protogrid

Search / io.github.b-hash88/knownfix

KnownFix

R0· no sign-in

Developer fixes, free skills, browser tools and scoped technical services over MCP.

v0.6.1 · active · repository · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality74needs work
Trust97of 100
Uptime, 30 days100%
Latency p50584 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "knownfix": {
      "type": "http",
      "url": "https://knownfix-backend-28.b-hash88.deno.net/mcp"
    }
  }
}
claude mcp add --transport http knownfix https://knownfix-backend-28.b-hash88.deno.net/mcp
[mcp_servers.knownfix]
url = "https://knownfix-backend-28.b-hash88.deno.net/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "knownfix": {
      "type": "remote",
      "url": "https://knownfix-backend-28.b-hash88.deno.net/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "knownfix": {
      "type": "http",
      "url": "https://knownfix-backend-28.b-hash88.deno.net/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=knownfix&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8va25vd25maXgtYmFja2VuZC0yOC5iLWhhc2g4OC5kZW5vLm5ldC9tY3AifQ%3D%3D"
}
{
  "servers": {
    "knownfix": {
      "type": "http",
      "url": "https://knownfix-backend-28.b-hash88.deno.net/mcp"
    }
  }
}
{
  "mcpServers": {
    "knownfix": {
      "httpUrl": "https://knownfix-backend-28.b-hash88.deno.net/mcp"
    }
  }
}
extensions:
  "knownfix":
    enabled: true
    name: "knownfix"
    type: streamable_http
    uri: "https://knownfix-backend-28.b-hash88.deno.net/mcp"
    timeout: 300

Quality 74 / 100needs work

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations19 of 19 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 4,142 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability25 · weight 15
  • warn
    stability.changes8 tool changes in 30 days
  • fail
    stability.rug_pull2 tools kept their name but changed most of their description in 30 days; review before trusting them
dependencies67 · weight 15
  • pass
    deps.known_vulnsno known advisory in 98 resolved packages
  • fail
    deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
  • pass
    deps.resolvable[email protected] resolved: 98 packages

19 tools, about 4,142 tokens to load them all · tool set ccda2e2e225a · tools last changed 2026-10-19 · checked 2026-10-19 10:20 UTC

Tool changes

  • order_servicechangeddescriptionmeaning changed
    before

    Create a private ticket and signed Base USDC/ETH checkout for one published professional service. Accepts public HTTPS websites or public GitHub repositories only. Never include credentials, tokens, secrets, private repository URLs, or confidential data. The returned svc_ ticket is shown once and is the only delivery-retrieval credential.

    after · 36% of words in common

    Create a private ticket and signed Base USDC/ETH checkout for an eligible automated service only. Do not call for requiresScopeApproval services (SaaS security, Microsite Launch) or paymentTiming:after-verified-delivery (Verified Repo Fix); these require manual scope approval via their published page. Accepts authorized public HTTPS targets only. Obtain operator spending approval. Never send credentials or confidential data. Keep the returned svc_ ticket private.

  • list_serviceschangeddescriptionmeaning changed
    before

    Compare KnownFix's focused and comprehensive website audits, homepage build, public-codebase review, agent-commerce audit, and release-pipeline review. Returns bounded scope, deliverables, delivery time, limitations, sample-report links where available, and exact prices. Call order_service only after choosing a service and confirming authority over the public target.

    after · 18% of words in common

    Compare all current KnownFix reviews, Verified Repo Fix and Microsite Launch. Returns complete scope, deliverables, prices, delivery targets and limitations. Services requiring scope approval or payment after verified delivery are manual: use their order page, not order_service. SaaS security requires explicit written testing authorization. Other services use private-ticket checkout only after operator spending approval and target authorization.

  • get_overviewadded

    One free overview of all KnownFix offerings: complete free-workflow resource URIs, three browser-local tools and their companion guides, catalog routes, premium outlines and service prices/scopes/ordering boundaries. No account, payment, signed offer or order creation. Use search_fixes first for an exact error; list_services for full engagement terms.

  • get_free_skilladded

    Return the complete Markdown body of one free workflow listed by get_overview. No account, payment, paid body or private data. Use list_skills/get_skill for premium products instead. This tool supports clients that cannot read MCP resources.

