Skip to main content
Glama

Phishtank

by io.github.pipeworx-io

Entity Profile

entity_profile
Read-onlyIdempotent

"Tell me about X" / "research Acme" / "brief me on Tesla" / "what does Apple do" / "company profile for Microsoft" / "give me the rundown on NVDA" / "everything you know about $TICKER" — full cross-source profile of a US public company in ONE parallel call. ALWAYS PREFER over chaining single-pack SEC/XBRL/news lookups when the user asks for a holistic view. Fans out across SEC EDGAR, XBRL, USPTO patents, federal contracts (USAspending), FDA-licensed biologics (Purple Book), H-1B hiring (DOL LCA), news and GLEIF, and returns: cik + company_name (+ resolved_from/resolved_to when value was a name); recent_filings (up to 5 with pipeworx://edgar/company/{cik}/filings/{accession} URIs); fundamentals (LATEST 10-K Revenues + NetIncomeLoss + Cash, sorted period_end DESC); patents (USPTO PatentsView API sunset May 2025 — soft-fails until reactivated); federal_contracts (USAspending awards where the company is the recipient); fda_products (FDA-licensed biologics — vaccines, cell/gene therapies — from the Purple Book; a company with only small-molecule/generic drugs will show none here, that is expected, not a failure); hiring (H-1B sponsorship volume + salary range from DOL LCA filings); recent news mentions via GDELT→GNews fallback; LEI via GLEIF. sources_used / sources_failed say which of these actually returned data for THIS company — an empty section is a real "no data", not a bug. Pass a ticker ("AAPL"), zero-padded CIK ("0000320193"), OR a company name ("Moderna") — names now resolve via SEC EDGAR's company-name match; a private company (no CIK/ticker) returns resolved:false with an explicit notes line, not a bare failure. type accepts "company" or "ticker" interchangeably — both take the same value shapes above.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
typeYes"company" or "ticker" — both are accepted and behave identically; `value` can be a ticker, CIK, or company name either way. person/place coming soon.
valueYesTicker (e.g., "AAPL"), zero-padded CIK (e.g., "0000320193"), or company name (e.g., "Moderna") — names resolve via SEC EDGAR company-name match.

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. Changed3 schema fields changed
    • changedInput schema / properties / type / description
      Previous value: -"Entity type. Only \"company\" supported today; person/place coming soon."New value: +"\"company\" or \"ticker\" — both are accepted and behave identically; `value` can be a ticker, CIK, or company name either way. person/place coming soon."
    • changedInput schema / properties / type / enum
      Previous value: -[
-  "company"
-]New value: +[
+  "company",
+  "ticker"
+]
    • changedInput schema / properties / value / description
      Previous value: -"Ticker (e.g., \"AAPL\") or zero-padded CIK (e.g., \"0000320193\"). Names not supported — use resolve_entity first if you only have a name."New value: +"Ticker (e.g., \"AAPL\"), zero-padded CIK (e.g., \"0000320193\"), or company name (e.g., \"Moderna\") — names resolve via SEC EDGAR company-name match."
  2. First observed

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare `readOnlyHint: true` and `idempotentHint: true`, but the description goes well beyond that: it discloses that patents 'soft-fails until reactivated', that an empty `fda_products` section is expected for small-molecule-only companies (not a bug), and that `sources_used`/`sources_failed` indicate real data absence. It also explains the resolution behavior for names and private companies, adding context that the annotations cannot provide. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long, but every sentence carries essential information for a tool that aggregates eight different data sources. It is front-loaded with usage examples and the 'ALWAYS PREFER' directive, then systematically lists output fields and failure modes. While dense, the structure with semicolons and itemized lists makes it scannable. It earns a 4 rather than 5 because a slight trim could improve readability, but it is appropriately sized for the tool's complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the absence of an output schema, the description must fully explain return values and failure behavior. It does this exhaustively: it enumerates every output field (`cik`, `company_name`, `recent_filings`, `fundamentals`, `patents`, `federal_contracts`, `fda_products`, `hiring`, `news`, `LEI`), notes which sources are included, and explicitly clarifies that empty sections are legitimate 'no data' results. It also covers edge cases like private companies and patent API sunset. No information an agent needs to call the tool correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% — both `type` and `value` are documented in the schema. The description adds value beyond the schema by clarifying that `type` accepts 'company' or 'ticker' interchangeably and behave identically, and that `value` can be a ticker, CIK, or company name with a note that names resolve via SEC EDGAR's match. This nuance is not fully captured in the raw schema, so the description contributes meaningful semantic detail.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description begins with concrete query examples and states the exact purpose: 'full cross-source profile of a US public company in ONE parallel call.' It lists a specific set of sources and output fields, making the tool's scope unambiguous. It clearly differentiates from siblings like `deep_research` and `bet_research` by specifying that it aggregates SEC, XBRL, patents, contracts, FDA, H-1B, news, and GLEIF data into a single profile.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly instructs agents to 'ALWAYS PREFER over chaining single-pack SEC/XBRL/news lookups when the user asks for a holistic view.' It provides multiple example user intents, clarifies which inputs are accepted, and even explains the expected behavior for private companies (returns `resolved:false` with a `notes` line). This is strong, explicit guidance that covers when to use the tool and what to expect in edge cases.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Phishtank toolsInspect
Try in Browser
RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

B3.4/5.0
Disambiguation1/5

The server is named 'Phishtank' but only one tool (check_url) relates to phishing. The remaining 31 tools cover a wide range of unrelated topics (data research, prediction markets, memory, etc.), many with overlapping purposes (e.g., ask_pipeworx, ask_pipeworx_beta, ask_pipeworx_grounded, deep_research). This makes it extremely difficult for an agent to select the right tool.

Naming Consistency2/5

Tool names mix conventions inconsistently: some use underscores (ai_visibility_check, check_url), some are camelCase (ask_pipeworx, bet_research), and others are compound phrases. There is no predictable pattern across the set.

Tool Count1/5

With 32 tools, the count is high, but only one aligns with the server name 'Phishtank' (check_url). The vast majority belong to an entirely different domain (Pipeworx tools), making the tool count severely inappropriate for the server's stated purpose.

Completeness1/5

For a phishing detection server, the tool surface is severely incomplete. It lacks essential tools like report_phish, verify_phish, get_stats, etc. The single phishing tool (check_url) is insufficient, while the other 31 tools are completely out of scope.

Resources