protogrid

Search / co.youraitools/toolfit

ToolFit + MCPCheck

R0· no sign-in

Audit, pin and diff agent tool lists; preflight and watch remote MCP servers. Free tier; x402.

v0.1.1 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality88good
Trust83of 100
Uptime, 30 days100%
Latency p50607 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "toolfit": {
      "type": "http",
      "url": "https://api.youraitools.co/toolfit/mcp"
    }
  }
}
claude mcp add --transport http toolfit https://api.youraitools.co/toolfit/mcp
[mcp_servers.toolfit]
url = "https://api.youraitools.co/toolfit/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "toolfit": {
      "type": "remote",
      "url": "https://api.youraitools.co/toolfit/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "toolfit": {
      "type": "http",
      "url": "https://api.youraitools.co/toolfit/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=toolfit&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLnlvdXJhaXRvb2xzLmNvL3Rvb2xmaXQvbWNwIn0%3D"
}
{
  "servers": {
    "toolfit": {
      "type": "http",
      "url": "https://api.youraitools.co/toolfit/mcp"
    }
  }
}
{
  "mcpServers": {
    "toolfit": {
      "httpUrl": "https://api.youraitools.co/toolfit/mcp"
    }
  }
}
extensions:
  "toolfit":
    enabled: true
    name: "toolfit"
    type: streamable_http
    uri: "https://api.youraitools.co/toolfit/mcp"
    timeout: 300

Quality 88 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene93 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations6 of 6 tools declare readOnlyHint or destructiveHint
  • warn
    tools.directory_hints1 of 6 tools declare all four hints; missing: diff_tools (destructiveHint); watch_status (destructiveHint); audit_tools (destructiveHint); …
  • pass
    tools.token_costabout 1,455 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

6 tools, about 1,455 tokens to load them all · tool set 922637003981 · checked 2026-11-07 16:55 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository
provenance55
liveness100
freshness100
hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-14d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://api.youraitools.co/toolfit/mcp streamable-httpnoneyes100%607 ms2025-11-252026-11-07

Tools (6)

audit_toolsread-onlyCheck the tool definitions an agent loads, before they cost tokens or fail: estimated tokens per tool, schema errors per provider (OpenAI, Anthropic, Gemini, Bedrock, MCP; add openai_strict for strict mode) with JSON paths and fixed definitions, tool pairs models will confuse with fix hints, basic poisoning patterns, a grade and a pin (set_id) for diff_tools. Pass "tools" (array in any common format) or "url" (public remote MCP server; tools are listed, never called). level "lite" returns the summary only. Free: 20 calls/day per IP (shared with diff_tools), then $0.003 lite / $0.01 full via x402 or credits.
check_mcp_serverread-onlyDoes this remote MCP server work, and is it worth connecting or paying for? Sends initialize and tools/list only (never calls a tool) and reports reachability, protocol version, sign-in method (OAuth protected-resource metadata), x402 payment terms if it asks for payment, latency, tool count and token cost, provider compatibility, poisoning patterns in tools and server instructions, issues and a grade A-F, plus a pin for later diffs. https public hosts only. Free: 10 checks/day per IP, then $0.005 via x402 or credits.
diff_toolsread-onlyWhat changed in a tool list since you approved it? Compares "tools" or "url" now with "pin" (set_id from audit_tools/diff_tools) or "baseline" (earlier definitions). Each change is labeled breaking (removed tool or param, new required param, type or enum removal), suspicious (new text with injection patterns or hidden characters), review (description, title, annotation or new tool) or additive; descriptions come with before/after text and a word diff. Returns a new pin. Free: 20 calls/day per IP (shared with audit_tools), then $0.002 via x402 or credits.
watch_canceldestructiveFree: cancel a watch (no further checks or webhooks; not refunded). Needs watch_id and the secret returned when it was created.
watch_mcp_serverHosted watch (paid only; this MCP call validates and returns how to pay): ToolFit re-audits a public remote MCP server every 24 h ($0.25) or 6 h ($0.60) for 30 days and POSTs an HMAC-SHA256 signed JSON webhook to your https endpoint when its tools/list fingerprint or grade changes, or it goes unreachable or recovers. Pay at POST /v1/watch or /v1/watch/6h with x402 or a credits key; the response has watch_id and the signing secret (shown once).
watch_statusread-onlyFree: state (active, expired, cancelled), interval, expiry, next check, last result (pin, grade, score, tool count) and webhook delivery counters for a watch. Needs watch_id and the secret returned when it was created.

Schemas: list_tools.

Similar MCP servers

More from co.youraitools

And 17 more from this publisher.

Official server.json
{
  "name": "co.youraitools/toolfit",
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "tools": [
        "audit_tools",
        "diff_tools",
        "check_mcp_server",
        "watch_mcp_server",
        "watch_status",
        "watch_cancel"
      ],
      "pricing": "Free: 20 audit/diff + 10 check calls per IP per day. Paid: $0.003 lite / $0.01 full audit, $0.002 diff, $0.005 check, $0.25 hosted watch (24 h checks for 30 days) or $0.60 (6 h checks), via x402 (USDC on Base, Polygon, Arbitrum One) or prepaid credits. Failed calls aren't charged.",
      "publisher": "Crypto Money Maker (tools built and run by AI agents with human oversight)",
      "tools_count": 6,
      "documentation": "https://api.youraitools.co/toolfit/"
    }
  },
  "icons": [
    {
      "src": "https://youraitools.co/favicon.svg",
      "sizes": [
        "any"
      ],
      "mimeType": "image/svg+xml"
    }
  ],
  "title": "ToolFit + MCPCheck",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.youraitools.co/toolfit/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.1.1",
  "websiteUrl": "https://api.youraitools.co/toolfit/",
  "description": "Audit, pin and diff agent tool lists; preflight and watch remote MCP servers. Free tier; x402."
}