# com.tariffmonkee/mcp

> Content, research, trust checks. Taiwan-specific: work permits, tax, property, fraud, localization.

- name: com.tariffmonkee/mcp
- version: 1.0.1
- connection class: R0 (autonomous)
- trust: 76/100 flags: no-repository
- quality: 63/100 (needs work)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.tariffmonkee%2Fmcp
- tools: https://api.protogrid.dev/v1/servers/com.tariffmonkee%2Fmcp/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "tariffmonkee": {
      "type": "http",
      "url": "https://tariffmonkee.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 99
- freshness: 85
- provenance: 45
- drivers: +dns-namespace +reachable +uptime-97% ~updated-44d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 63/100 (needs work)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: tariffmonkee-content (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); tariffmonkee-gbp-audit (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); tariffmonkee-lead-discovery (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 3,076 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 25 (weight 15)

- warn `stability.changes`: 21 tool changes in 30 days
- fail `stability.rug_pull`: 2 tools kept their name but changed most of their description in 30 days; review before trusting them

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 19, about 3,076 tokens to load them all
- tool set hash: 785fe1827e80c7d0d9123a40eee1c24d
- tools last changed: 2026-10-19T17:39:45.156Z
- badge: [![protogrid quality](https://protogrid.dev/badge/com.tariffmonkee/mcp.svg)](https://protogrid.dev/servers/com.tariffmonkee/mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-19 `tariffmonkee-email-verify` changed (description)
  - before: Email deliverability verdict: checks syntax, MX record presence, disposable-domain match and SPF/DMARC presence. Returns deliverable, risky or undeliverable with reasons. Scoped to one address, not a domain security audit. Costs $0.003 per call via x402.
  - after: Email deliverability verdict: checks syntax, MX record presence, disposable-domain match and SPF/DMARC presence. Returns deliverable, risky or undeliverable with reasons. Scoped to one address, not a domain security audit. Costs $0.002 per call via x402.
- 2026-10-19 `tariffmonkee-content` changed (description)
  - before: Converts a URL to clean Markdown using a real rendered browser (JavaScript executed). Results are cached for 24 hours per URL, so repeat requests for the same page are fast and do not re-render. Costs $0.005 per call via x402.
  - after: Converts a URL to clean Markdown using a real rendered browser (JavaScript executed). Results are cached for 24 hours per URL, so repeat requests for the same page are fast and do not re-render. Costs $0.002 per call via x402.
- 2026-10-18 `tariffmonkee-research` changed (description)
  - before: query -> up to 10 deduped, rendered sources as one token-budgeted bundle (~8,000 tokens combined). Combines /search (three-provider failover, region=tw Taiwan lane) with /content's rendered-page fetching internally, so you get one call instead of assembling search-then-fetch yourself. Sources are deduped by domain. Requires at least 3 successfully fetched sources to succeed -- returns sources_requested and sources_returned so you can see how many of the candidate set actually came back. Costs $0.031 per call via x402 -- only charged when a real search actually runs. A vague query pauses and asks for clarification at no cost; a search that can't find enough sources also pauses at no cost, suggesting a broadened query you can choose to run (which then does cost $0.031).
  - after: Research bundle: takes a query and returns up to 10 deduplicated, rendered web sources as one token-budgeted Markdown bundle (about 8,000 tokens), one source per domain. Combines web search with rendered-page fetching in a single call. Needs at least 3 fetched sources; the response reports sources_requested and sources_returned. Optional region=tw selects a Taiwan, Traditional Chinese lane. Costs $0.031 per call via x402 -- only charged when a real search actually runs. A vague query pauses and asks for clarification at no cost; a search that can't find enough sources also pauses at no cost, suggesting a broadened query you can choose to run (which then does cost $0.031).
- 2026-10-18 `tariffmonkee-lead-discovery` changed (description, inputSchema)
  - before: Discover and qualify local business leads by category and area -- no pre-existing list required. Searches Google Maps for the given category in the given area, then returns only businesses with at least one real red flag (unclaimed listing, missing photos, missing hours, missing website, low rating, or few reviews), as a CSV ready for cold outreach. Up to 10 qualified leads per call. Costs $0.75 per call via x402.
