Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "profitcollector": {
      "type": "http",
      "url": "https://mcp.bakhour.ca/mcp"
    }
  }
}

claude mcp add --transport http profitcollector https://mcp.bakhour.ca/mcp

[mcp_servers.profitcollector]
url = "https://mcp.bakhour.ca/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "profitcollector": {
      "type": "remote",
      "url": "https://mcp.bakhour.ca/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "profitcollector": {
      "type": "http",
      "url": "https://mcp.bakhour.ca/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=profitcollector&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLmJha2hvdXIuY2EvbWNwIn0%3D"
}

{
  "servers": {
    "profitcollector": {
      "type": "http",
      "url": "https://mcp.bakhour.ca/mcp"
    }
  }
}

{
  "mcpServers": {
    "profitcollector": {
      "httpUrl": "https://mcp.bakhour.ca/mcp"
    }
  }
}

extensions:
  "profitcollector":
    enabled: true
    name: "profitcollector"
    type: streamable_http
    uri: "https://mcp.bakhour.ca/mcp"
    timeout: 300

Quality 83 / 100good

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene71 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
fail
tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: post_media_image_convert (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); post_json_minify (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_dns_lookup (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
pass
tools.token_costabout 2,681 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability100 · weight 15

pass
stability.changesno tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

31 tools, about 2,681 tokens to load them all · tool set 08c3e8bb4fac · checked 2026-10-20 19:42 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 79 / 100

no-repository

provenance55

liveness98

freshness85

hygiene80

+dns-namespace +website +reachable +uptime-96% ~updated-52d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://mcp.bakhour.ca/mcp` streamable-http	none	yes	96%	172 ms	2026-07-28	2026-10-20

Tools (31)

`get_dns_lookup`	Resolve ONE DNS record type for a domain. For all record types at once use /domain/intelligence; for a bundled DNS+TLS+headers audit use /web/audit or /security/posture; for mail-security plus a scored verdict use /domain/due-diligence.
`get_domain_intelligence`	Collect ALL common DNS record types (A/AAAA/MX/NS/TXT/CAA) for a domain in one call -- the multi-record bundle version of /dns/lookup.
`get_jwt_decode`	Decode a JWT payload without signature verification.
`get_security_headers`	Inspect HTTP security headers for ONE URL only. For headers combined with TLS and DNS, use /web/audit (raw) or /security/posture (scored).
`get_security_posture`	Assess TLS and HTTP security posture for a public HTTPS website -- the SAME inspection as /web/audit, but returns a 0-100 score/grade and findings instead of raw fields.
`get_ssl_check`	Inspect the TLS certificate for ONE hostname only. For TLS combined with HTTP headers and DNS, use /web/audit (raw) or /security/posture (scored).
`get_subnet_calculate`	Calculate subnet information from CIDR notation.
`get_timestamp_convert`	Convert a Unix timestamp to UTC ISO-8601.
`get_url_parse`	Parse a URL into structured components.
`get_uuid_generate`	Generate a random UUID version 4.
`get_web_audit`	Consolidated DNS, TLS and HTTP security audit for a public HTTPS website, returned as RAW findings (no score) -- the bundled version of /dns/lookup + /ssl/check + /security/headers. Use /security/posture instead for a 0-100 score/grade.
`post_base64_decode`	Decode Base64 to UTF-8 text.
`post_base64_encode`	Encode UTF-8 text using Base64.
`post_data_transform`	Normalize and transform common structured text automatically.
`post_domain_due_diligence`	The most comprehensive domain assessment: DNS + mail security (SPF/DKIM/DMARC) + TLS + HTTP headers, scored. The only endpoint in this group that adds mail-security analysis. Use for a one-shot decision-grade verdict on an unfamiliar domain; use /dns/lookup, /ssl/check, /security/headers, /web/audit or /security/posture instead for a single fact or a cheaper signal.
`post_freshdep_scan`	Flags pinned dependencies in a repository's requirements.txt, package-lock.json, or uv.lock published more recently than a freshness threshold -- a supply-chain-compromise tripwire. Free CLI (requirements.txt/package-lock.json only, uv.lock support pending there): github.com/sbakhour/freshdep.
`post_hash_sha256`	Generate SHA-256 digest from text.
`post_hash_sha512`	Generate SHA-512 digest from text.
`post_json_minify`	Minify valid JSON text.
`post_json_pretty`	Pretty-print valid JSON text.
`post_json_repair`	Repair common malformed JSON formatting issues.
`post_json_validate`	Validate JSON text and return parsing details.
`post_media_image_convert`	Convert an image between common formats (e.g. PNG/JPEG/WebP) from a URL or base64 payload.
`post_quebec_invoice_compliance_check`	Verifies GST/QST were calculated correctly per Revenu Quebec's current (non-compounded) formula, and flags whether a French invoice version is present per Charter of the French Language s.57/89/91. Pure arithmetic + text check; not legal or tax advice.
`post_quebec_invoice_generate`	Assembles a bilingual (French/English) Quebec invoice document with GST/QST computed exactly per Revenu Quebec's current formula -- you supply both languages' line-item text, this does not translate. Not legal or tax advice.
`post_security_repo_risk_report_deep`	Everything in the standard report, plus a repo-wide secret/credential exposure scan (matched values are never returned).
`post_security_repo_risk_report_due_diligence`	Everything in the deep report, plus real OpenSSF Scorecard maintainer/governance signals and a prioritized recommendation. An automated baseline positioned against $5,000-$95,000 human technical due diligence.
`post_security_repo_risk_report_standard`	SBOM inventory plus real OSV.dev dependency-vulnerability matches and dependency-freshness signals for a public Git repository. One-shot alternative to a per-seat secret-scanning subscription.
`post_text_dedupe_lines`	Remove duplicate lines while preserving original order.
`post_text_stats`	Calculate character, word, line and byte statistics.
`post_x402_service_trust_report`	Live, on-demand check of ONE x402-protected endpoint before you pay it: payment-requirements structure, TLS certificate, payTo on-chain balance, known-asset recognition, resource/host consistency, and discovery-manifest cross-check -- not a cached aggregate reputation score.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "ca.bakhour/profitcollector",
  "title": "ProfitCollector",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://mcp.bakhour.ca/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "websiteUrl": "https://mcp.bakhour.ca/",
  "description": "22 pay-per-call developer, security, network and data utilities using x402 on Base."
}