protogrid
Sign inAdd to your agent

Search / com.thetempleofdoom.hyperion/hyperion

hyperion

R1 · needs a key

Hyperion — MCP tool marketplace for AI agents: web, OSINT, security, research via one key.

v1.0.0 · active · website · descriptor JSON · versions

An agent can connect on its own if it already holds HYPERION_TOKEN.Remote endpoint behind a static API key or header. The registry never sees the value; the agent fills the placeholder.
Quality70needs work
Trust78of 100
Uptime, 30 days86%
Latency p50391 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "hyperion": {
      "type": "http",
      "url": "https://hyperion.thetempleofdoom.com/mcp",
      "headers": {
        "Authorization": "Bearer ${HYPERION_TOKEN}"
      }
    }
  }
}
claude mcp add --transport http hyperion https://hyperion.thetempleofdoom.com/mcp --header "Authorization: Bearer ${HYPERION_TOKEN}"
[mcp_servers.hyperion]
url = "https://hyperion.thetempleofdoom.com/mcp"
bearer_token_env_var = "HYPERION_TOKEN"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "hyperion": {
      "type": "remote",
      "url": "https://hyperion.thetempleofdoom.com/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:HYPERION_TOKEN}"
      }
    }
  }
}
{
  "mcpServers": {
    "hyperion": {
      "type": "http",
      "url": "https://hyperion.thetempleofdoom.com/mcp",
      "headers": {
        "Authorization": "Bearer ${HYPERION_TOKEN}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=hyperion&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vaHlwZXJpb24udGhldGVtcGxlb2Zkb29tLmNvbS9tY3AiLCJoZWFkZXJzIjp7IkF1dGhvcml6YXRpb24iOiJCZWFyZXIgJHtIWVBFUklPTl9UT0tFTn0ifX0%3D"
}
{
  "servers": {
    "hyperion": {
      "type": "http",
      "url": "https://hyperion.thetempleofdoom.com/mcp",
      "headers": {
        "Authorization": "Bearer ${HYPERION_TOKEN}"
      }
    }
  }
}
{
  "mcpServers": {
    "hyperion": {
      "httpUrl": "https://hyperion.thetempleofdoom.com/mcp",
      "headers": {
        "Authorization": "Bearer ${HYPERION_TOKEN}"
      }
    }
  }
}
extensions:
  "hyperion":
    enabled: true
    name: "hyperion"
    type: streamable_http
    uri: "https://hyperion.thetempleofdoom.com/mcp"
    headers:
      "Authorization": "Bearer ${HYPERION_TOKEN}"
    timeout: 300

Placeholders to fill from your own secret store: ${HYPERION_TOKEN}. The registry never accepts secret values.

Quality 70 / 100needs work

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene64 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • fail
    tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: o_s3buckets (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); mobsf_report (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); v_hash (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
  • warn
    tools.token_costabout 11,309 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability75 · weight 15
  • warn
    stability.changes720 tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

355 tools, about 11,309 tokens to load them all · tool set a15c0daf39ea · tools last changed 2026-09-28 · checked 2026-10-09 23:53 UTC

Tool changes

  • px_orderadded

    Check proxy order payment/fulfilment status (50 sats/call; free tier 100 calls/mo)

  • px_infoadded

    Proxy service capabilities, auth, billing info (50 sats/call; free tier 100 calls/mo)

  • px_plansadded

    List residential proxy plans + sats pricing (50 sats/call; free tier 100 calls/mo)

  • fc_mapadded

    Map all links/routes of a website (350 sats/call; free tier 100 calls/mo)

  • fc_searchadded

    Web search returning clean page content (300 sats/call; free tier 100 calls/mo)

  • fc_scrapeadded

    Scrape any URL to clean markdown (JS rendering) (300 sats/call; free tier 100 calls/mo)

  • re_reportadded

    Cited multi-source research report. Call with {q} -> job_id, poll with {job_id} until done (charged on completion poll) (1500 sats/call; free tier 100 calls/mo)

  • re_summarizeadded

    LLM summary of specific URLs (pass urls=comma-separated) (400 sats/call; free tier 100 calls/mo)

  • re_semanticadded

    Vector/semantic search over the private knowledge cloud (250 sats/call; free tier 100 calls/mo)

  • re_searchadded

    Search a private crawled+indexed knowledge cloud (OpenSearch+Qdrant) (200 sats/call; free tier 100 calls/mo)

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 78 / 100

no-repository
provenance55
liveness94
freshness85
hygiene80

+dns-namespace +website +reachable +uptime-86% ~updated-45d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://hyperion.thetempleofdoom.com/mcp streamable-httpapi_key ${HYPERION_TOKEN}yes86%391 ms2025-06-182026-10-09

Tools (355)

