Watch MCP tools, package publishers and domains. Free catalog; paid continuing checks.
Scored across 49 tools
Many tools overlap heavily: feed_find and feed_search have nearly identical descriptions, while check_tool, get_api_x402_check, listing_security, listing_tools and mcp_index_signals all address server safety/health in different ways. Dependency/history/watch tools (dependency_changes, listing_history, watch_dependency_changes) and catalog listing tools (list_listings, list_mcp_servers, mcp_index_search) also have unclear boundaries, making misselection likely.
All names use snake_case and are readable, but conventions are mixed: some are verb-first (create_listing, list_listings, get_listing), many are noun-first (feed_find, listing_security, api_access), and a few are bare nouns (health, contact, pricing). Specialty names like get_api_x402_check and claude_code_allowlist further break any predictable pattern.
49 tools is heavy for a single server and spans catalog browsing, security checks, billing, feeds, A2A agents, OKF bundles, and watch management. Many of these tools are near-duplicates or minor variations, so the surface feels accumulated rather than well-scoped.
Coverage is broad across catalog, billing, watches, feeds, bundles, A2A and security, but there are notable lifecycle gaps: listings can be created and read but not updated or deleted, and comments can be listed but not created. Feed functionality is read-only, and several workflows rely on external endpoints or emails rather than tools.
Read one A2A agent: every skill its card declares, capabilities, protocol version, health, documentation and the registries that list it, with their licenses. Take the key from a2a_agent_search. The same row as the list plus what the card declares: every skill, the capabilities object, the protocol version as written, the documentation and icon URLs, and when we first saw it. Cached for 60 seconds; a MAT catalog read, like the list.
Inputs: chave (required), api_pass, retry_key.
Find A2A agents — agents that publish an AgentCard — by text, health, protocol version, registry, skill tag or publisher. Each row carries the key for a2a_agent and the license of every registry that lists it. Collected from public A2A registries and served as it comes — no review queue hides a record; quality is the order, never visibility. One row per agent, merged across the registries that list it: sources says which, and credits carries each one's license, which travels with the data. Values inside one parameter are OR'd, different parameters are AND'd. Cached for 60 seconds. A MAT catalog read, served by the index host https://api.agentalog.com; this host forwards the call there.
Inputs: q, tag, fonte, limit, +7 more.
Monthly data package and private purchase status, without charging. MAT-only balance; pass prefix mat_. Catalog discovery and ordinary browsing are free. GPTBot, ClaudeBot, CCBot, Meta-ExternalAgent, Amazonbot, AhrefsBot and MJ12bot share a daily allowance of 1,000 reads per crawler family; over it the answer is 402 with the MAT reads package: US$ 1 for 1,000 reads for 30 days, with no automatic renewal. Buy it at POST /api/acesso and send its pass in X-API-Pass. The MAT allowance is separate from the company, address and procurement indexes.
Inputs: api_pass.
Buy 1,000 basic data reads for US$1, valid for 30 days. Requires explicit payment. MAT-only balance; pass prefix mat_. Catalog discovery and ordinary browsing are free. GPTBot, ClaudeBot, CCBot, Meta-ExternalAgent, Amazonbot, AhrefsBot and MJ12bot share a daily allowance of 1,000 reads per crawler family; over it the answer is 402 with the MAT reads package: US$ 1 for 1,000 reads for 30 days, with no automatic renewal. Buy it at POST /api/acesso and send its pass in X-API-Pass. The MAT allowance is separate from the company, address and procurement indexes.
Inputs: api_pass (required), payment, transaction, credit_token.
Self-describing index: the whole API surface, with quota and quickstart.
Inputs: no named parameters.
Remaining MAT read credits, without consuming credit.
Inputs: api_pass (required).
Curated engineering links filtered by topic and source type (paper, repo, model, dataset, demo, video, docs, article, post), 20 per page, with the count of each filter value. Values inside one parameter are OR'd; the two parameters are AND'd. Unknown values are ignored. Follow _links.next to walk everything.
Inputs: page, tipo, topico.
Which engineering topics have curated briefings, how many links each has and the newest links across all of them. Each link comes with its source, source type and a two-line summary. Topics are public bookmark folders (CUDA, inference, RAG, agents…). Each item is a post someone saved, its main source, the source type and a two-line summary in English and Portuguese. ?resumo=1 returns only total and each topic's slug and total. 404 until the first publication.
