MCP servers › io.github.Nutshell2000 › agent-data-tools

MCP server · registry snapshot 2026-10-23 · last tested 2026-10-23

io.github.Nutshell2000/agent-data-tools

187 agent tools: chain data, prices, sanctions, web, PDF. 25 free calls, then from $0.002. — the publisher's description

4 of 5 record checks metRead-only · tools listed 2026-10-23Topic: data-and-databases · AI-classifiedversion 1.50.5JavaScriptstreamable HTTP187 tools

Summary

io.github.Nutshell2000/agent-data-tools is a remote MCP server listed in the official MCP registry at version 1.50.5. On 2026-10-23 ProtocolProbe connected to it in read-only mode and read its inventory: 187 tools, 0 resources and 0 prompts.

Record checks

4 of 5 record checks met · 4 do not apply

met: Registry entry is active and says how to run it
met: Source repository link opens
met: Repository is not archived
met: Code pushed to the repository in the 90 days before our check
not met: Repository publishes a security policy (SECURITY.md)
not applicable: Package names its licence with a standard (SPDX) identifier
not applicable: The version the registry lists can be installed and is not withdrawn
not applicable: npm package carries build provenance (attestation)
not applicable: No known critical or high advisory in the package or its dependencies

Not ranked by downloads: a remote server publishes no download figure
Not ranked by stars: 0 stars (ranked from 10)

From public records, not a safety rating. Each check with its reason · Is it safe to install?

Key facts

Runs: remote (hosted by the publisher)
Transport: streamable HTTP
Sign-in: none needed to open a session
Repository: public
Tools: 187
Described as changing data: 1 of 187 toolsAI-classified
Mainly works on: accounts and data in outside web servicesAI-classified
Topic: data-and-databasesAI-classified
Last tested: 2026-10-23

Add to your client

Worth knowing before you connect it

1 tool is described as changing something (image): our AI model's reading of the descriptions, not something we tested, and the server opened a session without any credential. We did not call it.

Each line comes from a section below, with its source and date.

How fresh this is

Live-tested

yes, a real session (not a text-only review)

Last tested

2026-10-23

Mode

read-only (no tool calls)

Latest version

1.50.5, published 2026-10-22 (registry, as of the 2026-10-23 snapshot)

First listed version

2026-10-08 (earliest version still in the registry; older removed versions would be earlier)

Version history

79 versions listed, 2026-10-08 to 2026-10-22; 79 in the 90 days before the 2026-10-23 snapshot.

Most recent 12 versions

1.50.5 · 2026-10-22
1.50.4 · 2026-10-22
1.50.3 · 2026-10-22
1.50.2 · 2026-10-22
1.50.1 · 2026-10-22
1.50.0 · 2026-10-22
1.49.1 · 2026-10-22
1.49.0 · 2026-10-22
1.48.6 · 2026-10-22
1.48.5 · 2026-10-22
1.48.4 · 2026-10-22
1.48.3 · 2026-10-22

(versions still listed in the registry only)

Registry data

snapshot 2026-10-23

Package and repository

checked 2026-10-23

Engine

mcp-runtime-engine@0.1.0 · sdk@1.32.0

Changes since the last refresh

New in the registry: not in the list of 2026-10-04, listed on 2026-10-23 with version 1.50.5 (published 2026-10-22).

Source: the official MCP Registry list on 2026-10-04 and on 2026-10-23.

What it is

What does this server offer?

Observed inventory

187tools

0resources

0prompts

What it mainly works on, as our AI model read its tool descriptions: accounts and data in outside web services.

1 of 187 tools are described as changing something (creating, editing, deleting, sending or running).

check_payeeon 3 other serversreads or searches
“Fast check of a payee before an agent pays it: OFAC SDN match on the address, account type (wallet, delegated wallet or contract) and nonce on Base, Ethereum, Arbitrum, Optimism or Polygon, and optio…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- addressstringrequired“0x address you are about to pay”
- chainstring“Network of the payment: base (default), eth, arb, op or polygon”
- domainstring“Optional: the payee's domain or website URL, e.g.”
check_counterpartyon 6 other serversreads or searches
“Screen a payee before paying, trading or onboarding: one call vets an address on Base, Ethereum, Arbitrum or Optimism with an OFAC SDN match, account type and activity, USD holdings and, on Base, wal…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- addressstringrequired“0x address to check”
- chainstring“Network: base (default), eth, arb or op”
- domainstring“Optional: the payee's domain or website URL, e.g.”
check_x402_selleron 1 other serverreads or searches
“Audit an x402 seller before an agent buys from it: decodes the endpoint's 402 terms without paying, OFAC-screens each payTo address, reads its account type and nonce on the payment network, checks th…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- urlstringrequired“Absolute public https URL of the paid endpoint, with any query it needs”
searchon 763 other serversreads or searches
“Search the web and get the top results as JSON: title, URL, a short snippet and the page age, from the Brave Search API.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 1 required
- qstringrequired“Search query, at most 400 characters”
- countinteger“Number of results (1-20, default 10)”
newson 15 other serversreads or searches
“Search current news and get the latest headlines as JSON: title, URL, snippet, publisher domain and age, from the Brave Search API's news index.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- qstringrequired“News search query, at most 400 characters”
- countinteger“Number of results (1-20, default 10)”
- freshnessstring“Only articles from the past day, week or month (default: any age)”
sanctions_checkon 6 other serversreads or searches
“OFAC sanctions screen for a crypto wallet before you pay it: checks an address (BTC, ETH, USDT, TRX and more) or a person or company name against the US Treasury SDN list, aliases included.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs
- addressstring“Crypto address to check (give address, name or both)”
- namestring“Person or company name; matches when every word appears in a listed name or alias”
token_reporton 14 other serversreads or searches
“Check a Base token before you swap into it: a high/medium/low risk verdict with named red flags (paused transfers, blacklist, owner-set fees or tax, a mint selector with a live owner, upgradeable pro…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“Token contract address on Base (0x...)”
tokenon 8 other serversreads or searches
“Base only (other chains: <chain>_token_info).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“Token contract address on Base (0x...)”
wallet_auditon 2 other serversreads or searches
“Screen a Base address for fresh or throwaway-wallet signals: a high/medium/low heuristic risk tier with named flags (no or one outgoing transaction, a near-empty balance with few transactions), plus …”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“Base chain wallet address, 0x-prefixed 20-byte hex”
contract_riskon 2 other serversreads or searches
“Check a Base contract before you approve or call it: a low to critical risk tier with named flags (proxy, proxy with no implementation, tiny bytecode, zero token supply), plus bytecode size, the EIP-…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“Base chain contract address, 0x-prefixed 20-byte hex”
liquidity_pool_auditon 1 other serverreads or searches
“Check a Base DEX pool before you trade: give a pair address and get the verified DEX, both tokens, reported liquidity, 24h volume and trades, and pair age from DexScreener, or read on Base when it is…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“DEX pair address on Base, 0x-prefixed 20-byte hex”
x402_checkon 9 other serversreads or searches
“Check an x402 seller before you pay it: decode any public endpoint's 402 payment requirements without paying (v1 body or v2 header) into USD price for native USDC, network, asset, recipient, scheme a…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- urlstringrequired“Absolute public https URL of the paid endpoint, with any query it needs”

