"A server for finding earthquake-related information" matching MCP tools:

• explain_findingA

  MalinoisA

  Returns the plain-language meaning and step-by-step fix for one Malinois finding. Use it while helping the user fix an issue reported by scan_app, or when they ask what a finding means. Pass the rule_id exactly as scan_app returned it. Read-only, no network, instant.

  ConnectorNo auth

• get_tier1_recommendationsA

  Tier1 IT AssessmentA

  Maps only stable Tier1 finding identifiers to approved Tier1 services and public resources. Call after a Tier1 score or email-domain check. Do not submit prose, URLs, customer information, or invented identifiers. This tool performs no arbitrary fetching, makes no contact request, changes nothing, and stores nothing.

  ConnectorNo auth

• edgar_full_text_searchA

  US Economic, SEC EDGAR & On-Chain Data (x402)A

  Full-text search across all SEC EDGAR filings since 2001 for a keyword or phrase. Wraps EDGAR's own full-text search index, so it covers every filer and form type, not just a single company. Useful for finding who is disclosing a particular risk, technology, litigation, or event across the entire market. When to use: cross-company research ("who is disclosing AI-related risk factors"), finding filings that mention a specific term, litigation or regulatory tracking. When NOT to use: you already know the company (use edgar_filings_feed, which is company-scoped and cheaper), or you need results from before 2001 (EDGAR full-text search does not cover that far back). Args: - query (string, required): search text. Wrap an exact phrase in double quotes, e.g. "\"material weakness\"". - forms (string[], optional): restrict to form types, e.g. ["10-K"]. - dateFrom (string, optional): ISO start date (YYYY-MM-DD). - dateTo (string, optional): ISO end date (YYYY-MM-DD). - limit (integer, optional, default 10): maximum hits to return (1-50). Returns structuredContent: { "query": "material weakness", "totalMatches": 10000, "totalIsApproximate": true, "count": 2, "hits": [ { "id": "0001193125-26-123456:doc.htm", "entity": "Example Corp.", "form": "10-K", "filedAt": "2026-03-01", "cik": "0000320193" } ], "source": "https://www.sec.gov/edgar" } "totalMatches" is a lower bound and "totalIsApproximate" is true once EDGAR's own count exceeds its display cap (10,000) — narrow with forms/dateFrom/dateTo for a precise count.

  ConnectorNo auth

• list_findingsA

  EnokiA

  List security/safety findings for your workspace, most recent first. Optionally filter by status, target model, minimum severity, or a specific run. Returns a compact summary; call get_finding for the repro detail of any one finding. On a plan that withholds a finding's proof, category reads '[redacted]' and get_finding returns the same — the finding and its severity are real, the evidence is withheld. Paginated: 200 findings per page (max 200). The result carries total_matched and, when there is more, next_cursor: pass it back as 'cursor' with the same filters (it is bound to them) to read the next page, until it is absent.

  ConnectorOAuth

• createFindingA

  MalloryA

  Create one or more findings in Mallory. A finding is a durable record that a specific problem exists on a specific asset belonging to the caller's own organization — not a chat message and not a note to yourself. It is visible in the Mallory UI to everyone in that organization, and nothing on this server deletes one: a finding filed by mistake can only be marked dismissed with updateFinding. WRITES IMMEDIATELY. There is no draft, no preview and no confirmation step — calling this tool IS the write. Only call it when the user has asked, in so many words, for findings to be filed in Mallory ("create a finding for that", "file these"). Finishing an investigation is not permission to file its results: report them and let the user decide. WHAT TO SEND - definition_slug must ALREADY EXIST in the catalog. Look one up with the queryApi tool, path "/v1/finding_definitions" (filter by category or severity to narrow). Never invent a slug, and never substitute a near-match for one that was rejected — that files the wrong kind of finding. - One finding per problem per asset. Five misconfigured buckets are five findings sharing a definition_slug with five different asset_identifier values, not one finding listing five buckets. Send the whole batch in ONE call (max 25): each is created independently, so one duplicate does not block the rest. - asset_type is a provider.service.object value (e.g. aws.s3.bucket, aws.iam.role, github.repo, azure.storage.account), or "generic" when nothing fits. Legacy underscore forms like "s3_bucket" are rejected. - summary / body / remediation are markdown, and are read by people who were not in your conversation: what is wrong, how you established it, and the actual fix. - evidence is one entry per thing you actually OBSERVED — the query and what it returned, the endpoint and its status, the file and the matching line. Three observations are three entries. Never write evidence for something you inferred rather than observed; lower confidence and say so in body instead. ENUM VALUES ARE CASE-SENSITIVE AND EACH FIELD HAS ITS OWN SET. severity is UPPERCASE (CRITICAL, HIGH, MEDIUM, LOW, INFO) and optional — omit it and the definition's own default applies, which is usually right; override only when this instance is genuinely worse or milder than the type normally is, and say why in body. confidence is lowercase (low, medium, high). Status is not settable here: a finding is created open, and status values are lowercase (see updateFinding). OUTCOMES come back per finding, in `created` and `failed`: - DUPLICATE — an open finding already covers that asset, and `existing_finding_uuid` names it. Say so and move on. Do NOT re-word the title and retry; to change the one that exists, call updateFinding with that uuid. - UNKNOWN_DEFINITION — the slug is not in the catalog. Look up a real one; do not guess a neighbouring slug. - INVALID — core rejected a field, most often asset_type. Fix that field, not the slug. - INVALID_ASSET_IDENTIFIER — asset_identifier names no asset (a placeholder such as "unknown", or a bare word such as a tool or data-source name, with asset_type "generic"). Nothing was written. Use the real affected asset from the source data (host:port, hostname, URL, account, repository); never invent one. - PLAN_LIMIT — findings are not included in this tenant's plan. The request was fine, nothing is broken and nothing was written: tell the user, pass on the upgrade link if the outcome carries one, and do not retry or reach for another tool to file it. `list_url` is null outside the Mallory chat app — there is no conversation for an MCP call to scope a list to. Read a created finding back with getFinding using the uuid in `created`, or browse the tenant's findings with listFindings.

