MCP Server for Z.AI - A Model Context Protocol server that provides AI capabilities
YourAITools MCP Hub is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
What it does
All 20 YourAITools agent APIs in one MCP server. Most tools free; pay with credits or x402.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http youraitools-mcp-hub https://api.youraitools.co/mcp/hub
# 2 — ask your agent for something these tools do
# check_agent, read_url, scan_text and 28 more
YourAITools MCP Hub costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http youraitools-mcp-hub https://api.youraitools.co/mcp/hubReconnect, or start a new session, and the tools appear in the model’s tool list.
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
31 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Check whether an AI agent is registered in the Concordium Agent Registry (CIS-8004), Active (not revoked), and Verified by Concordium (its Agent Card hash matches the on-chain metadata_hash). Accepts a badge (CIS-2 token address, e.g. Mf22soLh1NuZYFgBK8iSs, or CAIP-19 form) or a Concordium owner account address. Free tier: returns the verdict; the full record is available from the paid x402 endpoi
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | Badge (CIS-2 token address, short or CAIP-19 form) or Concordium account address |
| network | string | no | Concordium network |
| tier | string | no | Paid tier: check $0.005. Omit tier (with no credits key or x402 payment) to use the free tier. |
Fetches one public web page and returns its main content as clean Markdown (navigation, scripts, ads and boilerplate removed; links made absolute) plus title and metadata. Use it whenever your agent needs to read, quote or summarize a page. Respects robots.txt, refuses private/internal hosts and non-default ports, follows redirects, and handles HTML, plain text and Markdown (no JavaScript renderin
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Absolute http:// or https:// URL of a public page, e.g. "https://example.com/docs/intro". Private, loopback and internal addresses, embedded credentials and ports other than 80/443 are refused. |
| maxChars | integer | no | Maximum Markdown characters to return, 100-200,000 (default 50000). Longer content is cut and truncated is set to true. |
| tier | string | no | Paid tier: read $0.002. Omit tier (with no credits key or x402 payment) to use the free tier. |
Scans untrusted text for prompt injection before your agent reads or acts on it: web page text, emails, documents, tool results or another agent's message. Flags instruction overrides, jailbreak personas, system-prompt extraction, fake delimiters, exfiltration URLs, tool hijacking, hidden Unicode and encoded payloads (deterministic rules). Use scan_url when you only have a link (it also checks hid
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | The untrusted text to scan, as one plain string (1-100000 characters; longer text is truncated and flagged). Offsets in findings refer to this string. |
| tools | array | no | (paid calls only) |
| url | string | no | (paid calls only) |
| tier | string | no | Paid tier: scan $0.003. Omit tier (with no credits key or x402 payment) to use the free tier. |
Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection, before your agent browses or summarizes it. Use scan_text if you already have the content and scan_tools for MCP tool definitions. Respects robots.txt and refuses private/internal hosts. Free: 30 calls/day per IP shared by scan_text, scan_url and scan_tools, w
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Absolute http:// or https:// URL of a public web page, e.g. "https://example.com/post". Private, loopback and internal hosts are refused; robots.txt is respected. |
| text | string | no | (paid calls only) |
| tools | array | no | (paid calls only) |
| tier | string | no | Paid tier: scan $0.003. Omit tier (with no credits key or x402 payment) to use the free tier. |
Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and schemas) before your agent installs or calls them. Use scan_text for ordinary content and scan_url for web pages. Up to 100 tools per call. Free: 30 calls/day per IP shared by scan_text, scan_url and scan_tools, with full results (max 10/min
| Parameter | Type | Required | Notes |
|---|---|---|---|
| tools | array | yes | 1-100 tool definitions as objects {name, description, inputSchema} (as returned by an MCP server's tools/list; input_schema or parameters are also read). Every string field, including nested schema de |
| text | string | no | (paid calls only) |
| url | string | no | (paid calls only) |
| tier | string | no | Paid tier: scan $0.003. Omit tier (with no credits key or x402 payment) to use the free tier. |