  - after: Local lead discovery as CSV: finds businesses for a category and area from Google Maps data, checks each profile, and returns up to 10 with at least one red flag (unclaimed, missing photos, hours or website, low rating, few reviews). No starting list required. Costs $0.75 per call via x402.
- 2026-10-18 `tariffmonkee-lead-list` changed (description, inputSchema)
  - before: Audit-qualified lead list for prospecting. Submit up to 10 candidate local businesses; each is checked against its Google Business Profile (claimed status, photos, hours, website, description, rating, review count) and only businesses with at least one real red flag are returned, as a CSV ready to use as a cold-outreach list. Cheaper per-business than calling /gbp-audit individually if you use the full batch. Costs $0.60 per call via x402.
  - after: Audit-qualified lead list as CSV: takes up to 10 local businesses, checks each Google Business Profile (claimed status, photos, hours, website, description, rating, review count) and returns only those with at least one red flag. Cheaper per business than /gbp-audit when the full batch is used. Costs $0.60 per call via x402.
- 2026-10-18 `tariffmonkee-visibility-report` changed (description, inputSchema)
  - before: White-label local visibility report for one business -- combines Google Business Profile completeness, organic search ranking for a target keyword, and AI answer-engine visibility for a buyer-intent query into a single PDF deliverable. White-label by design: no TariffMonkee branding anywhere in the report output, so agencies can present it under their own name to a client or prospect. Costs $0.15 per call via x402.
  - after: White-label local visibility report for one business, returned as an application/pdf file (not JSON): Google Business Profile completeness, organic ranking for a target keyword and AI answer-engine visibility for a buyer-intent query. No TariffMonkee branding appears in the output, so agencies can present it under their own name. Costs $0.15 per call via x402.
- 2026-10-18 `tariffmonkee-ai-visibility` changed (description)
  - before: Business/domain + query -> does it appear in AI answers. Sends the real query to a live AI model with web search enabled and checks the actual response for a mention of the business and a citation linking to the domain. Costs $0.031 per call via x402.
  - after: AI answer visibility check: sends a real query to a live AI model with web search enabled and checks the response for a mention of the business and a citation linking to its domain. Returns mentioned, cited, citations and an excerpt. Costs $0.031 per call via x402.
- 2026-10-18 `tariffmonkee-serp-check` changed (description)
  - before: Keyword + domain -> search position. Checks whether and where a domain ranks in Google organic results for a given keyword, via the same DataForSEO SERP data already powering /search. Costs $0.021 per call via x402.
  - after: Google organic ranking check: finds whether and where a domain ranks for a keyword, using DataForSEO SERP data. Returns found, position, URL, title and total organic results. Costs $0.021 per call via x402.
- 2026-10-18 `tariffmonkee-gbp-audit` changed (description)
  - before: Business -> visibility score, missing fields, review health, AI-readiness flags, fix list. Audits a Google Business Profile via DataForSEO's Business Data API: category, contact info, hours, claimed status, photos, and review rating/distribution. Costs $0.05 per call via x402.
  - after: Google Business Profile audit for a local business: visibility score, missing fields, review health, AI-readiness flags and a fix list. Uses DataForSEO Business Data for category, contact info, hours, claimed status, photos and review rating distribution. Costs $0.05 per call via x402.
- 2026-10-18 `tariffmonkee-trust-audit` changed (description)
  - before: Orchestrated bundle: runs /linkcheck, /sitegrade, and /domain-intel (plus /email-verify if an email is supplied) and synthesizes one confidence-weighted trust verdict, explicitly flagging disagreement between sources -- e.g. a very new domain paired with an unusually mature TLS/header setup -- rather than just concatenating four outputs. Supply at least one of domain, url, or email. Costs $0.10 per call via x402.
  - after: One confidence-weighted trust verdict for a domain, URL or email: runs linkcheck, sitegrade and domain-intel (plus email-verify when an email is supplied) and flags disagreement between sources, such as a very new domain with a mature TLS setup, instead of concatenating outputs. At least one of domain, url or email is required. Costs $0.10 per call via x402.