Show 88 more tools

price_tokenon 1 other serverreads or searches
“Crypto token USD price by ticker (ETH, BTC, USDC, AERO, ARB, OP, LINK…) or by any ERC-20 0x address on Base, Ethereum, Arbitrum or Optimism, from the deepest Uniswap v3 pool against USDC or WETH, rea…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs
- symbolstring“Ticker such as ETH, BTC, USDC, AERO, ARB, OP or LINK (instead of address; ETH and BTC mean the wrapped tokens)”
- addressstring“0x ERC-20 token contract address (instead of symbol)”
- chainstring“Network: base (default), eth, arb or op”
price_tokenson 1 other serverreads or searches
“USD prices for up to 20 crypto tokens in one call, by ticker (ETH, BTC, USDC, AERO…) or ERC-20 0x address, on Base, Ethereum, Arbitrum or Optimism, each from its deepest Uniswap v3 pool against USDC …”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs
- symbolsstring“Comma-separated tickers such as ETH,BTC,AERO (with or instead of addresses; 1-20 tokens in all)”
- addressesstring“Comma-separated 0x ERC-20 token addresses (with or instead of symbols; 1-20 tokens in all)”
- chainstring“Network: base (default), eth, arb or op”
wallet_portfolioon 10 other serversreads or searches
“USD value of a wallet on Base, Ethereum, Arbitrum or Optimism: native ETH plus major tokens (USDC and WETH everywhere, the common Base tokens on Base) and up to 20 tokens you add, each priced from it…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- addressstringrequired“0x wallet address”
- chainstring“Network: base (default), eth, arb or op”
- tokensstring“Optional extra comma-separated 0x token addresses (up to 20)”
wallet_balanceson 2 other serversreads or searches
“Read a wallet's native coin and USDC balances on Base, Ethereum, Arbitrum, Optimism and Polygon in one call, live from each network, plus the USDC total.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x wallet address”
hyperliquid_marketon 1 other serverreads or searches
“Live Hyperliquid perpetual futures data for a coin (BTC, ETH, SOL, HYPE…): mark, oracle and mid price, hourly funding rate and its APR, premium, open interest in coins and USD, 24-hour volume and pri…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- coinstring“Coin symbol such as BTC, ETH, SOL or HYPE (default: the 20 most traded markets)”
sec_filingson 9 other serversreads or searches
“Latest SEC EDGAR filings for a US-listed company by stock ticker or CIK: form (10-K, 10-Q, 8-K, 4, S-1…), filing and report dates, accession number, document description and a direct link, newest fir…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
4 inputs
- tickerstring“Stock ticker such as AAPL (or give cik)”
- cikstring or number or boolean“SEC Central Index Key, e.g.”
- formstring“Only this form type, e.g.”
- limitinteger“Filings to return, 1-50 (default 10)”
airport_statuson 4 other serversreads or searches
“Live FAA National Airspace System status for US airports: ground stops, ground delay programs, arrival and departure delays (with minimum, maximum and trend) and closures, each with its reason.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- airportstring“IATA airport code such as LGA, SFO or ORD (default: all US airports with events)”
btc_feeson 3 other serversreads or searches
“Current Bitcoin network fee rates in sat/vB for next-block, half-hour, one-hour and economy confirmation, the estimated cost in sats of a typical payment, mempool size and total pending fees, and the…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- onlystring“Optional: comma-separated top-level result keys to keep, for a smaller answer (for example only=price,symbol); unknown keys are ignored and an empty match retu…”
btc_priceon 4 other serversreads or searches
“Current Bitcoin (BTC) spot price in USD, EUR, GBP, CAD, CHF, AUD and JPY, averaged across major exchanges, with the number of satoshis per US dollar and the time of the price.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- onlystring“Optional: comma-separated top-level result keys to keep, for a smaller answer (for example only=price,symbol); unknown keys are ignored and an empty match retu…”
eth_balanceon 2 other serversreads or searches
“Native ETH balance (eth_getBalance) of any 0x wallet address on Ethereum at the latest block, in wei and in ETH.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x wallet or contract address”
eth_gason 1 other serverreads or searches
“Current gas price on Ethereum (eth_gasPrice): gas price, base fee and suggested priority fee in gwei, plus what a plain ETH transfer (21,000 gas) costs right now.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- onlystring“Optional: comma-separated top-level result keys to keep, for a smaller answer (for example only=price,symbol); unknown keys are ignored and an empty match retu…”
base_gason 10 other serversreads or searches
“Live gas prices on Base (chain 8453) read from the latest block: base fee and priority fee in gwei, suggested maxFeePerGas and maxPriorityFeePerGas in wei for an EIP-1559 transaction, how full the la…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- onlystring“Optional: comma-separated top-level result keys to keep, for a smaller answer (for example only=price,symbol); unknown keys are ignored and an empty match retu…”
extracton 37 other serversreads or searches
“Fetch any public web page URL and get clean, LLM-ready text or Markdown: main content, code blocks, tables, links and headings, for RAG and agent context.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
4 inputs, 1 required
- urlstringrequired“Absolute http(s) URL of the page to fetch”
- maxCharsinteger“Maximum characters of body text to return (500-100000, default 20000)”
- formatstring“Returned representation: text (default), markdown, or both.”
- sectionstring“Optional exact visible HTML ID within primary content, 1-500 characters.”
extract_renderedon 1 other serverreads or searches
“Same output as /extract, but the page is first rendered in a real browser, so single-page apps and pages that build their content with JavaScript come back with their text instead of an empty shell.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
4 inputs, 1 required
- urlstringrequired“Absolute public http(s) URL of the page”
- formatstring“text (default), markdown or both”
- maxCharsinteger“Output limit, 500-100000 characters (default 20000)”
- sectionstring“Optional exact HTML id to read only that element”
emailon 3 other serversreads or searches
“Check email syntax, DNS and MX records, disposable providers, role addresses, free providers and SPF/DMARC presence.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“The email address to check”
companyon 7 other serversreads or searches
“Facts about a company by name or Wikidata ID: official website, founding date, country, headquarters, industries, CEO, founders, parent, employee count, stock tickers and exchanges, and LEI, with Wik…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs
- namestring“Company name to search for (give name or id)”
- idstring“Wikidata item ID such as Q689141, instead of name”
domainon 6 other serversreads or searches
“Domain intelligence in one call: DNS records (A, AAAA, CNAME, MX, NS, TXT, CAA), DNSSEC status, registrar, registration and expiry dates with domain age in days (RDAP/WHOIS), and email authentication…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- namestringrequired“Domain name, e.g.”
domain_reporton 8 other serversreads or searches
“A trust verdict for any domain in one call: high/medium/low trust with named flags for very new registrations, expiry, missing or weak SPF and DMARC, too few nameservers, no web host and non-resolvin…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- namestringrequired“Domain name, e.g.”
weatheron 18 other serversreads or searches
“Weather for any city or point on Earth (city name, or latitude and longitude): current temperature in Celsius, conditions (clear, cloudy, rain, snow), precipitation in mm, wind, humidity, cloud cover…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
4 inputs
- citystring“City or place name, e.g.”
- latnumber“Latitude in decimal degrees, -90 to 90 (with lon, instead of city)”
- lonnumber“Longitude in decimal degrees, -180 to 180 (with lat, instead of city)”
- hoursinteger“Hours of hourly forecast to return, 1-48 (default 12; 48 covers tomorrow)”
econ_gdpon 1 other serverreads or searches
“GDP of any country from World Bank data: GDP in current US dollars, annual real GDP growth in % and GDP per capita in US dollars, for the last 1-10 years with the newest year first.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 1 required
- countrystringrequired“ISO 3166 code (SE, SWE) or English country name (Sweden)”
- yearsinteger“Years of history to return, 1-10 (default 5)”
econ_inflationon 1 other serverreads or searches
“Inflation rate of any country: annual % change in consumer prices (CPI) from World Bank data, for the last 1-10 years with the newest year first.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 1 required
- countrystringrequired“ISO 3166 code (SE, SWE) or English country name (Sweden)”
- yearsinteger“Years of history to return, 1-10 (default 5)”
econ_populationon 1 other serverreads or searches
“Population of any country from World Bank data: total population, annual population growth in % and the urban share of the population in %, for the last 1-10 years with the newest year first.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 1 required
- countrystringrequired“ISO 3166 code (SE, SWE) or English country name (Sweden)”
- yearsinteger“Years of history to return, 1-10 (default 5)”
econ_unemploymenton 1 other serverreads or searches
“Unemployment rate of any country from World Bank data (ILO modelled estimates): total unemployment and youth unemployment (ages 15-24) as % of the labour force, for the last 1-10 years with the newes…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 1 required
- countrystringrequired“ISO 3166 code (SE, SWE) or English country name (Sweden)”
- yearsinteger“Years of history to return, 1-10 (default 5)”
pdf_texton 7 other serversreads or searches
“Download a public PDF (up to 10 MB) and return its text page by page, with title, author, page count and character counts.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
4 inputs, 1 required
- urlstringrequired“Absolute public http(s) URL of the PDF”
- firstPageinteger“First page to read (default 1)”
- pagesinteger“How many pages to read (1-200, default 50)”
- maxCharsinteger“Maximum characters of text returned across all pages (1000-200000, default 50000)”
packageon 2 other serversreads or searches
“Reports package existence, latest version and release, age, version count, npm weekly downloads, licenses, deprecation and known advisory severity.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 2 required
- ecosystemstringrequired“One of npm, pypi, cargo, go, maven, nuget”
- namestringrequired“Exact package name, e.g.”
- versionstring“Optional exact version to inspect; ranges and tags are not accepted”
package_auditon 3 other serversreads or searches
“Check up to 10 public dependencies, optionally pinned to exact versions, for advisory IDs, OSV affected/fixed ranges and dated FIRST EPSS CVE estimates.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- packagesstringrequired“Comma-separated ecosystem:name items, optionally name@exact-version; max 10.”
sitemapon 13 other serversreads or searches
“Read one public XML sitemap or sitemap index as structured URLs and source-reported dates.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
4 inputs, 1 required
- urlstringrequired“Absolute public HTTP(S) XML sitemap URL; child sitemaps are not fetched automatically”
- containsstring“Optional case-insensitive URL substring, at most 200 characters”
- maxUrlsinteger“Reported matching locations examined in one page (1-100, default 25); invalid/nonpublic locations may reduce returned entries”
- offsetinteger“Offset into distinct reported matching locations (0-1000, default 0); use nextOffset to continue”
walleton 7 other serversreads or searches
“Base only (all 5 chains: wallet_balances; USD values: wallet_portfolio).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 1 required
- addressstringrequired“Wallet or contract address on Base (0x...)”
- tokensstring“Optional comma-separated extra ERC-20 addresses to check (max 20)”
summarizeon 32 other serversreads or searches
“Give a URL, get a short summary of the page plus three to six key points, ready to drop into an agent's context.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- urlstringrequired“Absolute http(s) URL of the page to summarize”
screenshoton 82 other serversreads or searches
“Render any public web page in a real headless Chrome browser, with JavaScript executed, and get a JPEG screenshot (1280 px wide, base64) plus the final URL, HTTP status and page title.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 1 required
- urlstringrequired“Absolute http(s) URL of the page to capture”
- fullPagestring or number or boolean“Set to true to capture the full page height (max 4000 px) instead of the 1280x800 viewport”
imageon 4 other serversgenerates contentdescribed as changing data
“Text-to-image generation with FLUX.1 schnell.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 1 required
- promptstringrequired“What the image should show (3-800 characters)”
- stepsinteger“Diffusion steps, 1-8 (default 4)”
transcribeon 15 other serversreads or searches
“Transcribe speech from an audio file at a public URL using Whisper large-v3-turbo.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- urlstringrequired“Absolute http(s) URL of an audio file (max 5 MB)”
describeon 23 other serversreads or searches
