"A server for finding diagrams" matching MCP tools:

• feed_sourcesA

  data-breach-detectorA

  List the public disclosure feeds this server aggregates, how many disclosures are cached per source, each source's newest item and an honest staleness flag, plus cache ages. Takes no arguments. Also states the scope plainly: public feeds only — no .onion access, no arbitrary fetching or crawling, no credential or PII output. Check this first if another tool's answer looks thin: a stale live feed is a finding, not background noise.

  ConnectorNo auth

• explain_findingA

  MalinoisA

  Returns the plain-language meaning and step-by-step fix for one Malinois finding. Use it while helping the user fix an issue reported by scan_app, or when they ask what a finding means. Pass the rule_id exactly as scan_app returned it. Read-only, no network, instant.

  ConnectorNo auth

• get_corpus_coverageA

  SRI — MCP Server InspectorA

  No arguments. Returns how many MCP servers have been read at source level, and the share of them with each category of finding (credential access, network egress, install-time execution, prompt-injection surface). Use this to judge whether checking a specific server is worth it before you look one up. It reports aggregate counts only - no per-server findings, and no verdict about any individual server.

  ConnectorNo auth

• search_diagramsA

  VectreeA

  Search Vectree's library of ~95,000 interactive concept diagrams by meaning, not keywords. Vectree explains how things work as zoomable, labelled schematics — each diagram breaks a topic into nodes you can read or drill into. Use this when the user wants a diagram, a visual explanation, a systems overview, or a map of how the parts of something fit together. Describe the topic in natural language; the search is semantic, so a full question works better than a bare keyword. Results are ranked by how closely they match and by the quality of the model that generated them. Each result carries a slug — pass it to `get_diagram` for the full content of one diagram. Only public, already-generated diagrams are searched. Nothing is generated on demand, so a topic with no match simply has no diagram yet.

  ConnectorNo auth

• createA

  WhimsicalA

  Create content in Whimsical — diagrams, folders, or boards. Pick by intent: source is a sketch, hand-drawn note, photographed whiteboard, or any layout where absolute positions matter → type:'board' (pass data.items for one-shot creation; MUST call how_to('board') first). Source describes semantic structure (steps, hierarchy, sequence, UI) → flowchart, mindmap, sequence_diagram, or wireframe — these auto-layout. Mind maps: pass data.markdown directly (no how_to needed). Sequence diagrams: use data.diagram with arrow syntax (A -> B: msg) — no how_to needed for basic diagrams. Flowcharts: MUST call how_to('flowchart') first for the structured format. Wireframes: MUST call how_to('wireframe') first. For documents, use `doc_create`.

  ConnectorOAuth

• create_whiteboard_diagramA

  AgileHeroA

  Draw a diagram (flowchart, process, dependency graph) on a whiteboard from a semantic graph — nodes, edges, optional groups, NO coordinates: the server does layered top-to-bottom layout with native sizes and returns the created element uids keyed by your node ids. Placed below existing board content. Transactional (all-or-nothing, one realtime event). Max 20 nodes — split bigger flows into two diagrams. Keep shapes plain (rectangle) unless the semantics demand one (diamond = decision, stadium = start/end, cylinder = data store). Edit the result with update_whiteboard_elements — the layout never runs again. Requires a Pro or trial workspace.

  ConnectorNo auth

• render_diagramA

  Diagrams MCPA

  Render a mingrammer/diagrams Python snippet to PNG and return the image. The code must be a complete Python script using `from diagrams import ...` imports and a `with Diagram(...)` context manager block. Use search_nodes to verify node names and get correct import paths before writing code. Read the diagrams://reference/diagram, diagrams://reference/edge, and diagrams://reference/cluster resources for constructor options and usage examples. Args: code: Full Python code using the diagrams library. filename: Output filename without extension. format: Output format — ``"png"`` (default), ``"svg"``, or ``"pdf"``. download_link: If True, return a temporary download URL path (/images/{token}) that expires after 15 minutes; if False, return inline image bytes. Defaults to True (URL) — set ``DIAGRAMS_INLINE_DEFAULT=true`` on the server to flip the default. SVG/PDF and PNGs larger than the inline limit always use a download link.

  ConnectorNo auth

• publish_essayA

  TenjinA

  Create + publish a piece. Pass a SIGN-IN-WITH-X header value you built and signed locally, plus the post fields. Returns the created post + public url; the server never holds your keys. Sell the observation, not the genre. Title the concrete finding in present tense with the specifics that carry it (names, numbers, dates), not the format ("playbook", "roundup"). Open the excerpt and first lines with the finding, not a tease. Publish with the answer card FILLED (questions or tasks, scope, exclusions, provenance): cacheEligibleMissing names legacy public-preview gaps; card completeness never changes rank or candidacy. Mint the header WITHOUT a fetch loop (SIWX here is CLIENT-driven, so do NOT use wrapFetchWithSIWx, which waits for a challenge Tenjin never sends): `encodeSIWxHeader({ ...info, address, signatureScheme: 'eip191', signature })` over `createSIWxMessage(info, address)` from @x402/extensions/sign-in-with-x, with a CAIP-122 `info` whose `domain` is this site's host and `nonce` is client-minted single-use. Full worked example in /llms.txt.

