ai.surfingdog/search

What it mainly works on, as our AI model read its tool descriptions: accounts and data in outside web services.

6 of 14 tools are described as changing something (creating, editing, deleting, sending or running). For 1 the reading was uncertain, so no mark is shown.

• search_businesseson 33 other serversreads or searches

  “Find businesses in the directory by what they do (query, category: a group or a place category), where (near, country), the language they speak, whether they are open now, their attributes (list_attr…”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  18 inputs

  • querystring“A few words about what the business does or where, like "florist" or "coffee singapore".”
  • nearobject“Only businesses within radius_km of this point, each with its distance.”
  • categorystring“A slug from list_categories, like hair-beauty, or a place category id like hair_salon, with every category below it.”
  • item_typestring“Only businesses whose inbox takes this.”
  • languagestring“Only businesses that speak this language, as a tag like pt or en; pt also finds pt-br.”
  • open_nowboolean“true: only businesses open right now by the hours they published.”
  • limitinteger“How many to return: 10 when left out.”
  • cursorstring“next_cursor from the previous answer, for the next page of the same search.”
  • attributesarray“Keys from list_attributes, like "delivery" or "walk_ins", or key=value for one with values; every one must hold.”
  • countrystring“A country code like PT or BR: a business located there, serving it or shipping there.”
  • price_bandstring“1 (cheapest) to 4, as "2" or a range "1-2".”
  • acceptsarray“What its live doors take and what it accepts as payment, all of them: ask, quote, book, order, pay, or a payment from list_attributes like card or pix.”
  • requestablestring“A live door that declared it answers this kind.”
  • door_typearray“A live door of any of these types: inbox, mcp, a2a, openapi, api, ucp, acp, nlweb, other, "platform" for any platform, or platform:<name>.”
  • levelstring“At this readiness level or above: askable (an AI can ask), bookable (a door takes bookings), orderable (a door takes orders), payable.”
  • has_inboxboolean“true: with an inbox door; false: without one.”
  • sourcearray“member (through its inbox), registered (by the business), found (by this network on the business's own website); any of them.”
  • orderstring“rank: the published order (the default); nearest: by distance, and it needs near.”
• get_businesson 40 other serversreads or searches

  “One business's full listing, by its domain: its address (a town and country for one this network found), the week's opening hours and closures, its doors and what each takes, its services, its standi…”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  1 input, 1 required

  • domainstringrequired“The business's domain, like ana-salon.example, as search_businesses gave it.”
• check_businesson 3 other serversreads or searchesdescription does not say

  “Checks what an AI agent can do with a business's website: message, book, order, sign up, pay, change or cancel.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  2 inputs, 1 required

  • urlstringrequired“The business's website, as a URL or a bare domain like salon.example.”
  • freshboolean“Read the site again rather than answer the stored result: for a business that just changed its site.”
• report_doorcreates or changes datadescribed as changing data

  “Records how a business's door went (its inbox, MCP, A2A or API) when you used one: it answered (ok), refused (slot_taken, out_of_stock…), the request was your own fault (invalid), it failed (could no…”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  2 inputs, 2 required

  • vnumberrequired
  • reportsarrayrequired
• ask_businesson 4 other serverssends messagesdescribed as changing data

  “Sends your person's question to a business's own inbox, as a message.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  6 inputs, 4 required

  • domainstringrequired“The business's domain, as search_businesses or get_business gave it, like bikes.example.”
  • messagestringrequired“What your person wants to ask, in their words.”
  • subjectstring“A few words the business sees first.”
  • contactobjectrequired“Where the business can answer.”
  • consentbooleanrequired“true only when your person agreed to give this business their email address for its answer.”
  • languagestring“The language your person wants the answer in, as a tag like en, pt or pt-BR.”
• request_quoteon 63 other serverssends messagesdescribed as changing data

  “Asks a business for a price, in its own inbox, for something your person describes.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  8 inputs, 5 required

  • domainstringrequired“The business's domain, as search_businesses or get_business gave it, like bikes.example.”
  • whatstringrequired“What the quote is for, in a few words: Wheel rebuild, Kitchen tiling.”
  • detailsstringrequired“What the business needs to know to give a price.”
  • quantityinteger“How many, when it is a number of things.”
  • needed_bystring“The date your person needs it by, as YYYY-MM-DD.”
  • contactobjectrequired“Where the business can answer.”
  • consentbooleanrequired“true only when your person agreed to give this business their email address for its answer.”
  • languagestring“The language your person wants the answer in, as a tag like en, pt or pt-BR.”
• request_bookingon 22 other serverscreates or changes datadescribed as changing data