“Vision model for an image at a public URL: get a detailed description including any visible text, or pass a question to ask something specific about the image.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 1 required
- urlstringrequired“Absolute http(s) URL of a PNG, JPEG, WebP or GIF image (max 3 MB)”
- questionstring“Optional question about the image (max 300 characters); default is a detailed description”
btc_addresson 3 other serversreads or searches
“Balance and activity of any Bitcoin mainnet address (legacy, P2SH or bech32): confirmed balance in sats and BTC, unconfirmed pending amount, total received and sent, and transaction counts.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“Bitcoin mainnet address (1..., 3...”
ln_invoiceon 1 other serverreads or searches
“Decode a BOLT11 Lightning Network invoice without paying it: network, amount in sats and BTC, description, payment hash, creation time, expiry time and whether it has already expired.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- invoicestringrequired“BOLT11 invoice string starting with ln (lnbc...”
trade_insighton 1 other serverreads or searches
“Combines the Base token-report risk tier and flags, available DEX market data, and wallet-audit risk tier, flags, account nonce, and native balance.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 2 required
- tokenstringrequired“Token contract address on Base, 0x-prefixed 20-byte hex”
- walletstringrequired“Wallet address to evaluate, 0x-prefixed 20-byte hex”
mev_simulatoron 1 other server
“Estimates Base gas costs from current fees and priority-fee presets.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- scenariostring“One of standard, high-mev, low-gas (default: standard)”
paperson 4 other serversreads or searches
“Search scholarly literature across journals, conferences, preprints and books: title, authors, year, venue, citation count, DOI link and abstract where available.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- querystringrequired“Search terms, a title or a research question (3-300 characters)”
- limitinteger“Number of results, 1-20 (default 5)”
- fromYearinteger“Only works published in or after this year”
fxon 6 other serversreads or searches
“Foreign exchange rates from the European Central Bank for about 30 major currencies (USD, EUR, GBP, JPY, CHF, SEK, CAD, AUD, CNY, INR, BRL and more).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- fromstringrequired“Base currency as a three-letter ISO 4217 code, e.g.”
- tostring“Optional comma-separated target currency codes, e.g.”
- amountnumber“Optional amount of the base currency to convert (default 1)”
base_txon 5 other serversreads or searches
“Look up any transaction on Base by hash: whether it succeeded, reverted or is still pending, sender and receiver, ETH value, called method id, block number and time, number of confirmations, gas used…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- hashstringrequired“Transaction hash on Base: 0x followed by 64 hex characters”
base_allowanceon 6 other serversreads or searches
“Check how much of a wallet's ERC-20 token a spender contract is approved to move on Base: the raw and formatted allowance, the token symbol and decimals, and whether the approval is unlimited.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 3 required
- tokenstringrequired“ERC-20 token contract address on Base (0x...)”
- ownerstringrequired“Wallet address that holds the token (0x...)”
- spenderstringrequired“Address allowed to spend, usually a router or protocol contract (0x...)”
enson 6 other serversreads or searches
“Resolve an Ethereum Name Service name such as vitalik.eth to its wallet address and avatar, or look up the primary ENS name of an address (reverse resolution).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- namestringrequired“An ENS name such as vitalik.eth, or an address (0x...) for reverse lookup”
timeon 5 other serversreads or searches
“The exact current date and time in any IANA time zone (UTC when none is given), with UTC offset, weekday, abbreviation and Unix timestamp, daylight saving time handled.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs
- zonestring“IANA time zone name, e.g.”
- atstring“Optional moment to convert, as ISO 8601 with an offset (default: now)”
- tostring“Optional comma-separated time zones to convert the same moment into (max 10)”
base_balanceon 5 other serversreads or searches
“Native ETH balance (eth_getBalance) of any 0x wallet address on Base at the latest block, in wei and in ETH.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x wallet or contract address”
base_token_balanceon 1 other serverreads or searches
“ERC-20 token balance of a wallet on Base (USDC, USDT, WETH or any token, via balanceOf): raw amount, decimals, symbol and the human-readable amount, live from the token contract.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 2 required
- tokenstringrequired“Token: a ticker such as USDC, USDT, WETH or DAI, or the 0x ERC-20 contract address”
- addressstringrequired“0x wallet address”
base_token_infoon 4 other serversreads or searches
“Look up the name, symbol, decimals and total supply of an ERC-20 token contract on Base, live from the contract.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- tokenstringrequired“Token: a ticker such as USDC or WETH, or the 0x ERC-20 contract address”
base_blockon 5 other serversreads or searches
“Latest block number and block details on Base, or any block by decimal number: hash, timestamp, transaction count, gas used and limit, base fee in gwei and producer.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- numberstring“Block number, or 'latest' (default)”
base_receipton 4 other serversreads or searches
“Transaction receipt on Base (eth_getTransactionReceipt): success or reverted, gas used, effective gas price, fee paid in ETH, number of event logs and any contract created.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- hashstringrequired“0x-prefixed transaction hash (64 hex characters)”
base_nonceon 4 other serversreads or searches
“Read the transaction count (nonce) of a 0x address on Base, both confirmed and including pending transactions.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x address”
base_is_contracton 1 other serverreads or searches
“Check whether a 0x address on Base is a smart contract or a plain wallet: bytecode size, and whether it is an EIP-1167 minimal proxy and which implementation it points to.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x address”
base_logson 2 other serversreads or searches
“Recent contract event logs on Base (eth_getLogs): the events a contract emitted over the last N blocks (1-1,000, default 50), optionally filtered by topic0 (the 0x 32-byte event signature hash).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- addressstringrequired“0x contract address”
- blocksinteger“How many recent blocks to scan (1-1000, default 50)”