asciiText → ASCII art (150 sats/call; free tier 100 calls/mo)
chartSVG bar/line/pie/donut charts (350 sats/call; free tier 100 calls/mo)
cronExplain/validate/next-run cron expressions (150 sats/call; free tier 100 calls/mo)
data_convertJSON/CSV/YAML/XML/query-string transforms (200 sats/call; free tier 100 calls/mo)
diffLine-by-line diff of two texts (250 sats/call; free tier 100 calls/mo)
echo_beaconCheck voice/TTS API status (0 sats/call; free tier 100 calls/mo)
echo_orderBuy voice credits (BTCPay invoice) (0 sats/call; free tier 100 calls/mo)
echo_ttsSynthesize speech from text (needs echo key) (0 sats/call; free tier 100 calls/mo)
encodeBase64/URL/Hex/HTML/JWT encode+decode (200 sats/call; free tier 100 calls/mo)
execute_jsRun JS in a sandbox, capture output (300 sats/call; free tier 100 calls/mo)
fc_mapMap all links/routes of a website (350 sats/call; free tier 100 calls/mo)
fc_scrapeScrape any URL to clean markdown (JS rendering) (300 sats/call; free tier 100 calls/mo)
fc_searchWeb search returning clean page content (300 sats/call; free tier 100 calls/mo)
hashMD5/SHA/HMAC/UUID/random tokens (250 sats/call; free tier 100 calls/mo)
http_clientUniversal HTTP request to any API/webhook (300 sats/call; free tier 100 calls/mo)
lynx_inspectInspect a file: hashes/entropy/strings/PE/PDF/Office (base64) (200 sats/call; free tier 100 calls/mo)
lynx_reconRecon external target (nmap/subfinder/nuclei/theHarvester/dnsrecon) (400 sats/call; free tier 100 calls/mo)
lynx_stegDecode hidden data (steghide + zsteg LSB) (300 sats/call; free tier 100 calls/mo)
mathEval formulas, stats, finance (200 sats/call; free tier 100 calls/mo)
mcp_discoverSearch 1000+ MCP servers by capability (300 sats/call; free tier 100 calls/mo)
mcp_readmeFetch setup/config for any MCP server (200 sats/call; free tier 100 calls/mo)
mcp_statsMCP catalog counts + API-key flags (100 sats/call; free tier 100 calls/mo)
mobsf_reportFetch a mobile app security report by hash (400 sats/call; free tier 100 calls/mo)
mobsf_scansList recent mobile app security scans (200 sats/call; free tier 100 calls/mo)
netutilsURL/subnet/user-agent analysis (300 sats/call; free tier 100 calls/mo)
o_abusecontactAuthoritative abuse email (RIPEstat finder) (200 sats/call; free tier 100 calls/mo)
o_agifyPredict age from a first name (agify.io) (200 sats/call; free tier 100 calls/mo)
o_airqualityPM2.5/PM10/European AQI at coords (Open-Meteo, no key) (200 sats/call; free tier 100 calls/mo)
o_antipodeOpposite point on Earth for coords (offline) (200 sats/call; free tier 100 calls/mo)
o_api_key_scanScan GitHub/Pastebin/Google for exposed API keys/secrets (200 sats/call; free tier 100 calls/mo)
o_archiveorgInternet Archive item metadata (200 sats/call; free tier 100 calls/mo)
o_arxivarXiv paper search by title/author/keyword (200 sats/call; free tier 100 calls/mo)
o_ascii85Ascii85 encode/decode (offline) (200 sats/call; free tier 100 calls/mo)
o_asnASN details or prefixes for an IP (200 sats/call; free tier 100 calls/mo)
o_asnlookupASN org/country/prefixes via RIPEstat (200 sats/call; free tier 100 calls/mo)
o_asrankGlobal ASN ranking + customer cone size (200 sats/call; free tier 100 calls/mo)
o_atbashAtbash A↔Z mirror cipher (offline, self-inverse) (200 sats/call; free tier 100 calls/mo)
o_attack_surfaceMap attack surface: services + endpoints + API (200 sats/call; free tier 100 calls/mo)
o_barcodeEAN-13 / UPC-A check digit validation (offline) (200 sats/call; free tier 100 calls/mo)
o_base32RFC 4648 Base32 encode or decode (200 sats/call; free tier 100 calls/mo)
o_base36Encode int <-> base36, autodetecting direction (offline) (200 sats/call; free tier 100 calls/mo)
o_base64Auto decode/encode base64 (offline) (200 sats/call; free tier 100 calls/mo)
o_base_convertBinary/octal/decimal/hex number conversion (offline) (200 sats/call; free tier 100 calls/mo)
o_bgphistoryRouting origin history (RIPE Stat) (200 sats/call; free tier 100 calls/mo)
o_bimiBrand-indicator (logo) DNS record (200 sats/call; free tier 100 calls/mo)
o_binarytextText ↔ 8-bit binary (offline) (200 sats/call; free tier 100 calls/mo)
o_blockheightCurrent Bitcoin + Ethereum block height (200 sats/call; free tier 100 calls/mo)
o_blueskyAT Protocol public profile (200 sats/call; free tier 100 calls/mo)
o_breach_aggregatorAggregate breach databases (XposedOrNot, LeakCheck, etc) (200 sats/call; free tier 100 calls/mo)
o_breachdbAggregated breach collection search (200 sats/call; free tier 100 calls/mo)
o_breachdirectoryProxyNova COMB dataset search for credential exposure (200 sats/call; free tier 100 calls/mo)
o_breachsearchPublic HIBP breach metadata search (200 sats/call; free tier 100 calls/mo)
o_btcaddrBitcoin balance/tx via mempool.space (200 sats/call; free tier 100 calls/mo)
