Search / co.youraitools/toolfit
ToolFit + MCPCheck
R0· no sign-inAudit, pin and diff agent tool lists; preflight and watch remote MCP servers. Free tier; x402.
v0.1.1 · active · website · descriptor JSON · versions
Search / co.youraitools/toolfit
R0· no sign-inAudit, pin and diff agent tool lists; preflight and watch remote MCP servers. Free tier; x402.
v0.1.1 · active · website · descriptor JSON · versions
{
"mcpServers": {
"toolfit": {
"type": "http",
"url": "https://api.youraitools.co/toolfit/mcp"
}
}
}claude mcp add --transport http toolfit https://api.youraitools.co/toolfit/mcp[mcp_servers.toolfit]
url = "https://api.youraitools.co/toolfit/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"toolfit": {
"type": "remote",
"url": "https://api.youraitools.co/toolfit/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"toolfit": {
"type": "http",
"url": "https://api.youraitools.co/toolfit/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=toolfit&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLnlvdXJhaXRvb2xzLmNvL3Rvb2xmaXQvbWNwIn0%3D"
}{
"servers": {
"toolfit": {
"type": "http",
"url": "https://api.youraitools.co/toolfit/mcp"
}
}
}{
"mcpServers": {
"toolfit": {
"httpUrl": "https://api.youraitools.co/toolfit/mcp"
}
}
}extensions:
"toolfit":
enabled: true
name: "toolfit"
type: streamable_http
uri: "https://api.youraitools.co/toolfit/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations6 of 6 tools declare readOnlyHint or destructiveHinttools.directory_hints1 of 6 tools declare all four hints; missing: diff_tools (destructiveHint); watch_status (destructiveHint); audit_tools (destructiveHint); …tools.token_costabout 1,455 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+dns-namespace +website +reachable +uptime-100% +updated-14d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://api.youraitools.co/toolfit/mcp streamable-http | none | yes | 100% | 607 ms | 2025-11-25 | 2026-11-07 |
audit_toolsread-only | Check the tool definitions an agent loads, before they cost tokens or fail: estimated tokens per tool, schema errors per provider (OpenAI, Anthropic, Gemini, Bedrock, MCP; add openai_strict for strict mode) with JSON paths and fixed definitions, tool pairs models will confuse with fix hints, basic poisoning patterns, a grade and a pin (set_id) for diff_tools. Pass "tools" (array in any common format) or "url" (public remote MCP server; tools are listed, never called). level "lite" returns the summary only. Free: 20 calls/day per IP (shared with diff_tools), then $0.003 lite / $0.01 full via x402 or credits. |
check_mcp_serverread-only | Does this remote MCP server work, and is it worth connecting or paying for? Sends initialize and tools/list only (never calls a tool) and reports reachability, protocol version, sign-in method (OAuth protected-resource metadata), x402 payment terms if it asks for payment, latency, tool count and token cost, provider compatibility, poisoning patterns in tools and server instructions, issues and a grade A-F, plus a pin for later diffs. https public hosts only. Free: 10 checks/day per IP, then $0.005 via x402 or credits. |
diff_toolsread-only | What changed in a tool list since you approved it? Compares "tools" or "url" now with "pin" (set_id from audit_tools/diff_tools) or "baseline" (earlier definitions). Each change is labeled breaking (removed tool or param, new required param, type or enum removal), suspicious (new text with injection patterns or hidden characters), review (description, title, annotation or new tool) or additive; descriptions come with before/after text and a word diff. Returns a new pin. Free: 20 calls/day per IP (shared with audit_tools), then $0.002 via x402 or credits. |
watch_canceldestructive | Free: cancel a watch (no further checks or webhooks; not refunded). Needs watch_id and the secret returned when it was created. |
watch_mcp_server | Hosted watch (paid only; this MCP call validates and returns how to pay): ToolFit re-audits a public remote MCP server every 24 h ($0.25) or 6 h ($0.60) for 30 days and POSTs an HMAC-SHA256 signed JSON webhook to your https endpoint when its tools/list fingerprint or grade changes, or it goes unreachable or recovers. Pay at POST /v1/watch or /v1/watch/6h with x402 or a credits key; the response has watch_id and the signing secret (shown once). |
watch_statusread-only | Free: state (active, expired, cancelled), interval, expiry, next check, last result (pin, grade, score, tool count) and webhook delivery counters for a watch. Needs watch_id and the secret returned when it was created. |
Schemas: list_tools.
And 17 more from this publisher.
{
"name": "co.youraitools/toolfit",
"_meta": {
"io.modelcontextprotocol.registry/publisher-provided": {
"tools": [
"audit_tools",
"diff_tools",
"check_mcp_server",
"watch_mcp_server",
"watch_status",
"watch_cancel"
],
"pricing": "Free: 20 audit/diff + 10 check calls per IP per day. Paid: $0.003 lite / $0.01 full audit, $0.002 diff, $0.005 check, $0.25 hosted watch (24 h checks for 30 days) or $0.60 (6 h checks), via x402 (USDC on Base, Polygon, Arbitrum One) or prepaid credits. Failed calls aren't charged.",
"publisher": "Crypto Money Maker (tools built and run by AI agents with human oversight)",
"tools_count": 6,
"documentation": "https://api.youraitools.co/toolfit/"
}
},
"icons": [
{
"src": "https://youraitools.co/favicon.svg",
"sizes": [
"any"
],
"mimeType": "image/svg+xml"
}
],
"title": "ToolFit + MCPCheck",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://api.youraitools.co/toolfit/mcp",
"type": "streamable-http"
}
],
"version": "0.1.1",
"websiteUrl": "https://api.youraitools.co/toolfit/",
"description": "Audit, pin and diff agent tool lists; preflight and watch remote MCP servers. Free tier; x402."
}