Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "agent404": {
      "type": "http",
      "url": "https://aibitious.com/404/mcp/"
    }
  }
}

claude mcp add --transport http agent404 https://aibitious.com/404/mcp/

[mcp_servers.agent404]
url = "https://aibitious.com/404/mcp/"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "agent404": {
      "type": "remote",
      "url": "https://aibitious.com/404/mcp/",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "agent404": {
      "type": "http",
      "url": "https://aibitious.com/404/mcp/"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=agent404&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYWliaXRpb3VzLmNvbS80MDQvbWNwLyJ9"
}

{
  "servers": {
    "agent404": {
      "type": "http",
      "url": "https://aibitious.com/404/mcp/"
    }
  }
}

{
  "mcpServers": {
    "agent404": {
      "httpUrl": "https://aibitious.com/404/mcp/"
    }
  }
}

extensions:
  "agent404":
    enabled: true
    name: "agent404"
    type: streamable_http
    uri: "https://aibitious.com/404/mcp/"
    timeout: 300

Quality 88 / 100new

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene88 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
warn
tools.annotationsonly 22 of 33 tools declare readOnlyHint or destructiveHint
warn
tools.directory_hints22 of 33 tools declare all four hints; missing: json_schema_guard (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); invoice_math_audit (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); robots_policy_check (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
pass
tools.token_costabout 3,581 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump
pass
tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pull, stability.new_linkstool history recorded for 4 of the 7 days needed

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

33 tools, about 3,581 tokens to load them all · tool set 282181b68309 · tools last changed 2026-11-12 · checked 2026-11-14 07:03 UTC

Tool changes

2026-11-12receipt_chainadded
Check links in a supplied digest receipt chain. Offline check. Supply payload like {"root_sha256":"0000000000000000000000000000000000000000000000000000000000000000","receipts":[{"previous_sha256":"0000000000000000000000000000000000000000000000000000000000000000","sha256":"1111111111111111111111111111111111111111111111111111111111111111"}]}. Advisory result only.
2026-11-12manifest_driftadded
Compare expected and observed resource manifests. Offline check. Supply payload like {"expected":{"version":"1"},"observed":{"version":"2"}}. Advisory result only.
2026-11-12release_gateadded
Require named checks to be green before a release. Offline check. Supply payload like {"required":["test"],"checks":[{"id":"test","status":"success"}]}. Advisory result only.
2026-11-12context_budgetadded
Select prioritized context chunks inside a token limit. Offline check. Supply payload like {"max_tokens":100,"chunks":[{"id":"source1","tokens":40,"priority":10}]}. Advisory result only.
2026-11-12permission_pathsadded
Find sensitive targets reachable through declared capability edges. Offline check. Supply payload like {"start":"agent","edges":[{"from":"agent","to":"secret"}],"sensitive_targets":["secret"]}. Advisory result only.
2026-11-12queue_forecastadded
Project backlog and drain time from supplied rates. Offline check. Supply payload like {"backlog":100,"incoming_per_hour":10,"capacity_per_hour":20,"horizon_hours":4}. Advisory result only.
2026-11-12slo_burnadded
Measure error-budget burn against a supplied target. Offline check. Supply payload like {"target_percent":"99","total":1000,"bad":20,"alert_burn_rate":2}. Advisory result only.
2026-11-12boundary_casesadded
Generate bounded edge cases from simple field constraints. Offline check. Supply payload like {"fields":[{"name":"count","type":"integer","minimum":0,"maximum":10}]}. Advisory result only.
2026-11-12schema_impactadded
Identify downstream consumers broken by changed fields. Offline check. Supply payload like {"before":{"id":1},"after":{},"consumers":[{"id":"client","required_fields":["id"]}]}. Advisory result only.
2026-11-12citation_matrixadded
Find claims with missing or unknown citation identifiers. Offline check. Supply payload like {"claims":[{"id":"claim1","citation_refs":["src1"]}],"citations":["src1"]}. Advisory result only.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 94 / 100

provenance80

liveness100

freshness100

hygiene100

+repository +namespace-matches-repo +reachable +uptime-100% +updated-2d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://aibitious.com/404/mcp/` streamable-http	none	yes	100%	493 ms	2026-07-28	2026-11-14

Tools (33)

`approval_packet`read-only	Find missing or expired fields before seeking human approval. Offline check. Supply payload like {"now_unix":100,"action":{"actor":"agent","tool":"mail.send","target":"draft1","effect":"send","reason":"owner_request","expiry_unix":200}}. Advisory result only.
`boundary_cases`read-only	Generate bounded edge cases from simple field constraints. Offline check. Supply payload like {"fields":[{"name":"count","type":"integer","minimum":0,"maximum":10}]}. Advisory result only.
`budget_envelope`read-only	Check worst-case proposed cost against a local hard budget. Offline check. Supply payload like {"limit_usd":"0","spent_usd":"0","reserved_usd":"0","proposed_worst_case_usd":"0"}. Advisory result only.
`check_claim_provenance`read-only	Check whether supplied claim references reach at least one declared source; not fact checking.
`citation_matrix`read-only	Find claims with missing or unknown citation identifiers. Offline check. Supply payload like {"claims":[{"id":"claim1","citation_refs":["src1"]}],"citations":["src1"]}. Advisory result only.
`context_budget`read-only	Select prioritized context chunks inside a token limit. Offline check. Supply payload like {"max_tokens":100,"chunks":[{"id":"source1","tokens":40,"priority":10}]}. Advisory result only.
`csv_data_doctor`	Find missing fields, ragged CSV rows and duplicate key values; no raw rows are stored.
`duplicate_actions`read-only	Find duplicate attempts and conflicting key reuse. Offline check. Supply payload like {"calls":[{"idempotency_key":"k1","payload_fingerprint":"hash1"},{"idempotency_key":"k1","payload_fingerprint":"hash1"}]}. Advisory result only.
`evidence_expiry`read-only	Flag stale observations before an agent acts. Offline check. Supply payload like {"now_unix":200,"records":[{"id":"health","observed_unix":100,"ttl_seconds":120}]}. Advisory result only.
`http_headers_audit`	Assess supplied HTTP security response headers. No network or live website probe.
`invoice_math_audit`	Independently recalculate invoice arithmetic, NOT legal/tax compliance. Synthetic data only.
`json_schema_guard`	Validate one JSON object against a SAFE subset of JSON Schema. No remote refs. Offline.
`json_shape_diff`	Compare JSON object shapes for added, deleted or changed field types. Offline.
`manifest_drift`read-only	Compare expected and observed resource manifests. Offline check. Supply payload like {"expected":{"version":"1"},"observed":{"version":"2"}}. Advisory result only.
`mcp_registry_preflight`	Check a candidate MCP server.json metadata structure; this is NOT official validation.
`minimize_agent_data`read-only	Check declared fields, retention and model transfer against a supplied local policy.
`openapi_contract_preflight`	Static OpenAPI 3.x lint: missing operation IDs, responses and malformed operations. Offline.
`permission_paths`read-only	Find sensitive targets reachable through declared capability edges. Offline check. Supply payload like {"start":"agent","edges":[{"from":"agent","to":"secret"}],"sensitive_targets":["secret"]}. Advisory result only.
`plan_workflow_recovery`read-only	Plan reverse-order compensations for a supplied workflow DAG; never execute actions.
`prerequisite_gate`read-only	Check whether all declared evidence prerequisites are present. Offline check. Supply payload like {"requirements":[{"id":"deploy","evidence_refs":["ci"]}],"available_evidence":["ci"]}. Advisory result only.
`queue_forecast`read-only	Project backlog and drain time from supplied rates. Offline check. Supply payload like {"backlog":100,"incoming_per_hour":10,"capacity_per_hour":20,"horizon_hours":4}. Advisory result only.
`receipt_chain`read-only	Check links in a supplied digest receipt chain. Offline check. Supply payload like {"root_sha256":"0000000000000000000000000000000000000000000000000000000000000000","receipts":[{"previous_sha256":"0000000000000000000000000000000000000000000000000000000000000000","sha256":"1111111111111111111111111111111111111111111111111111111111111111"}]}. Advisory result only.
`release_gate`read-only	Require named checks to be green before a release. Offline check. Supply payload like {"required":["test"],"checks":[{"id":"test","status":"success"}]}. Advisory result only.
`report_missing_information`	Opt-in report of a PUBLIC missing-data topic, never include private data or secrets.
`resolve_public_fact`	Resolve one CVE identifier (e.g. CVE-2024-3094) using NIST NVD records. This tool does not execute code, scan targets, or accept arbitrary URLs.
`retry_schedule`read-only	Preview capped exponential retries against a deadline. Offline check. Supply payload like {"attempts":3,"first_delay_seconds":2,"max_delay_seconds":10,"deadline_seconds":30}. Advisory result only.
`robots_policy_check`	Evaluate supplied robots.txt for one agent/path. Not a legal scraping permission.
`schema_impact`read-only	Identify downstream consumers broken by changed fields. Offline check. Supply payload like {"before":{"id":1},"after":{},"consumers":[{"id":"client","required_fields":["id"]}]}. Advisory result only.
`scope_delta`read-only	Find newly granted permissions outside an approved set. Offline check. Supply payload like {"before":["read"],"after":["read","send"],"approved_additions":[]}. Advisory result only.
`secret_pattern_shield`	Detect probable token patterns without returning or storing secret values. Never send real secrets.
`simulate_agent_action_policy`read-only	Dry-run one proposed tool action against explicit allow/deny/approval rules; no enforcement.
`slo_burn`read-only	Measure error-budget burn against a supplied target. Offline check. Supply payload like {"target_percent":"99","total":1000,"bad":20,"alert_burn_rate":2}. Advisory result only.
`triage_webhook_deliveries`read-only	Find duplicate, failed and rate-limited deliveries from supplied HTTP status metadata.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.aibitious/agent404",
  "title": "AIBITIOUS 404 LAB - 32 Free Agent Experiments",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://aibitious.com/404/mcp/",
      "type": "streamable-http"
    }
  ],
  "version": "0.3.0",
  "repository": {
    "url": "https://github.com/aibitious/ai-micropayment-network",
    "source": "github"
  },
  "description": "32 free tools: CVE/data checks and offline agent decisions on permissions, budgets and recovery."
}