- topic0string“Optional 0x event signature hash to filter by”
base_token_transferson 1 other serverreads or searches
“List a wallet's recent transfers of one ERC-20 token (default USDC) on Base, in and out, over the last N blocks (1-2,000, default 1,000): direction, counterparty, amount and transaction, newest first…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- addressstringrequired“0x wallet address”
- tokenstring“Token: a ticker such as USDT or WETH, or the 0x ERC-20 contract (default: USDC on this network)”
- blocksinteger“How many recent blocks to scan (1-2000, default 1000; 2,000 blocks is about 67 minutes on Base)”
eth_token_balanceon 1 other serverreads or searches
“ERC-20 token balance of a wallet on Ethereum (USDC, USDT, WETH or any token, via balanceOf): raw amount, decimals, symbol and the human-readable amount, live from the token contract.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 2 required
- tokenstringrequired“Token: a ticker such as USDC, USDT, WETH or DAI, or the 0x ERC-20 contract address”
- addressstringrequired“0x wallet address”
eth_token_infoon 1 other serverreads or searches
“Look up the name, symbol, decimals and total supply of an ERC-20 token contract on Ethereum, live from the contract.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- tokenstringrequired“Token: a ticker such as USDC or WETH, or the 0x ERC-20 contract address”
eth_blockon 1 other serverreads or searches
“Latest block number and block details on Ethereum, or any block by decimal number: hash, timestamp, transaction count, gas used and limit, base fee in gwei and producer.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- numberstring“Block number, or 'latest' (default)”
eth_txon 1 other serverreads or searches
“Look up an Ethereum transaction by hash: sender, recipient, value in ETH, nonce, gas limit, the 4-byte function selector and its block.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- hashstringrequired“0x-prefixed transaction hash (64 hex characters)”
eth_receipton 1 other serverreads or searches
“Transaction receipt on Ethereum (eth_getTransactionReceipt): success or reverted, gas used, effective gas price, fee paid in ETH, number of event logs and any contract created.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- hashstringrequired“0x-prefixed transaction hash (64 hex characters)”
eth_nonceon 1 other serverreads or searches
“Read the transaction count (nonce) of a 0x address on Ethereum, both confirmed and including pending transactions.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x address”
eth_is_contracton 1 other serverreads or searches
“Check whether a 0x address on Ethereum is a smart contract or a plain wallet: bytecode size, and whether it is an EIP-1167 minimal proxy and which implementation it points to.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x address”
eth_logson 1 other serverreads or searches
“Recent contract event logs on Ethereum (eth_getLogs): the events a contract emitted over the last N blocks (1-1,000, default 50), optionally filtered by topic0 (the 0x 32-byte event signature hash).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- addressstringrequired“0x contract address”
- blocksinteger“How many recent blocks to scan (1-1000, default 50)”
- topic0string“Optional 0x event signature hash to filter by”
eth_token_transferson 1 other serverreads or searches
“List a wallet's recent transfers of one ERC-20 token (default USDC) on Ethereum, in and out, over the last N blocks (1-2,000, default 1,000): direction, counterparty, amount and transaction, newest f…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- addressstringrequired“0x wallet address”
- tokenstring“Token: a ticker such as USDT or WETH, or the 0x ERC-20 contract (default: USDC on this network)”
- blocksinteger“How many recent blocks to scan (1-2000, default 1000; 2,000 blocks is about 6.7 hours on Ethereum)”
arb_balanceon 1 other serverreads or searches
“Native ETH balance (eth_getBalance) of any 0x wallet address on Arbitrum One at the latest block, in wei and in ETH.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x wallet or contract address”
arb_token_balanceon 1 other serverreads or searches
“ERC-20 token balance of a wallet on Arbitrum One (USDC, USDT, WETH or any token, via balanceOf): raw amount, decimals, symbol and the human-readable amount, live from the token contract.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 2 required
- tokenstringrequired“Token: a ticker such as USDC, USDT, WETH or DAI, or the 0x ERC-20 contract address”
- addressstringrequired“0x wallet address”
arb_token_infoon 1 other serverreads or searches
“Look up the name, symbol, decimals and total supply of an ERC-20 token contract on Arbitrum One, live from the contract.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- tokenstringrequired“Token: a ticker such as USDC or WETH, or the 0x ERC-20 contract address”
arb_blockon 1 other serverreads or searches
“Latest block number and block details on Arbitrum One, or any block by decimal number: hash, timestamp, transaction count, gas used and limit, base fee in gwei and producer.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- numberstring“Block number, or 'latest' (default)”
arb_gason 1 other serverreads or searches
“Current gas price on Arbitrum One (eth_gasPrice): gas price, base fee and suggested priority fee in gwei, plus what a plain ETH transfer (21,000 gas) costs right now.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- onlystring“Optional: comma-separated top-level result keys to keep, for a smaller answer (for example only=price,symbol); unknown keys are ignored and an empty match retu…”
arb_txon 1 other serverreads or searches
“Look up an Arbitrum One transaction by hash: sender, recipient, value in ETH, nonce, gas limit, the 4-byte function selector and its block.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- hashstringrequired“0x-prefixed transaction hash (64 hex characters)”
arb_receipton 1 other serverreads or searches
“Transaction receipt on Arbitrum One (eth_getTransactionReceipt): success or reverted, gas used, effective gas price, fee paid in ETH, number of event logs and any contract created.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- hashstringrequired“0x-prefixed transaction hash (64 hex characters)”
arb_nonceon 1 other serverreads or searches
“Read the transaction count (nonce) of a 0x address on Arbitrum One, both confirmed and including pending transactions.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x address”
arb_is_contracton 1 other serverreads or searches
“Check whether a 0x address on Arbitrum One is a smart contract or a plain wallet: bytecode size, and whether it is an EIP-1167 minimal proxy and which implementation it points to.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x address”
arb_logson 1 other serverreads or searches
