Tlacuilo
Server Details
35 pay-per-call tools for AI agents over x402 (USDC): web, security, markets, SEC, papers, Mexico
- Status
- Healthy
- Uptime
- 100.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- mastercobeos/tlacuilo
- GitHub Stars
- 0
- Server Listing
- Tlacuilo
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 37 tools
Most tools target a unique data source (DNS vs RDAP domain, SEC filings vs SEC facts, deps_check vs deps_audit), so an agent can usually pick correctly. The main confusion risks are singular/plural pairs (polymarket_market vs polymarket_markets), the three DENUE business tools (empresas / empresas_buscar / empresas_cerca), and the trio catalog / health / x402_find, all of which have overlapping 'discovery' purposes that only descriptions disambiguate.
There is a loose snake_case convention, but it mixes bare nouns (banxico, dns, domain, iva, uma, cp) with verb-first English compounds (web_read, deps_audit, papers_search) and verb-last Spanish compounds (curp_validar, rfc_validar, sat_cfdi_verificar, empresas_buscar). The English/Spanish verb-position split plus noun-only tools makes the pattern unpredictable, though names remain readable and domain-prefixed.
37 tools is heavy for a single MCP server and forces the agent to scan a large surface before acting. It is partly justified because the server is a multi-domain paid data aggregator where each tool covers a genuinely separate source, but several families (Mexican fiscal IDs, DENUE, Polymarket, SEC) could be consolidated.
Coverage across the declared domains is broad and mostly closed-loop: lookup+search for DENUE and Polymarket, bulk+single for dependency audits, filings+facts for SEC, search+cite for papers, and a full mailbox lifecycle (create/send/read with ack). Minor gaps remain — web_read references a 'full render' tool that does not exist, and there is no generic HTTP/JSON fetch or deletion/cleanup operation for mailboxes.
Available Tools
37 toolsagents_readinessagents_readinessARead-onlyInspect
Agent-readiness audit of a website: score 0-100 and grade A-F from 18 checks fetched in parallel. Covers robots.txt rules for GPTBot, ClaudeBot, PerplexityBot, Google-Extended, CCBot and Bytespider; llms.txt; sitemap.xml; openapi.json, ai-plugin.json, MCP and x402 discovery files; and the page itself: JSON-LD types, Open Graph, title, meta description, lang, headings, text-to-HTML ratio, content visible without JavaScript, HTTPS and response time. Includes concrete recommendations. Price: $0.01 USDC per call (x402).
Inputs: url (required).
banxicobanxicoARead-onlyInspect
Latest value of an official Banco de México series: fix (USD/MXN FIX rate), udis, tiie28, tasa-objetivo, or any raw SIE series ID. Returns the date and value as published. Price: $0.003 USDC per call (x402).
Inputs: serie (required).
catalogTool catalog and pricesARead-onlyInspect
Free. Lists every tool with its price in USD, the accepted networks and how x402 payment works over MCP.
Inputs: no named parameters.
clinical_trials_searchclinical_trials_searchARead-onlyInspect
Clinical trial search on ClinicalTrials.gov (500K+ registered studies worldwide) by condition, intervention, recruitment status, country and phase. Each study includes NCT ID, title, status, phase, conditions, interventions with type, lead sponsor, enrollment, start and completion dates, number of sites, countries, registry URL and a brief summary (up to 600 chars). Returns the total match count and up to 50 studies per call. Price: $0.005 USDC per call (x402).
Inputs: limit, phase, status, country, +2 more.
cpcpARead-onlyInspect
Mexican postal code lookup from the national catalog of Correos de México: state, municipality, city and every neighborhood (colonia) with its settlement type. Price: $0.003 USDC per call (x402).
Inputs: cp (required).
curp_validarcurp_validarARead-onlyInspect
Validates a Mexican CURP: 18-character structure, check digit, and decodes sex, birth date and state of birth. Offline. Price: $0.002 USDC per call (x402).
Inputs: curp (required).
deps_auditdeps_auditAInspect
Vulnerability audit of up to 200 pinned dependencies in one call against the OSV database (npm, PyPI, Go, Maven, Cargo, NuGet). Accepts a package list or a package.json (dependencies and devDependencies, range prefixes stripped). Returns, per package, every known advisory with CVE aliases, CVSS score and level, fixed versions and URL, plus a severity summary (critical, high, medium, low, unknown), the count of vulnerable packages and any specs that could not be pinned. Price: $0.02 USDC per call (x402).
Inputs: packages, ecosystem, package_json.
deps_checkdeps_checkARead-onlyInspect
Security and freshness check for one package version across npm, PyPI, Go, Maven, Cargo and NuGet: known vulnerabilities from OSV with CVE aliases, CVSS score and level, fixed versions and advisory URL; latest version, versions behind, publish date, licenses, deprecation flag and repository links from deps.dev; and a one-word verdict (ok, outdated or vulnerable). Version defaults to the latest release. Price: $0.005 USDC per call (x402).
Inputs: name (required), version, ecosystem.
dias_habilesdias_habilesBRead-onlyInspect
Mexican banking business days per the CNBV calendar: whether a date is a business day, the next and previous business day, and a date plus N business days. Price: $0.002 USDC per call (x402).
Inputs: dias, fecha.
dnsdnsARead-onlyInspect
Full DNS profile of a domain in one call: A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records, SPF and DMARC parsed (policy, all-mechanism, reporting address), DNSSEC validation flag, and inferred providers for DNS hosting, email and web hosting. Resolved over DNS-over-HTTPS with a public resolver; accepts bare hostnames or full URLs. Price: $0.003 USDC per call (x402).
Inputs: domain (required).
domaindomainARead-onlyInspect
Domain registration record from the authoritative registry via RDAP (the successor to WHOIS): whether the domain is registered, registrar name and IANA ID, abuse contact, creation, last-change and expiration dates, days until expiry, EPP status codes, registry nameservers and DNSSEC delegation. Covers gTLDs and the ccTLDs that publish RDAP. Price: $0.005 USDC per call (x402).
Inputs: domain (required).
email_validateemail_validateARead-onlyInspect
Email address check without sending mail: RFC-style syntax validation, domain deliverability from MX (or A/AAAA fallback) over DNS-over-HTTPS, mail exchangers, disposable-domain and free-provider detection, role-based local parts (info, support, noreply), typo suggestion for common providers, plus-tag and canonical form (Gmail dots and tags removed), with a 0-100 score and a valid/risky/invalid verdict. Price: $0.002 USDC per call (x402).
Inputs: email (required).
empresasempresasARead-onlyInspect
Full record of one Mexican business from INEGI's DENUE by establishment ID: identification, activity, address, contact, size, type and coordinates. Price: $0.02 USDC per call (x402).
Inputs: id (required).
empresas_buscarempresas_buscarARead-onlyInspect
Searches Mexican businesses in INEGI's DENUE directory (5M+ establishments) by name or keyword, optionally filtered by state. Returns name, legal name, activity, address, postal code, phone, email, website, size and coordinates. Price: $0.05 USDC per call (x402).
Inputs: q (required), fin, estado, inicio.
empresas_cercaempresas_cercaARead-onlyInspect
Finds Mexican businesses near a coordinate using INEGI's DENUE: keyword plus latitude, longitude and radius up to 5,000 m. Same fields as the name search. Price: $0.05 USDC per call (x402).
Inputs: q (required), lat (required), lng (required), metros.
federal_register_searchfederal_register_searchARead-onlyInspect
US Federal Register documents (final rules, proposed rules, notices, presidential documents) matching a full-text query, newest first, with optional filters by agency, document type and publication date. Each document includes number, title, type, abstract, agencies, publication date, effective date, comment deadline, HTML and PDF URLs and the FR citation, plus the total number of matches. Source: Federal Register API. Price: $0.003 USDC per call (x402).
Inputs: q, type, limit, since, +1 more.
guard_injectionguard_injectionARead-onlyInspect
Prompt-injection detector for text an agent is about to feed to a model: tool results, scraped pages or user input. Rules and heuristics only, no LLM, fast and deterministic. Returns risk 0-1, a clean/suspicious/malicious verdict, the categories found (instruction override, role hijack, prompt or data exfiltration, tool abuse, hidden Unicode, encoded payloads, fake chat delimiters, ES/PT/FR/DE/IT variants) with evidence snippets, and a sanitized copy. POST with JSON {text, context} also works. Price: $0.002 USDC per call (x402).
Inputs: text (required), context.
healthService healthBRead-onlyInspect
Free. Payment network, facilitator and configured data sources.
Inputs: no named parameters.
ivaivaARead-onlyInspect
Mexican VAT (IVA) and retention rates: general 16%, northern/southern border 8%, 0% and exempt categories, plus ISR and IVA retention rates for professional services and leases. Price: $0.001 USDC per call (x402).
Inputs: no named parameters.
msg_boxmsg_boxAInspect
Creates a private mailbox for agent-to-agent messaging and returns its 22-character id plus a secret read key. Any agent that knows the id can deliver messages to it; only the read key can read them. The mailbox lives 30 days; messages are kept 7 days, newest first, up to 500. Optional label for bookkeeping. Price: $0.005 USDC per call (x402).
Inputs: label.
msg_inboxmsg_inboxARead-onlyInspect
Reads the newest messages of an agent mailbox; requires the mailbox id and its read key (401 otherwise). Returns up to limit messages (default 20, max 100) with id, from, body, reply_to and sent_at. Reads are non-destructive unless ack=true, which removes the returned messages so the next read continues where this one left off. A public demo mailbox (demo000000000000000000, key demo) is available for testing. Price: $0.001 USDC per call (x402).
Inputs: box (required), key (required), ack, limit.
msg_sendmsg_sendAInspect
Delivers a message to an agent mailbox by id: body up to 16 KB plus optional sender name and reply_to address (for example the sender's own mailbox id). Returns the message id and delivery confirmation; 404 if the mailbox does not exist or has expired. A public demo mailbox (demo000000000000000000) is available for testing. Price: $0.001 USDC per call (x402).
Inputs: to (required), body (required), from, reply_to.
papers_citepapers_citeARead-onlyInspect
Formatted citation for any DOI registered with Crossref or DataCite (journal articles, books, arXiv preprints, datasets): BibTeX entry plus a formatted reference in APA, MLA, Chicago author-date, IEEE, Harvard, Nature or AMA style. Resolves through DOI content negotiation with Crossref metadata as fallback. Price: $0.002 USDC per call (x402).
Inputs: doi (required), style.
papers_searchpapers_searchARead-onlyInspect
Full-text search across 250M+ scholarly works in OpenAlex: title, authors, year, venue, type, citation count, open-access status with PDF link, reconstructed abstract (up to 1500 chars) and topics. Filters by publication date range and open access; sorted by relevance or citations. Returns the total match count and up to 25 papers per call with their OpenAlex IDs and DOIs. Price: $0.005 USDC per call (x402).
Inputs: q (required), sort, limit, since, +2 more.
polymarket_marketpolymarket_marketARead-onlyInspect
One Polymarket market by numeric id or slug: question, resolution description, outcomes with current prices, Yes probability, last trade, best bid and ask, 24h price change, total and 24h volume, liquidity, end date, status, parent event, tags and the Polymarket URL. Source: Polymarket Gamma API. Price: $0.003 USDC per call (x402).
Inputs: id (required).
polymarket_marketspolymarket_marketsARead-onlyInspect
Polymarket prediction markets matching a text query, or the top markets by 24-hour volume when no query is given. Each market includes the question, every outcome with its current price (implied probability), the Yes probability, total and 24h volume, liquidity, end date, status and the Polymarket URL. Source: Polymarket Gamma API. Price: $0.005 USDC per call (x402).
Inputs: q, limit, active.
rfc_validarrfc_validarARead-onlyInspect
Validates a Mexican RFC (tax ID): structure, person type (física/moral), embedded date and SAT check digit. Offline, no SAT call. Price: $0.002 USDC per call (x402).
Inputs: rfc (required).
salario_minimosalario_minimoARead-onlyInspect
Mexican minimum wage set by CONASAMI: general daily rate and the Northern Border Free Zone rate for a given year, with monthly equivalents. Price: $0.001 USDC per call (x402).
Inputs: anio.
sat_69bsat_69bARead-onlyInspect
Checks an RFC against the SAT 69-B list of taxpayers with presumed non-existent operations (EFOS). Returns status (presunto, desvirtuado, definitivo, sentencia favorable), notice numbers and publication dates. Price: $0.02 USDC per call (x402).
Inputs: rfc (required).
sat_cfdi_verificarsat_cfdi_verificarARead-onlyInspect
Verifies a CFDI 3.3/4.0 invoice against the SAT web service: whether it exists, is vigente or cancelado, its cancellation status and EFOS flag. Needs UUID, issuer RFC, receiver RFC, total and the last 8 characters of the seal. Price: $0.03 USDC per call (x402).
Inputs: fe (required), id (required), re (required), rr (required), +1 more.
sec_factssec_factsARead-onlyInspect
Reported financial values of a US-listed company from SEC XBRL company facts: the most recent annual (10-K) and quarterly (10-Q) figures for one concept such as revenue, net income, diluted EPS, total assets, cash or shares outstanding, with fiscal year, period dates, unit, form and filing date. Accepts friendly aliases or any us-gaap/dei concept name. Source: SEC EDGAR. Price: $0.005 USDC per call (x402).
Inputs: cik, limit, ticker, concept.
sec_filingssec_filingsARead-onlyInspect
SEC EDGAR filings for a US-listed company by ticker or CIK, newest first, optionally filtered by form type (10-K, 10-Q, 8-K, 4, S-1...). Returns company name, CIK, SIC code and industry, state and fiscal year end, and for each filing the form, filing date, period, accession number, primary document and its EDGAR URL. Source: SEC submissions feed. Price: $0.005 USDC per call (x402).
Inputs: cik, form, limit, ticker.
token_verdicttoken_verdictARead-onlyInspect
Token verdict for a Base contract or Solana mint: DEX market data (price, liquidity, 24h volume, buys/sells, pair age), security checks (honeypot, taxes, mint/owner powers, holder concentration via GoPlus; RugCheck risks and LP lock on Solana), red and green flags, a one-word verdict and a plain-language take. Entertainment, not trading advice. Price: $0.02 USDC per call (x402).
Inputs: address (required), chain.
umaumaARead-onlyInspect
Current and historical UMA (Unidad de Medida y Actualización) values published by INEGI: daily, monthly and annual amounts with their effective dates. Price: $0.001 USDC per call (x402).
Inputs: anio.
web_readweb_readARead-onlyInspect
Read any public web page as clean, LLM-ready markdown: title, meta description, language and main content with navigation, ads and scripts removed. Follows redirects. Cheapest way to read a URL before deciding whether to pay for a full render. Price: $0.001 USDC per call (x402).
Inputs: url (required), max_chars.
web_tablesweb_tablesARead-onlyInspect
Every HTML table on a public web page as structured JSON: title (caption or nearest heading), headers, rows as arrays and as records keyed by header, numeric columns detected and parsed to numbers, colspan and rowspan expanded, footnote markers removed. Selecting one table by index also returns it as CSV. Row count capped by max_rows. Price: $0.003 USDC per call (x402).
Inputs: url (required), index, max_rows.
x402_findx402_findARead-onlyInspect
Which x402 API should I call for this task? Searches the Coinbase Bazaar catalog and ranks candidates by evidence of real use: distinct payers, repeat calls per payer, recency of payments and price. Returns up to 10 endpoints with URL, price, networks, example input and the reasons for the ranking. Price: $0.01 USDC per call (x402).
Inputs: need (required), limit, network, max_price.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Pay-per-call tools for AI agents: Solana, DEX, perps, prediction markets, DeFi, web. USDC via x402.
Pay-per-call tools for AI agents: product photos, documents, web pages, data. USDC via x402.
38 x402 pay-per-call tools for AI agents (USDC/USDT on Base): web, crypto, on-chain, geo, packages
x402 toolkit for AI agents: paid web, AI, and Base chain tools per call in USDC. Free tools too.
Related MCP Servers
- FlicenseNot gradedqualityCmaintenancePay-per-call agent tools (web reader, page extract, email/domain/site/wallet/token checks, screenshot, PDF) via x402 USDC micropayments, with 3 free trial calls per wallet.-

AfaAgent x402 API Suiteofficial
FlicenseNot gradedqualityDmaintenance43 x402-enabled API tools — DeFi, wallet security, AI/ML, developer tools, SEO. Pay-per-call USDC on Base via x402 protocol.-- AlicenseAqualityDmaintenance22 MCP tools for AI agents: crypto prices and trading signals (53 coins), stock prices and company financials, forex rates and conversion, and web scraping with AI summaries. All powered by x402 USDC micropayments on Base. $0.01-$0.25 per request.2219 npmMIT
- AlicenseNot gradedqualityDmaintenanceExposes Kerdos Market Intelligence APIs as tools for AI trading agents, with pay-per-call in USDC via the x402 protocol—no API keys or subscriptions required.45 npmMIT
Glama MCP Gateway
Add one secure layer between your agents and this server.