Windows).

claude mcp add --scope user --transport http waggle-vera-mcp https://vera.waggle.ae/v1/mcp --header 'Authorization: Bearer ${AUTHORIZATION}'

Reconnect, or start a new session, and the tools appear in the model’s tool list.

Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add — but its publisher asks for a key of their own on every call.

What it asks of you

It reaches a system of yours, so it needs your own credential rather than the publisher’s: Authorization header — Your Vera API key as a Bearer token. Create a key, with 3,000 free credits, at https://vera.waggle.ae/signup.. You set it in your own client’s config, on your machine — this marketplace never holds it.

What it writes

One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.

What you approve

8 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Read one public web page and return its content: the main text (as Markdown with response_format="markdown"), links, metadata and a quality score, plus the raw HTML if you ask (return_html). Set render=true for pages that build their content with JavaScript, or mode="auto" to render only when a plain fetch comes back empty. extract pulls named fields out with CSS selectors. Costs 1 credit for a pl

Parameter	Type	Required	Notes
url	string	yes	The full public http(s) address of the page.
response_format	string	no	Use "markdown" to get the page's main content as Markdown in data.markdown, the best form for reading or summarising. "all" (the default) and "text" return the standard fields: text, links, metadata a
return_html	boolean	no	Also return the page's raw HTML in data.html (up to 2 MB). Not with extract.
render	boolean	no	Run the page's JavaScript in a browser first, for pages that build their content in the browser. Costs more.
wait_ms	integer	no	Milliseconds to wait after the page loads. Needs render=true.
wait_for	string	no	A CSS selector to wait for before reading. Needs render=true.
extract	object	no	Named fields to pull out with a CSS selector, for example {"heading":{"selector":"h1"},"links":{"selector":"a","attribute":"href", "multiple":true}}. One tag, class, ID or attribute selector each. Sta
mode	string	no	"manual" (the default) does what render says. "auto" fetches the page plainly and renders it only when it looks empty; it holds up to max_cost credits and charges what it used.
max_cost	integer	no	With mode=auto, the most to spend: 1 never renders, 5 may render.
min_quality_score	integer	no	Refuse the page, at no charge, when its quality score is below this.
country	string	no	Two-letter country code for the language headers of the request, for example ae or gb. It does not route the request through that country.
idempotency_key	string	no	Optional. Send the same key (16 to 128 letters, digits, _ . : -) to retry this exact call safely: a retry within 24 hours returns the first result and is not charged again.

Search Google and return the results: titles, URLs and snippets, plus Google's own answer boxes, People Also Ask and related searches when it shows them. vertical picks web (the default), news or videos. Returns up to 100 results per call (10 by default), with country and language. Costs 3 credits per call whatever the vertical or limit; a failed search costs nothing. Results are links and snippet

Parameter	Type	Required	Notes
query	string	yes	What to search for. Quoted phrases and site: operators are kept.
vertical	string	no	"web" (the default), "news" or "videos".
country	string	no	Two lowercase letters for the search market, for example us, gb or ae (default "us").
language	string	no	Two lowercase letters for the result language, for example en or ar (default "en").
limit	integer	no	How many results to return (10 by default). The price is the same whatever the number.
idempotency_key	string	no	Optional. Send the same key (16 to 128 letters, digits, _ . : -) to retry this exact call safely: a retry within 24 hours returns the first result and is not charged again.

Read one public page and return the contact details it publishes: email addresses, phone numbers, social profile links and links to contact pages, each with where it was found. Published details are not verified, and linked pages are not followed (call this tool again for one). Costs 1 credit; a failed call costs nothing.

Parameter	Type	Required	Notes
url	string	yes	The full public http(s) address of the page.
idempotency_key	string	no	Optional. Send the same key (16 to 128 letters, digits, _ . : -) to retry this exact call safely: a retry within 24 hours returns the first result and is not charged again.

Read one public product page and return the product data it publishes in its structured markup: name, brand, SKU or GTIN, and offers with price, currency and availability. Prices are what the page states, never guessed. Set marketplace to amazon, walmart or shopee for those product pages. Costs 1 credit; a failed call costs nothing.

Parameter	Type	Required	Notes
url	string	yes	The full public http(s) address of the product page.
marketplace	string	no	Set to "amazon", "walmart" or "shopee" for a product page on that marketplace.
idempotency_key	string	no	Optional. Send the same key (16 to 128 letters, digits, _ . : -) to retry this exact call safely: a retry within 24 hours returns the first result and is not charged again.

Return the transcript of one public YouTube video as text. Costs 6 credits per started minute of video (a 10-minute video costs 60), up to 45 minutes. A video that cannot be transcribed, or any failure, costs nothing.

Parameter	Type	Required	Notes
url	string	yes	The link of a public YouTube video, like https://www.youtube.com/watch?v=...
idempotency_key	string	no	Optional. Send the same key (16 to 128 letters, digits, _ . : -) to retry this exact call safely: a retry within 24 hours returns the first result and is not charged again.

Given a company's domain, read its homepage and up to 3 standard pages (about, contact, team) and return a profile: name, description, logo, address, founding date, emails, phones and social links, as the company publishes them. Costs 1 credit for each page read, at most 5 credits (that many are held while it runs and the unused ones are given back); a failed call costs nothing.

Parameter	Type	Required	Notes
domain	string	yes	The company's domain or website address, for example example.com.
idempotency_key	string	no	Optional. Send the same key (16 to 128 letters, digits, _ . : -) to retry this exact call safely: a retry within 24 hours returns the first result and is not charged again.

Read a site's sitemap.xml (or a sitemap index) and return the page addresses it lists, up to limit (100 by default), optionally only those containing some text. Costs 1 credit; a failed call costs nothing.

Parameter	Type	Required	Notes
url	string	yes	The address of the sitemap.xml, or of a sitemap index.
limit	integer	no	How many page addresses to return (100 by default).
filter_pattern	string	no	Keep only addresses that contain this text.
idempotency_key	string	no	Optional. Send the same key (16 to 128 letters, digits, _ . : -) to retry this exact call safely: a retry within 24 hours returns the first result and is not charged again.

Audit one public page's technical SEO and how ready it is for AI search: title, description, canonical, robots and indexing directives, headings, links, images, structured data and a score. Costs 1 credit, or 5 credits with render=true (audited after its JavaScript runs); a failed call costs nothing.

Parameter	Type	Required	Notes
url	string	yes	The full public http(s) address of the page.
render	boolean	no	Audit the page after its JavaScript has run. Costs more.
country	string	no	Two-letter country code for the language headers of the request, for example ae or gb. It does not route the request through that country.
idempotency_key	string	no	Optional. Send the same key (16 to 128 letters, digits, _ . : -) to retry this exact call safely: a retry within 24 hours returns the first result and is not charged again.

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install Vera or to call it, at any volume.

ATool-list grade · score 93 / 100

Release 0.2.0 · scanned 28 Oct 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score93

Findings0 threat · 6 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digest758b32a172933b41296cf595a780b16ceb3ac309ce136987eef2d2d53e09e589

Score vectorthreat 100 → client 93

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
scrape	untrusted-input	untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server)
search	untrusted-input	untrusted-input: keyword "scrape", declares openWorldHint: true (interacts with entities outside the server)
extract_contacts	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
extract_products	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
youtube_transcript	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
company_profile	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
sitemap	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
seo_audit	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.

Supply chain and provenance

Integrityfirst-seen

Surface digest758b32a172933b41

Scanned2026-10-28

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.