“Recent contract event logs on Arbitrum One (eth_getLogs): the events a contract emitted over the last N blocks (1-1,000, default 50), optionally filtered by topic0 (the 0x 32-byte event signature has…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- addressstringrequired“0x contract address”
- blocksinteger“How many recent blocks to scan (1-1000, default 50)”
- topic0string“Optional 0x event signature hash to filter by”
arb_token_transferson 1 other serverreads or searches
“List a wallet's recent transfers of one ERC-20 token (default USDC) on Arbitrum One, in and out, over the last N blocks (1-2,000, default 1,000): direction, counterparty, amount and transaction, newe…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- addressstringrequired“0x wallet address”
- tokenstring“Token: a ticker such as USDT or WETH, or the 0x ERC-20 contract (default: USDC on this network)”
- blocksinteger“How many recent blocks to scan (1-2000, default 1000; 2,000 blocks is about 8 minutes on Arbitrum One)”
op_balanceon 1 other serverreads or searches
“Native ETH balance (eth_getBalance) of any 0x wallet address on Optimism at the latest block, in wei and in ETH.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x wallet or contract address”
op_token_balanceon 1 other serverreads or searches
“ERC-20 token balance of a wallet on Optimism (USDC, USDT, WETH or any token, via balanceOf): raw amount, decimals, symbol and the human-readable amount, live from the token contract.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 2 required
- tokenstringrequired“Token: a ticker such as USDC, USDT, WETH or DAI, or the 0x ERC-20 contract address”
- addressstringrequired“0x wallet address”
op_token_infoon 1 other serverreads or searches
“Look up the name, symbol, decimals and total supply of an ERC-20 token contract on Optimism, live from the contract.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- tokenstringrequired“Token: a ticker such as USDC or WETH, or the 0x ERC-20 contract address”
op_blockon 1 other serverreads or searches
“Latest block number and block details on Optimism, or any block by decimal number: hash, timestamp, transaction count, gas used and limit, base fee in gwei and producer.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- numberstring“Block number, or 'latest' (default)”
op_gason 1 other serverreads or searches
“Current gas price on Optimism (eth_gasPrice): gas price, base fee and suggested priority fee in gwei, plus what a plain ETH transfer (21,000 gas) costs right now.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- onlystring“Optional: comma-separated top-level result keys to keep, for a smaller answer (for example only=price,symbol); unknown keys are ignored and an empty match retu…”
op_txon 1 other serverreads or searches
“Look up an Optimism transaction by hash: sender, recipient, value in ETH, nonce, gas limit, the 4-byte function selector and its block.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- hashstringrequired“0x-prefixed transaction hash (64 hex characters)”
op_receipton 1 other serverreads or searches
“Transaction receipt on Optimism (eth_getTransactionReceipt): success or reverted, gas used, effective gas price, fee paid in ETH, number of event logs and any contract created.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- hashstringrequired“0x-prefixed transaction hash (64 hex characters)”
op_nonceon 1 other serverreads or searches
“Read the transaction count (nonce) of a 0x address on Optimism, both confirmed and including pending transactions.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x address”
op_is_contracton 1 other serverreads or searches
“Check whether a 0x address on Optimism is a smart contract or a plain wallet: bytecode size, and whether it is an EIP-1167 minimal proxy and which implementation it points to.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x address”
op_logson 1 other serverreads or searches
“Recent contract event logs on Optimism (eth_getLogs): the events a contract emitted over the last N blocks (1-1,000, default 50), optionally filtered by topic0 (the 0x 32-byte event signature hash).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- addressstringrequired“0x contract address”
- blocksinteger“How many recent blocks to scan (1-1000, default 50)”
- topic0string“Optional 0x event signature hash to filter by”
op_token_transferson 1 other serverreads or searches
“List a wallet's recent transfers of one ERC-20 token (default USDC) on Optimism, in and out, over the last N blocks (1-2,000, default 1,000): direction, counterparty, amount and transaction, newest f…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- addressstringrequired“0x wallet address”
- tokenstring“Token: a ticker such as USDT or WETH, or the 0x ERC-20 contract (default: USDC on this network)”
- blocksinteger“How many recent blocks to scan (1-2000, default 1000; 2,000 blocks is about 67 minutes on Optimism)”
polygon_balanceon 2 other serversreads or searches
“Native POL balance (eth_getBalance) of any 0x wallet address on Polygon PoS at the latest block, in wei and in POL.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- addressstringrequired“0x wallet or contract address”
polygon_token_balanceon 1 other serverreads or searches
“ERC-20 token balance of a wallet on Polygon PoS (USDC, USDT, WETH or any token, via balanceOf): raw amount, decimals, symbol and the human-readable amount, live from the token contract.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 2 required
- tokenstringrequired“Token: a ticker such as USDC, USDT, WETH or DAI, or the 0x ERC-20 contract address”
- addressstringrequired“0x wallet address”
polygon_token_infoon 1 other serverreads or searches
“Look up the name, symbol, decimals and total supply of an ERC-20 token contract on Polygon PoS, live from the contract.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input, 1 required
- tokenstringrequired“Token: a ticker such as USDC or WETH, or the 0x ERC-20 contract address”
polygon_blockon 2 other serversreads or searches
“Latest block number and block details on Polygon PoS, or any block by decimal number: hash, timestamp, transaction count, gas used and limit, base fee in gwei and producer.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- numberstring“Block number, or 'latest' (default)”
polygon_gason 2 other serversreads or searches
“Current gas price on Polygon PoS (eth_gasPrice): gas price, base fee and suggested priority fee in gwei, plus what a plain POL transfer (21,000 gas) costs right now.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
1 input
- onlystring“Optional: comma-separated top-level result keys to keep, for a smaller answer (for example only=price,symbol); unknown keys are ignored and an empty match retu…”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. The first 100 of 187 tools are listed. Read 2026-10-23.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

