# io.github.huwhitememes/tollbooth

> 37 paid x402 MCP tools for OSINT, prediction markets, web intel, and agent security on Base USDC.

- name: io.github.huwhitememes/tollbooth
- version: 0.10.0
- connection class: R0 (autonomous)
- trust: 69/100 flags: no-repository
- quality: 73/100 (needs work)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.huwhitememes%2Ftollbooth
- tools: https://api.protogrid.dev/v1/servers/io.github.huwhitememes%2Ftollbooth/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "tollbooth": {
      "type": "http",
      "url": "https://agenttoll.dev/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 98
- freshness: 65
- provenance: 35
- drivers: +reachable +uptime-94% ~updated-101d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 73/100 (needs work)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 57 (weight 30)

- warn `tools.descriptions`: 1 of 104 tools have a description under 20 characters
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: ping (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); cross_platform_arb_scan (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); openaq_air (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- warn `tools.token_cost`: about 9,132 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 104, about 9,132 tokens to load them all
- tool set hash: d2ccc649573e7c0715d6b49de5460430
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.huwhitememes/tollbooth.svg)](https://protogrid.dev/servers/io.github.huwhitememes/tollbooth)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://agenttoll.dev/mcp (streamable-http, auth none, reachable true, uptime30d 0.9380531)