o_btcfeesRecommended Bitcoin fees sat/vB (mempool.space) (200 sats/call; free tier 100 calls/mo)
o_c2_infrastructureDetect C2 infrastructure + hosting (200 sats/call; free tier 100 calls/mo)
o_caesarROT-N / Caesar brute force, all 25 shifts (offline) (200 sats/call; free tier 100 calls/mo)
o_casifysnake/camel/Pascal/kebab/CONSTANT case (offline) (200 sats/call; free tier 100 calls/mo)
o_cdnjsHosted JS library version + assets (200 sats/call; free tier 100 calls/mo)
o_cfradarDomain rank + categories from Cloudflare Radar (200 sats/call; free tier 100 calls/mo)
o_checksumCRC32 + Adler32 checksum of input text (offline) (200 sats/call; free tier 100 calls/mo)
o_chesscomPublic player profile + ratings (200 sats/call; free tier 100 calls/mo)
o_cidrSubnet calc: network, mask, host range, count (offline) (200 sats/call; free tier 100 calls/mo)
o_circlhashKnown-file lookup (CIRCL hashlookup) (200 sats/call; free tier 100 calls/mo)
o_clickjackingX-Frame-Options + CSP frame-ancestors check (200 sats/call; free tier 100 calls/mo)
o_cloudAWS/GCP/Azure/etc. detection + hosting flag (200 sats/call; free tier 100 calls/mo)
o_codebergCodeberg/Gitea public user (200 sats/call; free tier 100 calls/mo)
o_codeforcesCodeforces competitive programmer rating & rank (200 sats/call; free tier 100 calls/mo)
o_colorhex/rgb -> rgb/hsl + nearest name (offline) (200 sats/call; free tier 100 calls/mo)
o_cookiesSecure/HttpOnly/SameSite flag review (200 sats/call; free tier 100 calls/mo)
o_corsOrigin-reflection / wildcard misconfig (200 sats/call; free tier 100 calls/mo)
o_cratedownloadsDownload totals for a Rust crate (200 sats/call; free tier 100 calls/mo)
o_cratesRust crate stats + downloads (200 sats/call; free tier 100 calls/mo)
o_cratestatsRust crate downloads, version, repo (no key) (200 sats/call; free tier 100 calls/mo)
o_crc32Compute CRC-32 of input (200 sats/call; free tier 100 calls/mo)
o_credential_stuffingCheck breach + stuffing risk (200 sats/call; free tier 100 calls/mo)
o_crossrefauthorWorks by author/keyword (Crossref) (200 sats/call; free tier 100 calls/mo)
o_cryptoBTC/ETH balance & tx history (200 sats/call; free tier 100 calls/mo)
o_cryptomarketGlobal market cap, BTC dominance, 24h volume (CoinGecko) (200 sats/call; free tier 100 calls/mo)
o_csp_parseContent-Security-Policy header analysis & grade (200 sats/call; free tier 100 calls/mo)
o_cveCVE detail + CVSS (CIRCL, no key) (200 sats/call; free tier 100 calls/mo)
o_cvedetailFull CVE record (CVSS, refs) via CIRCL (200 sats/call; free tier 100 calls/mo)
o_cve_poc_checkerCheck if a CVE has public POC/exploit code (200 sats/call; free tier 100 calls/mo)
o_cve_severityCVSS + EPSS + KEV for a CVE (200 sats/call; free tier 100 calls/mo)
o_cve_timelineWhen a CVE was discussed (Twitter/Reddit/News) (200 sats/call; free tier 100 calls/mo)
o_dataciteResearch datasets/DOIs by keyword (200 sats/call; free tier 100 calls/mo)
o_datauriParse or create data: URIs (200 sats/call; free tier 100 calls/mo)
o_decodeAuto base64/hex/URL-decode + refang (200 sats/call; free tier 100 calls/mo)
o_dehashed_domainDeHashed public page scrape for domain breach exposure (200 sats/call; free tier 100 calls/mo)
o_depsdevOpen-source insights: versions, default (200 sats/call; free tier 100 calls/mo)
o_devtoForem/dev.to public profile (200 sats/call; free tier 100 calls/mo)
o_dirlistingOpen directory-index exposure (per-target) (200 sats/call; free tier 100 calls/mo)
o_disastersActive worldwide disasters: quakes/cyclones/floods (feeds globe) (200 sats/call; free tier 100 calls/mo)
o_dnsA/AAAA/MX/NS/TXT/CNAME/SOA/CAA records (200 sats/call; free tier 100 calls/mo)
o_dnsblSpamhaus/Barracuda/SORBS/SpamCop check (200 sats/call; free tier 100 calls/mo)
o_dnsgraphHurricane Electric DNS delegation info (200 sats/call; free tier 100 calls/mo)
o_dnsmxMX records via Google DNS-over-HTTPS (200 sats/call; free tier 100 calls/mo)
o_dnspropCompare A records across Google/Cloudflare/Quad9 (200 sats/call; free tier 100 calls/mo)
o_dnsqueryDNS A record lookup via Google DoH (200 sats/call; free tier 100 calls/mo)
o_dnsreconQuery ALL DNS record types at once (200 sats/call; free tier 100 calls/mo)
o_dnsverifyWhich SaaS a domain is enrolled in (TXT tokens) (200 sats/call; free tier 100 calls/mo)
o_dockerhubDocker Hub repo pulls, stars, last update (no key) (200 sats/call; free tier 100 calls/mo)
o_dohUncommon DNS records (HTTPS/SVCB/TLSA/SRV/NAPTR…) (200 sats/call; free tier 100 calls/mo)
o_doiCrossref publication metadata for a DOI (200 sats/call; free tier 100 calls/mo)
o_eanEAN/UPC check digit + GS1 country prefix (offline) (200 sats/call; free tier 100 calls/mo)
o_elevationGround elevation in metres (Open-Meteo) (200 sats/call; free tier 100 calls/mo)
