MCP servers › io.github.bck-stack › sitecheck

MCP server · registry snapshot 2026-10-23 · last tested 2026-10-23

io.github.bck-stack/sitecheck

225 pay-per-call agent tools: Polymarket, chain reads, DeFi, web, SEC, KYB, geo, dev, AI. x402 — the publisher's description

4 of 5 record checks metRead-only · tools listed 2026-10-23Topic: other · AI-classifiedPricing: usage-based · AI-classifiedversion 1.8.5JavaScriptstreamable HTTP225 tools

Summary

io.github.bck-stack/sitecheck is a remote MCP server listed in the official MCP registry at version 1.8.5. On 2026-10-23 ProtocolProbe connected to it in read-only mode and read its inventory: 225 tools, 0 resources and 0 prompts.

Record checks

4 of 5 record checks met · 4 do not apply

met: Registry entry is active and says how to run it
met: Source repository link opens
met: Repository is not archived
met: Code pushed to the repository in the 90 days before our check
not met: Repository publishes a security policy (SECURITY.md)
not applicable: Package names its licence with a standard (SPDX) identifier
not applicable: The version the registry lists can be installed and is not withdrawn
not applicable: npm package carries build provenance (attestation)
not applicable: No known critical or high advisory in the package or its dependencies

Not ranked by downloads: a remote server publishes no download figure
Not ranked by stars: 0 stars (ranked from 10)

From public records, not a safety rating. Each check with its reason · Is it safe to install?

Key facts

Runs: remote (hosted by the publisher)
Transport: streamable HTTP
Sign-in: none needed to open a session
Repository: public
Tools: 225
Described as changing data: 2 of 225 toolsAI-classified
Topic: otherAI-classified
Pricing: usage-basedAI-classified
Last tested: 2026-10-23

Add to your client

Worth knowing before you connect it

2 tools are described as changing something: our AI model's reading of the descriptions, not something we tested, and the server opened a session without any credential. We did not call them.

Each line comes from a section below, with its source and date.

How fresh this is

Live-tested

yes, a real session (not a text-only review)

Last tested

2026-10-23

Mode

read-only (no tool calls)

Latest version

1.8.5, published 2026-10-16 (registry, as of the 2026-10-23 snapshot)

First listed version

2026-10-08 (earliest version still in the registry; older removed versions would be earlier)

Version history

12 versions listed, 2026-10-08 to 2026-10-16; 12 in the 90 days before the 2026-10-23 snapshot.

Most recent 12 versions

1.8.5 · 2026-10-16
1.8.4 · 2026-10-16
1.8.3 · 2026-10-16
1.8.2 · 2026-10-16
1.8.1 · 2026-10-15
1.8.0 · 2026-10-15
1.7.0 · 2026-10-15
1.6.0 · 2026-10-15
1.5.0 · 2026-10-14
1.4.0 · 2026-10-14
1.3.0 · 2026-10-13
1.2.0 · 2026-10-08

(versions still listed in the registry only)

Registry data

snapshot 2026-10-23

Package and repository

checked 2026-10-23

Engine

mcp-runtime-engine@0.1.0 · sdk@1.32.0

Changes since the last refresh

New in the registry: not in the list of 2026-10-04, listed on 2026-10-23 with version 1.8.5 (published 2026-10-16).

Source: the official MCP Registry list on 2026-10-04 and on 2026-10-23.

What it is

What does this server offer?

Observed inventory

225tools

0resources

0prompts

2 of 225 tools are described as changing something (creating, editing, deleting, sending or running). For 4 the reading was uncertain, so no mark is shown.

imageon 4 other serversgenerates content
“Generate an image from a text prompt (FLUX.1 schnell).”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- promptstringrequired“Up to 2048 chars”
- stepsinteger“1-8, default 4”
transcribeon 15 other servers
“Speech-to-text with Whisper large-v3-turbo: send an https audio URL (or base64) up to 10 minutes and 25 MB, get the transcript, language and timestamped segments.”
Publisher declares: read-only yes · open-world yes
3 inputs
- urlstring“https URL of an audio file (mp3, wav, m4a...)”
- audio_base64string“Alternative to url”
- languagestring“Optional ISO code, e.g.”
ttson 4 other serversgenerates content
“Text-to-speech as base64 audio.”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- textstringrequired“Up to 2000 chars (500 with quality high)”
- langstring“en, es, fr, zh, ja or ko (default en)”
- qualitystring“standard (default, $0.002) or high (Aura-2 English, $0.02)”
- voicestring“quality high only: luna, asteria, athena, helena, hera, aurora, orion, apollo, arcas, atlas, hermes, zeus, draco, odysseus”
embedon 3 other servers
“Multilingual text embeddings (BGE-M3, 1024 dimensions) for up to 100 texts per call.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- textrequired“A string or an array of up to 100 strings”
chaton 28 other serversgenerates content
“LLM chat completion with Llama 3.3 70B (fast): send messages or a prompt, up to 1,024 output tokens.”
Publisher declares: read-only yes · open-world yes
4 inputs
- promptstring“A single user message (use this or messages), up to 24,000 characters”
- messagesarray“Chat history as [{role: system|user|assistant, content}], up to 50 messages”
- max_tokensinteger“Up to 1024 (default 1024)”
- temperaturenumber“0 to 2, default 0.6; lower is more predictable”
auditon 25 other serversreads or searches
“Website audit in one call: WCAG 2.2 accessibility issues (European Accessibility Act) with fixes and a score, SEO basics, security headers and tech stack.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“Website URL or domain, e.g.”
contactson 1 other serverreads or searches
“Company contact enrichment from a domain: emails (same-domain flagged), phones, social profiles, description and tech stack, read from the home, contact, about and legal pages.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“Website URL or domain, e.g.”
hiringreads or searches
“Search the current Hacker News 'Who is hiring?' thread: companies hiring, filtered by keywords and remote, with contact emails and links.”
Publisher declares: read-only yes · open-world yes
3 inputs
- qstring“Keywords, all must match”
- remotestring“1 = remote only”
- limitstring“Max results, up to 100”
vaton 6 other serversreads or searches
“EU VAT number check: format and checksum are tested locally first (a malformed number is rejected with HTTP 400 and no charge), then the official VIES service answers whether it is valid, with the re…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- numberstringrequired“VAT number with its 2-letter country prefix, e.g.”
- countrystring“Optional: country code, if the number has no prefix”
ibanon 1 other server
“IBAN validation with no network call: ISO 13616 length and structure for every country in the SWIFT IBAN registry, the mod-97 checksum, national check digits where a public algorithm exists (FR, ES, …”
Publisher declares: read-only yes · open-world yes
2 inputs
- ibanstring“One IBAN.”
- ibansstring“Alternative: up to 50 IBANs, comma-separated”
leion 2 other serversreads or searches
“Legal entity lookup in GLEIF by 20-character LEI or company name (best match plus up to 5 alternatives): legal name, status, jurisdiction, addresses, registration status and renewal date, direct and …”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- qstringrequired“A 20-character LEI or a company name”
recallson 1 other serverreads or searches
“US product recalls in one schema from openFDA enforcement reports (food, drug, device) and CPSC: date, product, firm, reason, FDA Class I/II/III mapped to high/medium/low (CPSC severity is derived fr…”
Publisher declares: read-only yes · open-world yes
5 inputs
- qstring“Keyword in the product or firm name”
- sourcestring“fda, cpsc or fda,cpsc (default both)”
- sincestring“YYYY-MM-DD, default 30 days ago, at most one year back”
- classificationstring“Class I, Class II, Class III or high, medium, low”
- limitstring“Max rows, 1-100, default 20”

