# MoneyTools Tools

> 25 read-only agent utilities: token safety, approvals, tx decode, EIP-712 risk, DNS, time; free tier

- name: dev.moneytools/tools
- version: 1.0.0
- connection class: R0 (autonomous)
- trust: 82/100 flags: no-repository
- quality: 81/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/dev.moneytools%2Ftools
- tools: https://api.protogrid.dev/v1/servers/dev.moneytools%2Ftools/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "tools": {
      "type": "http",
      "url": "https://tools.moneytools.dev/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 97
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-93% +updated-4d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 81/100 (new)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 86 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 117 of 117 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 116 of 117 tools declare all four hints; missing: partner_program_info (destructiveHint, idempotentHint)
- warn `tools.token_cost`: about 19,088 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`: tool history recorded for 3 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 117, about 19,088 tokens to load them all
- tool set hash: f98ec14cff1455e55b1954b42a698950
- tools last changed: 2026-11-05T20:27:10.700Z
- badge: [![protogrid quality](https://protogrid.dev/badge/dev.moneytools/tools.svg)](https://protogrid.dev/servers/dev.moneytools/tools)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-11-05 `http_link_parse` added
  - Parse an RFC 8288 Link response header into structured links with rel/type/title, plus byRel map and next/prev/first/last shortcuts for pagination. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- 2026-11-05 `content_hash` added
  - SHA-256/1/384/512 of a text body for cache keys and content addressing. Optional normalize (lf, trim, json canonical). Returns hex, base64, short prefix and byte length. Input not stored. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- 2026-11-05 `hmac_verify` added
  - Verify an HMAC (SHA-256/1/384/512) over a message with a caller-supplied secret. Returns valid bool. Secret is request-body only and never stored — for webhook authenticity checks. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- 2026-11-05 `cache_control_parse` added
  - Parse a Cache-Control header into structured directives (max-age, no-store, immutable...) and optionally estimate remaining freshness from Age or Date. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- 2026-11-05 `csv_diff` added
  - Diff two CSV strings: added/removed/changed rows. Matches on an id-like key column when present (or pass key=), otherwise by row index. Returns a compact summary. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- 2026-11-05 `xml_json_convert` added
  - Convert XML to JSON (attributes as @_*) or JSON to XML. Pure string transform, SSRF-safe (no external entity fetch). Body ≤500 KB. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- 2026-11-05 `mime_sniff` added
  - Guess Content-Type from a filename extension and/or magic bytes (base64 snippet) or text peek. Returns confidence and which signal won. No file stored. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- 2026-11-05 `payment_receipt_verify` added
  - Verify an on-chain USDC payment (e.g. an x402 settlement): tx success, USDC transfers, and whether payTo/amount match what you expected. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- 2026-11-05 `position_risk_calc` added
  - Liquidation price, distance to liquidation, margin, round-trip fees, funding cost and break-even move for a leveraged long/short. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- 2026-11-05 `perp_funding_compare` added
  - Current perpetual futures funding rates for a coin across Hyperliquid, Bybit and OKX, with annualized %, from public market data. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.

Full history: https://api.protogrid.dev/v1/servers/dev.moneytools%2Ftools/changes

## Remotes

- https://tools.moneytools.dev/mcp (streamable-http, auth none, reachable true, uptime30d 0.9285714)

## Packages

_none_

## Tools (117)

- `a2a_card_validate`: Fetch /.well-known/agent-card.json (or legacy agent.json) and validate required A2A fields, skills, transport and security declarations. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `abi_encode`: Build calldata from a function signature and arguments (selector + encoded args). Unsigned bytes only, for agents preparing a tx for a human or wallet to review. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `address_profile`: Profile an EVM address or ENS name across Ethereum, Base, Arbitrum, Optimism, Polygon, BSC, Avalanche: EOA vs contract vs EIP-7702 delegated, nonce, native balances in USD, primary ENS name, known-contract label. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `address_validate`: Which network is this address for, and is it well-formed? EVM checksum, Bitcoin (legacy/P2SH/SegWit/Taproot), Litecoin, Dogecoin, Tron, Solana, Cosmos bech32, TON. Catches typos before sending. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `agent_budget_check`: Check a planned list of agent payments against a USD budget and per-payment limit; flags invalid/zero payees, duplicates and over-budget. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `allowance_revoke_plan`: Find risky ERC-20 approvals for a wallet (default: common tokens × 20 well-known routers/spenders, or your own lists) and get UNSIGNED approve(spender,0) revoke transactions. Read-only. Free: 10 calls/day; then $0.003 via the HTTP endpoint or X-API-Key credits.
- `apr_apy`: Convert APR to APY (or back) for any compounding frequency, project earnings over N days with optional performance fee, doubling time. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `block_at_time`: Find the last block at or before a date/time on any of 7 EVM chains (interpolation search). For historical balance queries, snapshots and log ranges. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `bridge_status`: Track a bridge transfer by its source tx hash: pending / done / failed, bridge used, sending and receiving tx with amounts (LI.FI public status API). Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `broken_links`: Extract links from a page and check up to 12 of them (HEAD, GET fallback): status, redirects, latency, broken list. Free: 10 calls/day; then $0.003 via the HTTP endpoint or X-API-Key credits.
- `btc_address`: Confirmed and pending BTC balance (USD), tx count, address type and reuse for any Bitcoin address (mempool.space public API). Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `btc_fees`: Recommended sat/vB for next block, 30 min, 1 hour and economy, and what your transaction will cost in sats and USD. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `business_days`: Count business days between dates or add N business days, using the official Taiwan calendar, US federal holidays or plain weekdays. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `cache_control_parse`: Parse a Cache-Control header into structured directives (max-age, no-store, immutable...) and optionally estimate remaining freshness from Age or Date. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `calldata_decode`: Decode raw EVM calldata before signing: function name and typed arguments via the open Sourcify signature DB (or your ABI / signature), plus a plain-language meaning for risky selectors (approve, setApprovalForAll, permit...). Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `card_number_check`: Luhn checksum, brand (Visa, Mastercard, Amex, JCB, UnionPay...) and length check; returns only a masked number. Never stored. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `chain_info`: Chain id → name, native currency, public RPCs, explorers, CAIP-2 id and a ready wallet_addEthereumChain object (ethereum-lists/chains, CC0). Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `color_convert`: Convert hex/rgb/hsl/CSS names to hex, RGB, HSL, CMYK; luminance, best text color and WCAG AA/AAA contrast against another color. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `content_hash`: SHA-256/1/384/512 of a text body for cache keys and content addressing. Optional normalize (lf, trim, json canonical). Returns hex, base64, short prefix and byte length. Input not stored. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `contract_abi`: Fetch a verified contract's ABI from Sourcify (open data) with proxy resolution: implementation ABI merged, function and event signature lists. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `contract_read`: Call any view function with a human signature and args, e.g. balanceOf(address) returns (uint256); decoded result. Optional historical block. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `cron_next_runs`: Next N run times of a 5-field cron expression (or @daily etc.) in any IANA time zone, with a plain-language description. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `csv_diff`: Diff two CSV strings: added/removed/changed rows. Matches on an id-like key column when present (or pass key=), otherwise by row index. Returns a compact summary. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `csv_json_convert`: CSV to JSON (auto delimiter, headers, typed values, error rows) or JSON array to CSV. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `currency_convert`: Convert fiat amounts with daily reference rates (ECB via Frankfurter; other currencies e.g. TWD from ExchangeRate-API open access, attributed). Not tradable quotes. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `dex_price`: Executable-style price of any ERC-20 in USDC from DEX aggregator quotes (KyberSwap, quote only), price impact at a chosen size, route DEXes and deviation vs DefiLlama reference. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `dns_lookup`: A/AAAA/CNAME/MX/TXT/NS/CAA (or chosen types) via DNS-over-HTTPS, DNSSEC flag, SPF/DMARC/DKIM detection and common misconfigurations. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `dns_propagation`: Query 6 public resolvers (Cloudflare, Google, AdGuard, NextDNS, AliDNS, DNSPod) and compare answers: has my DNS change propagated? Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `domain_rdap`: Registrar, creation/expiry dates, age in days, status codes, nameservers and DNSSEC from RDAP; flags very new domains (phishing signal) and near expiry. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `duration_parse`: Parse ISO 8601 (P1DT2H30M), hh:mm:ss or human durations ('1h 30m', '2 weeks') to seconds, ISO and human form; optional end time from a start date. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `email_check`: Validate an email: syntax, MX records (DNS-over-HTTPS), accepts mail, disposable domain, role account, free provider and a deliverability guess. No SMTP probing. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `ens_available`: Is name.eth available? Registered / grace period / available, expiry date, yearly base price and registration link. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `ens_resolve`: Resolve an ENS name to an address (+ url/avatar/twitter/github records, optional L2 addresses), or an address to its primary ENS name with forward verification. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `erc20_info`: Name, symbol, decimals, total supply, owner, paused, upgradeable-proxy detection and (optional) a holder's balance for any ERC-20. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `erc4626_vault`: Yield vault facts: underlying asset, total assets, share price (assets per share), deposits open, and a holder's position. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `event_logs`: Recent events of a contract (≤5000 blocks), decoded with your event signature or automatically via the open Sourcify signature DB. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `extract_entities`: Pull emails, URLs, EVM addresses, tx hashes, BTC addresses, phone numbers, dates, money amounts, IPs, hashtags and @mentions out of any text. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `feed_parse`: Parse a feed (or autodiscover it from a web page) into clean JSON: title, latest items with link, date and summary. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `gas_compare`: Current gas on 7 EVM chains: base fee, priority fee, suggested maxFee, and the USD cost of a transfer, ERC-20 transfer, approve and DEX swap. Tells you the cheapest chain right now. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `hash_encode`: sha256/sha1/sha512/md5/keccak256, function selector, HMAC-SHA256, base64(url), hex, URL encoding, UUIDs, JWT decode (unverified), EVM checksum address. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `hmac_verify`: Verify an HMAC (SHA-256/1/384/512) over a message with a caller-supplied secret. Returns valid bool. Secret is request-body only and never stored — for webhook authenticity checks. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `html_to_markdown`: Fetch a public URL (or pass HTML) and get clean LLM-ready Markdown of the main content: headings, links, lists, tables, code; scripts/nav removed; token estimate. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `http_inspect`: Fetch a URL and report status, redirect chain, latency, size, cache headers, CORS, parsed rate-limit headers (RateLimit-*, X-RateLimit-*, Retry-After) and a security-headers grade. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `http_link_parse`: Parse an RFC 8288 Link response header into structured links with rel/type/title, plus byRel map and next/prev/first/last shortcuts for pagination. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `iban_validate`: Check an IBAN's country length and mod-97 check digits, return BBAN and print format. Not stored. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `id_generate`: Generate UUID v4/v7, ULID or nanoid (up to 100), or decode a UUID/ULID to its version and embedded timestamp. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `idn_homograph_check`: Decode punycode, detect mixed scripts and look-alike characters (Cyrillic а vs Latin a) and one-letter typos of major brands/wallets. Anti-phishing for agents. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `impermanent_loss`: LP value vs holding after a price move: full-range (Uniswap v2) and concentrated range (v3, lower/upper) impermanent loss. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `ip_cidr`: IPv4/IPv6 subnet math: network, range, size, netmask/wildcard, private/reserved type, contains-check and subnet split. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `ip_owner`: Who owns this IP? Network name, CIDR, country, organization and abuse contact from the regional internet registries (RDAP). Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `json_diff`: Structural diff of two JSON values: added/removed/changed paths (JSON Pointer) and an RFC 6902-style patch. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `json_format`: Validate JSON (error line + context), pretty-print/minify/sort keys, measure depth and size, and pick a value by path like a.b[0].c. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `json_query`: Extract values from JSON with a JSONPath-like path: a.b[0], a[*].b, a[-1], slices and filters like items[?(@.price>=10)]. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `json_repair`: Fix broken JSON from LLMs: code fences, leading prose, comments, single quotes, bare keys, trailing commas, Python True/None, truncated strings and unclosed brackets. Returns parsed JSON + list of fixes. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `json_schema_validate`: Validate JSON data against a JSON Schema (draft 4, 7, 2019-09, 2020-12) and get precise error paths. Use it to check tool outputs or API payloads. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `jwt_inspect`: Decode a JWT, explain its claims (expired? lifetime?) and verify RS/PS/ES/EdDSA signatures against a public JWKS URL or the issuer's OIDC discovery. No secrets needed or stored. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `language_detect`: Detect the language of a text (82 languages, ISO 639-3 + BCP 47), including Traditional vs Simplified Chinese. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `liquidation_price`: Perp (isolated margin: side, entry, leverage, maintenance margin) or lending (collateral, debt, liquidation threshold → health factor) liquidation price and distance. Risk math, not advice. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `llm_cost_estimate`: USD cost of a prompt across 22 popular models (GPT, Claude, Gemini, Grok, DeepSeek, Llama, Mistral) from token counts or raw text, sorted cheapest first. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `llms_txt_validate`: Check a site's /llms.txt against the llmstxt.org format: H1, summary, sections, link entries with notes; optional link check. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `loan_amortization`: Monthly payment, total interest and schedule for annuity (本息平均攤還) or equal-principal (本金平均攤還) loans. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `lunar_date`: Gregorian ↔ Chinese lunar date (incl. leap months) with 干支 year and zodiac; e.g. find the solar date of 中秋 (8/15). Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `markdown_to_html`: Render GitHub-flavored Markdown to HTML with raw HTML escaped and script URLs removed; also returns the heading outline. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `math_eval`: Evaluate arithmetic exactly instead of guessing: + - * / ^ %, parentheses, sqrt/ln/log/round/min/max/pow, pi/e and named variables. No code execution. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `mcp_tools_lint`: Connect to an MCP server (streamable HTTP) or take a tools/list array and lint every tool: names, descriptions, JSON Schema, required params, annotations; score + fixes. Free: 10 calls/day; then $0.003 via the HTTP endpoint or X-API-Key credits.
- `mime_sniff`: Guess Content-Type from a filename extension and/or magic bytes (base64 snippet) or text peek. Returns confidence and which signal won. No file stored. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `nft_metadata`: ERC-721/1155 token: standard, collection name, owner, tokenURI resolved (IPFS/Arweave/data URI) and the metadata JSON with image URL; says whether metadata is on-chain, IPFS or a mutable server. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `number_base`: Convert big integers between bases 2-36 (hex/bin/oct/dec, 0x/0b/0o prefixes) with two's complement for 8-256 bits. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `og_image_check`: Does the page's og:image work in link previews? Fetches it and checks status, type, file size, pixel dimensions and aspect ratio (1200×630). Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `openapi_lint`: Lint an OpenAPI/Swagger JSON or YAML: operationIds, descriptions, responses, undeclared path params, missing security schemes, servers, x402 payment info. Free: 10 calls/day; then $0.003 via the HTTP endpoint or X-API-Key credits.
- `partner_program_info`: Free. How to earn by recommending MoneyTools (we run this server): join steps, ref=<mt-code> attribution, 2-tier terms (20% of net revenue for 12 months, +5% tier 2, not MLM), required disclosure. No income guaranteed.