o_emailGravatar, MX, disposable detection (200 sats/call; free tier 100 calls/mo)
o_emailrepemailrep.io: malicious/spam/breach flags for email (no key, limited) (200 sats/call; free tier 100 calls/mo)
o_emailsecSPF / DMARC / DKIM posture (200 sats/call; free tier 100 calls/mo)
o_ensENS name <-> ETH address + avatar (200 sats/call; free tier 100 calls/mo)
o_epochUnix timestamp <-> UTC datetime (200 sats/call; free tier 100 calls/mo)
o_epssExploitation probability (FIRST EPSS) (200 sats/call; free tier 100 calls/mo)
o_exploit_cveExploit-DB + GitHub POCs for a CVE (200 sats/call; free tier 100 calls/mo)
o_faviconfavicon md5/sha256 for pivoting (200 sats/call; free tier 100 calls/mo)
o_feedsDiscover syndication feeds on a site (200 sats/call; free tier 100 calls/mo)
o_feodoipsIs IP on abuse.ch Feodo botnet C2 list (200 sats/call; free tier 100 calls/mo)
o_flightsnearLive aircraft within ~1° of coords (OpenSky) (200 sats/call; free tier 100 calls/mo)
o_formauditEnumerate forms/inputs (login/upload) — attack surface (200 sats/call; free tier 100 calls/mo)
o_genderizePredict gender from a first name (genderize.io) (200 sats/call; free tier 100 calls/mo)
o_geocodePlace name → coordinates (OSM Nominatim) (200 sats/call; free tier 100 calls/mo)
o_gh_dorkingGitHub code search for target string exposure in public repos (200 sats/call; free tier 100 calls/mo)
o_ghkeysgpgWhether a user publishes a GPG key (200 sats/call; free tier 100 calls/mo)
o_gh_secret_scanScan GitHub user's public repos for leaked secrets/passwords (200 sats/call; free tier 100 calls/mo)
o_github_codeGitHub unauthenticated code search (10 results) (200 sats/call; free tier 100 calls/mo)
o_githubsearchSearch GitHub repos by keyword (200 sats/call; free tier 100 calls/mo)
o_gitlabPublic user profile (200 sats/call; free tier 100 calls/mo)
o_gleif_nameGLEIF fuzzy legal-entity name → LEI codes (200 sats/call; free tier 100 calls/mo)
o_golangpkgLatest version of a Go module (200 sats/call; free tier 100 calls/mo)
o_goproxyLatest version of a Go module via module proxy (no key) (200 sats/call; free tier 100 calls/mo)
o_gravatarfullFull public Gravatar profile + linked accounts (200 sats/call; free tier 100 calls/mo)
o_greynoiseIs the IP a known internet scanner — benign/malicious (200 sats/call; free tier 100 calls/mo)
o_hackernewsProfile: karma, age, activity (200 sats/call; free tier 100 calls/mo)
o_hashidGuess hash algorithm from length/charset (200 sats/call; free tier 100 calls/mo)
o_hashtextmd5/sha1/sha256/sha512 of text (offline) (200 sats/call; free tier 100 calls/mo)
o_headersHeaders + security-header scorecard (200 sats/call; free tier 100 calls/mo)
o_hexdumpOffset/hex/ASCII hexdump of input (offline) (200 sats/call; free tier 100 calls/mo)
o_hibpCheck if a password appeared in breaches via HIBP k-anonymity (no key) (200 sats/call; free tier 100 calls/mo)
o_hibp_emailEmail breach exposure via XposedOrNot (HIBP-compatible, no key) (200 sats/call; free tier 100 calls/mo)
o_hnsearchSearch Hacker News stories/comments (200 sats/call; free tier 100 calls/mo)
o_hnuserHN profile: karma, created, submission count (200 sats/call; free tier 100 calls/mo)
o_holidaysCountry public holidays this year (nager.at) (200 sats/call; free tier 100 calls/mo)
o_homoglyphDetect confusable/mixed-script spoofing chars (offline) (200 sats/call; free tier 100 calls/mo)
o_hostnameIP → hostname via reverse DNS (200 sats/call; free tier 100 calls/mo)
o_hstspreloadIs the domain on the browser HSTS preload list (200 sats/call; free tier 100 calls/mo)
o_htmlcommentsExtract HTML comments — leaked TODOs/paths/software (200 sats/call; free tier 100 calls/mo)
o_htmlencodeHTML entity encode/decode (200 sats/call; free tier 100 calls/mo)
o_httpcodeHTTP status code meaning & family (offline) (200 sats/call; free tier 100 calls/mo)
o_httpingReachability + response timing (200 sats/call; free tier 100 calls/mo)
o_httpmethodsAllowed methods + TRACE/risky-verb check (200 sats/call; free tier 100 calls/mo)
o_hudsonrockStealer-log exposure check via HudsonRock Cavalier free API (200 sats/call; free tier 100 calls/mo)
o_huggingfaceHuggingFace user profile or model card (200 sats/call; free tier 100 calls/mo)
o_imagerevGoogle Lens / Yandex / Bing / TinEye search links (200 sats/call; free tier 100 calls/mo)
o_infra_fingerprintInfrastructure fingerprinting + hosting (200 sats/call; free tier 100 calls/mo)
o_intelx_emailEmail breach exposure — breach names, data types, paste hits (XposedOrNot, no key) (200 sats/call; free tier 100 calls/mo)
o_internetdbOpen ports, CPEs, tags, known CVEs for a host (200 sats/call; free tier 100 calls/mo)
o_ioc_reputationCross-check IP/domain/hash across feeds (200 sats/call; free tier 100 calls/mo)