Inputs: no named parameters.
Buy a plan: vaga (1 more tool), equipe (50 more tools and up to 10 private projects), empresa (500 more tools and up to 10 private projects). Each purchase lasts 30 days, with no automatic renewal. Answers 402 with the price; pay with x402 or prepaid credit and repeat. Each purchase lasts 30 days, with no automatic renewal. Without payment, the answer is 402 with the price. Pay with prepaid credit (X-Credito) or x402 (PAYMENT-SIGNATURE v2 or X-PAYMENT v1). Without an account, the verified paying wallet owns the purchase. Use wallet agent authentication to read its plan, or claim it after account sign-in. The compra mark prevents repeat credit debits. An x402 nonce can settle only once; keep the receipt after a delivery error.
Inputs: plan (required).
Cancel the active plan. Nothing else is charged; a purchase under 7 days and a paid period that has not started are refunded and end now, and the rest of the paid period stays active until keeps_until. Requires accept_data_removal: true. Send { "accept_data_removal": true }. The monthly card subscription stops. A purchase made less than 7 days ago and a paid period that has not started yet, such as a renewal, go back the same way they were paid (card or Pix) and end now. The rest of the paid period stays active until keeps_until; then what the plan added ends (account.cancel.losses in GET /api/plans says what). A purchase paid with USDC or with credit from another purchase stays active until its end; ask for its refund by e-mail, as the cancellation page says.
Inputs: accept_data_removal (required).
Before installing a remote MCP server, check its address: signals from the address itself (consumer tunnel, no TLS), the catalog listings with that address or host and their security level, and facts about its domain. Never visits the address. Send the endpoint URL. The answer never contacts that address: it reads what our weekly visits measured and what our domain data knows. address_signals comes from the address alone (consumer tunnel, http:// without TLS). records lists the catalog listings with this exact address first (exato: true), then up to 20 others on the same host, each with its level and signals; same_host counts them all. domain has the facts about the host's domain. An address outside the catalog answers no_catalogo: false and register: submit it to get it reviewed. Cached for 5 minutes.
Inputs: url (required), api_pass, retry_key.
The watch list as Claude Code managed settings (allowedMcpServers, deniedMcpServers) and claude mcp add commands. managed_settings goes into a Claude Code managed settings source (see docs). allowManagedMcpServersOnly restricts user-added servers to this list. Checked servers rated as risk go to deniedMcpServers. The exact URL and that URL followed by ?* permit the checked route with optional query parameters. Expired or unchecked items stay out. commands has one quoted claude mcp add command per allowed server.
Inputs: no named parameters.
Write to the people behind the product: a question, or a sponsorship/partnership/advertising proposal. Free, no captcha and no payment; one message every 10 s per network (one that arrives sooner waits its turn). One route for a question and for a sponsorship, partnership or ad proposal (type, with the placements of GET /api/partners). No captcha, no account, no payment. One message every 10 seconds per network: one that arrives sooner waits its turn and then goes out — no error. The message reaches the team by e-mail, with email as the reply address. For voice, send multipart/form-data: dados is this JSON (up to 32 KiB), and audio is one WebM, Ogg or M4A audio file (up to 2 MB). Audio can replace message. The browser records up to two minutes. Audio is attached to the owner's e-mail.
Inputs: name (required), email (required), message (required), fuso, +14 more.
Creates a guest mr_… Asks for no e-mail. Publishing a listing is what requires an account (or a payment). At most 20 new guests per network per hour; a browser that already has one gets it back from the mr_guest cookie.
Inputs: no named parameters.
Submit an MCP server, skill or plugin for review. Free with an account; US$ 0.10 without one. Limit: one submission a day and three in the queue per owner. Automatic review approves supported low-risk MCP listings; uncertain cases wait for a person. Poll status_api (GET /api/listings/:id/status, no credential) to learn the decision. A person or agent can submit without an account for US$ 0.10, paid through x402 or prepaid credit; with an account, it is free. Each owner can submit once a day and keep up to three submissions in the queue. For a skill, provide its SKILL.md URL. The service checks the body and quota before charging. An invalid body returns 400; an exhausted quota returns 429.
Inputs: url (required), kind (required), body, name, +2 more.
Read your watched tool's before/after evidence, dates and sources. Continue through history_next.
Inputs: id (required), events_after.