  • order_servicechangedinput schema
  • order_servicechangedinput schema
  • order_servicechangeddescription, input schema
    before

    Create a private ticket and signed Base USDC/ETH checkout for one published professional service. Accepts public HTTPS websites or public GitHub repositories only. Never include credentials, tokens, secrets, private repository URLs, or confidential data. The returned svc_ ticket is shown once and is the only report-retrieval credential.

    after · 95% of words in common

    Create a private ticket and signed Base USDC/ETH checkout for one published professional service. Accepts public HTTPS websites or public GitHub repositories only. Never include credentials, tokens, secrets, private repository URLs, or confidential data. The returned svc_ ticket is shown once and is the only delivery-retrieval credential.

  • list_serviceschangedtitle, description
    before

    Compare KnownFix's $49 website first-look report and deeper website, public-codebase, agent-commerce, and release-pipeline reviews. Returns bounded scope, deliverables, delivery time, limitations, sample-report links where available, and exact prices. Call order_service only after choosing a service and confirming authority over the public target.

    after · 76% of words in common

    Compare KnownFix's focused and comprehensive website audits, homepage build, public-codebase review, agent-commerce audit, and release-pipeline review. Returns bounded scope, deliverables, delivery time, limitations, sample-report links where available, and exact prices. Call order_service only after choosing a service and confirming authority over the public target.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 97 / 100

provenance90
liveness100
freshness100
hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-100% +updated-0d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] npm97 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19

advisoryseveritypackagefixed in
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP serverhigh@modelcontextprotocol/[email protected]MCP SDK, directfixed in 1.31.0

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://knownfix-backend-28.b-hash88.deno.net/mcp streamable-httpnoneyes100%584 ms2025-11-252026-10-19
packageregistryversionruntimesecrets
knownfixnpm0.3.17–

Tools (19)

