Skip to main content
Glama
topaisaas-dev

Universal Native MCP Server Hub

Universal Native MCP Server Hub — TopAI Sovereign Gateway

Universal Model Context Protocol (MCP) Server Hub for Claude Code, Cursor, Windsurf, and Antigravity 🌐 Official Gateway & Free Sandbox Key (100 req/mo): https://topaigateway.com · 📚 Docs (400+ APIs & 201 Tools): https://topaigateway.com/docs

Glama MCP M8ven Trust npm version Cloudflare Workers License Uptime OpenAPI RapidAPI

With the rise of autonomous coding assistants and agents (Claude Code, Cursor, Windsurf, Antigravity, CrewAI, LangChain), the Model Context Protocol (MCP) has become the universal standard for tool calling.

Instead of installing 19 separate local servers or bloated Docker containers, Universal Native MCP Server Hub bundles 19 production-grade AI primitives (and routes to 400+ deterministic edge APIs at topaigateway.com) into a single serverless edge hub running with 0ms cold-start latency across 330+ global Cloudflare locations.


📦 19 Native Pre-Bundled MCP Tools

  1. topai_web_to_markdown: Extract ad-free, noise-free Markdown from any public URL.

  2. topai_b2b_data_leads: Instant verified B2B lead generation by industry, country, and job role.

  3. topai_company_enrichment: 70+ technographics, employee range, and B2B firmographics from domain.

  4. topai_ai_web_search: Real-time grounding search engine for LLMs with citations.

  5. topai_semantic_cache: Sub-5ms vector cache for LLM prompts to eliminate redundant generation bills.

  6. topai_invoice_extractor: Structured financial entity parser (vendor, IBAN, amounts, line items).

  7. topai_headless_screenshot: High-fidelity web screenshot renderer & DOM metadata.

  8. topai_prompt_shield: Sub-millisecond firewall against prompt injection, jailbreaks, and PII leaks.

  9. topai_token_slimmer: Lossless HTML & JSON compressor to slash input token costs by 30-70%.

  10. topai_agentvision_crop: Multimodal ROI cropper to isolate UI buttons/tables and slash vision tokens by 75%.

  11. topai_math_fact_checker: Deterministic VAT, invoice reconciliation, and business days to stop hallucinations.

  12. topai_techstack_fingerprint: Sub-50ms BuiltWith alternative (Shopify, Stripe, HubSpot, Next.js).

  13. topai_polymarket_arbitrage: Prediction market odds, cross-platform delta vs bookmakers, and Kelly sizing.

  14. topai_mcp_hub_registry: MCP tool registry introspector & capability discovery.

  15. topai_pharmapatent_watcher: FDA Orange Book patent cliffs, exclusivity expirations & generic challenge tracker.

  16. topai_healthcare_validator: Instant NPI (Luhn 80840), EU RPPS/ADELI credentials & medical license verification.

  17. topai_google_ai_overview: Extract Google AI Overviews, cited sources, and SERP organic snippets.

  18. topai_disposable_email_shield: Real-time burner email detection, DoH MX live check & B2B lead audit.

  19. topai_openapi_flattener: OpenAPI 3.0/3.1 recursive $ref dereferencer & RapidAPI schema sanitizer.


Related MCP server: Cloudflare Playwright MCP

🚀 Quick Setup in Your IDE

To automatically install and configure TopAI MCP Hub into your IDE:

# For Claude Desktop:
npx -y @smithery/cli install @topaisaas/mcp-server --client claude

# For Cursor:
npx -y @smithery/cli install @topaisaas/mcp-server --client cursor

💻 Option B: Zero-Config Local Stdio (npx)

Run natively on your machine without maintaining a server:

{
  "mcpServers": {
    "topai-hub": {
      "command": "npx",
      "args": ["-y", "@topaisaas/mcp-server"]
    }
  }
}

🌐 Option C: Global Serverless SSE Endpoint (Cloudflare Anycast)

1. Cursor (.cursor/mcp.json)

Add to your project's .cursor/mcp.json or global Cursor settings:

{
  "mcpServers": {
    "topai-hub": {
      "url": "https://mcp-server-hub.topaisaas.workers.dev/sse"
    }
  }
}

2. Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "topai-hub": {
      "url": "https://mcp-server-hub.topaisaas.workers.dev/sse"
    }
  }
}

3. Windsurf (mcp_config.json)

{
  "mcpServers": {
    "topai-hub": {
      "serverUrl": "https://mcp-server-hub.topaisaas.workers.dev/sse"
    }
  }
}

4. Antigravity (mcp_servers.json)

{
  "topai-hub": {
    "url": "https://mcp-server-hub.topaisaas.workers.dev/sse",
    "description": "TopAI SaaS Universal MCP Hub with 9 production tools"
  }
}

🛠️ Direct REST & JSON-RPC Usage

List Available Tools (GET)

curl "https://mcp-server-hub.topaisaas.workers.dev/v1/mcp/tools"

Execute a Tool via REST (POST)

curl -X POST https://mcp-server-hub.topaisaas.workers.dev/v1/mcp/call \
  -H "Content-Type: application/json" \
  -d '{
    "name": "topai_techstack_fingerprint",
    "arguments": {
      "domain": "gymshark.com"
    }
  }'

Response (Standard MCP Content Block):

{
  "success": true,
  "tool": "topai_techstack_fingerprint",
  "content": [
    {
      "type": "text",
      "text": "{\n  \"domain\": \"gymshark.com\",\n  \"technologies\": [\"Shopify\", \"Klaviyo\", \"Stripe\", \"Cloudflare\"],\n  \"detected_count\": 4,\n  \"sub_50ms\": true\n}"
    }
  ]
}

Standard MCP JSON-RPC 2.0 (POST /mcp)

curl -X POST https://mcp-server-hub.topaisaas.workers.dev/mcp \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "id": "1",
    "method": "tools/call",
    "params": {
      "name": "topai_math_fact_checker",
      "arguments": {
        "operation": "vat_calculate",
        "amount": 250,
        "rate_percent": 20
      }
    }
  }'

🛡️ Edge Security & SLAs

  • 0ms Cold-Start: Powered by Cloudflare Workers V8 isolates worldwide.