Does this site publish a feed? Answers with every feed known for a domain — the question a reader or an agent actually asks. Find feeds by text, format, language and availability. Filter and text search run in the SAME full-text query: values inside one parameter are OR'd, different parameters are AND'd. Without q the order is by newest in the index (recent) and next_cursor is a keyset — follow next to walk everything. With q the order is relevance and paging is by offset. We index and link; the feeds belong to whoever publishes them.
Inputs: dominio (required), api_pass, retry_key.
Read one post whole: the body in Markdown (content) and the author's formatting as safe HTML (content_html), plus the link to the original. ord comes from feed_posts; 0 is the newest. Two bodies for the same post, both from the copy we stored when we READ the feed — a request never fetches the site: content_html keeps the author's formatting through an allowlist (only known tags and attributes survive; script, style, iframe and event handlers are dropped with their content), and content is the same text as Markdown — the shape an agent usually wants. Neither can carry script. 404 when the feed or the position is unknown.
Inputs: id (required), ord (required), api_pass, retry_key.
What has this feed published? The posts of one feed as our queue read them — title, date, author, summary, categories and enclosure, without the body. Find the feed first (feed_find or feed_search); this takes an id from this index, never a URL. Up to 40 posts, in the order the feed publishes them, WITHOUT the body — the body of one post comes from /items/:ord. It is OUR copy, read on our own schedule — not the live feed and not a proxy: the only thing this endpoint accepts is an id from this index, never a URL. read_at says when we read it. Empty list when the feed has not been read yet.
Inputs: id (required), api_pass, retry_key.
Search the feed index by text and filters: format, audio/video, community, namespace and year of the newest item. Find feeds by text, format, language and availability. Filter and text search run in the SAME full-text query: values inside one parameter are OR'd, different parameters are AND'd. Without q the order is by newest in the index (recent) and next_cursor is a keyset — follow next to walk everything. With q the order is relevance and paging is by offset. We index and link; the feeds belong to whoever publishes them.
Inputs: q, tipo, limit, midia, +5 more.
Checks an MCP server address for an agent, paid per call: what we measured, the catalog listings and the domain facts.
The answer of GET /api/check, sold per call to agents, with no account and no allowance before. A request without payment gets the 402 with the price; a paid one gets the check in the same response, with the payment in cobranca. The check never visits the address. When the check is unavailable, the answer is 503 and nothing is charged.
Inputs: url (required).
One bundle's card: root index.md URL, version, concept count, provenance and repository signal. live and low (example or fixture bundles kept out of the search) both answer here.
Inputs: id (required).
One listing's page. The owner sees their own even when pending or hidden.
Inputs: id (required), api_pass, retry_key.
Collected project documentation. Available when get_listing includes readme_api; 404 when no copy was stored. The text lives in R2 (mural-coleta). This call does not write and does not fetch GitHub. Same visibility as the listing page. Call it only when the listing page carries readme_api: a page without it has no README collected, and this route answers 404.
Inputs: id (required), api_pass, retry_key.
Verification seals of a listing: code, DNS, IP, TLS and domain, each checked daily against the reference the publisher approved. Public seal status for a listing. The owner also sees the proof, the approved and current readings, the selected seals and the available cancellation details.
Inputs: id (required).
302 hop to the listing's origin (counts a visit). Counts at most 1 visit per owner per day. The X-Visit-Counted header says whether this call counted — it is how the client knows without counting twice. A remote MCP server goes to its repository; without one, to the listing page /l/:id, which shows the endpoint to copy, and no visit counts.
Inputs: id (required).
Liveness and the commit deployed right now — it is how the smoke waits for its own deploy.
Inputs: no named parameters.
Size of the index by provenance and when it last changed.
Inputs: no named parameters.
Likes the listing; DELETE undoes it. Calling again does not add up: the counter counts people.
Inputs: id (required), guest_token (required).
Comments on a live listing. With a credential on the call, each comment of yours comes with mine: true.
Inputs: id (required).
Read a tool's declared package/repository/domain chain and cached public source evidence. No purchase or collection. Repeated registry, repository, registration and DNS lookups, comparison code and an alert process that must keep running after the conversation. A declaration does not prove ownership. Source failures and missing dates remain unknown. Collected PyPI provenance is not independently verified. No measured token or money saving is claimed.
Inputs: id (required), api_pass, retry_key.