Check a domain before your agent trusts a link, a sender or a counterparty: does it exist, where does its mail go, SPF and DMARC policy, nameservers, DNSSEC. Free tier (preview). For registration age, registrar, parking detection and a 0-100 risk score use the paid x402 endpoint /v1/domain. [DomainCheck via YourAITools MCP Hub] Free tier: same as DomainCheck's own MCP server (call without payment
| Parameter | Type | Required | Notes |
|---|---|---|---|
| domain | string | yes | Domain, URL or email address |
| tier | string | no | Paid tier: domain $0.002. Omit tier (with no credits key or x402 payment) to use the free tier. |
Check an email address an agent is about to store, email or trust: syntax, disposable / throwaway provider, role account, free webmail. Free tier (no network). For MX, mail auth, domain age and a verdict (valid | risky | undeliverable) use the paid x402 endpoint /v1/email. [DomainCheck via YourAITools MCP Hub] Free tier: same as DomainCheck's own MCP server (call without payment and without tier)
| Parameter | Type | Required | Notes |
|---|---|---|---|
| string | yes | Email address | |
| tier | string | no | Paid tier: email $0.001. Omit tier (with no credits key or x402 payment) to use the free tier. |
Checks one crypto address against the US Treasury OFAC SDN list of sanctioned digital currency addresses (refreshed daily). For 2 or more addresses use screen_batch (up to 50 per call, counts as one call). Accepts any chain (BTC, ETH and EVM chains, TRX, SOL, LTC, XMR, BCH, XRP, ZEC and more). Free: 30 calls/day per IP with full results (max 10/min; invalid input is not counted); after that the to
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | One blockchain address, e.g. "0x8589427373D6D84E98730D7795D8f6f8731FDA16" or "bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh": 20-140 letters/digits, optional URI prefix such as "ethereum:" or "bitcoincas |
| tier | string | no | Paid tier: address $0.001. Omit tier (with no credits key or x402 payment) to use the free tier. |
Checks 1-50 crypto addresses against the US Treasury OFAC SDN list in one call (counts as one call). Use it instead of repeated screen_address calls whenever you have several addresses (payee lists, counterparties, transaction inputs/outputs); use screen_address for a single one. Mixed chains allowed; one invalid entry rejects the whole call. Free: 30 calls/day per IP with full results (max 10/min
| Parameter | Type | Required | Notes |
|---|---|---|---|
| addresses | array | yes | 1-50 blockchain addresses, one string per element, e.g. ["0x8589427373D6D84E98730D7795D8f6f8731FDA16", "bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh"]. Each: 20-140 letters/digits, optional URI prefix s |
| tier | string | no | Paid tier: batch $0.01. Omit tier (with no credits key or x402 payment) to use the free tier. |
Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabilities and confirmed-malicious packages. Returns per-package advisory ids (CVE/GHSA/MAL), severity, CVSS and fixed-in versions. Free tier: 30 calls/day per IP with full results, up to 100 packages; then $0.003 per scan (up to 500) in USDC ov
| Parameter | Type | Required | Notes |
|---|---|---|---|
| manifest | string | no | Manifest or lockfile contents (package.json, package-lock.json, requirements.txt, Pipfile.lock, poetry.lock, go.mod, Cargo.lock, composer.lock) |
| filename | string | no | Optional file name, helps type detection |
| packages | array | no | Alternative to manifest: [{ecosystem, name, version}], up to 500 |
| include_dev | boolean | no | Include devDependencies (default true) |
| type | string | no | (paid calls only) |
| tier | string | no | Paid tier: scan $0.003. Omit tier (with no credits key or x402 payment) to use the free tier. |
Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and malicious flags. Free tier: 30 calls/day per IP with full results, then $0.001 per call in USDC over x402 (/v1/package). [PkgGuard via YourAITools MCP Hub] Free tier: same as PkgGuard's own MCP server (call without payment and without tier).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| ecosystem | string | no | One of npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet, Pub, Hex (default npm) |
| name | string | yes | Package name, e.g. lodash |
| version | string | yes | Exact version, e.g. 4.17.15 |
| tier | string | no | Paid tier: package $0.001. Omit tier (with no credits key or x402 payment) to use the free tier. |
Detects the technologies a website uses (CMS, ecommerce platform, JS framework, web server, CDN/hosting, analytics, ad pixels, chat, payments, consent tools) from one page load. Free preview tier: technology names and categories. The paid x402 endpoint /v1/detect adds versions, confidence and evidence plus email / DNS / hosting providers and verified SaaS from public DNS. [StackDetect via YourAIT
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Absolute http(s) URL or a bare domain, e.g. https://laravel.com or shopify.com |