Show 88 more tools

violationsreads or searches
“US workplace and environmental enforcement cases by company, state and date: OSHA inspections with penalties (US Department of Labor API) and EPA enforcement cases (EPA ECHO), each with the official …”
Publisher declares: read-only yes · open-world yes
6 inputs
- companystring“Company or establishment name (part of it is enough)”
- statestring“2-letter US state code”
- sincestring“YYYY-MM-DD, default one year ago”
- minPenaltystring“Minimum penalty in US dollars”
- sourcestring“osha, epa or osha,epa (default both)”
- limitstring“Max rows, 1-100, default 20”
uk_insolvencyreads or searches
“UK company insolvency notices (administrations, liquidations, winding-up petitions) from The Gazette, via our nightly cache of the last 8 days.”
Publisher declares: read-only yes · open-world yes
5 inputs
- sincestring“YYYY-MM-DD, default 7 days ago, clipped to the cache window”
- qstring“Company name text or company number”
- postcodestring“Postcode prefix, e.g.”
- typestring“administration, liquidation, winding-up, petition, creditors, or a notice name or 4-digit code”
- limitstring“Max rows, 1-200, default 50”
readon 35 other serversreads or searches
“Read one web page as clean Markdown (or plain text) for an LLM: the main content without menus, cookie banners and footers, plus title, description, author, published date, language and canonical URL…”
Publisher declares: read-only yes · open-world yes
5 inputs, 1 required
- urlstringrequired“Page URL (http or https)”
- formatstring“markdown (default) or text”
- maxCharsstring“Cut the content at this many characters, 500-200000, default 30000”
- linksstring“1 = also return the page's links (up to 300)”
- imagesstring“1 = keep images with alt text as Markdown images”
email_checkon 9 other serversreads or searches
“E-mail pre-check without SMTP: syntax, whether the domain can receive mail (MX or implicit MX, null MX, non-existent domain), disposable domain (9,000+ domain CC0 list), role account (info@, sales@..…”
Publisher declares: read-only yes · open-world yes
2 inputs
- emailstring“One e-mail address”
- emailsstring“Alternative: up to 50 addresses, comma-separated”
domainon 6 other serversreads or searches
“Domain lookup over RDAP (the successor of WHOIS) and DNS: registered or available, registrar, creation, update and expiry dates, days until expiry, age, status codes, DNSSEC, name servers, plus wheth…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain or URL, e.g.”
solana_tokenon 4 other serversreads or searches
“Solana token check for trading agents: price, market cap, FDV, liquidity, holders, 24h volume and trades, price change, organic-trading score, verification, top-holder and developer share (Jupiter), …”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- addressstringrequired“SPL token mint address (base58)”
solana_trendingon 3 other serversreads or searches
“Trending, newest, top-traded or top-organic Solana tokens (Jupiter) filtered by liquidity and 24h volume: price, market cap, liquidity, holders, volume, trades, price change, organic score, mint and …”
Publisher declares: read-only yes · open-world yes
5 inputs
- modestring“trending (default), new, traded or organic”
- intervalstring“5m, 1h (default), 6h or 24h (not for new)”
- minLiquidityUsdstring“Minimum liquidity in USD (default 50000; 5000 for new)”
- minVolume24hUsdstring“Minimum 24h volume in USD”
- limitstring“Max tokens, 1-100, default 20”
techon 2 other serversreads or searches
“Website technology detection: CMS, e-commerce platform, analytics, tag managers, CDN, hosting, chat, payments, A/B testing, consent tools and the e-mail provider, each with version, confidence 0-100 …”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“Website URL or domain, e.g.”
pdfon 10 other servers
“PDF to text: send an https link or base64 (up to 15 MB) and get the text page by page plus title, author, page count and dates.”
Publisher declares: read-only yes · open-world yes
3 inputs
- urlstring“http(s) link to a PDF”
- pdf_base64string“Alternative: the PDF as base64”
- maxCharsinteger“Cut the text at this many characters, 1000-500000, default 100000”
fxon 6 other servers
“Currency exchange rates from the European Central Bank (about 30 currencies, back to 1999): latest or a given date, amount conversion, or a daily time series between two dates.”
Publisher declares: read-only yes · open-world yes
6 inputs
- fromstring“Base currency, default USD”
- tostring“Target currencies, comma-separated (default: all)”
- amountstring“Amount to convert, default 1”
- datestring“YYYY-MM-DD for a past day”
- startstring“YYYY-MM-DD: time series start”
- endstring“YYYY-MM-DD: time series end (default today)”
sitemapon 13 other serversreads or searches
“All URLs a website lists in its XML sitemaps (from robots.txt, /sitemap.xml or /sitemap_index.xml, following indexes), with lastmod, newest first.”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- urlstringrequired“Site URL or domain”
- pathPrefixstring“Only URLs whose path starts with this, e.g.”
- sincestring“YYYY-MM-DD: only URLs with lastmod on or after it”
- limitstring“Max URLs, 1-10000, default 1000”
solana_walleton 1 other serverreads or searches
“Solana wallet holdings: SOL and every SPL / Token-2022 balance with name, symbol, USD price and value (Jupiter), sorted by value, plus the total in USD.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- addressstringrequired“Solana wallet address (base58)”
- includeDuststring“1 = also list tokens worth under $0.01 or without a price”
translateon 22 other servers
“Translation with Llama 3.1 8B: up to 6,000 characters per call, formatting, names, numbers and URLs kept, source language detected when not given.”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
- textstringrequired“Up to 6000 chars”
- targetstringrequired“Target language code or name, e.g.”
- sourcestring“Optional source language; detected when omitted”
metaon 5 other serversreads or searches
“SEO and sharing metadata of one web page, read from its HTML without JavaScript: final URL and status, title and description with their lengths, canonical, robots meta, lang, hreflang, Open Graph and…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“Page URL or domain, e.g.”
linkson 7 other serversreads or searches
“Every link on one page (anchor text, internal or external) and a status check of up to 40 of them: status, final URL after redirects, ok, and the error for network failures.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- urlstringrequired“Page URL or domain”
- scopestring“all (default), internal or external”
redirectson 1 other serverreads or searches