Read up to five recorded repository events, newest first. The listing page carries the same available events as history; updates may be cached for up to 15 minutes. An empty list means no events are available, not proof that nothing changed or that collection covered the requested period. generated_at is the slice generation date, not a per-repository check date; it is empty when no slice was read. Stale means no push for 12 months. Reading does not refresh the source.
Inputs: id (required), api_pass, retry_key.
Read a remote MCP server or SKILL.md review before installing. MCP: server, domain, tools and measured signals. Skill: static findings with file, line, excerpt and context; no command execution or referenced-script review. Unread skills stay unchecked. Read the limits in aviso. Take the id from list_listings. We visit remote MCP servers: initialize and tools/list, without credentials or tool calls, again 7 days after a success. A failure needs a second check. MCP signals: dns_morto, sem_https, tls_invalido, tunel, nao_responde, nao_mcp, texto_suspeito, redireciona_fora, repo_arquivado, repo_parado, dominio_recente, login, bloqueado. For skills, tipo: skill identifies a static SKILL.md review. It flags secret reads, download-and-execute commands, external uploads, invisible characters, long encoded text and broad allowed-tools. revisao.achados supplies the path, original line, excerpt and context. Examples and prohibitions do not raise the level. Excerpts hide sensitive values. The review does not run commands or follow references. Supported source: public raw.githubusercontent.com SKILL.md. Watched, visited, starred and new skills get priority within the shared GitHub governor and a daily cap. Unread or unsupported skills remain explicitly unchecked. Local MCP servers and plugins answer not_remote. No request fetches a third-party source. Cached for 5 minutes.
Inputs: id (required), api_pass, retry_key.
Moderation state of a listing (pending / live / low / hidden / blocked) — poll it after create_listing. No credential; only the decision comes back. Every submission is born pending. An automatic safety check looks for concrete signs of fraud, malware or data theft. Listings without these signs can be approved. A risk finding or an unreadable source keeps the listing private for a person to review. This is the receipt you poll after POST /api/listings (its response carries this URL as status_api). Only the decision comes back, never the unreviewed content: the id (lst_…, unguessable) is all it takes, and the page itself keeps its rule — owner only until it is public. Answers are cached for 60 s per point of presence: poll every few minutes, not every second.
Inputs: id (required).
The tools and instructions a remote MCP server announced at its last check, with what they mention doing and any suspicious text. 404 tools_not_read when the server was not read yet. The announced manifest, normalized: each tool's name, title, description (up to 4,000 characters), input schema (null above 8,000 characters) and protocol annotations, plus the server instructions. capabilities and suspicions come from the current rules, applied when you read. Reading this endpoint never contacts the server. Cached for 5 minutes.
Inputs: id (required), api_pass, retry_key.
Refresh up to 100 selected listings in one batch instead of opening each listing. The catalog stores the values seen at the last real change of a listing; counters and package versions change over time. After a search, use this batch or MCP listing_updates before comparing versions. These values may be cached for up to 15 minutes; generated_at is the slice generation date, not a check date for each record. Listings without a record are unknown and simply absent. GET /api/listings/:id already applies these values on top of the record.
Inputs: ids (required).
Public mosaic of live MCP servers, skills, plugins and OKF knowledge bundles. MCP servers with an active verification seal first (verified); trusted=1 lists only them, and warning marks a page with listings that Agentalog does not check every day. Then live listings and the low tail (few stars or no clear license) after them in every order — low=0 leaves the tail out. To walk everything, follow next: without q it is a cursor (next_cursor, keyset on the order's index) and has no ceiling; every listing also has an HTML page at /l/:id and the shards of /sitemap-listings.xml list them all. q runs on a full-text index (FTS5, bm25) kept in the same transaction as every text write. With q and low=0, low_count says how many low listings the filter left out — LIKE with a cap of 200. The query is mapped onto kind/topic/transport filters unless interpret=0.
Inputs: q, all, low, kind, +15 more.
MCP subregistry (GET /v0.1/servers). Only live kind=mcp, verified servers first, seals in _meta. Only kind=mcp and only live, verified servers first, each with its seals in _meta. A generic MCP client reads it without knowing this product. GET /v0/servers is an alias of the same resource, kept for whoever already pointed there — this is the canonical URL.
Inputs: limit, cursor, search, api_pass, +1 more.
The plans for sale, with price and term, and the account's active plan. Each purchase lasts 30 days, with no automatic renewal. Each purchase lasts 30 days, with no automatic renewal. Without an account or wallet credential, account is null.
Inputs: no named parameters.
The MCP servers and skills the account watches, with their review level, slots and plans. Daily checks cover MCP tools, state, level, country and version. Supported skills cover changes in SKILL.md text and review signals. Source quotas can delay a check; read proxima_em and verificado_em. The e-mail goes to the verified account address and includes an unsubscribe link. Wallet-only owners read the changes in GET /api/me/vigia/avisos.
Inputs: no named parameters.
Browse what independent MCP indexes measured, including servers this catalog does not list yet (casou=0). Newest change first. casou=0 is what the indexes know and the catalog does not — the list to look at before submitting a server. Filters are AND'd. With q, total is the exact number of matches, including when the requested page is empty.
Inputs: q, casou, fonte, limit, +3 more.
Does this MCP server still answer, with which access, and is its repository alive? What independent MCP indexes measured about one listing of this catalog, each credited with its license. Take the id from list_listings. A signal belongs to a listing only when it is the SAME object: the name in the official MCP registry, the exact remote endpoint URL or the GitHub owner/repo, in that order. A shared domain never matches — two servers on one host are different products. Up to 20 signals, one per index and record.
Inputs: listing (required), api_pass, retry_key.
x402 configuration in force and the agent prices for contact and publishing.
Inputs: no named parameters.
Search the index of OKF bundles: free text over name, tagline, description and origin; filter by provenance (github|domain), repository, version, language, license, root type or concept count; search root concept text. Paginate with limit/offset. Only live bundles. Free text matches the name, the tagline, the description and the origin identifier (owner/repo:path or the bundle URL). No total on purpose: GET /api/okf/stats has it.
Inputs: q, repo, sort, type, +8 more.
Submits OKF bundles from a host you control (IndexNow protocol: a key file proves ownership, with no account). No charge. Answers 202 — the key is checked by the collector before anything is read. No account, no payment: ownership is proved by a key file on the host, exactly as IndexNow does it. Host https://<host>/<key>.txt containing the key (or point keyLocation at another path on the SAME host), then send the bundle URLs. We answer 202: the key has not been checked yet. Verification and reading happen on our collector, never at the edge — so nothing is published, and no URL of yours is fetched, before the key matches. Re-sending a URL is how you say the bundle changed; it goes back in line to be re-read. At most 100 URLs per request and 200 per host per UTC day. The same queue is served by POST https://okfindex.com/api/ping, the index's own home — search, bundle cards and statistics live there.
Inputs: key (required), host (required), urlList (required), keyLocation.
Stop watching a server; its slot becomes free.
Inputs: id (required).
The changes in the watched tools, oldest first, 100 per page. Pass the cursor of the last call in depois to get only what is new. The same changes the account e-mail reports, while each tool was watched. Without depois, the last 30 days. Up to 100 per page: repeat with depois set to the cursor of the last response while mais is true. With nothing new, the answer keeps the same cursor, so poll with the last one. email: true means the account also gets these changes by e-mail.
Inputs: depois.
Follow package, publisher, repository and domain changes of a tool in your watchlist. Uses an existing paid watch pass and never purchases one. The listing must already be in your watchlist. No separate purchase. Sources refresh every six hours through shared caches. Source quotas can defer a check. History records before, after, source and observation date. Domain expiry alerts use 30, 15 and 7 days when the registry publishes a date. Missing dates and source failures remain unverified. Account holders receive operational e-mail; wallet owners read API history. No account-recovery or takeover attempt is made.
Inputs: id (required), enabled (required).
Watch a remote MCP or supported SKILL.md. Daily schedule, subject to source quota; account e-mail for changes. Skills cover text and review signals, not execution. 3 free slots per owner; 402 for more. Unsupported sources are rejected before payment. We collect and compare the supported sources daily. Your agent reads the changes without maintaining its own watch process. Catalog signals and change notices are not a security audit or proof that remote code is safe. Local hooks do not freeze remote MCP code.
Inputs: listing_id (required).
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
MCP Drift Observatory: has a public MCP server's declared tools changed? Free check, archive, feeds.
Market data tools for the MCP ecosystem: server stats, events, search, leaderboards, package trends.
Website change monitor MCP: see what changed on any public page. Free 3 pages; $4.99/mo.
Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.
Add one secure layer between your agents and this server.