| tier | string | no | Paid tier: detect $0.003. Omit tier (with no credits key or x402 payment) to use the free tier. |
Call BEFORE your agent signs or sends anything from a wallet. Decodes a transaction, an EIP-712 typed-data request (Permit, Permit2, EIP-3009 USDC authorizations, Seaport orders), an EIP-7702 delegation or an x402 payment (402 terms + payload) into plain English and returns SAFE / CAUTION / DANGER with risk flags (unlimited approvals, setApprovalForAll, fake USDC domains, x402 overpay or wrong pay
| Parameter | Type | Required | Notes |
|---|---|---|---|
| chain | string | no | base (default), ethereum, base-sepolia or a chain id |
| tx | object | no | Transaction to send: {"to":"0x…","data":"0x…","value":"0","from":"0x…"} (from enables simulation) |
| typed_data | object | no | EIP-712 request {domain, types, primaryType, message} as passed to eth_signTypedData_v4 |
| authorization | object | no | EIP-7702 authorization {address (delegate contract), chainId, nonce} |
| payment_required | object/string | no | x402 402 terms: the PAYMENT-REQUIRED header (base64) or JSON {accepts:[…]} |
| payment_payload | object/string | no | x402 payment you are about to send: PAYMENT-SIGNATURE / X-PAYMENT (base64) or JSON |
| tier | string | no | Paid tier: lite $0.005, check $0.015. Omit tier (with no credits key or x402 payment) to use the free tier. |
Safety verdict for a Base (chain 8453) ERC-20 token: SAFE / CAUTION / DANGER with a 0-100 score, from a simulated buy-transfer-sell (honeypot and tax detection), owner powers, proxy, liquidity, holders, verification and age. Free preview tier: verdict, score and flag counts. The paid x402 endpoints /v1/lite ($0.005), /v1/quick ($0.015) and /v1/deep ($0.05) add the reasons and evidence. SAFE is not
| Parameter | Type | Required | Notes |
|---|---|---|---|
| token | string | yes | Base (chain 8453) ERC-20 contract address, e.g. 0x532f27101965dd16442E59d40670FaF5eBB142E4 |
| tier | string | no | Paid tier: lite $0.005, quick $0.015, deep $0.05. Omit tier (with no credits key or x402 payment) to use the free tier. |
Pre-payment counterparty check: before paying, approving or interacting with an EVM (Base, Ethereum, Polygon, Arbitrum One) or Solana address, get ok / caution / block. Free preview tier: verdict, confidence, address kind and flag counts. The paid x402 endpoints /v1/lite ($0.005), /v1/quick ($0.015) and /v1/full ($0.05) add the reasons and evidence (OFAC SDN, scam lists, x402 directory, verificati
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | Counterparty address: EVM 0x + 40 hex, or a Solana base58 address |
| chain | string | no | Chain of the payment (default base; a base58 address implies solana) |
| intent | string | no | What you are about to do (default pay): changes which signals matter, e.g. paying a token contract or approving an EOA |
| tier | string | no | Paid tier: lite $0.005, quick $0.015, full $0.05. Omit tier (with no credits key or x402 payment) to use the free tier. |
x402 endpoint doctor: probes a paid x402 URL unpaid (never pays) and grades it A-F: 402 on GET / HEAD / empty POST, CORS, v2 PAYMENT-REQUIRED header and v1 body, accepts (USDC asset, EIP-712 domain, Solana feePayer, amounts, payTo), multichain consistency and the Bazaar declaration. Free preview tier: grade, score, status and counts. The paid x402 endpoints /v1/lite ($0.005), /v1/check ($0.02, add
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Full https URL of the paid x402 route (site tier: the origin or API base URL) |
| method | string | no | Method your paid route uses (default: from its Bazaar declaration, else GET) |
| framework | string | no | (paid calls only) |
| tier | string | no | Paid tier: lite $0.005, check $0.02, site $0.05. Omit tier (with no credits key or x402 payment) to use the free tier. |
Safety check for any Solana SPL or Token-2022 mint before an agent or app interacts with it. SAFE / CAUTION / DANGER with a 0-100 score, from mint and freeze authority, Token-2022 extensions that can block or tax sells, liquidity and recent sells, holder concentration and age. Free preview tier: verdict, score and flag counts. The paid x402 endpoints /v1/lite ($0.005) and /v1/check ($0.02) add the
| Parameter | Type | Required | Notes |
|---|---|---|---|
| mint | string | yes | Solana token mint address (base58), e.g. DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263 (BONK) |
| tier | string | no | Paid tier: lite $0.005, check $0.02. Omit tier (with no credits key or x402 payment) to use the free tier. |
AI-agent readiness audit of a website: score 0-100, grade and verdict across agent access (robots.txt rules for AI bots, bot challenges), readable content (raw HTML, markdown), discovery (llms.txt, sitemap, JSON-LD, meta/OG), agent interfaces (OpenAPI, MCP, A2A agent card, x402) and speed/HTTPS. Free preview tier: score, grade and category scores. The paid x402 endpoints /v1/lite ($0.005) and /v1/