  ConnectorAPI key

• updateFindingA

  MalloryA

  Update ONE existing Mallory finding in place — its status, severity, confidence, title, summary, body, remediation, qualifier or asset_details. Use it when new information changes an already-filed finding: the problem was fixed, it turned out not to apply, a vulnerability proved reachable, corroborating intel changes how bad it is. WRITES IMMEDIATELY to the caller's own organization's data, and the result is visible in the Mallory UI to everyone in that organization. There is no preview and no confirmation step — calling this tool IS the write. Only call it when the user has asked for the change. - uuid identifies the finding. Get it from listFindings or getFinding, or from a createFinding DUPLICATE outcome's `existing_finding_uuid`. Never construct or guess one. - ONE finding per call. To change status or severity across a SET of findings you can only describe ("dismiss all the unrotated-secret findings", "mark everything on foo/bar medium"), use bulkUpdateFindings — do NOT loop this tool over a selection. - The finding's identity — definition_slug, asset_type, asset_identifier — cannot be changed. A different problem, or the same problem on a different asset, is a new finding (createFinding). - body REPLACES the stored text rather than appending to it. To add to a finding, read the current text first with getFinding and send the combined text, or the prior detail is lost. There is no evidence field on update: new evidence goes into body as prose. - qualifier is part of core's open-finding dedupe key, so changing it can collide with another open finding on the same asset (CONFLICT). In user-facing status messages, use "fixed" and "mark as fixed" consistently. ENUM VALUES ARE CASE-SENSITIVE AND EACH FIELD HAS ITS OWN SET. severity is UPPERCASE (CRITICAL, HIGH, MEDIUM, LOW, INFO). status is lowercase with exactly three values: open, fixed, dismissed — "resolved", "closed" and "assigned" are not statuses, and neither are the resolution reasons (false_positive, accepted_risk, not_applicable, duplicate, fixed_externally, other), which belong to a separate field this tool does not set. Use "fixed" when the problem was remediated and "dismissed" when it is accepted or not applicable. Setting status back to "open" is allowed but unusual — the product has no reopen button — so confirm the user really means to reopen the finding. OUTCOMES: either ok:true with the updated finding, or ok:false with a code — NOT_FOUND (no such finding in this tenant: do not retry, re-read the uuid), CONFLICT (an open finding already occupies that identity), INVALID (a rejected field, or no fields to change), PLAN_LIMIT (findings are not included in this tenant's plan — the request was fine, nothing is broken, nothing was written: say so and do not retry).

  ConnectorAPI key

• recommendA

  sellaA

  Ranked related listings with per-item reasons. Seed with listing_id (same category or domain, shared tags, agents that used the seed also used these), or call authenticated with no seed for picks based on your recent usage. Not a keyword search: use search_catalog for that.

  ConnectorNo auth

• get_nursing_diagnosisA

  CarePlanKit — Nursing Care PlansA

  Get care plan material for a specific NANDA-style nursing diagnosis: its definition, related factors (the "related to" clause), defining characteristics (the "as evidenced by" clause), SMART goals, interventions, and the conditions where it is a priority. Use when a nursing student asks about a diagnosis rather than a disease, for example "risk for infection", "acute pain", "impaired gas exchange", "ineffective coping" or "risk for falls", or asks how to write a three-part diagnosis or an AEB statement. Educational reference, not medical advice.

  ConnectorNo auth

• fetchA

  MaplithA

  Read one map document by the id a search result handed you. Ids: object:<name>, finding:<id> or finding:<finding_key> (stable across rescans), process:<object type>, metric:<name>, statement:<id> (run-scoped: search again after a rescan), playbook:<id>. It is the second half of the search/fetch pair that connector clients such as ChatGPT require, and returns id, title, text, url and metadata with the direct tools' data flattened to text. If your client can call the direct tools, use them instead (structured, no search first): get_object for an object you can name, get_process for a process, get_metric for a metric, list_findings for findings by status. Use fetch for a result search handed you, or a finding_key.

  ConnectorOAuth

• refresh_patent_familyA

  LightbringerA

  Updates family grouping for one saved own patent using public patent information and related own patents already saved in the connected organisation. Useful for an apparent missing relationship, an unfinished family update, or a requested check against newer public information. Imports already attempt family grouping automatically; routine refresh after import is unnecessary. Related publications must be imported separately before they can be included. Repeating import_patent only retrieves its saved outcome. Existing family relationships are retained, so refresh cannot remove incorrect relationships. Patent text, PDFs, images, legal status and own/competitor classification are unchanged. Competitor records are not supported. Returns counts of added and existing relationships, unresolved or ambiguous matches, and failures, with warnings. It does not return a list of family members. A null links result means the update did not finish; repeating the refresh attempts it again. Results do not establish complete family coverage. Where the organisation is charged in credits, a refresh costs a patent search and is refused once credits are spent.

  ConnectorOAuth

• review_sceneA

  Showoff.dev – AI Mockup GeneratorA

  Runs the full art-direction review of a project: collisions (frame by frame for films), angles, floating versus resting devices, text overlap, cropping and contrast, composition and color. Use it while building to see every finding, including warnings edit_scene saves anyway; use finish once at the end for the final check, and render_preview to look at the result. Read-only. Every finding has a severity and a fix with ready-to-send edit_scene ops. Returns the findings, errors first, and whether the scene passes.

  ConnectorAPI key

• review_sceneA

  Showoff.dev – AI Mockup GeneratorA

  Runs the full art-direction review of a project: collisions (frame by frame for films), angles, floating versus resting devices, text overlap, cropping and contrast, composition and color. Use it while building to see every finding, including warnings edit_scene saves anyway; use finish once at the end for the final check, and render_preview to look at the result. Read-only. Every finding has a severity and a fix with ready-to-send edit_scene ops. Returns the findings, errors first, and whether the scene passes.

  ConnectorAPI key

• relate_repositoriesA

  AnkraB

  State that two repositories are related for AI code review, so a review of either may read the other. Organisation admins only. Use it for what the deploy graph cannot connect - a client and the API it calls, a shared library, a repository outside Ankra's deploy; applications installed on the same cluster are already related with no statement. The relationship is symmetric, so there is no mirror to add, and re-stating a pair changes nothing. Both repositories must be ones the named GitHub App installation can reach: Ankra checks that installation's live repository listing and refuses the pair otherwise, because the review fetches a related repository with that installation's own token. Returns the stored relationship.

  ConnectorOAuth

• create_security_dispositionA

  AnkraB

  Record a disposition for a finding. For a cluster vulnerability: acknowledge it (security.triage) or accept the risk (security.manage), scoped to the add-on the occurrence is attributed to, with a reason, an optional review deadline and whether it lapses when a fix ships. Every occurrence the selector matches is dispositioned at once - run preview_security_disposition first and put its match count in the proposal. Needs an active occurrence with high-confidence add-on attribution; one without is refused. For a Semgrep or Checkov finding that blocks the Ankra Pipelines image gate (scope repository_code, security.manage): record it as false_positive or accepted_risk (accepted_risk needs expires_at within a year), with a reason; the gate stops blocking on that rule in that file and names the disposition on every run it lets through, and the finding stays scanned and recorded. Use this for a reviewed false positive instead of adding an inline nosemgrep. A CRITICAL finding is refused. Reversible: revoke_security_disposition reopens the findings.

  ConnectorOAuth

• update_ci_finding_statusA

  MarcoraA

  Update the status of a Context Intelligence finding — acknowledge it, dismiss it, or mark it resolved. When to use: the user has reviewed a finding (via list_ci_findings / get_ci_finding) and tells you their decision: "dismiss that one", "mark it handled", "acknowledge it for now". Status meanings: - acknowledged: seen, kept on the radar (still open). - dismissed: not relevant / won't fix — removes it from the actionable queue. - resolved: the underlying issue was fixed (records who resolved it and when). NOTE: this records the resolution only — it does NOT apply the suggested fix to the context item; applying fixes happens in the Marcora web app. Requires admin or editor role. Confirm with the user before dismissing or resolving a finding they haven't explicitly decided on. Errors: - Invalid status. Must be one of: acknowledged, dismissed, resolved. - Finding not found. / You do not have access to this finding.