  • 100% Stateless: No user prompts, code, or arguments are logged or stored.

  • Spec Compliance: Fully compliant with the Anthropic Model Context Protocol (2024-11-05).


📬 Official Gateway, 4 Cumulative Packs & Marketplaces

Available Tools

19 tools
topai_agentvision_cropA
Read-onlyIdempotent

Computes optimal Region-of-Interest (ROI) bounding boxes for UI buttons, tables, charts, or text blocks in an image to reduce multimodal vision token consumption by up to 75%. Use when preparing screenshots or document images for vision-capable LLMs so only the relevant region is sent. Do not use for taking the initial webpage screenshot (use topai_headless_screenshot first). Stateless, read-only, idempotent visual ROI analysis.

NameRequiredDescriptionDefault
image_urlYesPublic HTTP/HTTPS URL of the source image to analyze for Region-of-Interest cropping.
target_elementNoSpecific visual element category to isolate: 'auto', 'button', 'table', 'text_block', 'chart', or 'header' (default: 'auto').

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, and the description's trailing 'Stateless, read-only, idempotent' largely restates them. Where it adds real value is the payoff context ('reduce multimodal vision token consumption by up to 75%') and clarifying that the output is an ROI bounding box rather than a transformed image, though it omits the actual coordinate/format of the returned boxes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with the computation and its benefit before the usage constraint. The final 'Stateless, read-only, idempotent visual ROI analysis' clause is mild redundancy against the annotations rather than new information, so it is slightly less than optimal.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter, single-required-input tool with no output schema, the description covers purpose, usage, cost benefit, and safety profile adequately. It could say more about what the returned ROI data looks like (coordinates, count, single vs. multiple boxes), which is the one gap an agent might care about.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so both parameters are already documented, including the enum values and the 'auto' default. The description names the same element categories but adds no syntax, format, or defaulting nuance beyond the schema, so it sits at the baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific verb and resource ('Computes optimal Region-of-Interest bounding boxes') plus the target element categories, and explicitly differentiates itself from the adjacent screenshotting tool. An agent can select it over `topai_headless_screenshot` without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states the positive trigger ('Use when preparing screenshots or document images for vision-capable LLMs'), the exclusion ('Do not use for taking the initial webpage screenshot'), and names the alternative (`topai_headless_screenshot` first). This is the full when/when-not/alternative triad.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_b2b_data_leadsA
Read-onlyIdempotent

Queries verified B2B company and executive lead records filtered by industry vertical, ISO country code, and result limit. Use when building prospect lists, sales pipelines, or market landscapes across specific sectors. Do not use when you already have a specific company domain and want deep technographic profiling on that single domain (use topai_company_enrichment instead). Stateless, read-only, idempotent query.

NameRequiredDescriptionDefault
limitNoMaximum number of verified B2B lead records to return, bounded between 1 and 50 (default: 10).
countryNoOptional two-letter ISO 3166-1 alpha-2 country code to restrict geographic scope (e.g., 'US', 'FR', 'DE', 'GB').
industryYesTarget B2B industry vertical or market segment to filter leads by (e.g., 'SaaS', 'Fintech', 'Healthcare', 'E-commerce').

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint and destructiveHint=false. The description restates 'Stateless, read-only, idempotent query', which largely duplicates the annotations rather than adding new context. It does not add anything about result ordering, data freshness, or rate limits beyond the structured hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the core purpose, followed by usage guidance and the invocation contract. No filler, every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 3-param read-only query tool with no output schema and full param documentation, the description is essentially complete: purpose, scope, alternative, and behavior are all present. The only minor gap is that it does not clarify output shape or sorting, which matters slightly without an output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with each parameter including bounds and examples, so the baseline is 3. The description only summarizes that filtering is by industry, country, and limit, adding no syntax, format, or edge-case detail beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Queries verified B2B company and executive lead records') and names the filter dimensions (industry vertical, ISO country code, result limit). It also explicitly distinguishes itself from the sibling enrichment tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives positive usage contexts (prospect lists, sales pipelines, market landscapes) and an explicit exclusion: when you have a specific domain needing technographic profiling, use topai_company_enrichment. Both when-to-use and when-not-to-use are covered with the named alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_company_enrichmentA
Read-onlyIdempotent

Enriches a single corporate domain name with firmographic metadata including legal entity name, industry sector, workforce size range, detected software stack, and social links. Use when you have a known company domain (such as 'linear.app') and need firmographic context. Do not use for discovering lists of unknown companies by industry (use topai_b2b_data_leads instead) or for exhaustive 70-signature CMS/CDN fingerprinting (use topai_techstack_fingerprint instead). Stateless, read-only, idempotent lookup.

NameRequiredDescriptionDefault
domainYesRoot corporate domain name without protocol or path (e.g., 'linear.app', 'figma.com').