o_ipfullRich geo+ASN+proxy/mobile/hosting flags (200 sats/call; free tier 100 calls/mo)
o_ipgeoGeo, ISP, ASN, proxy/hosting flags (200 sats/call; free tier 100 calls/mo)
o_ipintIPv4 ↔ integer ↔ hex (offline) (200 sats/call; free tier 100 calls/mo)
o_ip_mathCIDR: network/broadcast/range/host count (offline) (200 sats/call; free tier 100 calls/mo)
o_ipv4classifyClassify IP: private/loopback/multicast/global (offline) (200 sats/call; free tier 100 calls/mo)
o_ipwhoisNetwork owner, range, abuse contact (200 sats/call; free tier 100 calls/mo)
o_isbnBook metadata (OpenLibrary) + checksum (200 sats/call; free tier 100 calls/mo)
o_isexitnodeIs this a Tor exit node? (200 sats/call; free tier 100 calls/mo)
o_isinValidate ISIN security identifier check digit (offline) (200 sats/call; free tier 100 calls/mo)
o_isotimeParse/convert a timestamp (offline) (200 sats/call; free tier 100 calls/mo)
o_jarmShodan InternetDB: ports, CPEs, vulns, tags (no key) (200 sats/call; free tier 100 calls/mo)
o_jslibsEnumerate <script> sources + detect JS libs/versions (200 sats/call; free tier 100 calls/mo)
o_kevIs the CVE actively exploited (KEV catalog) (200 sats/call; free tier 100 calls/mo)
o_keybaseCrypto identity + linked social proofs (200 sats/call; free tier 100 calls/mo)
o_latlonformatDD ↔ DMS ↔ DM coordinate format conversion (offline) (200 sats/call; free tier 100 calls/mo)
o_leakcheckBreach exposure via leakcheck.io public endpoint (no key) (200 sats/call; free tier 100 calls/mo)
o_leaklookupInfostealer compromise check — stealer logs, credential count (Hudson Rock, no key) (200 sats/call; free tier 100 calls/mo)
o_leetLeetspeak transform (offline) (200 sats/call; free tier 100 calls/mo)
o_leetcode_userLeetCode solved problems, ranking, badges (200 sats/call; free tier 100 calls/mo)
o_linksAll links + external domains + emails on a page (200 sats/call; free tier 100 calls/mo)
o_linktreeExtract destination links from a linktr.ee profile (200 sats/call; free tier 100 calls/mo)
o_lobstersPublic user profile + karma (200 sats/call; free tier 100 calls/mo)
o_macOUI → hardware vendor (200 sats/call; free tier 100 calls/mo)
o_macvalidMAC address parser (colon/dash/plain) (200 sats/call; free tier 100 calls/mo)
o_macvendorMAC vendor + local/multicast bits from local OUI table (offline) (200 sats/call; free tier 100 calls/mo)
o_macvendorlookupOUI → hardware vendor (macvendors.com) (200 sats/call; free tier 100 calls/mo)
o_maidenheadCoords → ham-radio grid locator (offline) (200 sats/call; free tier 100 calls/mo)
o_manifestWeb app manifest: name, icons, theme (200 sats/call; free tier 100 calls/mo)
o_marineweatherWave height/period/direction + sea temp at coords (200 sats/call; free tier 100 calls/mo)
o_mavenJava artifact: 'group:artifact' or name (200 sats/call; free tier 100 calls/mo)
o_mediumAuthor feed: recent post titles (200 sats/call; free tier 100 calls/mo)
o_metatagsOpenGraph / Twitter-card / generator meta tags (200 sats/call; free tier 100 calls/mo)
o_mgrsLat/lon → MGRS military grid reference (offline) (200 sats/call; free tier 100 calls/mo)
o_mimetypeFile extension → MIME type (offline) (200 sats/call; free tier 100 calls/mo)
o_moonphaseCurrent moon phase & illumination (offline) (200 sats/call; free tier 100 calls/mo)
o_morseMorse encode/decode, autodetecting direction (offline) (200 sats/call; free tier 100 calls/mo)
o_mtastsInbound-mail TLS enforcement policy (200 sats/call; free tier 100 calls/mo)
o_musicbrainzArtist search: type, country, MBID (200 sats/call; free tier 100 calls/mo)
o_musicbrainzartistArtist type, country, lifespan (200 sats/call; free tier 100 calls/mo)
o_nationalizePredict nationality from a name (nationalize.io) (200 sats/call; free tier 100 calls/mo)
o_natoSpell text in NATO phonetic alphabet (offline) (200 sats/call; free tier 100 calls/mo)
o_nearbywikiWikipedia places near a coordinate (200 sats/call; free tier 100 calls/mo)
o_npmPackages published by an author (200 sats/call; free tier 100 calls/mo)
o_npmdlnpm download counts day/week/month (200 sats/call; free tier 100 calls/mo)
o_npmdownloadsnpm package download counts, last week + month (no key) (200 sats/call; free tier 100 calls/mo)
o_npmorgnpm organization: all published packages (200 sats/call; free tier 100 calls/mo)
o_npmpkgnpm package version, deps, maintainers (200 sats/call; free tier 100 calls/mo)
o_nstraceTrace NS delegation: TLD → registrar → authoritative (200 sats/call; free tier 100 calls/mo)
o_nuget.NET package stats + downloads (200 sats/call; free tier 100 calls/mo)
o_numlookupValidity, region, carrier, line type, timezones (libphonenumber) (200 sats/call; free tier 100 calls/mo)
o_numwordsInteger → English words (offline) (200 sats/call; free tier 100 calls/mo)
o_nvdcveFull NVD record: CVSS, CWE, references (200 sats/call; free tier 100 calls/mo)
o_onthisdayHistorical events on a date (Wikipedia; MM/DD or today) (200 sats/call; free tier 100 calls/mo)
o_openalexauthorAuthor works count, h-index, institution (200 sats/call; free tier 100 calls/mo)
o_openalexworkScholarly work: citations, concepts, OA (200 sats/call; free tier 100 calls/mo)
o_openfoodfactsEAN/UPC -> product, brand, nutrition (200 sats/call; free tier 100 calls/mo)
o_openphishCommunity phishing-URL feed membership (200 sats/call; free tier 100 calls/mo)
o_osvKnown package vulns (OSV.dev). 'eco:name' (200 sats/call; free tier 100 calls/mo)
o_otxdomainAlienVault OTX threat pulses for a domain (200 sats/call; free tier 100 calls/mo)
o_otxipAlienVault OTX threat pulses for an IP (200 sats/call; free tier 100 calls/mo)
o_pageinfoCommon Crawl capture index lookup (200 sats/call; free tier 100 calls/mo)
o_passgenGenerate strong random passwords + passphrase (offline) (200 sats/call; free tier 100 calls/mo)
o_password_dumpsSearch Dehashed for leaked passwords (query-only) (200 sats/call; free tier 100 calls/mo)
o_paste_domainFind domain in public pastes via psbdmp.ws (no key) (200 sats/call; free tier 100 calls/mo)
o_paste_emailFind email in public pastes via Wayback CDX + search links (no key) (200 sats/call; free tier 100 calls/mo)
o_peersUpstream/downstream BGP neighbours (200 sats/call; free tier 100 calls/mo)
o_permissions_polPermissions-Policy: camera/mic/geo controls (200 sats/call; free tier 100 calls/mo)
o_pgpPublic key published on keys.openpgp.org (200 sats/call; free tier 100 calls/mo)
o_phishing_intelPhishing kit tracking + URL detection (200 sats/call; free tier 100 calls/mo)
o_phoneappsWhatsApp / Telegram / Viber / Signal deep links (200 sats/call; free tier 100 calls/mo)
o_phoneccCountry, trunk & intl dialing prefixes (offline) (200 sats/call; free tier 100 calls/mo)
o_phonefmtE.164 / national / international / RFC3966 formats (offline) (200 sats/call; free tier 100 calls/mo)
o_phonepivotCaller-ID / reputation site links (Truecaller, Sync.me…) (200 sats/call; free tier 100 calls/mo)
o_phonespamRobocall / scam report-database links (200 sats/call; free tier 100 calls/mo)
o_phonevcardGenerate a .vcf contact card (offline) (200 sats/call; free tier 100 calls/mo)
o_pluscodeCoords → Open Location Code / Google Plus Code (offline) (200 sats/call; free tier 100 calls/mo)
o_portService + exposure notes for a port number (200 sats/call; free tier 100 calls/mo)
o_portlookupIANA port → service name (offline) (200 sats/call; free tier 100 calls/mo)
o_pubmedPubMed biomedical paper search (NCBI) (200 sats/call; free tier 100 calls/mo)
o_punycodeIDN domain ↔ Punycode (xn--) homograph check (offline) (200 sats/call; free tier 100 calls/mo)
o_pypiPython package metadata + links (200 sats/call; free tier 100 calls/mo)
o_pypiprojectPyPI version/license/links (200 sats/call; free tier 100 calls/mo)
o_pypistatsPyPI recent download counts (200 sats/call; free tier 100 calls/mo)
o_quakesUSGS recent quakes — global or near coords (M2.5+) (200 sats/call; free tier 100 calls/mo)
o_quoted_printableQuoted-printable encode/decode (200 sats/call; free tier 100 calls/mo)
o_railfenceRail-fence cipher over 3 rails (offline) (200 sats/call; free tier 100 calls/mo)
o_rdapStructured domain registration record (RDAP/IANA bootstrap, no key) (200 sats/call; free tier 100 calls/mo)
o_rdap_domainRDAP structured domain registration data (200 sats/call; free tier 100 calls/mo)
o_rdapipAuthoritative RDAP record for an IP (200 sats/call; free tier 100 calls/mo)
o_redirectsFull HTTP redirect chain (200 sats/call; free tier 100 calls/mo)
o_referrer_polReferrer-Policy header — URL leakage risk (200 sats/call; free tier 100 calls/mo)
o_regdomainExtract eTLD+1 registered domain from URL (offline) (200 sats/call; free tier 100 calls/mo)
o_reversednsPTR record / hostname (200 sats/call; free tier 100 calls/mo)
o_revgeolat,lon -> address (OSM Nominatim) (200 sats/call; free tier 100 calls/mo)
o_revgeocodeCoordinates → nearest address (OSM) (200 sats/call; free tier 100 calls/mo)
o_revimgReverse-image-search links (Lens/Yandex/TinEye/Bing) (200 sats/call; free tier 100 calls/mo)
o_robotsDisallowed paths + sitemaps (200 sats/call; free tier 100 calls/mo)
o_robotsmetameta-robots + X-Robots-Tag: noindex/nofollow/noarchive (200 sats/call; free tier 100 calls/mo)
o_romanConvert int <-> roman numeral, autodetecting (offline) (200 sats/call; free tier 100 calls/mo)
o_rot13ROT-13 encode/decode (200 sats/call; free tier 100 calls/mo)
o_rot47ROT47 ASCII cipher (offline, self-inverse) (200 sats/call; free tier 100 calls/mo)
o_rpkiRoute-origin validation for the covering prefix (200 sats/call; free tier 100 calls/mo)
o_rubygemrevReverse dependencies of a RubyGem (200 sats/call; free tier 100 calls/mo)
o_rubygemsRuby gem stats + downloads (200 sats/call; free tier 100 calls/mo)
o_s3bucketsS3/GCS/Azure buckets named for the domain (200 sats/call; free tier 100 calls/mo)
o_securitytxtRFC 9116 disclosure policy & contacts (200 sats/call; free tier 100 calls/mo)
o_semanticscholarPaper TLDR, citations, influence (200 sats/call; free tier 100 calls/mo)
o_semverParse and validate semantic versioning (200 sats/call; free tier 100 calls/mo)
o_sitemapFetch sitemap.xml + list URLs (200 sats/call; free tier 100 calls/mo)
o_slugText → URL-safe slug (offline) (200 sats/call; free tier 100 calls/mo)
o_smtpbannerSMTP banner & EHLO capabilities (ports 25/587/465) (200 sats/call; free tier 100 calls/mo)
o_snusbase_hashReverse MD5/SHA1 hash via breach-sourced hash DB (md5decrypt.net) (200 sats/call; free tier 100 calls/mo)
o_socialDirect profile URLs across 20 platforms (200 sats/call; free tier 100 calls/mo)
o_sopostuserSO profile + reputation by numeric id (200 sats/call; free tier 100 calls/mo)
o_spacepeopleWho is in space right now (names + craft) (200 sats/call; free tier 100 calls/mo)
o_sri_checkSubresource Integrity: external scripts without integrity= (200 sats/call; free tier 100 calls/mo)
o_srvlookupSIP/XMPP/mail/CalDAV SRV record discovery (200 sats/call; free tier 100 calls/mo)
o_stackoverflowSO/SE user search by display name (200 sats/call; free tier 100 calls/mo)
o_steam_userSteam community profile via public XML (200 sats/call; free tier 100 calls/mo)
o_stringmetricsLength, entropy, character breakdown (200 sats/call; free tier 100 calls/mo)
o_subbruteResolve a common-subdomain wordlist (per-target) (200 sats/call; free tier 100 calls/mo)
o_suntimesSunrise/sunset/twilight for a coordinate (UTC) (200 sats/call; free tier 100 calls/mo)
o_supply_chain_riskDependency vulns + typosquatting (200 sats/call; free tier 100 calls/mo)
o_swaggerExposed API docs at common paths (per-target) (200 sats/call; free tier 100 calls/mo)
o_teamcymruIP → ASN via Team Cymru DNS (fastest ASN lookup) (200 sats/call; free tier 100 calls/mo)
o_techCMS/framework/server detection (200 sats/call; free tier 100 calls/mo)
o_telegram_channelPublic channel preview: subscribers, description (200 sats/call; free tier 100 calls/mo)
o_threatcrowdOTX passive DNS resolution history (200 sats/call; free tier 100 calls/mo)
o_tldinfoTLD registry operator, type, purpose (offline) (200 sats/call; free tier 100 calls/mo)
o_tlsLive cert: issuer, validity, SANs, cipher (200 sats/call; free tier 100 calls/mo)
o_tlsaCertificate-pinning DANE records on :443 (200 sats/call; free tier 100 calls/mo)
o_tlsscanWhich SSL/TLS protocols the host accepts (200 sats/call; free tier 100 calls/mo)
o_torIs the IP a known Tor exit node (200 sats/call; free tier 100 calls/mo)
o_transformrot13/base32/morse/reverse (offline) (200 sats/call; free tier 100 calls/mo)
o_trendingwikiMost-read Wikipedia articles today (200 sats/call; free tier 100 calls/mo)
o_trufflehog_urlScan raw URL content for API keys, tokens, private keys, JWTs (200 sats/call; free tier 100 calls/mo)
o_unicode_lookupUnicode codepoint: name, category, HTML entity (offline) (200 sats/call; free tier 100 calls/mo)
o_unpaywallIs a DOI open-access? Direct PDF link (200 sats/call; free tier 100 calls/mo)
o_urlparseParse URL into components + query params (200 sats/call; free tier 100 calls/mo)
o_urlscanPast scans, verdicts, infra (IP/ASN/server) for a site (200 sats/call; free tier 100 calls/mo)
o_urlscansearchPublic urlscan.io scan history for a domain (200 sats/call; free tier 100 calls/mo)
o_useragentParse a User-Agent into OS/browser (offline) (200 sats/call; free tier 100 calls/mo)
o_usernamePresence across 16 public sites (200 sats/call; free tier 100 calls/mo)
o_utmLat/lon → UTM coordinates (WGS84, offline) (200 sats/call; free tier 100 calls/mo)
o_uuencodeUnix-to-Unix encoding (200 sats/call; free tier 100 calls/mo)
o_uuidVersion/variant + v1 timestamp/MAC (offline) (200 sats/call; free tier 100 calls/mo)
o_uuid_validateUUID v1-v5 version and variant detector (200 sats/call; free tier 100 calls/mo)
o_wafDetect WAF/CDN from headers & cookies (200 sats/call; free tier 100 calls/mo)
o_wayback_leaksSearch Wayback Machine for historically exposed .env/config/secrets (200 sats/call; free tier 100 calls/mo)
o_weatherCurrent weather at a coordinate (Open-Meteo) (200 sats/call; free tier 100 calls/mo)
o_wellknownWhich /.well-known/* resources exist (200 sats/call; free tier 100 calls/mo)
o_whoisRegistration, status, nameservers, DNSSEC (200 sats/call; free tier 100 calls/mo)
o_whoisserverTLD → WHOIS server mapping (offline + IANA fallback) (200 sats/call; free tier 100 calls/mo)