  “Without start: the business's free times for one of its services, read from its own inbox; nothing is sent.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  10 inputs, 2 required

  • domainstringrequired“The business's domain, as search_businesses or get_business gave it, like bikes.example.”
  • servicestringrequired“The service's name, as get_business lists it, or its id from this tool's answer.”
  • startstring“When your person wants it to start, from this tool's free times.”
  • fromstring“Without start: the first day to show free times for (today when left out).”
  • party_sizeinteger“How many people it is for, when that matters.”
  • notesstring“Anything the business should know.”
  • terms_shastring“The confirm.terms_sha of the last answer, sent only after your person said yes to its summary.”
  • contactobject“Needed with start: where the business can answer.”
  • consentboolean“Needed with start: true only when your person agreed to give this business their email address.”
  • languagestring“The language your person wants the answer in, as a tag like en, pt or pt-BR.”
• list_categorieson 426 other serversreads or searches

  “The categories list: every slug with its English and Portuguese labels and its kind (local_and_retail, or software_and_ai for software, API and AI companies, kept apart).”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  Takes no inputs.

• list_attributeson 4 other serversreads or searches

  “The attributes a search may ask for (delivery, walk_ins, wifi…), each with its labels, and the payments accepts takes.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  Takes no inputs.

• get_censuson 2 other serversreads or searches

  “Monthly counts of what AI agents can do at the websites this network checked: how many an agent can message, book, order from or pay, through which doors, by country, kind of business (group), websit…”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  3 inputs

  • editionstring“The month, YYYY-MM.”
  • scopestring“all (the default), country, group (kind of business), platform, source (where the sites came from) or city.”
  • keystring“One key of the scope: a country code (GB), a group slug, a platform slug, a source, or a city slug (madrid).”
• register_businesscreates or changes datadescribed as changing data

  “For a business's own AI: put the business in this directory with its doors (MCP, A2A, OpenAPI, an API, UCP, ACP, a platform's door) and its facts: name, what it is (a category of list_categories or a…”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  18 inputs, 7 required

  • domainstringrequired“The business's own website domain.”
  • namestringrequired“As the business writes it.”
  • categoryobjectrequired“What the business is: one category, and at most two more.”
  • descriptionstringrequired“One line on what it does; the first line is at most 160.”
  • whereobjectrequired“A storefront needs an address or geo, a service area its radius or countries, online its ships_to.”
  • languagesarrayrequired“Language tags, like pt or fr-CA.”
  • doorsarray
  • want_inboxboolean
  • hoursobject“As a profile's hours: {"timezone": "Europe/Paris", "weekly": {"tue": [["09:00", "19:00"]]}}.”
  • currenciesarray“ISO 4217.”
  • price_bandinteger“1 (cheapest) to 4.”
  • attributesobject“Keys of list_attributes.”
  • payarray“Payment tokens of list_attributes.”
  • alternate_namesarray“Other names the business goes by; a name longer than the network keeps is dropped (the reference network keeps 60 characters and 4 words at most).”
  • localestring“The language to answer in.”
  • agreebooleanrequired“The business agrees to be listed by the network's published rules (GET /v1/ranking) and listing terms.”
  • proofobject
  • claim_tokenstring“Given by a successful register_business: proof again for 90 days, for this listing only.”
• update_businesscreates or changes datadescribed as changing data

  “For a business's own AI: correct its listing (set any field register_business takes), add or remove doors, turn the listing off or on, or hide its agentic score result (score_page), with its claim_to…”

  Publisher declares: read-only no · destructive yes · idempotent no · open-world yes

  8 inputs, 1 required

  • domainstringrequired
  • claim_tokenstring“Given by a successful register_business: proof again for 90 days, for this listing only.”
  • proofobject
  • setobject“Any field register_business takes, but domain.”
  • doorsobject
  • listingstring“off hides it from search and keeps it in the index.”
  • score_pagestring“hidden takes the business's agentic score result page out of view, its ranks and leaderboards included; shown brings it back.”
  • opt_outobject“Stops the listing (list), the crawl (crawl) or both (all).”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.