“The redirect chain of a URL, hop by hop (at most 10 hops): each URL, its status, the Location it points to, and whether the hop goes from http to https or changes host.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“Page URL or domain, e.g.”
headerson 6 other serversreads or searches
“Security headers of a URL's final response: Strict-Transport-Security, Content-Security-Policy, X-Frame-Options (or CSP frame-ancestors), X-Content-Type-Options, Referrer-Policy, Permissions-Policy, …”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“Page URL or domain, e.g.”
dnson 9 other serversreads or searches
“Mail and DNS hygiene of a domain over DNS over HTTPS: A, AAAA, MX, NS, TXT and CAA records; SPF parsed (mechanisms, the all qualifier, a lookup estimate, a warning above 10 lookups); the DMARC policy…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain or URL, e.g.”
qron 4 other serversgenerates content
“A QR code for a text of up to 300 characters (a URL, Wi-Fi login or contact card), generated locally.”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- textstringrequired“Up to 300 characters”
- eccstring“L, M, Q or H (default M)”
- sizeinteger“Pixels, 128 to 1024 (default 512)”
- formatstring“svg (default) or json”
langcalculates or converts
“The language of a text with franc-min: ISO 639-3 and ISO 639-1 codes, the English name, confidence from 0 to 1, the script (Latin, Cyrillic, Arabic...) and the three next most likely languages.”
Publisher declares: read-only yes · open-world yes
2 inputs
- textstring“Up to 5,000 characters”
- textsstring“Alternative: a JSON array of up to 20 strings, e.g.”
exifon 2 other serversreads or searches
“Camera make and model, lens, date taken, exposure (ISO, shutter, aperture, focal length), orientation, image size, software, and GPS latitude, longitude and altitude with a map link, from the EXIF of…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“https URL of a JPEG, HEIC, TIFF or PNG image”
validateon 48 other serverscalculates or converts
“Checks the check digit and structure of an identifier with no network call: ISBN-10 and ISBN-13 (with ISBN-10 to 13 conversion), EAN-8, UPC-A, EAN-13 and GTIN-14 (with the GS1 prefix country), VIN (m…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- valuestringrequired“The identifier, or up to 50 comma-separated”
- typestring“auto (default), isbn, ean, vin, imei, isin or luhn”
ocron 10 other servers
“Reads the text of an image (JPEG, PNG, GIF or WEBP, up to 4 MB) with Llama 3.2 11B Vision on Workers AI.”
Publisher declares: read-only yes · open-world yes
3 inputs
- urlstring“https URL of the image”
- imagestring“Alternative: the image as base64, up to 4 MB”
- languagestring“Optional hint, e.g.”
sec_filingson 9 other serversreads or searches
“Recent SEC EDGAR filings of a company (10-K, 10-Q, 8-K and more), found by ticker, CIK or name.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- companystringrequired“Ticker (AAPL), CIK (320193) or company name”
- formsstring“Comma-separated form types, e.g.”
- limitstring“Max filings, 1-50, default 10”
sec_financialson 4 other serversreads or searches
“Key figures per fiscal year or quarter from a company's SEC XBRL filings, the numbers it tagged itself: revenue, net income, operating income, assets, liabilities, equity, cash, operating cash flow, …”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- companystringrequired“Ticker (AAPL) or CIK (320193)”
- periodstring“annual (default) or quarterly”
- yearsstring“Fiscal years (or 4 x quarters), 1-10, default 5”
congresson 1 other serverreads or searches
“US federal bills from Congress.gov (Library of Congress).”
Publisher declares: read-only yes · open-world yes
4 inputs
- qstring“Words that must all appear in the bill title”
- billstring“A bill, e.g.”
- congressstring“Congress number 93 to the current one (119), default current”
- limitstring“Max bills for q, 1-25, default 10”
macroon 3 other serversreads or searches
“Official rate and macro series in one call, by name: fed_funds, us_cpi, us_core_cpi, us_unemployment, us_10y, us_2y, us_mortgage_30y, us_gdp, wti_oil, brent_oil, henry_hub_gas, us_house_price_index, …”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- seriesstringrequired“Up to 6 series names, comma-separated: fed_funds, us_cpi, us_core_cpi, us_unemployment, us_10y, us_2y, us_mortgage_30y, us_gdp, wti_oil, brent_oil, henry_hub_g…”
- fromstring“Only observations from this date (YYYY-MM-DD) on”
- limitstring“Observations per series, 1-120, default 12”
uk_companyon 1 other serverreads or searches
“A UK company from Companies House, by number (00445790) or name (best match plus up to four alternatives): status, incorporation date, registered office, SIC codes, accounts and confirmation-statemen…”
Publisher declares: read-only yes · open-world yes
2 inputs
- numberstring“Companies House number, e.g.”
- qstring“Alternative to number: a company name (best match, up to 5 candidates)”
github_repoon 5 other serversreads or searches
“A public GitHub repository: stars, forks, watchers, open issues and pull requests, license, default branch, created and pushed dates, topics, languages with shares, latest release, commits in the las…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- repostringrequired“owner/name, e.g.”
hnon 2 other serversreads or searches
“Hacker News stories or comments from the Algolia search API: keyword search (q) or the current front page (mode=front), optionally since a date.”
Publisher declares: read-only yes · open-world yes
5 inputs
- qstring“Keywords”
- modestring“front: the current front page (stories only)”
- sincestring“YYYY-MM-DD: only items from this day on”
- typestring“story (default) or comment”
- limitstring“Max results, 1-50, default 20”
wikion 6 other serversreads or searches
“A Wikipedia page summary by title or search words, in any language: title, short description, summary, page URL, thumbnail and Wikidata ID.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“A page title, or search words”
- langstring“Wikipedia language code, default en”
gason 11 other serversreads or searches
“Gas prices on Base (default), Ethereum, Arbitrum, Optimism, Polygon or Solana, or chain=all for every chain at once: the base fee and slow, normal and fast priority fees, the latest block, and what a…”
Publisher declares: read-only yes · open-world yes
1 input
- chainstring“base (default), ethereum, arbitrum, optimism, polygon, solana or all”
solana_quotereads or searches
“Best Jupiter swap route for a Solana token pair and an amount: input and output in token units, the minimum received after slippage, price impact, effective price, each route hop and USD values.”
Publisher declares: read-only yes · open-world yes
4 inputs, 3 required
- fromstringrequired“Mint address or symbol to sell, e.g.”