o_wikidataSearch Wikidata entities by label (no key) (200 sats/call; free tier 100 calls/mo)
o_wikidatasearchFree-text → Wikidata entities (200 sats/call; free tier 100 calls/mo)
o_wikipediaWikipedia REST summary: extract, type, coords (no key) (200 sats/call; free tier 100 calls/mo)
o_wikipvPage length, last edit, editor (200 sats/call; free tier 100 calls/mo)
o_wikisummaryPage extract/description for a topic (200 sats/call; free tier 100 calls/mo)
o_wordcountText stats: words/chars/lines/reading time (offline) (200 sats/call; free tier 100 calls/mo)
o_zenodoZenodo open-research records search (200 sats/call; free tier 100 calls/mo)
px_infoProxy service capabilities, auth, billing info (50 sats/call; free tier 100 calls/mo)
px_orderCheck proxy order payment/fulfilment status (50 sats/call; free tier 100 calls/mo)
px_plansList residential proxy plans + sats pricing (50 sats/call; free tier 100 calls/mo)
qrSVG QR codes + barcodes (250 sats/call; free tier 100 calls/mo)
regexTest/replace regex patterns (200 sats/call; free tier 100 calls/mo)
re_reportCited multi-source research report. Call with {q} -> job_id, poll with {job_id} until done (charged on completion poll) (1500 sats/call; free tier 100 calls/mo)
re_searchSearch a private crawled+indexed knowledge cloud (OpenSearch+Qdrant) (200 sats/call; free tier 100 calls/mo)
re_semanticVector/semantic search over the private knowledge cloud (250 sats/call; free tier 100 calls/mo)
re_summarizeLLM summary of specific URLs (pass urls=comma-separated) (400 sats/call; free tier 100 calls/mo)
searchSynthesize a research answer via local LLM (500 sats/call; free tier 100 calls/mo)
styx_beaconTor gateway status + current exit IP (50 sats/call; free tier 100 calls/mo)
styx_fetchFetch a URL through the Tor network (300 sats/call; free tier 100 calls/mo)
styx_renewRotate to a fresh Tor circuit/identity (100 sats/call; free tier 100 calls/mo)
summarizeSummarize docs, extract entities, sentiment (500 sats/call; free tier 100 calls/mo)
titan_beaconCheck RTX 4080 GPU compute status (0 sats/call; free tier 100 calls/mo)
titan_generateRun LLM inference on the RTX 4080 (needs titan key) (0 sats/call; free tier 100 calls/mo)
titan_orderBuy GPU compute credits (BTCPay invoice) (0 sats/call; free tier 100 calls/mo)
v_b64decBase64-decode to text + hex (100 sats/call; free tier 100 calls/mo)
v_b64encBase64-encode text (100 sats/call; free tier 100 calls/mo)
v_baseconvConvert a number between bases 2-36 (100 sats/call; free tier 100 calls/mo)
v_casecamel/snake/kebab/pascal/title/upper/lower (100 sats/call; free tier 100 calls/mo)
v_cronBreak down a 5-field cron expression (100 sats/call; free tier 100 calls/mo)
v_epochConvert a unix epoch to UTC + relative (100 sats/call; free tier 100 calls/mo)
v_hashMD5/SHA1/SHA256/SHA512 of a string (100 sats/call; free tier 100 calls/mo)
v_hex2txtDecode hex bytes to text (100 sats/call; free tier 100 calls/mo)
v_htmldecDecode HTML entities (100 sats/call; free tier 100 calls/mo)
v_json_csvFlatten a JSON array of objects to CSV (100 sats/call; free tier 100 calls/mo)
v_json_diffDiff two JSON values (added/removed/changed) (100 sats/call; free tier 100 calls/mo)
v_json_formatValidate + pretty-print JSON (100 sats/call; free tier 100 calls/mo)
v_jwtDecode a JWT header + payload (100 sats/call; free tier 100 calls/mo)
v_metricsLength/word/line counts + Shannon entropy (100 sats/call; free tier 100 calls/mo)
v_nowCurrent unix time (UTC) (100 sats/call; free tier 100 calls/mo)
v_regexTest a regex, return matches + groups (100 sats/call; free tier 100 calls/mo)
v_slugSlugify text (lowercase, dashes, ascii) (100 sats/call; free tier 100 calls/mo)
v_txt2hexEncode text to hex (100 sats/call; free tier 100 calls/mo)
v_urldecPercent-decode a string (100 sats/call; free tier 100 calls/mo)
v_urlencPercent-encode a string (100 sats/call; free tier 100 calls/mo)
v_urlparseSplit a URL into scheme/host/path/query (100 sats/call; free tier 100 calls/mo)
v_uuidGenerate a random UUID v4 (100 sats/call; free tier 100 calls/mo)
web_scrapeFetch any URL → clean markdown + metadata (400 sats/call; free tier 100 calls/mo)

Schemas: list_tools.

Official server.json
{
  "name": "com.thetempleofdoom.hyperion/hyperion",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://hyperion.thetempleofdoom.com/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "isRequired": true,
          "description": "Bearer hyper_* API key minted at hyperion.thetempleofdoom.com"
        }
      ]
    }
  ],
  "version": "1.0.0",
  "websiteUrl": "https://hyperion.thetempleofdoom.com",
  "description": "Hyperion — MCP tool marketplace for AI agents: web, OSINT, security, research via one key."
}