Says what the tool does: 100% of 187 tools
Says what it returns: 100% of 187 tools
States limits, defaults or errors: 100% of 187 tools
Says when to use it: 100% of 187 tools
Items covered per tool: 4.0 of 4 on average

Counted from the listing

Parameters with a description: 100% of 321
Tools with a description: 100% of 187
Typical description length: 519 characters

The tool set

Counted from the listing

Tools: 187
Size of the list: about 52,801 tokens for an agent to load (characters ÷ 4)
Naming: 142 of 187 names use snake_case

AI reading: easy to mix up

No pair found.

The AI items cover 187 of 187 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry

From the remote endpoint (Streamable HTTP)

We connected to this URL on 2026-10-23 (a read-only session: no tool was called).

Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.

Claude Desktop or claude.ai

Settings → Connectors → Add custom connector, then paste:
https://agent-data-tools.revmesh2074.workers.dev/mcp

Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "agent-data-tools": {
      "url": "https://agent-data-tools.revmesh2074.workers.dev/mcp"
    }
  }
}

VS Code · .vscode/mcp.json

{
  "servers": {
    "agent-data-tools": {
      "type": "http",
      "url": "https://agent-data-tools.revmesh2074.workers.dev/mcp"
    }
  }
}

VS Code (command line) · Bash or zsh terminal (macOS, Linux)

code --add-mcp '{"name":"agent-data-tools","type":"http","url":"https://agent-data-tools.revmesh2074.workers.dev/mcp"}'

Claude Code

claude mcp add --transport http agent-data-tools https://agent-data-tools.revmesh2074.workers.dev/mcp

Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+

npx @modelcontextprotocol/inspector@2.11.0 --server-url https://agent-data-tools.revmesh2074.workers.dev/mcp --transport http

Optional settings the entry also lists (left out above): Authorization.
The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Does the registry listing match what we found?

Feature #6

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.

Registry says	We found	Result	Source · date
Remote endpoint agent-data-tools.revmesh2074.workers.dev/mcp	Session opened	matches	our test · 2026-10-23
No credential declared as required	Opened a session without any credential	matches	our test · 2026-10-23
Repository github.com/Nutshell2000/agent-data-tools	Opens publicly	matches	api.github.com · 2026-10-23

Who made it?

Feature #7 · lineage

Facts about the publisher. We do not turn them into a trust score.

Namespace: io.github.Nutshell2000 · 8 servers
GitHub owner: a personal account (Nutshell2000)

Repository: github.com/Nutshell2000/agent-data-tools
Stars: 0
Repository age: 0–30 days
Last push: 0–30 days ago
Archived: no
Security policy: none found (we looked for SECURITY.md in the repository and in its owner’s .github repository)

Source: the registry entry and api.github.com · 2026-10-23; security policy read from GitHub · 2026-10-23.

Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.