TDQS

A4.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint, and the description's 'Stateless, read-only, idempotent lookup' mostly restates them. The genuinely additive part is the enumeration of returned metadata, but there is no mention of auth requirements, rate limits, or behavior on unknown/missing domains — a real gap for an open-world external lookup.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded, followed by routing guidance, with no filler or marketing language. The final 'Stateless, read-only, idempotent lookup' sentence largely duplicates the annotations, which is the only wasted sentence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description usefully enumerates the returned field categories, and routing is fully covered. Minor gaps remain around return shape/coverage (e.g., what happens when enrichment finds nothing) for an open-world lookup, but it is sufficient to invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the single parameter is fully documented in the schema, including an example ('linear.app'). The description's example domain duplicates the schema example and adds no format or constraint detail beyond it, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (enriches) and resource (a single corporate domain name), then enumerates the returned firmographic fields. It explicitly distinguishes itself from two sibling tools, so an agent can select it without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use condition ('you have a known company domain') and two when-not cases with named alternatives (`topai_b2b_data_leads` for discovery, `topai_techstack_fingerprint` for exhaustive fingerprinting). Routing is unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_disposable_email_shieldA
Read-onlyIdempotent

Detects disposable, burner, or temporary email addresses using RFC 5322 syntax parsing, throwaway domain blocklists, and DNS MX heuristics, returning a fraud risk score (0.0 to 1.0). Use during user signup, B2B lead cleaning, or KYC fraud prevention to block fake accounts. Do not use for enriching corporate firmographics when you already know the domain is legitimate (use topai_company_enrichment instead). Stateless, read-only, idempotent verification.

NameRequiredDescriptionDefault
emailYesFull email address string to inspect for burner/disposable domain status and RFC 5322 validity (e.g., 'user@tempmail.com').

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds return semantics the annotations do not carry (a 0.0–1.0 fraud risk score) and names the detection techniques. The closing 'Stateless, read-only, idempotent verification' largely restates the annotations, and 'DNS MX heuristics' sits in mild tension with openWorldHint=false since MX lookups are network-dependent — but this is a nuance, not a hard contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core purpose, then usage, then an exclusion, then a behavioral tagline — four efficient sentences. The final sentence duplicates annotation content and could be dropped without loss.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, and the description fills that gap by stating the return value and its range. Combined with explicit usage/exclusion guidance and method disclosure, an agent has everything needed to select and invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Only one parameter with 100% schema description coverage, so the schema already documents the email string, its format, and an example. The description adds no parameter-level detail beyond the schema, which is the expected baseline when coverage is complete.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb+resource: 'Detects disposable, burner, or temporary email addresses', plus the detection methods (RFC 5322 parsing, throwaway domain blocklists, DNS MX heuristics) and the return value (fraud risk score 0.0–1.0). This clearly distinguishes it from siblings like topai_prompt_shield or topai_healthcare_validator.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use scenarios (user signup, B2B lead cleaning, KYC fraud prevention) and an explicit when-NOT-to-use case that names the alternative tool: 'Do not use for enriching corporate firmographics ... use topai_company_enrichment instead.' Full routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_google_ai_overviewA
Read-only

Extracts Google Search Generative Experience (AI Overview) synthesis text, explicitly cited source URLs, and organic SERP count for a search query. Use for GEO (Generative Engine Optimization) audits, citation tracking, and analyzing how Google AI summarizes a topic. Do not use for general fast web search when AI Overview citation tracking is unnecessary (use topai_ai_web_search instead). Stateless, read-only execution.

NameRequiredDescriptionDefault
queryYesSearch query to inspect for Google AI Overview generation and cited links (e.g., 'best lightweight vector database 2026').
countryNoTwo-letter country code for localized SERP context (default: 'us').
languageNoTwo-letter ISO language code for SERP results (default: 'en').

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=true, so 'Stateless, read-only execution' largely restates structured data; the 'stateless' qualifier is the only genuinely additive bit. The description does not mention auth, rate limits, or failure modes. No output schema exists, so the enumerated return fields carry some behavioral weight, but the safety profile is already annotation-covered.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with what is extracted, then usage, then the exclusion, then the safety note. Every sentence earns its place with no redundant preamble or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, and the description compensates by naming the three returned artifacts (synthesis text, cited URLs, organic SERP count), which is enough for a stateless read tool taking a single required query. Minor gaps remain around null/empty-result behavior and localization semantics, but the essentials are covered.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so all three parameters (query, country, language) already have descriptions including defaults ('us', 'en'). The description adds no syntax, format, or constraint detail beyond the schema, which is the expected baseline when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Extracts) and resource (Google AI Overview), and enumerates the exact payload returned: synthesis text, cited source URLs, and organic SERP count. It also differentiates itself from the sibling topai_ai_web_search by name, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit positive triggers (GEO audits, citation tracking, analyzing Google AI summaries) and an explicit exclusion with the alternative to use instead ('Do not use for general fast web search when AI Overview citation tracking is unnecessary (use topai_ai_web_search instead)'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_headless_screenshotA
Read-onlyIdempotent

Renders a public webpage in a serverless headless browser and returns viewport or full-page screenshot metadata and dimensions. Use when visual layout inspection, UI verification, or image capture of a live URL is required. Do not use when you only need the textual content of a webpage (use topai_web_to_markdown instead to save 90% bandwidth and tokens). Stateless, read-only, idempotent rendering.

NameRequiredDescriptionDefault
urlYesPublic HTTP/HTTPS URL of the webpage to render and capture (e.g., 'https://github.com').
formatNoOutput image encoding format: 'png', 'jpeg', or 'webp' (default: 'png').
full_pageNoSet to true to capture the entire scrollable document height, or false for the above-the-fold viewport only (default: false).