audit_endpointReadiness audit of any agent-facing URL: MCP handshake, CORS, discovery docs (llms.txt, mcp.json), and payment-offer behaviour. First call with url alone for the FREE grade and failing-check list. For the full findings and remediations, call get_offer with productType "audit" and productId "conformance-report", pay, then call audit_endpoint again with the same url plus paymentTx and paymentOffer. This tool both previews and redeems the paid report; no separate delivery tool is needed.
audit_themeread-onlyRun a read-only theme audit on a public HTTP(S) page, free in full. Fetches but never modifies the page, then checks inline style CSS for brace errors, token gaps, incomplete dark themes, missing body backgrounds, and WCAG body-text contrast. External stylesheets are counted but not fetched. Use audit_endpoint instead for MCP, CORS, discovery, and payment readiness.
check_requestCheck a private ticket from request_fix. Returns pending, declined, not-eligible, redeemed, or the full fix free once an eligible new fix is stocked. This call may atomically consume the ticket's one-time delivery, so save the returned body. Use get_fix when you already have a catalog id; do not create another request while this ticket is pending.
check_service_orderCheck a private service order by its svc_ ticket. With paymentTx and paymentOffer, atomically confirms exactly one matching Base payment and moves the order into review. Without payment fields, returns current status; once complete, it returns the private Markdown report and SHA-256 digest. Keep the ticket and signed offer private.
check_submissionread-onlyCheck the private submissionId returned by submit_fix. Returns only pending-review, accepted, declined, or cataloged state and, when cataloged, the stocked fix id. It never returns submitted text or contributor details and creates no side effects. Use get_fix with catalogId when cataloged; do not resubmit merely because review is pending.
get_fixGet or redeem a fix after search_fixes or list_catalog identifies the id. Free samples return immediately. For a paid fix, call with the id alone to receive a free diagnosis preview, confidence and compatibility, dollar price, signed Base Pay USDC and exact-ETH offers, and one pay-and-redeem action; then call once more with the matching paymentTx and private paymentOffer. Never pay again merely because an existing proof is pending or denied.
get_free_skillread-onlyReturn the complete Markdown body of one free workflow listed by get_overview. No account, payment, paid body or private data. Use list_skills/get_skill for premium products instead. This tool supports clients that cannot read MCP resources.
get_offerread-onlyCreate or refresh a one-hour signed bearer offer for a chosen skill, bundle, audit, or fix. Do not call this after a paid search_fixes result or an unpaid get_fix/get_skill result because those responses already include both payment rails. Choose USDC for Base Pay or ETH for exact wei; with no product arguments, this returns the general settlement document.
get_overviewread-onlyOne free overview of all KnownFix offerings: complete free-workflow resource URIs, three browser-local tools and their companion guides, catalog routes, premium outlines and service prices/scopes/ordering boundaries. No account, payment, signed offer or order creation. Use search_fixes first for an exact error; list_services for full engagement terms.
get_skillGet or redeem a premium skill or multi-fix bundle after choosing with list_skills. Call with the id alone to receive the free outline, dollar price, signed Base Pay USDC and exact-ETH offers, and one pay-and-redeem action. After payment, call once more with the matching paymentTx and private paymentOffer for the complete SKILL.md or assembled bundle decision tree, fix bodies, verification commands, update guidance, and sources. Do not use this for individual fixes; call get_fix instead. Never pay again merely because an existing proof is pending or denied.
list_catalogread-onlyBrowse every stocked error signature, title, tag, confidence label, and free-sample flag without ranking or creating an offer. Use search_fixes instead when diagnosing a specific error; it returns the best match and any purchase-ready checkout.
list_merchread-onlyBrowse the KnownFix Merch Store. Returns fixed product ids, lines, formats, and privacy-safe tracked links to the human Fourthwall storefront. Fourthwall shows the current localized price, options, tax, shipping, and availability. This tool does not place an order or collect checkout data.
list_servicesread-onlyCompare all current KnownFix reviews, Verified Repo Fix and Microsite Launch. Returns complete scope, deliverables, prices, delivery targets and limitations. Services requiring scope approval or payment after verified delivery are manual: use their order page, not order_service. SaaS security requires explicit written testing authorization. Other services use private-ticket checkout only after operator spending approval and target authorization.
list_skillsread-onlyCompare premium skills and multi-fix bundles. Returns current ids, free outlines, provenance, formats, and exact prices while full bodies remain paid. Call get_skill with a chosen id for signed USDC and ETH checkout; use search_fixes for a single error.
order_serviceCreate a private ticket and signed Base USDC/ETH checkout for an eligible automated service only. Do not call for requiresScopeApproval services (SaaS security, Microsite Launch) or paymentTiming:after-verified-delivery (Verified Repo Fix); these require manual scope approval via their published page. Accepts authorized public HTTPS targets only. Obtain operator spending approval. Never send credentials or confidential data. Keep the returned svc_ ticket private.
report_checkout_blockerUse only after a signed KnownFix checkout cannot proceed before a payment hash exists. Reports one closed-vocabulary blocker tied to the valid offer; at most one aggregate count is accepted per offer. No wallet address, token, transaction hash, query, or free-form text is published. Do not call after payment; redeem with get_fix, get_skill, or audit_endpoint instead.
request_fixAsk for a fix this store does not have yet. If we already stock it (matched on either field) you get the id straight back and no ticket. Otherwise you get a ticket; when we stock THAT fix, check_request returns it to you FREE, once. A ticket only ever redeems a fix created after the request: fixes that already existed when you asked are not free, whatever the request said. No contact details are collected. Set publish: true ONLY if the text may appear on a public wanted board — never include secrets, tokens, internal hostnames, or file paths.
search_fixesread-onlyUse this first for an exact error or distinctive symptom. Returns up to three confident ranked matches. A free top match includes the full fix. A paid top match includes a free diagnosis, confidence and compatibility, dollar price, signed USDC/Base Pay and exact-ETH rails, and one pay-and-redeem action; do not call get_offer. Use list_catalog to browse, get_fix only with a known id or payment proof, and request_fix only after an honest miss.
submit_fixOffer a fix for the catalog. Submissions are reviewed by the operator before listing; include a reproduction so the fix can be verified rather than trusted. Returns a private submissionId; save it and call check_submission for pending, accepted, declined, or cataloged status. Submitted text and contributor details are never returned by the status tool. Revenue-sharing for accepted contributions is planned, not yet live.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "io.github.b-hash88/knownfix",
  "icons": [
    {
      "src": "https://b-hash88.github.io/knownfix/knownfix-icon.png",
      "sizes": [
        "1254x1254"
      ],
      "mimeType": "image/png"
    }
  ],
  "title": "KnownFix",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://knownfix-backend-28.b-hash88.deno.net/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.6.1",
  "packages": [
    {
      "version": "0.3.17",
      "transport": {
        "type": "stdio"
      },
      "identifier": "knownfix",
      "registryType": "npm",
      "packageArguments": [
        {
          "type": "positional",
          "value": "bridge"
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/b-hash88/knownfix",
    "source": "github"
  },
  "websiteUrl": "https://b-hash88.github.io/knownfix/",
  "description": "Developer fixes, free skills, browser tools and scoped technical services over MCP."
}