| Parameter | Type | Required | Notes |
|---|---|---|---|
| url | string | yes | Website URL or domain to audit, e.g. https://example.com or stripe.com (public http/https only) |
| tier | string | no | Paid tier: lite $0.005, audit $0.03. Omit tier (with no credits key or x402 payment) to use the free tier. |
Check text BEFORE your agent sends it to an LLM, tool, log or webhook: finds crypto wallet keys (BIP39 seed phrases with checksum, EVM/Solana private keys, WIF, xprv), API secrets (GitHub, AWS, Stripe, OpenAI, Anthropic, Slack, Telegram, npm, JWT, PEM) and PII (cards, IBAN, SSN, email, phone). Free preview tier: verdict, safe_to_send and counts by type (text up to 8192 bytes). Redacted text: paid
| Parameter | Type | Required | Notes |
|---|---|---|---|
| text | string | yes | Text to check before it is sent (prompt, tool arguments, log, message, file content). POST /v1/scan also accepts {"json": <any JSON payload>}. |
| min_severity | string | no | (paid calls only) |
| style | string | no | (paid calls only) |
| types | array | no | (paid calls only) |
| json | no | (paid calls only) Any JSON payload (object, array or value); scanned string by string, keys included | |
| tier | string | no | Paid tier: lite $0.005, scan $0.02. Omit tier (with no credits key or x402 payment) to use the free tier. |
Cross-venue perpetual futures positioning read for an asset from funding rates on Hyperliquid, dYdX v4, Paradex and Aevo: crowded long / long bias / neutral / short bias / crowded short, venues that list it, confidence. Free preview tier. The paid x402 routes add per-venue funding (8h %, APR) and open interest (/v1/lite), premium, 7-day funding history and carry (/v1/full) and a universe scan for
| Parameter | Type | Required | Notes |
|---|---|---|---|
| symbol | string | yes | Base asset ticker, e.g. BTC, ETH, SOL, HYPE (BTC-PERP, ETH-USD and SOLUSDT are accepted too) |
| tier | string | no | Paid tier: lite $0.005, full $0.03. Omit tier (with no credits key or x402 payment) to use the free tier. |
Same as GET, POST {"universe":"all"} [PerpRadar via YourAITools MCP Hub] No free tier (paid route only). Paid: scan $0.02 per call, with a credits key (Authorization: Bearer yatc_...) or x402 (USDC; the hub returns the payment terms). Failed tool calls aren't charged: credits are refunded automatically and x402 payments only settle on success.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | Rows per list, 1-25 (default 10) |
| min_oi_usd | number | no | Universe mode: minimum open interest in USD per venue market (default 1000000) |
| symbols | string | no | Comma-separated tickers (max 25), e.g. BTC,ETH,SOL. Either symbols or universe=all is required. |
| universe | string | no | all = scan every market above min_oi_usd |
| tier | string | no | Paid tier: scan $0.02. Default scan. |
Descriptive technical read for a crypto asset on closed 15m/1h/4h/1d candles: bias (strong bearish ... strong bullish), trend (up/down/mixed) and regime (trending/ranging) from RSI, MACD, EMA 20/50/200, Bollinger and ADX. Free preview tier. The paid x402 routes add every indicator value and the bias components (/v1/lite), VaR/CVaR, drawdowns and ATR position sizing (/v1/risk) and rule backtests (/
| Parameter | Type | Required | Notes |
|---|---|---|---|
| symbol | string | yes | Base asset ticker, e.g. BTC, ETH, SOL, HYPE (BTC-PERP, ETH-USD and SOLUSDT are accepted too) |
| timeframe | string | no | Candle timeframe: 15m, 1h, 4h or 1d (default 1h; risk default 4h) |
| tier | string | no | Paid tier: lite $0.005. Omit tier (with no credits key or x402 payment) to use the free tier. |
Same as GET, POST {"symbol":"ETH","timeframe":"4h","account_usd":10000,"risk_pct":1,"side":"long"} [TASignal via YourAITools MCP Hub] No free tier (paid route only). Paid: risk $0.02 per call, with a credits key (Authorization: Bearer yatc_...) or x402 (USDC; the hub returns the payment terms). Failed tool calls aren't charged: credits are refunded automatically and x402 payments only settle on s
| Parameter | Type | Required | Notes |
|---|---|---|---|
| account_usd | number | no | Account size in USD (optional; enables units, notional, leverage) |
| bars | integer | no | Candles for risk metrics, 50-1000 (default 500) |
| entry | number | no | Entry price (default: last price) |
| risk_pct | number | no | Percent of the account risked if the stop is hit (default 1) |
| side | string | no | Position side (default long) |
| stop | number | no | Stop price (optional; overrides stop_atr) |
| stop_atr | number | no | Stop distance in ATR(14) multiples when no stop is given (default 2) |
| symbol | string | yes | Base asset ticker, e.g. BTC, ETH, SOL, HYPE (BTC-PERP, ETH-USD and SOLUSDT are accepted too) |