Choosing

Record checks

Public records · not a safety rating

4 of 5 record checks met · 4 do not apply

Not ranked by downloads: a remote server publishes no download figure
Not ranked by stars: 0 stars (ranked from 10)

MetRegistry entry is active and says how to run itActive, with a package or a remote address.
MetSource repository link opensThe linked GitHub repository is public.
MetRepository is not archivedNot archived.
MetCode pushed to the repository in the 90 days before our checkLast push 0-30 days before our check.
Not metRepository publishes a security policy (SECURITY.md)No SECURITY.md in the places GitHub reads it from.
Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-23. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards

Common questions about io.github.Nutshell2000/agent-data-tools

Answered from the data above

Is io.github.Nutshell2000/agent-data-tools safe to install?

We do not rate servers as safe or unsafe. 4 of its 5 applicable record checks are met (facts from public records, each listed on this page). What the records show: Its source repository opens publicly. Its repository had a push in the last 90 days. 1 of its tools describes changing data (our AI model's reading of the descriptions). These are facts with their sources on this page, not a safety guarantee, and we did not run its tools.

Does io.github.Nutshell2000/agent-data-tools need an API key or sign-in?

It opened a session without any credential on 2026-10-23. The registry entry declares no required credential; no declaration is not a guarantee.

Has io.github.Nutshell2000/agent-data-tools been security tested?

Partly. 3 of the 15 checks that apply to it were exercised. We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security verdict is published before verification.

What can io.github.Nutshell2000/agent-data-tools do?

It lists 187 tools. In our AI model's reading of their descriptions (two runs had to agree, nobody checked it by hand), they include tools that read or search, generate content and calculate or convert. We did not call any tool, so this describes the text, not the behaviour.

Can io.github.Nutshell2000/agent-data-tools change or delete data?

1 of its tools says in its description that it creates, edits, deletes, sends or runs something (our AI model's reading). We did not call any tool, so we cannot say what actually happens.

Does io.github.Nutshell2000/agent-data-tools publish a security policy?

We found no SECURITY.md in its repository (root, .github/ or docs/) or in its owner's .github repository.

Where is the source code of io.github.Nutshell2000/agent-data-tools?

In github.com/Nutshell2000/agent-data-tools, which opens publicly.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Similar servers

Same topic · AI-read

ch.opencaselaw/swiss-caselawOpenCaseLaw — Swiss Caselaw, Statutes & Doctrinealso has tools that calculates or converts, generates content, reads or searchescompare with this one
io.github.AtomGraph/web-algebraWeb Algebraalso has tools that calculates or converts, generates content, reads or searchescompare with this one
io.github.malkreide/swisstopo-mcpalso has tools that calculates or converts, generates content, reads or searchescompare with this one
io.github.mahdi-salmanzade/mcp-dubaiMCP Dubaialso has tools that calculates or converts, generates content, reads or searchescompare with this one
io.github.elpabloultron/open-legal-chileOpen Legal Chilealso has tools that calculates or converts, generates content, reads or searchescompare with this one
io.github.igormel81/genealogy-mcpGenealogy research toolkitalso has tools that calculates or converts, generates content, reads or searchescompare with this one

Active servers whose topic is also “data-and-databases” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Not probed (we call no server's tools)

We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-10-23

Inventory: exercised
Hidden instructions: exercised
Real execution: not run · our policy
Secret leak: not run · nothing to check it against
Internal addresses: not run · our policy
Unconfirmed changes: not run · our policy
Bad input: not run · our policy
Model requests: not run · nothing to check it against
Sensitive questions: not run · nothing to check it against
Folder boundary: not run · our policy
Log leaks: not run · nothing to check it against
Hidden content: not run · nothing to check it against
Fake assistant turns: not applicable
Token passthrough: not applicable
Token audience: not applicable
Sign-in redirect: not run · our policy
Consent handling: not testable from outside
Sign-in metadata: exercised

3 exercised12 not run (reason given)3 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 3 of the 15 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 3

1Inventory
tool-listReads the declared tools, resources and prompts.exercised
2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised
18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.exercised

Not run, with the reason · 12

3Real execution
real-executionCalls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
12Hidden content
audience-hidingChecks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against
16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy
17Consent handling
confused-deputyChecks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside

Does not apply to this server · 3

13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable
14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable
15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable

Source: our own test, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

0 msStarted a read-only session with the server's remote endpoint
1,027 msConnected after 0 redirects. No credential was sent or needed.
Read the inventory: 187 tools, 0 resources, 0 prompts.
2,292 msFinished: 3 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified

data-and-databases

AI-classified · 2026-10-23

Pricing modelAI-classified

no value

No value: the AI answer was held back because the quoted text did not clearly support it.

Programming language

JavaScript

api.github.com · 2026-10-23

Hosting type

remote (hosted by the publisher)

registry · 2026-10-23

MCP capability

tools

our test · 2026-10-23

Transport

streamable HTTP

registry · 2026-10-23

Required credentials

none declared

registry · no declaration is not a guarantee

Package registry

does not apply

remote-only server: no package is shipped, so there is no package registry

Freshness

0–30 days

registry updatedAt · 2026-10-23

Lifecycle status

active

registry · 2026-10-23

License class

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Integrity hash

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Signature / provenance

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Dependency advisories

does not apply

ships no package, so there are no dependencies to audit

Popularity

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Publisher signals

owner: a personal account · repository age: 0–30 days · stars: 0–9

api.github.com · 2026-10-23

Maintenance

active

api.github.com · 2026-10-23

Environment

the publisher's infrastructure

where it runs, from the hosting type

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “io.github.Nutshell2000/agent-data-tools: MCP server record.” Data checked 2026-10-23. https://protocolprobe.com/mcp/servers/io.github.Nutshell2000/agent-data-tools

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/io.github.Nutshell2000/agent-data-tools)](https://protocolprobe.com/mcp/servers/io.github.Nutshell2000/agent-data-tools)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology