# io.github.XogZ3/botoi-mcp

> 49 developer tools via MCP: DNS, WHOIS, IP lookup, JWT, hashing, QR, and more.

- name: io.github.XogZ3/botoi-mcp
- version: 1.0.0
- connection class: R0 (autonomous)
- trust: 83/100
- quality: 85/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.XogZ3%2Fbotoi-mcp
- tools: https://api.protogrid.dev/v1/servers/io.github.XogZ3%2Fbotoi-mcp/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "botoi-mcp": {
      "type": "http",
      "url": "https://api.botoi.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 99
- freshness: 45
- provenance: 80
- drivers: +repository +namespace-matches-repo +reachable +uptime-98% -stale-197d
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 85/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 86 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 47 of 49 tools declare readOnlyHint or destructiveHint
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: text_html_to_markdown (destructiveHint, idempotentHint, openWorldHint); dev_cron_describe (destructiveHint, idempotentHint, openWorldHint); text_base64_decode (destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 5,370 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 49, about 5,370 tokens to load them all
- tool set hash: 00104395ad88ab2cac8072b6df9a91de
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.XogZ3/botoi-mcp.svg)](https://protogrid.dev/servers/io.github.XogZ3/botoi-mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://api.botoi.com/mcp (streamable-http, auth none, reachable true, uptime30d 0.9830508)

## Packages

_none_

## Tools (49)

- `dev_cron_describe`: Convert a cron expression to a human-readable description.
- `dev_diff`: Compute a unified diff between two text strings. Use when comparing file versions, config changes, or code revisions. Returns added, removed, and unchanged lines.
- `dev_hash`: Generate a hash (MD5, SHA-1, SHA-256, SHA-512) of input text. Use for checksums, data integrity, or fingerprinting.
- `dev_jwt_sign`: Create and sign a JWT with a given payload and secret.
- `dev_jwt_verify`: Verify and decode a JWT. Use when debugging authentication tokens.
- `dev_password_generate`: Generate a random password with configurable length and complexity.
- `dev_regex_test`: Test a regex pattern against a string and return matches.
- `dev_semver_parse`: Parse and validate a semver string into major, minor, patch, pre-release, and build components. Use when checking version compatibility or sorting releases.
- `dev_timestamp_convert`: Convert between Unix timestamps and ISO 8601 dates. Use when normalizing date formats across APIs, logs, or databases. Returns both Unix and ISO representations.
- `dev_url_decode`: URL-decode a percent-encoded string back to readable text. Use when parsing query parameters, redirect URIs, or encoded form values.
- `dev_url_encode`: URL-encode a string by escaping special characters. Use when building query parameters, form data, or safe URLs that contain reserved characters.
- `dev_uuid`: Generate one or more UUIDs (v4 or v7). Use when you need unique identifiers for database records, request tracing, or idempotency keys.
- `lookup_accessibility`: Run 10 basic accessibility checks on a webpage URL. Returns a score, issues list, and summary. Use when you need a quick accessibility audit.
- `lookup_address_validate`: Validate a freeform address and return structured components (street, city, state, postal code, country), GPS coordinates, and confidence score. Use when you need to verify or parse an address.
- `lookup_breach_check`: Check if a password has appeared in known data breaches using k-Anonymity. Returns breach count. Use when you need to verify password safety.
- `lookup_company`: Look up company information by domain name. Returns name, industry, employee count, location, and social profiles. Use when enriching leads or researching organizations.
- `lookup_dns`: Query DNS records (A, AAAA, MX, TXT, CNAME, NS) for a domain. Use when you need to check DNS configuration or troubleshoot domain resolution.
- `lookup_dns_monitor`: Check DNS records for a domain and compare against the previous snapshot. Detects record changes over time. Use when monitoring DNS configuration.
- `lookup_domain_availability`: Check if a domain name is available for registration. Use when brainstorming project names or validating domain ideas. Returns availability status and WHOIS data if registered.
- `lookup_email`: Validate an email address (syntax, MX record, disposable check). Use when you need to verify if an email address is real and deliverable.
- `lookup_headers`: Fetch HTTP response headers for a URL. Use when inspecting server configuration, security headers, or caching policies.
- `lookup_ip`: Look up geolocation, ISP, and network details for an IP address. Use when you need to determine the physical location, internet provider, or AS number for a given IP.
- `lookup_phone`: Parse and validate a phone number, returning country, carrier, line type, and E.164 format. Use when normalizing user-submitted phone numbers or verifying contact data.
- `lookup_ssl`: Check SSL certificate details and expiry for a domain. Use when verifying HTTPS configuration or checking certificate validity.
- `lookup_ssl_cert_expiry`: Check SSL certificate expiry for a domain. Returns issuer, valid dates, days remaining, and expired/expiring-soon flags. Use when monitoring certificate health.
- `lookup_tech_detect`: Detect technologies used by a website (frameworks, CMS, analytics). Use when analyzing a competitor's tech stack.
- `lookup_url_metadata`: Extract title, description, OG tags, and favicon from a URL. Use when you need to preview or summarize a webpage.
- `lookup_vpn_detect`: Check if an IP address is a VPN, proxy, or Tor exit node. Use when assessing connection trustworthiness or flagging suspicious traffic. Returns detection type and provider details.
- `lookup_whois`: Get WHOIS registration data for a domain. Use when you need to find domain ownership, registrar, or expiration date.
- `security_decrypt`: Decrypt AES-256-GCM encrypted text with a passphrase.
- `security_encrypt`: Encrypt text using AES-256-GCM with a passphrase.
- `security_pii_detect`: Detect personally identifiable information (emails, phones, SSNs) in text.
- `security_totp_generate`: Generate a TOTP secret and provisioning URI for 2FA setup.
- `security_validate_credit_card`: Validate a credit card number (Luhn check, network detection).
- `text_base64_decode`: Decode a Base64 string back to UTF-8 text. Use when extracting data from Base64-encoded API responses, tokens, or email headers. Returns the original plaintext string.
- `text_base64_encode`: Encode a UTF-8 string to Base64. Use for embedding data in URLs or APIs that require Base64.
- `text_csv_to_json`: Parse CSV text into a JSON array of objects. Use when converting spreadsheet or tabular data into structured JSON for processing or storage.
- `text_html_to_markdown`: Convert HTML to clean Markdown. Use when extracting readable content from web pages or migrating HTML docs to Markdown format.
- `text_json_format`: Format and pretty-print a JSON string with configurable indentation. Use when making minified or compact JSON readable for debugging or documentation.
- `text_json_to_yaml`: Convert JSON data to YAML format. Use when generating human-readable config files from JSON data structures.
- `text_json_validate`: Validate whether a string is valid JSON and report parsing errors.
- `text_markdown_to_html`: Convert Markdown text to HTML. Use when rendering Markdown content for web display or email templates. Returns sanitized HTML.
- `text_xml_to_json`: Convert XML documents to JSON. Use when parsing XML API responses, feeds, or config files into a structured JSON format for easier processing.
- `text_yaml_to_json`: Convert YAML configuration or data to JSON. Use when parsing YAML config files for programmatic access or API consumption. Returns a JSON object.
- `transform_code_format`: Format source code with language-aware indentation and style rules. Supports JS, TS, Python, Go, Rust, and more. Use when standardizing code style or preparing snippets for documentation.
- `transform_json_to_typescript`: Generate TypeScript interfaces from a JSON sample. Use when building type-safe API clients or converting API responses into TypeScript types.
- `transform_minify_css`: Minify CSS stylesheets by removing whitespace, comments, and redundant rules. Use when reducing stylesheet size for faster page loads.
- `transform_minify_js`: Minify JavaScript code by removing whitespace, comments, and shortening variable names. Use when optimizing bundle size for production deployment.
- `transform_sql_format`: Format and beautify SQL queries with proper indentation and keyword casing. Use when cleaning up inline SQL for code reviews, documentation, or debugging.