  ConnectorNo auth

• create_contextA

  Context — ctxt.ioA

  Share text, markdown, code, or HTML as an auto-expiring ctxt.io link. For visual output (styled reports, tables, charts, diagrams) prefer format=html with self-contained HTML: inline CSS and inline SVG render fully; <script> is stripped server-side and JavaScript never runs, so keep it static. Free expiries: 5m, 30m, 1h (default), 8h, 1d — these return the share URL immediately. ttl=30d and the Pro options (name, password) cost $1 one-time: the link is created in a pending state and the result includes a payment_url a human can open in a browser to complete checkout (platforms enrolled for agentic payments receive an acp block instead and can pay programmatically); until payment the link lives 1 day without Pro features. Anyone with the link can read it. The returned delete_token authorizes deletion via delete_context — keep it private.

  ConnectorNo auth

• search_learning_pathsA

  VectreeA

  Search Vectree's curated learning paths — ordered sequences of diagrams that teach a subject from the ground up, one step at a time. Vectree explains how things work as zoomable, labelled schematics. A learning path strings a set of those diagrams into a syllabus, so a reader moves from the fundamentals of a subject to its harder parts in a deliberate order. Use this when the user wants to *learn*, *study* or *get started with* a whole subject. When they want one specific topic explained instead, use `search_diagrams` — that searches individual diagrams rather than sequences. Describe the subject in natural language; the search is semantic, so a full sentence works better than a bare keyword. Each result carries a slug — pass it to `get_learning_path` for the full ordered sequence. Only published paths are searched. Nothing is generated on demand, so a subject with no match simply has no path yet.

  ConnectorNo auth

• dcl_evaluate_walletA

  DCL Trust Oracle — AI/LLM Output Audit (x402 MCP)A

  POST-ACTION Wallet Secret Guardian ($0.02). Scans for BIP-39 seed phrases (12 or 24 consecutive wordlist words), raw hex or WIF-format private keys, Ethereum/Bitcoin wallet addresses, and API keys/bearer tokens appearing near wallet/custody/signing terminology. Any finding results in NO_COMMIT — wallet secrets have no safe threshold, unlike other DCL evaluators. Returns a `sanitized_output` with all matches redacted (null if nothing was found) and a masked `redacted_sample` per finding — the real value is never returned or stored server-side.

  ConnectorNo auth

• get_finding_remediationA

  RoutebaseA

  Get remediation advice for a single finding as GitHub-flavored markdown. When AI Assist is enabled and within budget this is a suggestion written for this exact finding; otherwise it falls back to the static guidance-library text and says so in 'source'. Unlike the other reads this one can spend AI budget, which is why it is a separate tool. Use this for advice on one finding; for the whole library use list_security_guidance. Requires project context.

  ConnectorAPI key

• doc_createA

  WhimsicalA

  Create a Whimsical document. Markdown content — headings, lists, links, code blocks. For diagrams, boards, or folders, use `create`.

  ConnectorOAuth

• withdraw_findingA

  northreachB

  Retract support for a finding you authored, with a reason. Original content remains visible and labeled withdrawn. Identical retries are safe; this does not claim the finding is disproven.

  ConnectorNo auth

• render_mindmapA

  MindMapA

  Render an interactive MCP app mind map when the user needs hierarchical structure shown visually instead of as prose. Use it for breaking down ideas, plans, study material, or systems into a root topic with nested branches; do not use it for tables, flowcharts, Mermaid/Graphviz diagrams, or plain text lists. Input `mindmap_markdown` must be a clean markdown tree with one `#` root heading and 2-space-indented bullet nesting. If the user gives prose, first reshape it into that hierarchy, then call this tool.

  ConnectorNo auth

• cyanheads_describe_entryA

  cyanheads-mcp-serverA

  Return the description and install snippets for a named tool or server. For tools: the description and the server it belongs to. For servers: local (stdio, via npx) install snippets for every published server, plus remote (HTTP) connection snippets when a hosted endpoint exists — for every supported client, or one client via the client parameter.

  ConnectorNo auth

• list_skillsA

  mcpA

  START HERE for any open-ended request. Lists the task playbooks this server supports — systematic learning from bookmarks, organising into themes, cleaning up, X-list intelligence, exporting data out, finding a half-remembered save, digests, and diagnosing sync. Each names when to use it; call get_skill for the exact tool sequence.

  ConnectorNo auth

• read_pasteA

  xi.peA

  Fetch the text of an existing xi.pe paste -- including one a user or another agent just handed you. Accepts either the code or the full URL. If you pass the URL on to a human and the text is Markdown, append ?md: it renders headings, tables and ```mermaid diagrams.

  ConnectorNo auth

• goal-record-iteration-certificateA

  Planner (proof-of-done)A

  Record one completed LeanSolver iteration against the current tracked contract. Result artifact refs must resolve to existing evidence or goal_attachment rows owned by this goal. Rework iterations accept only registered finding IDs and require a separate judged evidence row as repeatCheckEvidenceId; Planner derives the repeat verdict server-side. Only certificates admitted here may affect the numeric implementation rework rate.

  ConnectorNo auth

• goal-register-iteration-findingA

  Planner (proof-of-done)A

  Register an immutable LeanSolver finding against the currently tracked goal contract. subjectRefs must be goal-scoped refs of kind goal, criterion, or assumption. Returns the server-generated finding id to pass later as addressesFindingId; rejects stale contract tracking.

  ConnectorNo auth

• goal-record-iteration-certificateA

  Planner MCP — provable "done" for AI agentsA

  Record one completed LeanSolver iteration against the current tracked contract. Result artifact refs must resolve to existing evidence or goal_attachment rows owned by this goal. Rework iterations accept only registered finding IDs and require a separate judged evidence row as repeatCheckEvidenceId; Planner derives the repeat verdict server-side. Only certificates admitted here may affect the numeric implementation rework rate.

  ConnectorNo auth