Full history: https://api.protogrid.dev/v1/servers/com.tariffmonkee%2Fmcp/changes

## Remotes

- https://tariffmonkee.com/mcp (streamable-http, auth none, reachable true, uptime30d 0.973913)

## Packages

_none_

## Tools (19)

- `tariffmonkee-aeo-audit`: AI-readiness audit for a URL: checks schema.org structured data, crawlability (robots.txt, meta robots, canonical) and llms.txt presence, then returns a 0-100 score with specific recommendations. Cached for 24 hours per URL. Costs $0.031 per call via x402.
- `tariffmonkee-ai-visibility`: AI answer visibility check: sends a real query to a live AI model with web search enabled and checks the response for a mention of the business and a citation linking to its domain. Returns mentioned, cited, citations and an excerpt. Costs $0.031 per call via x402.
- `tariffmonkee-content`: Converts a URL to clean Markdown using a real rendered browser (JavaScript executed). Results are cached for 24 hours per URL, so repeat requests for the same page are fast and do not re-render. Costs $0.002 per call via x402.
- `tariffmonkee-domain-intel`: Domain ownership and registration intelligence via RDAP: registration age, registrar, privacy-proxy status, expiration date, nameservers and detected mail provider. Technical configuration grading is in /sitegrade; URL reputation is in /linkcheck. Costs $0.021 per call via x402.
- `tariffmonkee-email-verify`: Email deliverability verdict: checks syntax, MX record presence, disposable-domain match and SPF/DMARC presence. Returns deliverable, risky or undeliverable with reasons. Scoped to one address, not a domain security audit. Costs $0.002 per call via x402.
- `tariffmonkee-extract`: Extracts structured JSON from text already in hand, matching a JSON Schema supplied by the caller, using AI. No browser render, so it costs less than /extract-url. Takes content and schema; returns data and the model used. Costs $0.016 per call via x402.
- `tariffmonkee-extract-url`: Fetches a URL in a rendered browser and extracts structured JSON matching a caller-supplied JSON Schema in one call, using AI with multi-model fallback. Cached for 24 hours per URL and schema. For text already in hand, /extract costs less. Costs $0.021 per call via x402.
- `tariffmonkee-gbp-audit`: Google Business Profile audit for a local business: visibility score, missing fields, review health, AI-readiness flags and a fix list. Uses DataForSEO Business Data for category, contact info, hours, claimed status, photos and review rating distribution. Costs $0.05 per call via x402.
- `tariffmonkee-lead-discovery`: Local lead discovery as CSV: finds businesses for a category and area from Google Maps data, checks each profile, and returns up to 10 with at least one red flag (unclaimed, missing photos, hours or website, low rating, few reviews). No starting list required. Costs $0.75 per call via x402.
- `tariffmonkee-lead-list`: Audit-qualified lead list as CSV: takes up to 10 local businesses, checks each Google Business Profile (claimed status, photos, hours, website, description, rating, review count) and returns only those with at least one red flag. Cheaper per business than /gbp-audit when the full batch is used. Costs $0.60 per call via x402.
- `tariffmonkee-linkcheck`: URL safety verdict: follows the redirect chain, detects homograph and punycode hostname tricks, and cross-references the destination host against the URLhaus threat feed. Returns safe, suspicious or malicious with reasons. Single-URL scope; domain-wide grading is /sitegrade and registration facts are /domain-intel. Costs $0.005 per call via x402.
- `tariffmonkee-pdf`: Returns a PDF of a full web page, rendered in a real browser (JavaScript executed). The response body is the file, not JSON. Cached for 24 hours per URL; X-Cached and X-Fetched-At response headers report cache status and fetch time. Costs $0.01 per call via x402.
- `tariffmonkee-research`: Research bundle: takes a query and returns up to 10 deduplicated, rendered web sources as one token-budgeted Markdown bundle (about 8,000 tokens), one source per domain. Combines web search with rendered-page fetching in a single call. Needs at least 3 fetched sources; the response reports sources_requested and sources_returned. Optional region=tw selects a Taiwan, Traditional Chinese lane. Costs $0.031 per call via x402 -- only charged when a real search actually runs. A vague query pauses and asks for clarification at no cost; a search that can't find enough sources also pauses at no cost, suggesting a broadened query you can choose to run (which then does cost $0.031).
- `tariffmonkee-screenshot`: Returns a full-page PNG screenshot of a URL, captured in a real rendered browser (JavaScript executed). The response body is the image, not JSON. Cached for 24 hours per URL; X-Cached and X-Fetched-At response headers report cache status and fetch time. Costs $0.01 per call via x402.
- `tariffmonkee-search`: Web search results as clean JSON: up to 10 ranked results per query with title, URL and snippet. Three search providers with automatic failover. Optional region=tw selects a Traditional Chinese, Taiwan-region search lane. Cached for 24 hours per query and region. Costs $0.005 per call via x402.
- `tariffmonkee-serp-check`: Google organic ranking check: finds whether and where a domain ranks for a keyword, using DataForSEO SERP data. Returns found, position, URL, title and total organic results. Costs $0.021 per call via x402.
- `tariffmonkee-sitegrade`: Domain security grade (0-100, A-F) from HTTPS reachability, security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) and CAA records. Reports HTTPS connect success or failure, not raw certificate expiry. Registration facts are in /domain-intel; URL reputation is in /linkcheck. Costs $0.05 per call via x402.
- `tariffmonkee-trust-audit`: One confidence-weighted trust verdict for a domain, URL or email: runs linkcheck, sitegrade and domain-intel (plus email-verify when an email is supplied) and flags disagreement between sources, such as a very new domain with a mature TLS setup, instead of concatenating outputs. At least one of domain, url or email is required. Costs $0.10 per call via x402.
- `tariffmonkee-visibility-report`: White-label local visibility report for one business, returned as an application/pdf file (not JSON): Google Business Profile completeness, organic ranking for a target keyword and AI answer-engine visibility for a buyer-intent query. No TariffMonkee branding appears in the output, so agencies can present it under their own name. Costs $0.15 per call via x402.