| timeframe | string | no | Candle timeframe: 15m, 1h, 4h or 1d (default 1h; risk default 4h) |
| tier | string | no | Paid tier: risk $0.02. Default risk. |
Same as GET, POST {"symbol":"SOL","timeframe":"4h","strategy":"ema_cross","fast":20,"slow":50} [TASignal via YourAITools MCP Hub] No free tier (paid route only). Paid: backtest $0.05 per call, with a credits key (Authorization: Bearer yatc_...) or x402 (USDC; the hub returns the payment terms). Failed tool calls aren't charged: credits are refunded automatically and x402 payments only settle on s
| Parameter | Type | Required | Notes |
|---|---|---|---|
| bars | integer | no | Candles to test, 100-2000 (default 500) |
| direction | string | no | default long_only |
| fast | integer | no | Fast period (sma_cross/ema_cross default 20, macd_cross 12) |
| fee_bps | number | no | Fee per side in basis points (default 5) |
| lower | number | no | RSI entry level for longs (default 30) |
| period | integer | no | RSI period (default 14) or breakout lookback (default 20) |
| signal | integer | no | MACD signal period (default 9) |
| slow | integer | no | Slow period (sma_cross/ema_cross default 50, macd_cross 26) |
| strategy | string | yes | Strategy rule |
| symbol | string | yes | Base asset ticker, e.g. BTC, ETH, SOL, HYPE (BTC-PERP, ETH-USD and SOLUSDT are accepted too) |
| timeframe | string | no | Candle timeframe: 15m, 1h, 4h or 1d (default 1h; risk default 4h) |
| upper | number | no | RSI entry level for shorts / exit (default 70) |
| tier | string | no | Paid tier: backtest $0.05. Default backtest. |
Is the smart money long or short this coin? For a Hyperliquid perp ticker, returns how a rules-based cohort of the 120 Hyperliquid accounts with the highest 30-day PnL (public leaderboard) is positioned right now: bias (strong long / lean long / mixed / lean short / strong short), cohort traders long vs short, snapshot age and coverage. Free preview tier. The paid x402 routes add notional and 1h/2
| Parameter | Type | Required | Notes |
|---|---|---|---|
| symbol | string | yes | Hyperliquid perp ticker, e.g. BTC, ETH, SOL, HYPE, kPEPE (BTC-PERP, ETH-USD, SOLUSDT accepted) |
| tier | string | no | Paid tier: lite $0.003, coin $0.02. Omit tier (with no credits key or x402 payment) to use the free tier. |
Same as GET, POST {"limit":10} [SmartPerps via YourAITools MCP Hub] No free tier (paid route only). Paid: scan $0.03 per call, with a credits key (Authorization: Bearer yatc_...) or x402 (USDC; the hub returns the payment terms). Failed tool calls aren't charged: credits are refunded automatically and x402 payments only settle on success.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | Rows per list, 1-25 (default 10) |
| min_traders | integer | no | Only rank coins held by at least this many cohort accounts, 2-50 (default 3) |
| tier | string | no | Paid tier: scan $0.03. Default scan. |
Same as GET, POST {"address":"0x0000000000000000000000000000000000000001"} [SmartPerps via YourAITools MCP Hub] No free tier (paid route only). Paid: wallet $0.01 per call, with a credits key (Authorization: Bearer yatc_...) or x402 (USDC; the hub returns the payment terms). Failed tool calls aren't charged: credits are refunded automatically and x402 payments only settle on success.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | Hyperliquid account address (0x + 40 hex) |
| tier | string | no | Paid tier: wallet $0.01. Default wallet. |
Which paid API should my agent call? Searches the 36,000+ paid x402 resources on the public x402 discovery indexes and returns how many match your need, how many seller hosts there are, and the top 3 services ranked by relevance, 30-day unique payers and calls, recency and price (service name, USD price, networks, payers). Optional max_price and network filters. Free preview tier. The paid x402 ro
| Parameter | Type | Required | Notes |
|---|---|---|---|
| need | string | yes | The capability you need, in plain words, e.g. "solana token safety", "web search", "pdf to text", "hyperliquid funding rates" (2-200 chars) |
| max_price | number | no | Only resources priced at or below this many USD per call, e.g. 0.01 |
| network | string | no | Only resources payable on this network (default any) |
| min_payers | integer | no | (paid calls only) Only resources with at least this many unique payers in the last 30 days (default 0) |
| limit | integer | no | (paid calls only) Rows per list, 1-25 (default 10) |
| tier | string | no | Paid tier: lite $0.003, pick $0.01, market $0.02. Omit tier (with no credits key or x402 payment) to use the free tier. |
Checks a Hyperliquid perp order BEFORE your agent sends it: would the exchange reject it, and what does it cost and risk? Give coin, side and size (coins, as you would send it) or notional (USD); optional limit price (omit = market order), leverage, margin cross/isolated, reduceOnly. Returns verdict REJECT_LIKELY / CAUTION / OK, issues[] with fix values (size decimals, price tick, $10 minimum, max
| Parameter | Type | Required | Notes |
|---|---|---|---|
| coin | string | yes | Hyperliquid main-dex perp name, e.g. BTC, ETH, SOL, HYPE, kPEPE |
| side | string | yes | long/buy or short/sell |
| size | string/number | no | Order size in coins, exactly as you would send it (decimals are checked), e.g. 0.001. Give size or notional. |
| notional | number | no | Order value in USD (instead of size), e.g. 100 |
| price | string/number | no | Limit price exactly as you would send it (tick rule is checked). Omit for a market order (then taker impact is estimated from the L2 book). |
| leverage | number | no | Leverage, e.g. 10 (default 1) |
| margin | string | no | cross (default) or isolated |
| reduceOnly | boolean | no | true if the order only reduces a position (exempt from the minimum and OI cap) |
| tier | string | no | Paid tier: lite $0.003, full $0.01. Omit tier (with no credits key or x402 payment) to use the free tier. |
Lists how many calls of each YourAITools paid API (PayGuard, TokenVerdict, SignCheck, WebRead, InjectScan, DomainCheck, PkgGuard, StackDetect, AgentGate) a $1 or $5 prepaid credits pack covers at today's prices, and where to buy it (x402). [Credits via YourAITools MCP Hub] Free tier: same as Credits's own MCP server (call without payment and without tier). Free.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| pack | string | no | Pack: "1" ($1), "5" ($5, 10% bonus) or "sample" ($0.005) |
Returns the remaining balance, spend and recent calls of a YourAITools credits key (yatc_...). [Credits via YourAITools MCP Hub] Free tier: same as Credits's own MCP server (call without payment and without tier). Free.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| key | string | yes | Credits key (yatc_...) |
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install YourAITools MCP Hub or to call it, at any volume.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | moderate | capability blast radius (moderate) — client exposure if the model is manipulated | −3 |
| coverage-honesty | manifest | inspection depth (manifest) — how much of the target the scan could see | −4 |
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.
The implementation source was not read — this reflects the declared tool metadata only.
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| check_agent | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| read_url | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| scan_text | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| scan_url | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| scan_tools | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| check_domain | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| check_email | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| screen_address | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| screen_batch | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| scan_dependencies | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| check_package | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| detect_stack | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| check_signature | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| check_token | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| check_counterparty | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| check_x402_endpoint | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| check_solana_token | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| audit_website | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| scan_for_leaks | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| perp_positioning | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| perp_funding_scan | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ta_bias | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ta_risk | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ta_backtest | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| smart_money_bias | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| smart_money_scan | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| hyperliquid_wallet | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| find_paid_api | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| check_perp_order | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| credits_quote | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| credits_balance | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.
Supply chain and provenance
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.0.0.
No release note was published with this version.
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Any signed-in account that does not publish YourAITools MCP Hub can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.