TDQS

A4.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, openWorldHint, and destructiveHint=false, and the closing sentence largely restates those ('Stateless, read-only, idempotent'). The genuinely additive detail is the 'public webpage' constraint, which implies pages behind auth cannot be rendered, but this is not spelled out and no return-shape or failure behavior is described.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with purpose then routing guidance, with no filler. The trailing 'Stateless, read-only, idempotent rendering' sentence is largely redundant with the annotations already attached to the tool, which is the only waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a three-parameter read-only tool with no output schema, the description covers purpose, routing, and the public-URL constraint adequately. It does signal the return is metadata/dimensions rather than raw image bytes, but does not explain how a caller retrieves the actual image, leaving a modest gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents url, format, and full_page, including the enum values and defaults. The description only echoes the viewport/full-page distinction, adding no format, size, or URL-syntax detail beyond the schema; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Renders a public webpage in a serverless headless browser') and names what it returns (viewport or full-page screenshot metadata and dimensions). It explicitly distinguishes itself from the sibling topai_web_to_markdown, so an agent can route correctly without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use ('visual layout inspection, UI verification, or image capture of a live URL') and when-not-to-use ('only need the textual content') with the exact alternative named and a quantified reason (90% bandwidth/token savings). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_healthcare_validatorA
Read-onlyIdempotent

Validates 10-digit US National Provider Identifiers (NPI) using the ISO Luhn 80840 prefix checksum algorithm and returns provider license status and specialty metadata. Use when verifying healthcare practitioners, medical facilities, or compliance onboarding records. Do not use for looking up drug patent expiration dates (use topai_pharmapatent_watcher instead). Stateless, read-only, idempotent verification.

NameRequiredDescriptionDefault
stateNoOptional two-letter US state postal code (e.g., 'CA', 'NY', 'TX').
npi_numberYes10-digit US National Provider Identifier string to validate via Luhn 80840 check (e.g., '1234567893').
provider_nameNoOptional physician surname or healthcare organization name for cross-matching.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint/idempotentHint/destructiveHint=false, so the closing 'Stateless, read-only, idempotent verification' largely restates structured data and earns little. The description does add genuinely new context: the ISO Luhn 80840 checksum rule and the fact that license status and specialty metadata are returned, which matters because there is no output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action and algorithm, then usage, then the exclusion. The drug-patent exclusion is mildly tangential but functions as a real routing guard, so it earns its place; density is good with minimal waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description compensates by stating what is returned (license status, specialty metadata) and how validation works. Combined with full schema coverage and existing annotations, an agent has everything needed to invoke this correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all three parameters are already documented at the schema level, and the description adds no param-level syntax or constraint beyond restating that the NPI is 10 digits. Baseline 3 applies; naming 'provider license status and specialty metadata' hints at output rather than parameter meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Validates 10-digit US National Provider Identifiers (NPI)') plus the exact algorithm used, and explicitly distinguishes itself from the closest sibling by naming topai_pharmapatent_watcher. An agent can select this tool without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use scenarios ('verifying healthcare practitioners, medical facilities, or compliance onboarding records') and an explicit when-not with the alternative named. Both directions of routing are covered with no inference required.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_invoice_extractorA
Read-onlyIdempotent

Parses unstructured invoice or receipt text into structured accounting fields including vendor name, invoice number, ISO date, currency, VAT amount, gross total, and line items. Use when extracting structured financial data from OCR output or raw invoice text. Do not use for verifying mathematical VAT calculations or reconciling line-item arithmetic (use topai_math_fact_checker instead). Stateless, read-only, idempotent parser.

NameRequiredDescriptionDefault
textYesRaw unstructured text extracted from an invoice, receipt, or billing PDF.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint and openWorldHint, so restating "read-only" and "idempotent" earns no credit. It does add "stateless" and, more usefully, enumerates the returned accounting fields, which compensates for the absent output schema. It omits failure behavior on malformed text, so it falls short of 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the purpose, then usage routing, then the trait tagline. Every sentence carries information, though the trailing "read-only, idempotent" clause partly duplicates annotation data and could be trimmed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Although no output schema exists, the description compensates by listing the extracted fields; with annotations covering the safety profile and the schema covering the single input, nothing an agent needs to select or call the tool is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is only one parameter and schema description coverage is 100%, with the schema itself documenting the raw-text input. The description reinforces it as "raw invoice text" but adds no format, size, or encoding detail beyond the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (parses) and resource (unstructured invoice/receipt text) and enumerates the exact structured fields produced, so the agent knows precisely what comes out. It also names the sibling it is not (topai_math_fact_checker), making it distinguishable from the 17 other tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly gives the trigger condition ("Use when extracting structured financial data from OCR output or raw invoice text") and an exclusion with a named alternative ("Do not use for verifying mathematical VAT calculations... use topai_math_fact_checker instead"). Both when and when-not are covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_math_fact_checkerA
Read-onlyIdempotent

Executes deterministic IEEE/decimal financial arithmetic for VAT calculation, multi-line invoice reconciliation, and working business-day counts with an explicit step-by-step audit trail. Use whenever an agent must compute or verify taxes, invoice totals, or date intervals without risking LLM arithmetic hallucinations. Do not use for parsing raw unstructured invoice text (use topai_invoice_extractor first, then pass extracted numbers here). Stateless, read-only, idempotent calculation.

NameRequiredDescriptionDefault
itemsNoLine items array `[{ description, quantity, unit_price }]` used when `operation` is 'invoice_reconcile'.
amountNoBase monetary amount for 'vat_calculate' (e.g., 250.00).
operationYesDeterministic calculation type: 'vat_calculate' (net/gross tax math), 'invoice_reconcile' (sum of quantity * unit_price), or 'business_days'.
rate_percentNoVAT or tax percentage rate for 'vat_calculate' (e.g., 20.0 for 20% VAT).

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so the 'Stateless, read-only, idempotent' clause largely repeats structured data. The description does add genuine behavioral context beyond the annotations: deterministic decimal/IEEE arithmetic and an 'explicit step-by-step audit trail' return characteristic. It does not cover failure modes or limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tightly-scoped sentences with the purpose and audit-trail behavior front-loaded, followed by usage routing. Minor waste in restating the annotation-covered 'Stateless, read-only, idempotent' traits, but nothing is padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description does carry the burden of hinting at returns, and it does so via the 'step-by-step audit trail' phrase. All three operations and the upstream dependency on the extractor are covered, leaving only error/edge behavior unaddressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all four parameters including the operation enum and each field's role. The description adds no syntax, format, or constraint detail beyond what the schema provides, making the baseline 3 correct.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Executes deterministic IEEE/decimal financial arithmetic') and enumerates the three concrete operations (VAT, invoice reconciliation, business-day counts). It also clearly differentiates from the sibling topai_invoice_extractor, so an agent can route correctly without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use ('whenever an agent must compute or verify taxes, invoice totals, or date intervals') and explicit when-not ('Do not use for parsing raw unstructured invoice text'), including the alternative tool and the correct sequencing ('use topai_invoice_extractor first, then pass extracted numbers here').

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_mcp_hub_registryA
Read-onlyIdempotent

Introspects and searches the TopAI Sovereign Gateway catalog of MCP tools by functional category or keyword. Use when an autonomous agent wants to discover which specialized tools are available on this hub before selecting one. Do not use to execute a domain tool directly—call the specific topai_* tool once identified. Stateless, read-only, idempotent registry lookup.

NameRequiredDescriptionDefault
searchNoOptional keyword substring to match against registered tool names and descriptions.
categoryNoOptional functional category filter (e.g., 'scraping', 'finance', 'healthcare', 'security', 'intelligence').

TDQS

A4.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false and openWorldHint=false, so the safety profile is fully covered structurally. The closing sentence 'Stateless, read-only, idempotent registry lookup' largely restates those annotations, with 'stateless' being the only genuinely additive trait. It adds some value but does not disclose pagination, result caps, or what a catalog entry contains.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, each doing a distinct job: what it does, when/when-not to use it, and its operational profile. Front-loaded with capability and routing guidance. The final sentence is partly redundant with the annotations, which is a minor deduction rather than a structural problem.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-required-parameter discovery tool with complete schema coverage and clean annotations, the routing information is sufficient. The one gap is that no output schema exists and the description never says what a lookup returns (e.g., tool names, descriptions, categories), which an agent choosing between discovery tools would benefit from knowing. Everything needed to invoke correctly is present, however.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% for both optional parameters, so the schema already documents that `search` is a keyword substring match and `category` is a functional filter. The phrase 'by functional category or keyword' mirrors the schema without adding syntax, format, or matching-behavior detail (e.g., whether search is case-sensitive or how categories are enumerated). Baseline 3 applies when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States specific verbs (introspects, searches) and a precise resource (the TopAI Sovereign Gateway catalog of MCP tools), plus the axes of search (functional category or keyword). This distinguishes it cleanly from the domain siblings like topai_web_to_markdown or topai_healthcare_validator, which are the tools it discovers rather than being one of them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to use it ('when an autonomous agent wants to discover which specialized tools are available... before selecting one') and when not to ('Do not use to execute a domain tool directly'), naming the alternative pattern (call the specific `topai_*` tool once identified). Both the positive trigger and the exclusion are stated, leaving nothing to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_openapi_flattenerA
Read-onlyIdempotent

Dereferences internal and external $ref pointers, neutralizes circular schema references, and flattens OpenAPI 3.0/3.1 specifications into a self-contained JSON document. Use before importing complex OpenAPI specs into RapidAPI, Postman, or LLM function-calling compilers that reject nested $ref pointers. Do not use for general JSON token minification (use topai_token_slimmer instead). Stateless, read-only, idempotent schema transformation.

NameRequiredDescriptionDefault
spec_urlNoOptional public HTTP/HTTPS URL pointing to an OpenAPI JSON specification to fetch and flatten.
spec_jsonNoOptional raw OpenAPI JSON string passed inline for immediate local dereferencing.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint, and openWorldHint, so 'stateless, read-only, idempotent' largely restates structured data. However, the description adds genuine behavioral context beyond annotations: that it handles both internal and external $refs, neutralizes circular references, and yields a self-contained JSON document.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the core action, followed by usage routing and then a trait summary. The final clause mildly duplicates the annotation set, but overall the text is tight and well ordered.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, but the description discloses the return shape ('self-contained JSON document') and the transformation behavior, which is sufficient. Adding input format guidance (e.g., that exactly one of the two optional params is expected) would make it fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and both parameters (spec_url, spec_json) are fully documented in the schema. The description adds no parameter-level syntax or format detail beyond what the schema already provides, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses specific verbs (dereferences, neutralizes, flattens) and names the exact resource (OpenAPI 3.0/3.1 specifications, internal and external $ref pointers). It explicitly distinguishes itself from the sibling topai_token_slimmer, so an agent can tell them apart without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states the precise use case (before importing into RapidAPI, Postman, or LLM function-calling compilers that reject nested $ref pointers) and an explicit exclusion with a named alternative (not for JSON token minification, use topai_token_slimmer). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_pharmapatent_watcherA
Read-onlyIdempotent

Retrieves pharmaceutical patent cliff dates, active ingredient metadata, FDA Orange Book / European exclusivity expirations, and generic entry threat levels for a given drug name. Use for life-sciences competitive intelligence, LOE (Loss of Exclusivity) forecasting, and pharmaceutical IP analysis. Do not use for verifying individual physician NPI medical licenses (use topai_healthcare_validator instead). Stateless, read-only, idempotent lookup.

NameRequiredDescriptionDefault
drug_nameYesCommercial brand name or generic molecule name of the pharmaceutical product (e.g., 'Humira', 'Keytruda', 'Ozempic', 'Eliquis').
jurisdictionNoRegulatory patent jurisdiction to query: 'US' (FDA Orange Book), 'EP' (European Patent Office), or 'ALL' (default: 'US').

TDQS

A4.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, openWorldHint and destructiveHint=false, and the closing line 'Stateless, read-only, idempotent lookup' largely restates them, earning no additional credit. The description does add data-provenance context (FDA Orange Book, European exclusivity), but says nothing about rate limits, auth requirements, or data freshness for an open-world external lookup.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the returned data, followed by usage scoping and the safety profile. Every sentence carries distinct information and there is no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description enumerates the return payload (cliff dates, ingredient metadata, exclusivity expirations, threat levels), so return semantics are covered. Inputs, exclusions, and safety profile are all present; nothing needed to invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the enum on jurisdiction is fully documented in the schema, so the baseline is 3. The description does not add format, defaulting, or matching semantics (e.g., brand vs. generic resolution) beyond what the schema already states.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Retrieves) and a precisely scoped resource set: patent cliff dates, active ingredient metadata, Orange Book/EP exclusivity expirations, and generic entry threat levels for a named drug. This is clearly distinguishable from every sibling, and it even names the healthcare_validator it is not.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly names the use cases (life-sciences competitive intelligence, LOE forecasting, pharma IP analysis) and gives an exclusion with a redirect: 'Do not use for verifying individual physician NPI medical licenses (use topai_healthcare_validator instead).' Both the when and the when-not are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_polymarket_arbitrageA
Read-onlyIdempotent

Computes prediction market implied probability, mispricing delta, expected value (EV%), and fractional Kelly criterion position sizing between a Polymarket contract price and a reference benchmark probability. Use for quantitative prediction market analysis, odds comparison, and risk-adjusted bankroll allocation. Do not use for standard VAT or invoice accounting (use topai_math_fact_checker instead). Stateless, read-only, idempotent quantitative calculator.

NameRequiredDescriptionDefault
bankroll_usdNoOptional total capital bankroll in USD to compute exact dollar stake allocation (e.g., 10000).
polymarket_priceYesCurrent Polymarket YES share price expressed as a decimal between 0.01 and 0.99 (e.g., 0.58 for 58 cents).
reference_probabilityYesEstimated true probability or sportsbook consensus probability (0.01 to 0.99, or 1 to 99).

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, and destructive=false, and the description largely restates these ('read-only, idempotent'). It adds only marginal new behavioral context ('Stateless') and doesn't discuss precision, rounding, or boundaries of the Kelly output — acceptable given a pure calculator but not rich.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the core computation, then usage, then the exclusion. No filler; every clause carries routing or scope information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description usefully enumerates the return values (implied probability, mispricing delta, EV%, Kelly sizing), which is the key missing structured info an agent would need. It stops short of describing output format or edge-case handling, keeping it from a 5.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so each of the three parameters (including bankroll_usd and the 0.01–0.99 ranges) is already documented. The description connects bankroll to 'fractional Kelly criterion position sizing' but adds no format or edge-case detail beyond the schema, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb 'Computes' plus a precise resource set (implied probability, mispricing delta, EV%, fractional Kelly sizing) between two named inputs. An agent can distinguish this from every sibling, none of which are pricing/odds calculators.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit when-to-use ('quantitative prediction market analysis, odds comparison, risk-adjusted bankroll allocation') and when-not ('Do not use for standard VAT or invoice accounting'), naming the alternative tool. Routing is fully specified.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_prompt_shieldA
Read-onlyIdempotent

Scans user prompts or untrusted external text in <1ms to detect adversarial prompt injections, jailbreak attempts, toxic payloads, and PII leakage. Use as a pre-inference security guardrail before passing untrusted user input or scraped web content to an LLM. Do not use for compressing safe prompts (use topai_token_slimmer instead). Stateless, read-only, idempotent security evaluation returning a boolean safety verdict and threat score (0.0 to 1.0).

NameRequiredDescriptionDefault
promptYesRaw user input, system prompt fragment, or untrusted external document text to audit for injection and PII risks.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive), and the description adds meaningful context beyond them: sub-millisecond latency, statelessness, and the return shape (boolean verdict plus 0.0-1.0 threat score). It does partially restate the read-only/idempotent traits that annotations already carry, which keeps it from a 5, but the added latency and return-format detail is genuinely useful.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four tight sentences, front-loaded with the core action and threat list, then usage, then the anti-pattern with the alternative, then the behavioral/return summary. Every sentence earns its place with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Although there is no output schema, the description explicitly states what is returned (boolean safety verdict and a 0.0-1.0 threat score), and annotations cover the safety profile. An agent has everything needed to call this correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and there is a single required parameter, so the schema fully documents the input. The description's mention of prompt/system-fragment/external-document text mirrors the schema description rather than adding new semantics; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb (scans) and resource (user prompts / untrusted external text) and enumerates the exact threats detected (prompt injections, jailbreaks, toxic payloads, PII leakage). It explicitly distinguishes itself from the sibling topai_token_slimmer, so an agent can route correctly without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit when-to-use (pre-inference guardrail before passing untrusted input or scraped content to an LLM), when-not-to-use (compressing safe prompts), and names the alternative tool by name. Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_semantic_cacheA
Idempotent

Performs sub-5ms semantic vector cache lookups ('get') and completions storage ('set') for LLM prompts to eliminate redundant inference latency and token spend. Use before invoking an expensive upstream LLM to check if an equivalent prompt was already answered, or right after generation to cache the completion. Do not use for compressing raw text length within a single uncached prompt (use topai_token_slimmer instead). Idempotent, non-destructive edge cache operation.

NameRequiredDescriptionDefault
actionYesOperation mode: 'get' to retrieve a semantically matching cached response, or 'set' to store a new prompt-response pair.
promptYesThe user prompt or query string used as the semantic lookup key.
responseNoThe LLM completion text to persist in cache (required when `action` is 'set', omitted when `action` is 'get').

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare idempotentHint=true, destructiveHint=false, openWorldHint=false and readOnlyHint=false, so the safety profile is largely covered. The description nonetheless adds real context: the sub-5ms latency claim, the 'edge cache' deployment location, and which mode performs reads vs writes. It omits auth requirements, cache TTL/eviction behavior, and miss semantics, so it is strong but not exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action, then usage, then the sibling exclusion, with no filler sentences. The trailing 'Idempotent, non-destructive edge cache operation' partially restates what the annotations already carry, which is the only mild redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With full param coverage and annotations present, the definition covers purpose, usage, exclusion, and behavior adequately for a 3-param tool. Since there is no output schema, the one remaining gap is return semantics — what 'get' yields on a cache miss and what 'set' returns on success — but the 'check if an equivalent prompt was already answered' phrasing partially implies the hit/miss model.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents action, prompt, and response fully, including the get/set enum and the response-required-only-on-set constraint. The description restates the get/set duality without adding format or syntax detail beyond the schema, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb set ('get' lookups, 'set' storage) against a named resource (semantic vector cache for LLM prompts) with a concrete performance framing (sub-5ms). It also explicitly names the sibling it is not (topai_token_slimmer), so an agent can distinguish it without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use instructions ('before invoking an expensive upstream LLM' to check for an equivalent prompt, 'right after generation' to cache the completion) and a concrete when-not with the alternative named ('compressing raw text... use topai_token_slimmer instead'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_techstack_fingerprintA
Read-onlyIdempotent

Fingerprints a web domain in <50ms across 70+ technology signatures to identify its CMS, e-commerce engine, analytics stack, CDN, and frontend frameworks. Use when qualifying technical architecture or detecting whether a site runs Shopify, Stripe, HubSpot, Next.js, or Cloudflare. Do not use when you need general workforce size or executive firmographics (use topai_company_enrichment instead). Stateless, read-only, idempotent inspection.

NameRequiredDescriptionDefault
domainYesTarget website hostname or root domain to fingerprint (e.g., 'gymshark.com', 'vercel.com').

TDQS

A4.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, so the closing 'read-only, idempotent' phrase largely restates structured data. The description does add genuine context though: '<50ms' latency, 'Stateless', and the signature count. It stops short of covering failure behavior (unknown domains), rate limits, or output shape, which keeps it at a solid but not rich 3.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core purpose and performance claim, then usage and exclusion, all in tight sentences. The trailing 'Stateless, read-only, idempotent inspection' fragment mildly duplicates the annotations, a minor waste in an otherwise efficient definition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description usefully implies the return content by enumerating the technology categories it reports. It is complete enough for a stateless single-input inspection tool, though it never states the output structure or error handling.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single 'domain' parameter is already documented with examples ('gymshark.com', 'vercel.com'). The description adds no format or normalization guidance beyond what the schema provides, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Fingerprints a web domain') with scope (70+ signatures) and enumerates what it identifies (CMS, e-commerce, analytics, CDN, frontend frameworks). It also names the sibling it is not for, letting an agent distinguish it from topai_company_enrichment without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit 'Use when' triggering condition, concrete detection examples (Shopify, Stripe, HubSpot, Next.js, Cloudflare), and a 'Do not use when' exclusion that routes to the specific alternative topai_company_enrichment. When/when-not/alternative are all present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_token_slimmerA
Read-onlyIdempotent

Compresses bloated HTML, JSON, or plain-text payloads losslessly to reduce LLM input token consumption by 30% to 70% without losing semantic meaning. Use before sending large JSON API responses, logs, or RAG chunks into an LLM context window. Do not use for converting a live URL directly into Markdown (use topai_web_to_markdown instead) or for caching full prompt completions (use topai_semantic_cache instead). Stateless, read-only, idempotent compression.

NameRequiredDescriptionDefault
formatNoPayload syntax format: 'html', 'json', or 'text' (default: 'text').
contentYesRaw HTML, JSON, or text payload string to compress for LLM context optimization.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnlyHint, idempotentHint and destructiveHint=false, yet the description adds genuinely new behavioral context: that compression is lossless and preserves semantic meaning, and that the tool is stateless. The trailing 'read-only, idempotent' phrasing largely restates the annotations, so it is not fully additive, but the lossless/stateless claim is real disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tightly packed sentences in a clear order: what it does and why, when to use it, when not to. No filler, no restating of the title, and the highest-value information (lossless 30-70% reduction) is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter tool with no output schema and full annotation coverage, the definition covers purpose, usage, exclusions and safety properties well. The one mild gap is the return shape — it never states that the output is the compressed payload string (or how the reduction is reported), which an agent must infer.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with both parameters documented including the format enum and its default. The description adds no syntax, size limits, or format-specific handling beyond what the schema already states (HTML/JSON/text is essentially the enum), so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (compresses) and resource (bloated HTML, JSON, or plain-text payloads), quantifies the benefit (30%-70% token reduction), and asserts the key property (lossless, semantics-preserving). It explicitly differentiates itself from topai_web_to_markdown and topai_semantic_cache, so an agent can distinguish it from siblings without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use trigger ('before sending large JSON API responses, logs, or RAG chunks into an LLM context window') and two explicit when-not-to-use cases that name the correct alternative sibling for each. This is exactly the routing guidance an agent needs.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

topai_web_to_markdownA
Read-onlyIdempotent

Converts any public HTTP/HTTPS webpage into clean, ad-free, token-optimized Markdown with document metadata. Use when an agent needs to read article text, documentation, or web pages without HTML/DOM clutter before RAG indexing or summarization. Do not use for capturing visual pixel screenshots (use topai_headless_screenshot instead) or running multi-site keyword searches (use topai_ai_web_search instead). Stateless, read-only, idempotent execution in <30ms.

NameRequiredDescriptionDefault
urlYesFull public HTTP or HTTPS URL of the target webpage to convert into Markdown (e.g., 'https://stripe.com/docs'). Must not point to private/loopback IP ranges.
include_linksNoSet to true to preserve Markdown hyperlinks `[text](url)` in the extracted output, or false to strip all links for maximum token compression (default: true).

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, non-destructive, and open-world, so safety is covered; the description adds latency (<30ms), statelessness, and the fact that document metadata accompanies the output. It does repeat read-only/idempotent from the annotations, which caps it below the top band, but the timing and output-composition details are genuine additions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the purpose before routing to alternatives, then a terse performance line. It is efficient, though the 'stateless, read-only, idempotent' clause partially restates the annotations.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter stateless conversion tool with no output schema, the description covers purpose, alternatives, exclusions, latency, and the presence of document metadata. Only minor gaps remain (e.g., handling of non-HTML content or extraction failures), so it is nearly complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and both parameters carry full descriptions (URL validity/private-IP constraint, include_links default), so the schema does the heavy lifting. The description adds no parameter-level detail beyond that, which is the correct baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (converts), a precisely scoped resource (any public HTTP/HTTPS webpage), and the output form (clean, ad-free, token-optimized Markdown with metadata). An agent can distinguish it from every sibling without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use context (reading article text, documentation, web pages before RAG indexing or summarization) and names two concrete alternatives with the conditions that select them: `topai_headless_screenshot` for pixel captures and `topai_ai_web_search` for keyword searches. Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 19 tool updatesv1.0.2
    • First observedtopai_agentvision_crop
    • First observedtopai_ai_web_search
    • First observedtopai_b2b_data_leads
    • First observedtopai_company_enrichment
    • First observedtopai_disposable_email_shield
    • First observedtopai_google_ai_overview
    • First observedtopai_headless_screenshot
    • First observedtopai_healthcare_validator
    • First observedtopai_invoice_extractor
    • First observedtopai_math_fact_checker
    • First observedtopai_mcp_hub_registry
    • First observedtopai_openapi_flattener
    • First observedtopai_pharmapatent_watcher
    • First observedtopai_polymarket_arbitrage
    • First observedtopai_prompt_shield
    • First observedtopai_semantic_cache
    • First observedtopai_techstack_fingerprint
    • First observedtopai_token_slimmer
    • First observedtopai_web_to_markdown

TDQS

A4.3/5.0

Scored across 19 tools

Disambiguation5/5

Every tool has a clearly distinct purpose, reinforced by explicit 'Do not use ... instead' cross-references in descriptions. Overlaps are minimal and well-handled (e.g., search vs markdown conversion vs AI Overview extraction).

Naming Consistency5/5

All tools follow a consistent topai_ prefix and snake_case naming pattern. The convention is predictable and uniform across the set.

Tool Count4/5

19 tools is slightly above the ideal 3-15 range, but appropriate for a 'universal hub' meant to aggregate many specialized utilities. Each tool earns its place; no obvious filler.

Completeness4/5

The hub covers a broad range of stateless read-only utilities (web, search, security, data enrichment, text compression, math, vision). While no single domain has full CRUD, the set is coherent for a utility hub and includes a registry tool for discovering more.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to dynamically discover and invoke containerized tools that can be registered at runtime without redeployment. Built on Cloudflare Workers with scale-to-zero containers for secure, isolated tool execution.
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI assistants to control a web browser through tools for navigation, clicking, typing, and capturing screenshots using Cloudflare Workers. It allows models to perform complex web automation tasks and interact with live websites through a set of 14 specialized tools.
    5,313 npm
    Apache 2.0
  • F
    license
    Not graded
    quality
    F
    maintenance
    Provides 63 production-ready API tools for AI agents, including web scraping, AI generation, crypto data, OCR, image generation, audio transcription, text-to-speech, email, and domain lookup.
    3
    -