# ISHOB Knowledge Archive

> License-checked research archive and technical-spec search for AI agents. Pay per call via x402.

- name: com.ishob/archive
- version: 1.0.0
- connection class: R0 (autonomous)
- trust: 82/100 flags: no-repository
- quality: 77/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.ishob%2Farchive
- tools: https://api.protogrid.dev/v1/servers/com.ishob%2Farchive/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "archive": {
      "type": "http",
      "url": "https://api.ishob.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 97
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-92% +updated-13d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 77/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 79 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 43 of 43 tools declare readOnlyHint or destructiveHint
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: list_topics (destructiveHint, idempotentHint); get_dataset (destructiveHint, idempotentHint); contract_abi (destructiveHint, idempotentHint); …
- warn `tools.token_cost`: about 9,284 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 75 (weight 15)

- warn `stability.changes`: 55 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 43, about 9,284 tokens to load them all
- tool set hash: 552c1b2626f96b486adf61ca4cf8e470
- tools last changed: 2026-10-14T20:46:30.060Z
- badge: [![protogrid quality](https://protogrid.dev/badge/com.ishob/archive.svg)](https://protogrid.dev/servers/com.ishob/archive)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-14 `read_barcode` added
  - Read barcodes and QR codes from an image (URL or base64): QR, Micro QR, DataMatrix, Aztec, PDF417, MaxiCode, EAN-13/8, UPC-A/E, Code 128/39/93, Codabar, ITF and DataBar. Finds every code in the picture, even rotated, small or inverted (phone photos, receipts, labels, screenshots), and returns each one's text, format, position and meaning (URL, Wi-Fi network, vCard, e-mail, phone, location, crypto payment URI, product GTIN). No code found = not charged. Paid ($0.001, x402).
- 2026-10-14 `lookup_product_code` added
  - Look up a product barcode number: identify and validate EAN-13, EAN-8, UPC-A, UPC-E, GTIN-14, ISBN-13/10, ISSN and ISMN codes (wrong check digits are reported with the correct digit), convert between forms (GTIN-14, EAN-13, UPC-A, ISBN-10 <-> 13) and decode the GS1 prefix. Then fetch product data from open databases: name, brand, quantity, categories, image, labels, Nutri-Score (food, cosmetics, pet food via Open Food Facts) or title, authors, publisher and cover (books via Open Library). Paid ($0.001, x402).
- 2026-10-14 `generate_barcode` added
  - Generate a barcode or QR code as SVG or PNG: QR, DataMatrix, PDF417, Code 128, Code 39, EAN-13, EAN-8, UPC-A, ISBN-13, ITF and GS1-128. EAN/UPC/ISBN check digits are computed (or verified, never silently replaced). QR and DataMatrix support colours, square/rounded/dot styles and (QR) a centre logo from an https URL. Every format is verified scannable. Returns SVG text or base64 PNG plus a data URI ready to embed in HTML, PDF or labels. Paid ($0.001, x402).
- 2026-10-14 `resolve_name` added
  - Resolve ENS names and Basenames both ways. name -> Ethereum address, Base address and profile records (avatar, description, url, email, Twitter/X, GitHub, Discord, Telegram) and whether it is that address's primary name; address -> its primary ENS name and primary Basename, each verified to resolve back to the same address. Works for .eth, *.base.eth, subnames and offchain (CCIP-Read) names. Unknown name or address = 404, not charged. Paid ($0.001, x402).
- 2026-10-14 `explain_transaction` added
  - Explain any mined transaction in plain English: what happened (swap, transfer, approval, NFT buy/sell/mint, wrap, contract deploy, failed + revert reason), the sender's net token changes with USD values, every token and native-coin movement, approvals granted, the function called (named from the verified ABI or a signature database, with decoded arguments) and the fee. Rule-based, no AI. Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain. Paid ($0.005, x402).
- 2026-10-14 `token_flows` added
  - Who is buying and selling a token right now: every on-chain transfer in the last 1h / 6h / 24h split into DEX buys, sells and wallet transfers. Returns buy vs sell volume and net flow in USD, unique buyers and sellers, top net buyers and sellers, the largest trades (with tx hashes) and an organic-activity score with wash-trading signals (round-tripping, volume concentration, repeated bot-size trades). Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain. Paid ($0.01, x402).
- 2026-10-14 `token_verdict` added
  - Should I touch this token? A fast plain-English verdict (low-risk / caution / high-risk / avoid) with a 0-100 score, the top 3 reasons, the good signals and the key facts (honeypot, taxes, liquidity, holders, owner). Rule-based, no AI: same token, same answer. Optional 1200x630 SVG share card. Powered by GoPlus Security plus on-chain checks and real DEX liquidity. Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Solana. Paid ($0.01, x402).
- 2026-10-13 `set_agent_alarm` added
  - Schedule a signed webhook to wake an AI agent later: ISHOB POSTs your JSON payload to your https callback at deliver_at or after delay_seconds (60 s to 30 days ahead), retrying failed deliveries (1, 5, 15, 30, 60 min). Each delivery carries X-ISHOB-Signature (HMAC-SHA256 with the signing_secret returned once). Free status: GET /v1/alarm/{id}; free cancel: POST /v1/alarm/{id}/cancel. Charged only when the alarm is accepted. Paid ($0.001, x402).
- 2026-10-12 `query_specs` changed (inputSchema)
- 2026-10-12 `search_specs` changed (inputSchema)

Full history: https://api.protogrid.dev/v1/servers/com.ishob%2Farchive/changes

## Remotes

- https://api.ishob.com/mcp (streamable-http, auth none, reachable true, uptime30d 0.9183673)

## Packages

_none_

## Tools (43)

- `company_snapshot`: Company snapshot in one call for any SEC-registered company: fundamentals and ratios from the latest annual report (revenue, margins, growth, debt, cash flow, EPS), SEC profile (industry, exchange, state, fiscal year), recent filings (latest 10-K / 10-Q, 8-K events, insider-trading activity in 90 days) and the official website's health (uptime, TLS expiry, email security, registration). Sources: SEC EDGAR (public domain), Wikidata (CC0). Paid ($0.05, x402).
- `contract_abi`: Verified smart-contract ABI (+ optional Solidity/Vyper source) for Ethereum, Base, Arbitrum, Optimism, Polygon and BNB Chain from the open Sourcify registry: compiler, deployment, read/write function and event signatures, and proxy resolution to the implementation ABI. Unverified contracts return 404 (not charged). Paid ($0.001, x402).
- `crypto_prices`: Live token prices computed from on-chain DEX pools (Uniswap V3, PancakeSwap V3, Orca Whirlpools) on Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain and Solana, with pool depth, confidence and 24h change; plus an Aave V3 yield screener (supply/borrow APY and market size per asset). No third-party price feed: every figure is derived from public chain state. Paid ($0.001, x402).
- `domain_intel`: Domain intelligence: registration via RDAP (registrar, created/expiry dates, status, nameservers, DNSSEC; unregistered = likely available), DNS (A/AAAA/NS/MX/SPF/DMARC, email and DNS providers) and the homepage tech stack (CDN, hosting, server, CMS, frameworks, analytics, payments) with evidence. Paid ($0.0004, x402).
- `embed_text`: Text embeddings for RAG / semantic search: one string or up to 100 strings -> L2-normalised vectors with open BAAI models on Cloudflare GPUs: bge-small-en-v1.5 (384-d, English, default) or bge-m3 (1024-d, multilingual). Up to 24,000 characters per call. Paid ($0.0002, x402).
- `explain_transaction`: Explain any mined transaction in plain English: what happened (swap, transfer, approval, NFT buy/sell/mint, wrap, contract deploy, failed + revert reason), the sender's net token changes with USD values, every token and native-coin movement, approvals granted, the function called (named from the verified ABI or a signature database, with decoded arguments) and the fee. Rule-based, no AI. Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain. Paid ($0.005, x402).
- `extract_tables`: Extract tables as structured JSON (rows, header, records keyed by column) from a public PDF (multi-column / ruled tables, up to 30 pages, 10 MB) or an HTML page (colspan/rowspan expanded). robots.txt respected; nothing stored. No OCR. Paid ($0.001, x402).
- `extract_webpage`: Fetch a public web page live (robots.txt respected) and return clean Markdown. Not stored or redistributed. Paid ($0.001, x402).
- `finance_snapshot`: Fundamentals and ratios for a US-listed company from its latest annual SEC filing (10-K/20-F, public domain): revenue, net income, EPS, cash flow, debt, equity; debt-to-equity, current/quick ratio, margins, ROE/ROA, growth. P/E and market cap are null (no licensed price feed); EPS and shares outstanding are included to compute them. Paid ($0.001, x402).
- `gas_tracker`: Real-time gas fees and network health for Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain and Solana: slow / standard / fast EIP-1559 fees (base fee + priority tip, from the last 20 blocks), cost of a transfer / ERC-20 transfer / swap in native token and USD, congestion, base-fee trend, block time and latest-block age; Solana priority-fee percentiles and TPS. Paid ($0.0001, x402).
- `generate_barcode`: Generate a barcode or QR code as SVG or PNG: QR, DataMatrix, PDF417, Code 128, Code 39, EAN-13, EAN-8, UPC-A, ISBN-13, ITF and GS1-128. EAN/UPC/ISBN check digits are computed (or verified, never silently replaced). QR and DataMatrix support colours, square/rounded/dot styles and (QR) a centre logo from an https URL. Every format is verified scannable. Returns SVG text or base64 PNG plus a data URI ready to embed in HTML, PDF or labels. Paid ($0.001, x402).
- `geocode`: Offline geocoding (GeoNames + DB-IP, CC BY 4.0): exactly one of ip (IPv4/IPv6 -> country/region/city/lat,lon), q (place name, e.g. 'Springfield, IL, US', optional country filter), postcode (+country), or lat+lon (reverse: nearest places). City/place level; no street addresses. Paid ($0.001, x402).
- `get_catalog_page`: Browse the catalog, 100 resources per page, optionally by topic. Free.
- `get_dataset`: Static Knowledge Base: open, commercially reusable datasets (world cities, countries, ISHOB topics) by page, by id or by facet filter, with licence and attribution. Free catalogue: /v1/datasets. Paid ($0.0001, x402).
- `get_document`: Record metadata, abstract, license and attribution for one resource. Paid ($0.001, x402).
- `get_fulltext`: Structured full text (sections) of one resource, with license. Paid ($0.01, x402).
- `get_references`: Parsed reference list of one resource. Paid ($0.002, x402).
- `list_topics`: List knowledge topics with live resource counts. Free.
- `location_report`: Location risk report in one call: resolve a place name (or reverse-geocode lat/lon), then weather risk for the next hours (drone-safe, outdoor-event risk, wind, rain, frost, extremes), local time, today's sunrise / sunset / daylight, and country facts (region, population, GDP, income group). For logistics, travel, events and drone planning. Paid ($0.01, x402).
- `lookup_product_code`: Look up a product barcode number: identify and validate EAN-13, EAN-8, UPC-A, UPC-E, GTIN-14, ISBN-13/10, ISSN and ISMN codes (wrong check digits are reported with the correct digit), convert between forms (GTIN-14, EAN-13, UPC-A, ISBN-10 <-> 13) and decode the GS1 prefix. Then fetch product data from open databases: name, brand, quantity, categories, image, labels, Nutri-Score (food, cosmetics, pet food via Open Food Facts) or title, authors, publisher and cover (books via Open Library). Paid ($0.001, x402).
- `ping_status`: Uptime / API health check: is a URL up, HTTP status, response time, redirect chain, headers and security headers (edge), plus the TLS certificate (issuer, expiry date, days remaining, SAN, verification errors). A down target is a valid answer. Paid ($0.0002, x402).
- `query_specs`: Structured specification table filtered by quantity (e.g. accuracy, wavelength, range), unit family, unit and value range, with source document and license. Paid ($0.001, x402).
- `read_barcode`: Read barcodes and QR codes from an image (URL or base64): QR, Micro QR, DataMatrix, Aztec, PDF417, MaxiCode, EAN-13/8, UPC-A/E, Code 128/39/93, Codabar, ITF and DataBar. Finds every code in the picture, even rotated, small or inverted (phone photos, receipts, labels, screenshots), and returns each one's text, format, position and meaning (URL, Wi-Fi network, vCard, e-mail, phone, location, crypto payment URI, product GTIN). No code found = not charged. Paid ($0.001, x402).
- `read_feed`: Read a published RSS 2.0 / RSS 1.0 / Atom / JSON Feed (blogs, news, podcasts, Reddit, Mastodon, YouTube channel feeds) as clean JSON items: title, link, ISO dates, author, plain-text summary/content, categories, enclosures. An HTML page URL is followed to its advertised feed. robots.txt respected; nothing stored; social networks are not scraped. Paid ($0.0003, x402).
- `render_document`: Render Markdown (tables, code, lists, headings) into a styled PDF (custom CSS, A4/Letter/Legal, page numbers), a Word DOCX or standalone HTML; returns a private download link valid for 24 hours. External resources are never fetched (inline data: images only). Paid ($0.001, x402).
- `research_brief`: Research brief on any topic in one call: the best papers from ISHOB's open-licence archive, filled with a live search of 250M+ scholarly works, each with authors, year, venue, DOI and citations; abstracts only for openly licensed papers (CC0 / public domain / CC BY / CC BY-SA), metadata and link for the rest; plus a short AI synthesis citing the papers as [n]. Checked before payment: if nothing is found anywhere the answer is a free 404 'not_covered'. Paid ($0.05, x402).
- `resolve_name`: Resolve ENS names and Basenames both ways. name -> Ethereum address, Base address and profile records (avatar, description, url, email, Twitter/X, GitHub, Discord, Telegram) and whether it is that address's primary name; address -> its primary ENS name and primary Basename, each verified to resolve back to the same address. Works for .eth, *.base.eth, subnames and offchain (CCIP-Read) names. Unknown name or address = 404, not charged. Paid ($0.001, x402).
- `screenshot`: Render a public web page in headless Chromium (Cloudflare Browser Rendering) and return a screenshot (PNG/JPEG/WebP, base64) for vision models: viewport up to 1920x1920 (default 1920x1080) or full page up to 8000 px. robots.txt respected; every page request is SSRF-guarded; nothing stored. Paid ($0.001, x402).
- `search_archive`: Search the ISHOB archive (titles, keywords, authors). All words must match. Free.
- `search_specs`: Full-text search over abstracts and full texts, with extracted technical specifications (values, ranges, tolerances, units). Numeric constraints like "50 Nm" are matched. Paid ($0.001, x402).
- `set_agent_alarm`: Schedule a signed webhook to wake an AI agent later: ISHOB POSTs your JSON payload to your https callback at deliver_at or after delay_seconds (60 s to 30 days ahead), retrying failed deliveries (1, 5, 15, 30, 60 min). Each delivery carries X-ISHOB-Signature (HMAC-SHA256 with the signing_secret returned once). Free status: GET /v1/alarm/{id}; free cancel: POST /v1/alarm/{id}/cancel. Charged only when the alarm is accepted. Paid ($0.001, x402).
- `simulate_tx`: Simulate a transaction before signing it: what leaves and enters the wallet (native, ERC-20, NFTs, SPL) with USD values, approvals granted (unlimited / to non-contracts), revert reason, gas and fee, plus a risk level. EVM chains via eth_simulateV1 (raw call: from, to, data, value); Solana via simulateTransaction (base64 transaction, unsigned is fine). Nothing is broadcast. Paid ($0.0015, x402).
- `site_audit`: Full website audit in one call: an A-F grade with four 0-100 scores (performance, SEO, security, availability) and every issue listed with a fix. One real browser load gives Core Web Vitals, SEO of the rendered page (title, description, headings, canonical, alt text, Open Graph, JSON-LD) and an optional screenshot; plus uptime, HTTP→HTTPS redirect, TLS expiry, security headers, SPF/DMARC email security, domain registration, robots.txt and sitemap. robots.txt respected; nothing stored. Paid ($0.02, x402).
- `site_metadata`: Extract a page's title, meta tags, OpenGraph, Twitter card, canonical/icons/feeds and JSON-LD from the <head> only (no full DOM download, robots.txt respected, nothing stored). Paid ($0.0002, x402).
- `site_speed`: Page speed & Core Web Vitals from a real headless-Chromium load (mobile or desktop): LCP, CLS, FCP, TTFB, total blocking time with good/needs-improvement/poor ratings, load timings, request count and page weight by resource type. Unthrottled lab run from Cloudflare's network (not Lighthouse, not field data). robots.txt respected. Paid ($0.001, x402).
- `swap_route`: Best DEX swap route and quote on Ethereum, Base, Arbitrum, Optimism, Polygon or BNB Chain via the KyberSwap aggregator (400+ liquidity sources, split routes): output amount, slippage-protected minimum, USD value change, gas, hops. With `sender`, also an unsigned ready-to-sign transaction plus the ERC-20 allowance check. Quotes only; ISHOB never sends transactions. Paid ($0.001, x402).
- `token_audit`: Token safety & scam check for an ERC-20 (Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain) or SPL mint (Solana): honeypot simulation, buy/sell tax, mint / blacklist / pause / owner privileges, LP lock, holder concentration (Powered by GoPlus Security) plus our own on-chain checks (proxy slots, owner, verified source, mint/freeze authority, Token-2022 extensions). Returns severity-ranked flags and a risk level. Paid ($0.001, x402).
- `token_flows`: Who is buying and selling a token right now: every on-chain transfer in the last 1h / 6h / 24h split into DEX buys, sells and wallet transfers. Returns buy vs sell volume and net flow in USD, unique buyers and sellers, top net buyers and sellers, the largest trades (with tx hashes) and an organic-activity score with wash-trading signals (round-tripping, volume concentration, repeated bot-size trades). Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain. Paid ($0.01, x402).
- `token_report`: Token due diligence in one call: a 0-100 safety score and verdict (low-risk / caution / high-risk / avoid) with every deduction explained. Combines the token audit (honeypot, taxes, mint/blacklist/pause, LP lock, holders — Powered by GoPlus Security), a verified-contract scan for owner powers, price and real DEX liquidity, and live sell tests ($100 and $1,000 to USDC). Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Solana. Paid ($0.05, x402).
- `token_verdict`: Should I touch this token? A fast plain-English verdict (low-risk / caution / high-risk / avoid) with a 0-100 score, the top 3 reasons, the good signals and the key facts (honeypot, taxes, liquidity, holders, owner). Rule-based, no AI: same token, same answer. Optional 1200x630 SVG share card. Powered by GoPlus Security plus on-chain checks and real DEX liquidity. Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Solana. Paid ($0.01, x402).
- `wallet_portfolio`: Multi-chain wallet portfolio: native balances and token holdings with USD values and totals per chain. EVM addresses are checked on Ethereum, Base, Arbitrum, Optimism, Polygon and BNB Chain (native + ~75 major tokens + up to 20 tokens you pass); Solana addresses list SOL and every SPL / Token-2022 holding. Prices come from on-chain DEX pools. Read-only public data. Paid ($0.001, x402).
- `wallet_report`: Wallet risk & activity report in one call — vet a counterparty before you transact: the address's own reputation (sanctions, phishing, theft, laundering, mixer... Powered by GoPlus Security), open token approvals with risky spenders, scam tokens held, and the full portfolio with USD values across Ethereum, Base, Arbitrum, Optimism, Polygon and BNB Chain (or Solana: holdings only). Verdict: clean / caution / high-risk / flagged / incomplete, with every reason listed. Paid ($0.03, x402).
- `weather_risk`: Current weather and hourly forecast (MET Norway, CC BY 4.0) for a lat/lon, plus decision flags: drone_safe, event_risk (low/moderate/high), rain_expected, frost_risk, high_wind — with the thresholds used. Heuristics, not aviation or safety advice. Paid ($0.001, x402).