- tostringrequired“Mint address or symbol to buy, e.g.”
- amountstringrequired“Amount of from in whole tokens, e.g.”
- slippageBpsstring“Slippage tolerance in basis points, 0 to 1000 (default 50)”
evm_tokenon 1 other serverreads or searches
“On-chain facts about an ERC-20 contract on Base (default), Ethereum, Arbitrum, Optimism or Polygon, read over RPC: name, symbol, decimals, total supply, code size, whether it is a proxy (EIP-1967, EI…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- addressstringrequired“Token contract address, 0x…”
- chainstring“base (default), ethereum, arbitrum, optimism or polygon”
enson 6 other serversreads or searches
“ENS on Ethereum mainnet.”
Publisher declares: read-only yes · open-world yes
2 inputs
- namestring“ENS name, e.g.”
- addressstring“Or an address, 0x…”
evm_walletreads or searches
“Native balance and the major tokens (USDC, USDT, EURC, DAI, WETH, cbBTC and WBTC where listed) of an EVM address on Base (default), Ethereum, Arbitrum, Optimism, Polygon, or chain=all, with USD value…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- addressstringrequired“Wallet address, 0x…”
- chainstring“base (default), ethereum, arbitrum, optimism, polygon or all”
evm_addresson 1 other serverreads or searches
“Native balance, nonce and account type of an EVM address on Base (default), Ethereum, Arbitrum, Optimism or Polygon: a wallet, a contract, or an EIP-7702 delegated wallet with its delegate.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- addressstringrequired“EVM address, 0x…”
- chainstring“base (default), ethereum, arbitrum, optimism or polygon”
evm_balanceon 5 other serversreads or searches
“ERC-20 balance of an address for one token contract on a chain: token name, symbol, decimals, raw and human amount, and a USD value when Coinbase has a spot price for the symbol.”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
- addressstringrequired“EVM address, 0x…”
- tokenstringrequired“ERC-20 contract address, 0x…”
- chainstring“base (default), ethereum, arbitrum, optimism or polygon”
evm_txon 6 other serversreads or searches
“Status, block, time, sender, recipient, value, gas used and fee (native and USD) of an EVM transaction, plus the ERC-20 Transfer events inside it (token, symbol, from, to, amount).”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- hashstringrequired“Transaction hash, 0x + 64 hex characters”
- chainstring“base (default), ethereum, arbitrum, optimism or polygon”
evm_blockon 6 other serversreads or searches
“An EVM block by number, or the latest one: hash, time, transaction count, gas used and limit, and base fee in gwei.”
Publisher declares: read-only yes · open-world yes
2 inputs
- numberstring“Block number, or latest (default)”
- chainstring“base (default), ethereum, arbitrum, optimism or polygon”
evm_transferson 1 other serverreads or searches
“ERC-20 transfers into and out of an address in a window of recent blocks (default 2,000, max 10,000), from Transfer logs, newest first, max 100 rows with token symbols.”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- addressstringrequired“EVM address, 0x…”
- tokenstring“Optional ERC-20 contract, 0x…”
- chainstring“base (default), ethereum, arbitrum, optimism or polygon”
- blocksstring“Blocks to search back from the latest (max 10000)”
evm_logson 2 other serversreads or searches
“Event logs of a contract over recent blocks (default 1,000, max 5,000), newest first, max 100: block, transaction hash, topics and data.”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- contractstringrequired“Contract address, 0x…”
- topic0string“Event signature, e.g.”
- chainstring“base (default), ethereum, arbitrum, optimism or polygon”
- blocksstring“Blocks to search back from the latest (max 5000)”
evm_callon 4 other serversreads or searches
“Read-only contract call (eth_call): decodes the return value of a function you name, e.g.”
Publisher declares: read-only yes · open-world yes
4 inputs, 2 required
- contractstringrequired“Contract address, 0x…”
- functionstringrequired“Human-readable signature, e.g.”
- argsstring“JSON array of arguments, e.g.”
- chainstring“base (default), ethereum, arbitrum, optimism or polygon”
evm_allowanceon 3 other serversreads or searches
“ERC-20 allowance an owner has granted a spender for one token: raw and human amount, with the token's symbol and decimals.”
Publisher declares: read-only yes · open-world yes
4 inputs, 3 required
- ownerstringrequired“Token owner, 0x…”
- tokenstringrequired“ERC-20 contract, 0x…”
- spenderstringrequired“Spender, 0x…”
- chainstring“base (default), ethereum, arbitrum, optimism or polygon”
evm_nftreads or searches
“ERC-721 facts for one token: owner, collection name and symbol, tokenURI, and its metadata (name, description, image) when the URI is http(s) or ipfs.”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
- contractstringrequired“ERC-721 contract, 0x…”
- tokenIdstringrequired“Token id, decimal”
- chainstring“base (default), ethereum, arbitrum, optimism or polygon”
solana_txon 3 other serversreads or searches
“A Solana transaction by signature: status, time, fee in SOL and USD, signers, SOL balance changes per account, token balance changes (mint, owner, change) and the programs it invoked.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- signaturestringrequired“Transaction signature, base58”
solana_accounton 3 other serversreads or searches
“A Solana account: lamports and SOL with a USD value, owner program, executable flag and data size.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- addressstringrequired“Account or mint address, base58”
crypto_priceon 31 other serversreads or searches
“USD spot prices for up to 20 symbols (BTC, ETH, SOL...) from Coinbase, with the source of each price.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- symbolsstringrequired“Comma-separated symbols (BTC,ETH) or Solana mint addresses, up to 20”
crypto_candleson 3 other serversreads or searches
“OHLCV candles for a Coinbase trading pair (BTC-USD) at 1m, 5m, 15m, 1h, 6h or 1d granularity, up to 300, newest first, from Coinbase Exchange public market data.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- pairstringrequired“Coinbase product, e.g.”
- granularitystring“1m, 5m, 15m, 1h, 6h or 1d (default 1h)”
- limitstring“1 to 300 (default 100)”
crypto_orderbookon 3 other serversreads or searches
“A level-2 order book snapshot for a Coinbase pair: best bid and ask, mid price, spread in price and basis points, and the top bids and asks up to depth 50.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- pairstringrequired“Coinbase product, e.g.”
- depthstring“1 to 50 levels per side (default 10)”
defi_tvlon 8 other serversreads or searches