  Connector

  Destructive

  OAuth

• apply_grounding_fixA

  MarcoraA

  Applies Marcora's recommended fix for one or more findings ("yes, do recommendation <id>"). This WRITES to the user's library or document, so read each finding's `suggested_fix` and confirm with the user before applying. When to use: the user has reviewed findings from `check_content_grounding` / `get_grounding_result` or from `list_ci_findings` (including health-audit recommendations from `trigger_health_audit_scan`) and wants them acted on. You never compose the fix yourself: pass `finding_ids`, and each finding's stored recommendation is applied. It is the same action as the Apply button in the Marcora UI: same permissions (admin or editor), same billing, same result. Where each fix lands: by default the context item named in that finding's `context_item_id`; a null `context_item_id` means the content document itself. Pass `context_item_overrides` to redirect a specific finding elsewhere (the UI's destination picker). **Asynchronous:** returns at once with one job per finding. Findings whose fixes land in the same document run together and share a `generation_id`: poll each distinct `generation_id` once with `get_generation_status`. Brand Foundation findings are not grouped. The honest outcome is `document_updated` there: true means the document changed, false means the recommendation was already covered and nothing was written. Report that distinction; don't assume every applied fix changed something. **Partial success is normal:** findings that could not start come back in `errors[]` with a reason while the rest run. Check both `jobs[]` and `errors[]`. Serves BOTH families of finding on the shared substrate: content-grounding findings (from a grounding scan) and Context Intelligence health-audit recommendations (from trigger_health_audit_scan). One tool for both. For a shared `generation_id`, `document_updated` covers every finding in that run. **Errors:** - Missing param: finding_ids (400). Pass finding_id values from a prior findings response. - InputError: finding_ids must be finding_id UUIDs (400). - InputError: context_item_overrides names a finding not in finding_ids (400). The override would be ignored, so it is rejected rather than silently dropped. - You are not authorized to perform this action (403). Applying requires an admin or editor role. - This finding is not a content grounding finding / has already been resolved (400). Per finding, surfaced in errors[]. - Marcora is already updating this document. Per finding, surfaced in errors[]: another run on that document (for example the user's own Content Assistant request, or an earlier apply_grounding_fix call) is still in progress. Wait for it to finish, then retry those findings.

  Connector

  Destructive

  OAuth

• get_global_statsA

  Limzo Telegram Group StatsA

  Call this for network-wide numbers across all public Telegram groups tracked by Limzo (group count, messages, active users, replies, reactions, karma — 7-day and all-time) plus durable lifetime totals (messages analyzed, members tracked, spam messages removed) and the current top groups by Limzo Score. For finding a specific group, prefer list_groups.

  ConnectorNo auth

• adw.adw_549A

  AlpineDataWorks Intelligence ServerB

  Returns a 0-100 global earthquake activity momentum score, 50 = normal (USGS ComCat M2.5+: 7-day event rate and log seismic energy z-scored vs the trailing 30-day norm, hourly) with activity_level, trend, z_score_count, z_score_energy, recent_significant quakes, and 7d/30d counts. Call when the user asks if global seismic activity is accelerating or quieter than usual, or when timing catastrophe-monitoring escalation and seismic-exposure reviews. Momentum, not hazard (see ADW-525). Updates: hourly.

  ConnectorNo auth

• get_daily_briefA

  Pollar NewsA

  Fetches today's fixed, curated Pollar daily brief with a greeting, headline, executive summary, themed sections, related events, and charts. Intended only for explicit requests for Pollar's daily brief or curated digest; questions about a subject, person, place, or country belong to search_news. Locale changes the brief's language, not its editorial scope.

  ConnectorNo auth

• get_global_statsA

  Limzo – Telegram Group StatsA

  Call this for network-wide numbers across all public Telegram groups tracked by Limzo (group count, messages, active users, replies, reactions, karma — 7-day and all-time) plus durable lifetime totals (messages analyzed, members tracked, spam messages removed) and the current top groups by Limzo Score. For finding a specific group, prefer list_groups.

  ConnectorNo auth

• dcl_evaluate_walletA

  DCL Trust Oracle — AI/LLM Output Audit (x402 MCP)A

  POST-ACTION Wallet Secret Guardian ($0.02). Scans for BIP-39 seed phrases (12 or 24 consecutive wordlist words), raw hex or WIF-format private keys, Ethereum/Bitcoin wallet addresses, and API keys/bearer tokens appearing near wallet/custody/signing terminology. Any finding results in NO_COMMIT — wallet secrets have no safe threshold, unlike other DCL evaluators. Returns a `sanitized_output` with all matches redacted (null if nothing was found) and a masked `redacted_sample` per finding — the real value is never returned or stored server-side.

  ConnectorNo auth