- `password_strength`: Entropy, common-password and pattern checks (sequences, years, Word123!), crack-time estimates and feedback. Never stored or logged. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `payment_receipt_verify`: Verify an on-chain USDC payment (e.g. an x402 settlement): tx success, USDC transfers, and whether payTo/amount match what you expected. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `perp_funding_compare`: Current perpetual futures funding rates for a coin across Hyperliquid, Bybit and OKX, with annualized %, from public market data. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `phone_format`: Validate and format phone numbers for 240+ regions (libphonenumber): E.164, international/national format, type (mobile/fixed), country. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `pii_redact`: Redact emails, phones, card numbers (Luhn-checked), IBANs, SSNs, IPs, API keys, JWTs, private keys and seed phrases before sending text to an LLM or log. Not stored. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `position_risk_calc`: Liquidation price, distance to liquidation, margin, round-trip fees, funding cost and break-even move for a leveraged long/short. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `prompt_injection_scan`: Heuristic scan of untrusted web/email/tool content for injection markers: instruction override, system-prompt spoofing, secret exfiltration, payment coercion, hidden Unicode, image-URL exfil. Low/medium/high risk. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `proxy_inspect`: Is this contract upgradeable? Detects EIP-1967 (impl/admin/beacon), EIP-1167 clones, legacy OZ and Safe-style proxies and EIP-7702 delegated EOAs; returns implementation and admin. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `public_holidays`: Official Taiwan government office calendar (holidays, 補假, make-up workdays) or US federal holidays with observed dates, plus the next holiday. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `qr_payment_link`: SVG QR code for any text/URL, or build an EIP-681 payment link + QR for a token amount to an address (for an agent asking a human to pay). We never receive the funds. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `regex_test`: Run a JavaScript regex on text: all matches with index and capture groups, optional replace, and a ReDoS warning for nested quantifiers. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `robots_check`: May this user agent fetch this URL? RFC 9309 evaluation of robots.txt with the matching rule, crawl-delay, sitemaps, llms.txt presence and an allow/deny table for 12 AI crawlers. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `rpc_health`: Probe the keyless public RPC endpoints of 7 EVM chains right now: up/down, latency, head block, lag. Returns the recommended RPC per chain. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `safe_multisig_info`: Is this address a Safe multisig? Owners, threshold (m-of-n), nonce, version, enabled modules, guard, fallback handler, plus risk warnings (1-of-n, modules). Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `security_headers_audit`: Graded audit of HSTS, CSP (unsafe-inline/eval, wildcards), clickjacking, nosniff, Referrer/Permissions-Policy, cookie flags, version leaks and CORS misconfig, with fixes. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `semver_check`: Parse and compare semantic versions, check a version against a range (^1.2, ~2.0, >=1 <2), max satisfying version and sort a list. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `signature_verify`: Verify a personal_sign message or EIP-712 typed-data signature against an address, including smart-contract wallets (ERC-1271 / ERC-6492). Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `sitemap_parse`: Find (via robots.txt) and parse a sitemap or sitemap index: URL count, lastmod range, sample URLs and protocol issues. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `slugify`: URL slug (accents removed; CJK kept or ASCII-only) and a filesystem-safe filename from any title. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `solana_account`: SOL balance (USD), account type (wallet/program), and SPL + Token-2022 balances for any Solana address via public RPC. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `spf_dmarc_check`: Recursively expand SPF includes, count DNS lookups against the RFC limit of 10, flag +all/?all, duplicate records and weak DMARC policy. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `ssl_certificate`: Latest unexpired certificates for a domain from Certificate Transparency logs: issuer, names, expiry date, days left, expiring-soon warning. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `stablecoin_peg`: Current price and deviation in bps for 15 major stablecoins (USDT, USDC, DAI, USDS, USDe, PYUSD, FDUSD, EURC...) with on_peg / watch / depeg status. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `taiwan_id_check`: Checksum and format for 國民身分證, 居留證 (old and 2021 new format) and 統一編號 (company tax ID, new ÷5 rule). Not stored. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `text_chunk`: Split long text into sentence/paragraph-aware chunks of N characters or tokens with overlap, ready for embeddings. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `text_diff`: Line, word or character diff between two texts with a unified patch, added/removed counts and similarity. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `text_similarity`: Compare two texts: bag-of-words cosine, word Jaccard, Levenshtein distance/ratio and a near-duplicate verdict. Lexical, no embeddings. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `text_stats`: Characters, words (CJK-aware), sentences, paragraphs, reading time, LLM token estimate and top words. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `time_convert`: op=now|convert|diff|add: current time in many zones, convert a local time between IANA zones (DST-aware), difference incl. business days, add ISO-8601 durations. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `token_balances`: Native + ERC-20 balances for a wallet in one multicall: major tokens on the chain by default or your own list of token addresses/symbols. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `token_count`: Estimate LLM tokens, words and characters for any text (±15% vs GPT/Claude tokenizers; CJK-aware) and whether it fits 8k-1M context windows. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `token_safety_check`: Before buying an ERC-20: simulates USDC→token→USDC with aggregator quotes and reads the contract (owner, proxy, paused, supply). Flags no-sell-route (honeypot pattern), high round-trip loss (tax / thin liquidity). Free: 10 calls/day; then $0.003 via the HTTP endpoint or X-API-Key credits.
- `tx_explain`: Explain a transaction in plain words: status, fee in USD, decoded method and arguments, token/NFT transfers, approvals (incl. unlimited / setApprovalForAll), other events. Free: 10 calls/day; then $0.003 via the HTTP endpoint or X-API-Key credits.
- `tx_status`: Is my transaction pending, confirmed, reverted or not found? Confirmations and a per-chain finality hint. Cheap polling for agents waiting on a tx. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `typed_data_risk`: Before an agent signs EIP-712 data: identifies Permit / Permit2 / EIP-3009 (x402) / Seaport / CoW / delegation messages, explains them in one sentence and flags unlimited amounts, far deadlines, unknown spenders and NFT-drain listings. Free: 10 calls/day; then $0.003 via the HTTP endpoint or X-API-Key credits.
- `unit_convert`: Length, mass, volume, area (incl. 坪/ping), speed, time, data (KB vs KiB), energy, pressure, temperature and exact wei/gwei/ETH conversion. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `url_metadata`: Title, description, canonical, language, favicon, Open Graph + Twitter card, JSON-LD types, feeds, word count and what's missing for link previews. Metadata only, not page content. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `url_parse_clean`: Split a URL into parts and query params, strip tracking params (utm_*, fbclid, gclid...) and flag phishing tricks (user@host, raw IP, shorteners, punycode). Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `user_agent_parse`: Browser, engine, OS, device type, and whether it is a known crawler or AI agent (GPTBot, ClaudeBot, PerplexityBot, scripts...). Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `vesting_schedule`: Cliff + linear vesting with optional TGE unlock: vested/unvested on any date and the monthly unlock schedule. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `webhook_inbox_create`: Create a temporary URL that records any HTTP request sent to it (method, path, query, headers, body ≤16 KB, up to 100 requests, kept 24 h); read them back with the secret token. For testing webhooks and callbacks. Free: 3/day.
- `webhook_inbox_read`: Read requests captured by a webhook_inbox_create inbox (free).
- `x402_quote_compare`: Compare the x402 payment terms (price in USDC, network, payTo) of up to 5 paid API endpoints and rank them cheapest first, without paying. Free: 10 calls/day; then $0.002 via the HTTP endpoint or X-API-Key credits.
- `x402_validate`: Lint any x402 paid endpoint like a client would: 402 status, PAYMENT-REQUIRED header decode, CAIP-2 network, integer amount, payTo/asset, EIP-712 domain extra, CORS expose headers, bazaar discovery, /.well-known/x402. Score + fixes. Unpaid request only. Free: 10 calls/day; then $0.003 via the HTTP endpoint or X-API-Key credits.
- `xml_json_convert`: Convert XML to JSON (attributes as @_*) or JSON to XML. Pure string transform, SSRF-safe (no external entity fetch). Body ≤500 KB. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.
- `yaml_json_convert`: YAML (multi-document, with line-numbered errors) to JSON, or JSON to YAML. Free: 10 calls/day; then $0.001 via the HTTP endpoint or X-API-Key credits.