“Total value locked in DeFi from DefiLlama.”
Publisher declares: read-only yes · open-world yes
2 inputs
- protocolstring“DefiLlama protocol slug, e.g.”
- chainstring“Or a chain name, e.g.”
defi_yieldson 22 other serversreads or searches
“DeFi yield pools from DefiLlama with at least $1M TVL, sorted by APY and filtered by chain, project or symbol (max 50).”
Publisher declares: read-only yes · open-world yes
5 inputs
- chainstring“Chain name, e.g.”
- projectstring“Protocol name contains, e.g.”
- symbolstring“Pool symbol, e.g.”
- minTvlUsdstring“Minimum TVL in USD (default and floor 1,000,000)”
- limitstring“1 to 50 (default 20)”
defi_stablecoinson 1 other serverreads or searches
“Stablecoins tracked by DefiLlama: circulating supply, peg type and mechanism, price, and the chains each one runs on.”
Publisher declares: read-only yes · open-world yes
1 input
- symbolstring“Symbol, e.g.”
sec_insidersreads or searches
“The latest Form 4 insider transactions of a US company (ticker, CIK or name): insider name and role, transaction date, code (P buy, S sell, A grant, M exercise, F tax withholding), shares, price and …”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- companystringrequired“Ticker, CIK or company name”
- limitstring“Filings to read, 1 to 10 (default 5)”
weatheron 18 other serversreads or searches
“Weather for a place or a coordinate: current conditions, the next 48 hours and 7 days (temperature, precipitation, wind, symbol).”
Publisher declares: read-only yes · open-world yes
3 inputs
- latstring“Latitude, -90 to 90”
- lonstring“Longitude, -180 to 180”
- placestring“Or a place name, geocoded first”
geocodeon 38 other serversreads or searches
“Place names to coordinates and back: up to 5 matches for a name, or the place at a coordinate.”
Publisher declares: read-only yes · open-world yes
3 inputs
- qstring“Place name, e.g.”
- latstring“For reverse geocoding: latitude”
- lonstring“For reverse geocoding: longitude”
ipon 3 other serversreads or searches
“Who owns an IP address: network name, CIDR, owner, abuse contact (RDAP), ASN and holder (RIPEstat), and reverse DNS.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 or IPv6 address”
holidayson 15 other serversreads or searches
“Public holidays of a country (ISO 2 code) for a year (default: this year): date, local and English names, and whether the holiday is nationwide or regional with its counties.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- countrystringrequired“ISO 3166 alpha-2 code, e.g.”
- yearstring“1900 to 2100 (default: this year)”
postcodereads or searches
“Place names and coordinates for a postcode.”
Publisher declares: read-only yes · open-world yes
2 inputs, 2 required
- countrystringrequired“ISO 3166 alpha-2 code, e.g.”
- codestringrequired“Postcode or ZIP code”
packageon 2 other serversreads or searches
“Facts about a package on npm, PyPI or crates.io: latest version and date, license, description, repository, maintainers (npm), weekly downloads (npm), a deprecated or yanked flag, and how many known …”
Publisher declares: read-only yes · open-world yes
2 inputs, 2 required
- ecosystemstringrequired“npm, pypi or crates”
- namestringrequired“Package name”
vulnson 1 other serverreads or searches
“Known vulnerabilities of one package version in the OSV database: npm, PyPI, crates.io, Go or Maven.”
Publisher declares: read-only yes · open-world yes
3 inputs, 3 required
- ecosystemstringrequired“npm, PyPI, crates.io, Go or Maven”
- namestringrequired“Package name”
- versionstringrequired“Exact version, e.g.”
github_userreads or searches
“A GitHub user's public profile (name, company, location, blog, bio, followers, public repos, creation date) and their five most-starred repositories that are not forks.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- userstringrequired“GitHub login”
arxivon 2 other serversreads or searches
“arXiv papers matching search terms, optionally in one category (cs.AI, math.CO), newest first, max 25: id, title, authors, dates, a 500-character summary, categories and the PDF link.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- qstringrequired“Search terms”
- categorystring“arXiv category, e.g.”
- limitstring“1 to 25 (default 5)”
doion 1 other serverreads or searches
“A DOI's bibliographic record from Crossref (title, authors, journal, publisher, date, type, citation count, license), or the best matches for a citation-style search (max 10).”
Publisher declares: read-only yes · open-world yes
3 inputs
- doistring“DOI, e.g.”
- qstring“Or a citation-style search”
- limitstring“Matches for q, 1 to 10 (default 5)”
extracton 37 other serverscalculates or converts
“Structured data from a web page (url) or your own text: give a schema of up to 20 field names with what each holds, and get a JSON object with exactly those fields, null where the text does not state…”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- urlstring“Web page to read (or text)”
- textstring“Text to read (up to 12,000 characters), instead of url”
- schemaobjectrequired“Field name to what the field holds, up to 20 fields”
- instructionsstring“Optional extra instructions, up to 500 characters”
summarizeon 32 other servers
“A summary of a web page (url) or your own text (up to 12,000 characters) as short, medium or bullets, in the language you name, with key points.”
Publisher declares: read-only yes · open-world yes
4 inputs
- urlstring“Web page to summarize (or text)”
- textstring“Text to summarize, up to 12,000 characters”
- lengthstring“short, medium (default) or bullets”
- languagestring“Language of the summary, e.g.”
sentimenton 15 other serverscalculates or converts
“Sentiment of one text, or up to 20 (texts, a JSON array), each up to 2,000 characters: POSITIVE or NEGATIVE with the model's confidence, from DistilBERT SST-2.”
Publisher declares: read-only yes · open-world yes
2 inputs
- textstring“One text, up to 2,000 characters”
- textsstring“JSON array of up to 20 texts”
rerankon 3 other serverscalculates or converts
“Orders up to 50 documents by relevance to a query with the BGE reranker and returns rank, index and score for each.”
Publisher declares: read-only yes · open-world yes
2 inputs, 2 required
- querystringrequired“The question or search, up to 500 characters”
- documentsarrayrequired“1 to 50 documents, up to 2,000 characters each”
tableson 1 other serverreads or searches
“Every HTML table of a web page as JSON: caption, headers and rows, up to 10 tables with 200 rows each.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“Web page address, e.g.”
feedon 8 other serversreads or searches
“Items of an RSS, Atom or RDF feed, or of the feed a web page advertises: title, link, published date, author and a 300-character summary, newest first (max 50).”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- urlstringrequired“Feed address, or a web page that advertises one”
- limitstring“1 to 50 (default 20)”
- sincestring“Only items published on or after this date, e.g.”
btc_feeson 3 other serversreads or searches
“Recommended Bitcoin fees in sat/vB (fastest, 30 minutes, 1 hour, economy, minimum), the mempool's size and count, and what a typical 140 vB transaction costs in BTC and USD.”
Publisher declares: read-only yes · open-world yes
Takes no inputs.
btc_addresson 3 other serversreads or searches
“A Bitcoin mainnet address: confirmed and unconfirmed balance in BTC and USD, transaction count, funded and spent totals, and its last 10 transactions with the net change for the address.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- addressstringrequired“Bitcoin mainnet address (bc1…, 1… or 3…)”
btc_txon 1 other serverreads or searches
“A Bitcoin transaction by txid: confirmed block and time (or unconfirmed), fee in sats and sat/vB, size and virtual size, input and output totals, and whether it signals replace-by-fee.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- txidstringrequired“Transaction id, 64 hex characters”
evm_decodecalculates or converts
“Function signatures for a 4-byte selector, and for calldata the decoded arguments.”
Publisher declares: read-only yes · open-world yes
2 inputs
- datastring“Calldata, 0x followed by hex (at least 4 bytes)”
- selectorstring“Or only the selector: 0x followed by 8 hex characters”
evm_contractreads or searches
“Whether a contract's source is verified on Sourcify (exact or partial match), with its name, compiler version, license, and the functions and events from its ABI.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- addressstringrequired“Contract address, 0x…”
- chainstring“base (default), ethereum, arbitrum, optimism or polygon”
perps_marketson 2 other serversreads or searches
“Hyperliquid perpetual futures: mark and oracle price, hourly and annualised funding, open interest in coins and USD, 24 h volume and maximum leverage, sorted by volume.”
Publisher declares: read-only yes · open-world yes
2 inputs
- coinstring“Optional symbol such as BTC or ETH”
- limitstring“1 to 50 (default 10)”
perps_accountreads or searches
“A Hyperliquid account by address: account value, margin used and withdrawable amount in USD, and each open position with side, size, entry and mark price, unrealised PnL, leverage and liquidation pri…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- addressstringrequired“Hyperliquid account address, 0x…”
prediction_polymarketreads or searches
“Active Polymarket prediction markets matching search words, or one market by slug: the question, each outcome with its price as an implied probability, volume, liquidity, end date and link.”
Publisher declares: read-only yes · open-world yes
3 inputs
- qstring“Search words, e.g.”
- slugstring“Or one market's slug”
- limitstring“1 to 20 (default 5)”
crypto_fear_greedon 4 other serversreads or searches
“The Crypto Fear & Greed Index today and for the previous days (up to 30), with its classification (extreme fear to extreme greed).”
Publisher declares: read-only yes · open-world yes
1 input
- daysstring“1 to 30 days (default 1)”
defi_feesreads or searches
“A DeFi protocol's fees and revenue for 24 hours, 7 days and 30 days, with the change over the last day against the day before, and the chains it runs on.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- protocolstringrequired“DefiLlama protocol slug, e.g.”
defi_dex_volumereads or searches
“A DEX's trading volume for 24 hours, 7 days and 30 days, with the change over the last day and the chains it trades on.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- protocolstringrequired“DefiLlama protocol slug, e.g.”
company_registryon 2 other serversreads or searches
“Companies from the official registers of Norway, Finland, the Czech Republic and Poland.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- countrystringrequired“no, fi, cz or pl”
- qstring“Company name (not Poland)”
- idstring“Registry number: Norway 9 digits, Finland 1234567-8, Czech 8 digits, Poland 10-digit KRS”
securities_idreads or searches
“A security by ISIN, CUSIP or ticker (with an optional exchange code): its OpenFIGI id, name, ticker, exchange, security type and market sector, and for an ISIN the issuer's LEI and legal name from GL…”
Publisher declares: read-only yes · open-world yes
4 inputs
- isinstring“ISIN, 12 characters”
- cusipstring“CUSIP, 9 characters”
- tickerstring“Ticker, e.g.”
- exchangestring“Optional OpenFIGI exchange code, e.g.”
sec_searchreads or searches
“Full-text search of SEC EDGAR filings: company, CIK, form, filing date, file name, a link to the matched document, its file type (e.g.”
Publisher declares: read-only yes · open-world yes
5 inputs, 1 required
- qstringrequired“Words, or a "phrase" in quotes”
- formsstring“Form types separated by commas, e.g.”
- fromstring“From date, YYYY-MM-DD”
- tostring“To date, YYYY-MM-DD”
- limitstring“1 to 20 (default 10)”
sec_eventsreads or searches
“The latest 8-K current reports of a US company (ticker or CIK) with their item codes explained in plain words (1.01 material agreement, 2.02 results, 5.02 executive change and so on).”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- companystringrequired“Ticker or CIK”
- limitstring“1 to 20 (default 10)”
fda_labelreads or searches
“The latest US drug label (FDA SPL) for a brand or generic name: brand, generic name, manufacturer, indications, dosage, warnings and contraindications (each cut to 1,000 characters) and the set id.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- drugstringrequired“Brand or generic drug name, e.g.”
fda_adverse_eventsreads or searches
“The most reported adverse reactions to a drug in FDA's FAERS database: counts, total reports and the share that were serious.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- drugstringrequired“Generic drug name, e.g.”
- limitstring“Top reactions, 1 to 25 (default 10)”
clinical_trialson 1 other serverreads or searches
“Clinical trials from ClinicalTrials.gov matching words, optionally by status and phase: NCT id, title, status, phases, conditions, sponsor, start and completion dates, enrolment, number of locations …”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- qstringrequired“Condition, drug or words”
- statusstring“RECRUITING, COMPLETED, TERMINATED … (optional)”
- phasestring“EARLY_PHASE1, PHASE1, PHASE2, PHASE3, PHASE4 or NA (optional)”
- limitstring“1 to 20 (default 10)”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. The first 100 of 225 tools are listed. Read 2026-10-23.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