## Packages

_none_

## Tools (104)

- `adverse_events`: Search 20M+ FDA adverse drug event reports via openFDA. Patient outcomes, drugs, reactions.
- `agent_security_policies`: Get drop-in agent security policy templates by profile (coding-agent, browser-agent, payment-agent, research-agent).
- `agent_threat_intel`: Query the OWASP Agentic Top 10 threat catalog (ASI01-ASI10). Returns threats, detection hints, mitigations, and mapped detection rule IDs.
- `agent_trifecta_score`: Score an agent's lethal trifecta risk (private data + untrusted content + outbound actions). Returns risk level, missing controls, and decomposition advice.
- `airport_status`: Airport details by ICAO code.
- `air_quality_index`: PM2.5, UV index, pollutants for any location.
- `attention_momentum`: Attention momentum — HN Algolia + Reddit JSON velocity scoring, points/hr + momentum_score, viral flag for culture/pop/app-rank/YouTube/npm-dl Polymarkets. Proxies: pypistats, api.npmjs.org.
- `aurora_forecast`: NOAA aurora oval forecast.
- `btc_address_balance`: Bitcoin address balance and tx history.
- `btc_mempool_fees`: Recommended Bitcoin network fees.
- `business_days`: Business days calculator.
- `check_agent_policy`: Check robots.txt, llms.txt, security.txt, and agent.json for crawl/discovery signals before an agent touches a site.
- `citation_graph`: Citation graph via Semantic Scholar.
- `clinical_trials`: Search 480K+ clinical studies via ClinicalTrials.gov v2. Status, sponsors, phases, results.
- `combinatorial_arb`: Polymarket negRisk combinatorial arbitrage scan.
- `company_registry`: Search company registries.
- `court_docket`: Look up a federal court docket by ID via CourtListener RECAP archive. Parties, filings, dates.
- `court_opinions`: Search US federal court opinions by keyword, court, date via CourtListener (Free Law Project). Keyless.
- `cross_platform_arb_scan`: Match live Polymarket and Kalshi markets for a topic and compare complementary asks after conservative fee estimates. Intelligence only; verify both rulebooks before acting.
- `crypto_price_simple`: Cryptocurrency price via CoinGecko.
- `currency_rates`: Live currency exchange rates.
- `cve_search`: Search NIST NVD CVE database.
- `detect_stack`: Fingerprint a URL for framework, analytics, hosting, payment, CRM, and site-platform signals.
- `disease_outbreaks`: CDC disease outbreak data.
- `dns_records_lookup`: DNS resolution via Cloudflare DoH.
- `drug_labels`: Search official FDA drug labels via openFDA. Dosage, warnings, contraindications, active ingredients.
- `drug_recalls`: Search FDA drug/device/food enforcement recalls via openFDA. Severity, classification, recalling firm.
- `economic_indicators`: GDP, CPI, unemployment, trade data via World Bank API. Multi-year time series.
- `edgar_filings`: Search SEC EDGAR full-text filings by company, form type, or ticker.
- `enrich_lead`: Enrich a company domain. Returns company name, description, detected tech stack, social media links, DNS records, platform detection (WordPress/Shopify/etc.), and contact page links. Useful for lead scoring and prospect research.
- `extract_contacts`: Extract visible emails, phone-like strings, social links, and contact/about/pricing/careers URLs from a page.
- `federal_contracts`: Federal contracts via USAspending.gov.
- `federal_grants`: Search Grants.gov for open federal funding opportunities. Agency, eligibility, deadline.
- `federal_register`: Search the daily Federal Register — proposed rules, final rules, presidential notices.
- `federal_spending`: Search $6T+ federal budget by agency, recipient, or keyword via USAspending.gov API.
- `find_agent_resource`: Search a small curated atlas of agent-useful APIs, self-hosted tools, payment rails, scraping helpers, and automation primitives.
- `flight_intel`: Exec-jet + military aircraft intel — TEB/VNY/DCA geofence, tail filter, B-52/F-35/E-3 detection via adsb.lol open. M&A / defense Polymarket edge.
- `food_recall_check`: Search openFDA food enforcement and recalls.
- `food_safety`: openFDA food enforcement.
- `fred_series`: FRED economic data series.
- `fred_surprises`: FRED rates surprise — DGS10 10Y + DGS2 2Y csv public-domain no-key, spread + inversion flag, delta scoring for FOMC Fed funds + rates markets. TokenBucket 2/s polite.
- `gen_video_intel`: Live Banodoco practitioner-feed intelligence for generative video and image workflows: Wan, VACE, LTX, ComfyUI, FLUX 3, Seedance, Kling, Hunyuan, Qwen Image, settings, comparisons, and gotchas. Intelligence only; no direct model API resale.
- `geo_pulse`: Composite geopolitical intervention signal — GDELT + BBC + AlJazeera + ADS-B mil + prediction-market boosters (intervention signal pattern). Returns alert_level + signals array.
- `github_repo_intel`: GitHub repo intelligence.
- `github_trending`: GitHub trending repos — stars >20 + recent push, sorted by stars desc. Public GitHub Search API no-key. Momentum proxy for dev tooling / open source virality.
- `gov_contract_fit_brief`: Score federal contract awards against a service keyword, agency, or company domain. Returns incumbents, agencies, amounts, and pursuit notes.
- `hn_frontpage`: HN frontpage live — Algolia front_page tag, dwell = points/(age_h+2). Cache 10min. Top stories sorted by dwell for attention-momentum edge.
- `insider_cluster_brief`: Turn recent SEC Form 4 filings into an insider-activity cluster brief. Signal intel only.
- `insider_trades`: SEC Form 4 insider transactions.
- `ip_geolocation`: Geolocate an IP address.
- `isbn_book_lookup`: Book metadata by ISBN via Open Library.
- `judges_search`: Search federal and state judges.
- `lobbying_records`: Search FEC lobbying disclosure records. Lobbyists, clients, amounts, issues lobbied.
- `marine_conditions`: Marine conditions for any ocean coordinate.
- `mcp_approval_pack`: Generate the approval prompt and spend policy an agent should show before using a paid or risky tool. Returns maxPayment, seller checks, risk reasons, allowed fields, and what not to send.
- `mcp_safety_brief`: Static risk brief for an MCP server, OpenAPI spec, or tool manifest before an agent connects it. Returns tool risk, PII and credential hints, allowlist advice, approval policy, and a user-facing safety line.
- `mcp_supply_chain_iocs`: Query known-malicious MCP packages, versions, C2 hosts, and email IOCs. The virus database for MCP.
- `model_settings_lookup`: Community-tested settings for generative video and image models: CFG, steps, denoise, fps, resolution, sampler, LoRA, ComfyUI, fp8/quantization, and training notes.
- `national_debt`: US national debt to the penny via Treasury FiscalData. Total debt, debt by instrument.
- `nonprofit_filings`: Search nonprofit IRS 990 filings via ProPublica Nonprofit Explorer. Revenue, expenses, exec comp.
- `openaq_air`: OpenAQ air quality — PM2.5/PM10/NO2/O3 by city/country, lastUpdated. v3 API + v2 fallback. Env / health / geo pulse. For PM market disclaimers.
- `openrouter_models`: OpenRouter model catalog — id, name, context_length, pricing, created. Cached 1h, auto-fetched via public API. For model routing decisions.
- `orderbook_imbalance`: Polymarket CLOB orderbook imbalance.
- `paper_details`: Paper metadata via Semantic Scholar.
- `patents_search`: Full-text patent search via Google Patents. Titles, assignees, dates, abstracts.
- `ping`: Health check. Returns pong + server time + tool catalog.
- `polymarket_event_scan`: Scan one live Polymarket negRisk event for fee-adjusted outcome-sum violations. Intelligence only; verify CLOB depth and resolution rules before acting.
- `polymarket_market_scan`: Scan high-volume active Polymarket markets for resolution candidates and fee-adjusted YES+NO bundle violations. Intelligence only; verify live books and rules before acting.
- `postal_code_lookup`: City, state, geo for postal/zip codes (60+ countries).
- `product_recalls`: Search CPSC consumer product recalls via saferproducts.gov. Hazards, manufacturers, remedies.
- `reddit_search`: Search Reddit.
- `regulations_search`: Search open rulemakings and public dockets. Falls back to Federal Register if no API key.
- `regulatory_impact_brief`: Summarize fresh Federal Register and rulemaking signals for one sector with severity, source links, and action read.
- `regulatory_pulse`: Regulatory pulse — SEC Atom RSS + openFDA adverse + USPTO TSDR + FCC OET + FAA registry hints for bio/tech Polymarkets. Returns events by org + provenance.
- `research_pack`: Multi-source OSINT research pack — GDELT + BBC + HN + Reddit, 4-layer verification layer (existence+recency+multi-source+domain allowlist) + combined relevance scoring. research pack pipeline.
- `scenario_verdict`: Scenario engine seed→entity→3-scenario verdict.json + composite YES prob mapped to market question. Input raw seed text + question, get bear/base/bull scenarios + fair_price_hint.
- `score_lead`: Score a company domain for outbound fit using HTTPS, DNS, tech stack, contact paths, social links, platform, and copy depth.
- `scrape`: Fetch a URL and return clean structured content: title, description, meta tags, text content, headings, links, and tech stack signals. Works on HTML and JSON pages.
- `search_arxiv`: Search arXiv preprints in CS, physics, math, biology. Titles, authors, abstracts, categories.
- `search_openalex`: Search 250M+ works via OpenAlex with institution data, bibliometrics, citation counts.
- `search_papers`: Search 226M+ academic papers across all fields with AI-ranked relevance via Semantic Scholar Graph API.
- `search_pubmed`: Search 37M+ biomedical papers via NCBI PubMed. PMIDs, titles, authors, journals.
- `sec_8k_velocity`: SEC 8-K velocity — EFTS FullTextSearch + Atom current, 1h spike vs 24h mean >3x, Item 1.05/2.02/5.02 boost. Earnings/merger/legal prediction-market lead. 9/sec TokenBucket, UA CompanyName Email per 17 CFR 200.80.
- `smart_money`: Polymarket leaderboard and top trader activity.
- `space_weather`: NOAA space weather — solar flares, geomagnetic storms, solar wind speed, Kp index.
- `space_weather_kp`: Current planetary K-index and geomagnetic storm conditions.
- `supply_stress`: Supply-chain stress index — CBP BWT + GDELT chokepoint mentions + AIS/MarineTraffic hint, port congestion for freight/commodity/middle_east Polymarket edge.
- `tide_data`: NOAA tide predictions and observed water levels for coastal stations.
- `timezone_current`: Current time for any IANA timezone.
- `token_stock_quote`: Live DEX quotes for tokenized equities (Coinbase B20 stock tokens on Base).
- `trademarks_search`: Search USPTO trademarks.
- `treasury_dts`: Treasury DTS TGA — operating_cash_balance free gov public-domain, TGA close $B d/d delta, deposits/withdrawals enrichment. Liquidity / debt-ceiling / SPX direction edge, 2nd upstream.
- `usgs_quake`: USGS all-day earthquakes — mag, place, time, tsunami, felt, coords, depth. Public USGS GeoJSON no-key. Disaster / insurance / commodity market tail-risk pulse.
- `validate_agent_manifest`: Validate an agent manifest for identity, endpoint, tools, pricing, and payment fields.
- `vehicle_recalls`: Search NHTSA vehicle recalls by make, model, or VIN. Campaign numbers, defect descriptions.
- `water_levels`: Real-time USGS river/stream flow and flood data. Gauge height, discharge, percentiles by state.
- `weather_alerts`: Active NOAA NWS severe weather alerts — watches, warnings, advisories by state or zone.
- `weather_bias`: Weather bias vs recent mean — uses Open-Meteo archive+forecast and ticker mapping for Kalshi HIGH* fade edge.
- `weather_current_global`: Current weather for any global coordinate.
- `weather_forecast_grid`: Detailed NWS 7-day forecast for US lat/lon.
- `wildfires`: Active wildfire detections from NASA FIRMS satellites. Lat/lon, brightness, confidence, scan time.
- `x402_market_radar`: CDP Bazaar radar for x402 builders: live catalog size, AgentToll ranks, keyword gaps, vertical competition, price samples, and next actions.
- `x402_rank_audit`: Audit one x402 resource across buyer keywords. Returns Bazaar rank, competitors above it, metadata defects, and fixes that can improve discovery.
- `x402_seller_readiness_audit`: Audit whether a paid x402 route is ready for agent buyers. Checks discovery metadata, price visibility, Base USDC terms, seller wallet, receipt language, tool descriptions, and approval copy.