tool_check
Check a tool definition before you trust it. Send tools (name, description, inputSchema, as your MCP client holds them, up to 64KB) or server (an https MCP endpoint; we fetch its tools/list). Get back findings against rules pt-1 - instructions hidden in the description, hidden text, exfiltration shapes, description-schema mismatch, over-broad parameters, shadowing of other tools, secret-shaped strings, Danger Map indicators - and PT-09: whether the definition differs from what a prior check recorded for the same server and tool name. Graded observed or suspected; absence is "no findings under rules pt-1", never "safe". Definitions are examined and discarded; only names and hashes are recorded. Free, no account.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tools | No | tool definitions to examine, as returned by tools/list. Exactly one of tools or server. | |
| pubkey | No | optional hex64 ed25519 public key to attribute this check to, instead of your origin hash | |
| server | No | https URL of an MCP endpoint; we POST tools/list to it (10s, no auth, no off-host redirects) and check what comes back. Exactly one of tools or server. |