Says what the tool does: 100% of 225 tools
Says what it returns: 100% of 224 tools
States limits, defaults or errors: 79% of 209 tools
Says when to use it: 30% of 224 tools
Items covered per tool: 3.1 of 4 on average

Counted from the listing

Parameters with a description: 100% of 649
Tools with a description: 100% of 225
Typical description length: 416 characters

The tool set

Counted from the listing

Tools: 225
Size of the list: about 60,478 tokens for an agent to load (characters ÷ 4)
Naming: 133 of 225 names use snake_case

AI reading: easy to mix up

No pair found.

The AI items cover 225 of 225 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry

From the remote endpoint (Streamable HTTP)

We connected to this URL on 2026-10-23 (a read-only session: no tool was called).

Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.

Claude Desktop or claude.ai

Settings → Connectors → Add custom connector, then paste:
https://api.sitecheck-api.workers.dev/mcp

Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "sitecheck": {
      "url": "https://api.sitecheck-api.workers.dev/mcp"
    }
  }
}

VS Code · .vscode/mcp.json

{
  "servers": {
    "sitecheck": {
      "type": "http",
      "url": "https://api.sitecheck-api.workers.dev/mcp"
    }
  }
}

VS Code (command line) · Bash or zsh terminal (macOS, Linux)

code --add-mcp '{"name":"sitecheck","type":"http","url":"https://api.sitecheck-api.workers.dev/mcp"}'

Claude Code

claude mcp add --transport http sitecheck https://api.sitecheck-api.workers.dev/mcp

Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+

npx @modelcontextprotocol/inspector@2.11.0 --server-url https://api.sitecheck-api.workers.dev/mcp --transport http

The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Does the registry listing match what we found?

Feature #6

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.

Registry says	We found	Result	Source · date
Remote endpoint api.sitecheck-api.workers.dev/mcp	Session opened	matches	our test · 2026-10-23
No credential declared as required	Opened a session without any credential	matches	our test · 2026-10-23
Repository github.com/bck-stack/sitecheck-x402	Opens publicly	matches	api.github.com · 2026-10-23

Who made it?

Feature #7 · lineage

Facts about the publisher. We do not turn them into a trust score.

Namespace: io.github.bck-stack
GitHub owner: a personal account (bck-stack)

Repository: github.com/bck-stack/sitecheck-x402
Stars: 0
Repository age: 0–30 days
Last push: 0–30 days ago
Archived: no
Security policy: none found (we looked for SECURITY.md in the repository and in its owner’s .github repository)

Source: the registry entry and api.github.com · 2026-10-23; security policy read from GitHub · 2026-10-23.

Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.

Choosing

Record checks

Public records · not a safety rating

4 of 5 record checks met · 4 do not apply

Not ranked by downloads: a remote server publishes no download figure
Not ranked by stars: 0 stars (ranked from 10)

MetRegistry entry is active and says how to run itActive, with a package or a remote address.
MetSource repository link opensThe linked GitHub repository is public.
MetRepository is not archivedNot archived.
MetCode pushed to the repository in the 90 days before our checkLast push 0-30 days before our check.
Not metRepository publishes a security policy (SECURITY.md)No SECURITY.md in the places GitHub reads it from.
Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-23. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards

Common questions about io.github.bck-stack/sitecheck

Answered from the data above

Is io.github.bck-stack/sitecheck safe to install?

We do not rate servers as safe or unsafe. 4 of its 5 applicable record checks are met (facts from public records, each listed on this page). What the records show: Its source repository opens publicly. Its repository had a push in the last 90 days. 2 of its tools describe changing data (our AI model's reading of the descriptions). These are facts with their sources on this page, not a safety guarantee, and we did not run its tools.

Is io.github.bck-stack/sitecheck free to use?

Its website (api.sitecheck-api.workers.dev/) describes a usage-based pricing model. This is an AI-classified reading of the page on 2026-10-23, so check the page itself before relying on it.

Does io.github.bck-stack/sitecheck need an API key or sign-in?

It opened a session without any credential on 2026-10-23. The registry entry declares no required credential; no declaration is not a guarantee.

Has io.github.bck-stack/sitecheck been security tested?

Partly. 2 of the 14 checks that apply to it were exercised. We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security verdict is published before verification.

What can io.github.bck-stack/sitecheck do?

It lists 225 tools. In our AI model's reading of their descriptions (two runs had to agree, nobody checked it by hand), they include tools that read or search, run code or commands, move money, generate content and calculate or convert. We did not call any tool, so this describes the text, not the behaviour.

Can io.github.bck-stack/sitecheck change or delete data?

2 of its tools say in their description that they create, edit, delete, send or run something (our AI model's reading). We did not call any tool, so we cannot say what actually happens.

Does io.github.bck-stack/sitecheck publish a security policy?

We found no SECURITY.md in its repository (root, .github/ or docs/) or in its owner's .github repository.

Where is the source code of io.github.bck-stack/sitecheck?

In github.com/bck-stack/sitecheck-x402, which opens publicly.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Similar servers

Same topic · AI-read

dev.tanod/tanodTanodalso has tools that calculates or converts, runs code or commands, generates content, moves money, reads or searchescompare with this one
io.github.Deesmo/arch-tools-mcpalso has tools that calculates or converts, runs code or commands, generates content, reads or searchescompare with this one
gg.plazmi/plazmiPlazmialso has tools that runs code or commands, generates content, moves money, reads or searchescompare with this one
io.github.alansafahi/soapbox-faithSoapBox Faithalso has tools that calculates or converts, generates content, moves money, reads or searchescompare with this one
io.github.onetapstudiogames/1f3d91F3D9 City Life for AI Agentsalso has tools that runs code or commands, moves money, reads or searchescompare with this one
io.github.humanity4ai/project-humanalso has tools that calculates or converts, generates content, reads or searchescompare with this one

Active servers whose topic is also “other” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Not probed (we call no server's tools)

We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-10-23

Inventory: exercised
Hidden instructions: exercised
Real execution: not run · our policy
Secret leak: not run · nothing to check it against
Internal addresses: not run · our policy
Unconfirmed changes: not run · our policy
Bad input: not run · our policy
Model requests: not run · nothing to check it against
Sensitive questions: not run · nothing to check it against
Folder boundary: not run · our policy
Log leaks: not run · nothing to check it against
Hidden content: not run · nothing to check it against
Fake assistant turns: not applicable
Token passthrough: not applicable
Token audience: not applicable
Sign-in redirect: not run · our policy
Consent handling: not testable from outside
Sign-in metadata: not applicable

2 exercised12 not run (reason given)4 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 2 of the 14 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 2

1Inventory
tool-listReads the declared tools, resources and prompts.exercised
2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised

Not run, with the reason · 12

3Real execution
real-executionCalls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
12Hidden content
audience-hidingChecks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against
16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy
17Consent handling
confused-deputyChecks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside

Does not apply to this server · 4

13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable
14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable
15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable
18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.No sign-in (OAuth) metadata is published, so there are no sign-in addresses to check.not applicable

Source: our own test, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

0 msStarted a read-only session with the server's remote endpoint
665 msConnected after 0 redirects. No credential was sent or needed.
Read the inventory: 225 tools, 0 resources, 0 prompts.
1,438 msFinished: 2 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified

other

AI-classified (Gemini + Claude agreed) · 2026-10-23

Pricing modelAI-classified

usage-based

read from api.sitecheck-api.workers.dev/ · 2026-10-23

“Pay-per-call tools for AI agents”

Programming language

JavaScript

api.github.com · 2026-10-23

Hosting type

remote (hosted by the publisher)

registry · 2026-10-23

MCP capability

tools

our test · 2026-10-23

Transport

streamable HTTP

registry · 2026-10-23

Required credentials

none declared

registry · no declaration is not a guarantee

Package registry

does not apply

remote-only server: no package is shipped, so there is no package registry

Freshness

0–30 days

registry updatedAt · 2026-10-23

Lifecycle status

active

registry · 2026-10-23

License class

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Integrity hash

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Signature / provenance

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Dependency advisories

does not apply

ships no package, so there are no dependencies to audit

Popularity

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Publisher signals

owner: a personal account · repository age: 0–30 days · stars: 0–9

api.github.com · 2026-10-23

Maintenance

active

api.github.com · 2026-10-23

Environment

the publisher's infrastructure

where it runs, from the hosting type

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “io.github.bck-stack/sitecheck: MCP server record.” Data checked 2026-10-23. https://protocolprobe.com/mcp/servers/io.github.bck-stack/sitecheck

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/io.github.bck-stack/sitecheck)](https://protocolprobe.com/mcp/servers/io.github.bck-stack/sitecheck)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology