"A server for securely proxying other MCP servers" matching MCP tools:

• create_api_keyA

  Molt2MeetA

  Generate a new API key for your agent. The full plaintext key (m2m_...) is returned ONCE — store it securely immediately; it cannot be retrieved later (we only keep its hash). Use keyName to identify the key's purpose (e.g. 'production', 'staging'). Multiple keys can be active simultaneously for zero-downtime rotation. Requires: an existing API key from register_agent. Next: switch your integration to the new key, then revoke_api_key on the old one.

  ConnectorNo auth

• findagent_buy_agentA

  FindAgentA

  Get a browser checkout link to PURCHASE a paid FindAgent agent. Returns checkout_url — open it in a browser (signed in to FindAgent) and complete the purchase with the Buy button; payment is handled securely by Paddle in the browser. NEVER share card details here. A free agent returns already_free (just use findagent_add_connector); an agent you already own returns already_owned; if paid checkout is not live yet it returns checkout_not_live. After purchase settles, retry findagent_add_connector. An unknown or unpublished slug returns a needs_input result pointing back to findagent_browse_agents.

  ConnectorOAuth

• retrieve_api_keyA

  Porkbun (official)A

  Collect the API key the user approved after `request_api_key`. Returns the public key (`apikey`, pk1_...) and the secret key (`secretapikey`, sk1_...) exactly once; store them securely right away (for example as PORKBUN_API_KEY / PORKBUN_SECRET_API_KEY in the MCP server's config, never in a committed file). Until the user approves, the answer says the request is still pending: wait and try again. This server keeps using the credentials it was started with; to switch to the new key, update its configuration and restart or reconnect it.

  ConnectorOAuth

• quicklookA

  Umbra open SAR archiveA

  Return a scene's quicklook PNG as an image block. Prefers a baked catalog preview (``preview="auto"``, the default) so a public host can show the radar scene without proxying Umbra COGs. **A baked preview is typically 512 px** (the published weekly sidecar). ``max_size`` applies only to a fresh ``preview="render"`` stream; when a cached thumbnail is smaller than requested, the caption says ``max_size`` was ignored *and* includes a JSON ``{"image": {source, width, height, requested_max_size, substituted}}`` sidecar. For a higher-resolution picture (typically 1024 px), run a local ``uvx --from 'umbra-py[mcp]' umbra-mcp`` server, or download the GEC href from ``get_item``. ``preview="baked"`` refuses rather than stream; ``preview="render"`` always streams (needs ``[viz]``, refused on ``umbra serve --public``).

  ConnectorNo auth

• create_builder_keyA

  solar-home-incentivesA

  Create an EnergyAI production API key in-band with no browser or card after the human operator has authorized the Terms and Privacy Policy. Returns a live key plus three commercial trial calls. Attach the key as `Authorization: Bearer <key>` to this MCP endpoint and start with review_installer_quote using postalCode + quoteText. If the operator has not already authorized the terms, call get_builder_upgrade_link and surface its one-screen human activation URL instead. If the MCP host cannot change headers mid-session, review_installer_quote accepts the key once as its apiKey argument and strips it before billing or persistence. The key is shown EXACTLY ONCE—store it securely and never print it in a user-visible reply. [always free — no API key required]

  ConnectorNo auth

• create_builder_keyA

  energyaiC

  Create an EnergyAI production API key in-band with no browser or card after the human operator has authorized the Terms and Privacy Policy. Returns a live key plus three commercial trial calls. Attach the key as `Authorization: Bearer <key>` to this MCP endpoint and start with review_installer_quote using postalCode + quoteText. If the operator has not already authorized the terms, call get_builder_upgrade_link and surface its one-screen human activation URL instead. If the MCP host cannot change headers mid-session, review_installer_quote accepts the key once as its apiKey argument and strips it before billing or persistence. The key is shown EXACTLY ONCE—store it securely and never print it in a user-visible reply. [always free — no API key required]

  ConnectorNo auth

• create_webhookA

  Porkbun (official)A

  Register a webhook endpoint. Porkbun will POST a signed JSON payload to `url` whenever a subscribed event occurs. Returns the new endpoint including its `secret` — store it securely; it's used to verify the `X-Porkbun-Signature` header (HMAC-SHA256 over `{timestamp}.{rawBody}`). `url` must be a publicly reachable HTTPS endpoint: `https://` on port 443, no credentials embedded in the URL, and a hostname that resolves to a public internet address. Private, loopback (including tricks like `127.0.0.1.sslip.io`), link-local, CGNAT and reserved addresses are rejected with `INVALID_WEBHOOK_URL` — do not try to point this at localhost or an internal host. For local development use a public HTTPS tunnel (ngrok, Cloudflare Tunnel), or the local npm package with a sandbox key, which can fire test events on demand. A hostname that does not resolve yet is accepted so you can register before the receiver is deployed, but the rules are re-checked before every delivery. Omit `events` (or pass `['*']`) to subscribe to all event types; you can also pass prefix wildcards like `dns.*`.

  ConnectorOAuth

• set_cloudflare_proxyA

  Porkbun (official)A

  Turn the Cloudflare proxy (orange cloud) on or off for a domain's DNS records. NOTE: connecting a domain deliberately imports every record DNS-only (grey cloud), because changing how traffic is served at the same time as changing who serves DNS makes failures hard to diagnose — so proxying is a separate, explicit step, best done AFTER confirming the site still works. Defaults to every proxiable record; pass `records` to target specific names ("@" = apex, bare labels like "www" are expanded). Only A/AAAA/CNAME can be proxied; anything else comes back under `skipped` with a reason rather than failing. Proxying hides the origin IP, so if MX points at a name you're proxying, mail to it breaks — that comes back in `warnings`. Reversible: call again with enabled=false. Use dry_run to preview.

  Connector

  Destructive

  OAuth

• signupA

  UnphurlA

  Create a new Unphurl account. Returns an API key (shown once, store it securely). After signup, the user must check their email and click the verification link. The API key won't work for URL checks until the email is verified. Verification link expires after 24 hours. If the link expires, use the "resend_verification" tool to request a new one. The account starts with 20 free pipeline check credits so the user can test with real URLs. Known domain lookups (google.com, github.com, etc.) and cached domain lookups are always free. To check more unknown domains through the full analysis pipeline, the user can purchase credits via the "purchase" tool. Once the user has their API key, they need to add it to their MCP server configuration as UNPHURL_API_KEY. This tool does not require an API key.

  ConnectorNo auth

• create_api_keyA

  BorealHostB

  Create a new API key with specified scopes. Cannot create keys with higher scopes than the current key. Site-scoped keys restrict access to a single site. email_domains restricts the key to email tools on the named domains; use email:read, email:write and optionally email:signon scopes. expires_at is an ISO timestamp; ip_allowlist accepts IP addresses and CIDR networks. Requires: API key with write scope. Args: name: Human-readable name for the key (1-100 chars) scopes: Comma-separated scopes. Options: "read", "read,write", "read,write,admin". Default: "read" site_slug: Optional — restrict the key to a single site. Omit for account-wide access. Returns: {"api_key": "bh_...", "key_id": "uuid", "prefix": "bh_...", "name": "My Key", "scopes": ["read", "write"], "message": "Store this API key securely — it will not be shown again."} Errors: VALIDATION_ERROR: Invalid name, scopes, or max 25 active keys FORBIDDEN: Cannot create keys with higher scopes than current key

  ConnectorNo auth

• imergea_recommend_advisory_serviceA

  IMERGEA M&A AdvisoryA

  Route a user either to the FREE indicative valuation tool or to the right PAID package for professional valuation review, buyer/investor longlist, teaser and Information Memorandum, or full deal preparation. Paid checkout occurs securely on imergea.com only after human review and consent; this tool never books or takes payment.

  ConnectorNo auth

• d365fo_set_connectionA

  ALM X++ MCP ServerA

  Securely register the D365 F&O connection (URL + Entra app-registration credentials) for the CURRENT session. The client secret is encrypted in memory (AES-256-GCM), never written to disk and never echoed back. Once set, all odata_* and dmf_* tools use it automatically until it expires or you call d365fo_clear_connection. Use this instead of resending the secret on every call. In a locked server deployment (D365FO_LOCK_SERVER_CONFIG=true) this tool is disabled and the server's own environment credentials are used instead.

  ConnectorNo auth

• create_4k_checkoutA

  footage.cool: 4K Drone & Aerial Stock FootageA

  Create or resume Stripe hosted checkout for a quote. Call ONLY after the user explicitly approves the quoted clip, the master resolution, license type, total price, and terms. Returns a checkout URL for the user and a private order token. The user pays securely on Stripe; never collect card details in chat. Calling again with the same quote returns the same checkout. Creating checkout is not proof of purchase.

  ConnectorNo auth

• start_bookingA

  mcpA

  Initiate a booking from a valid quote. Returns a checkout URL that the human must open in their browser to enter payment details and confirm the reservation. IMPORTANT: This tool never handles or requests payment card data. The checkout URL is either Tell & Go's own checkout on tellandgo.com (checkout_host tellandgo.com: the traveller enters guest details and pays there, and the booking exists only after payment) or a hosted Stripe Checkout page (checkout.stripe.com). Payment is completed securely on that page. Call get_quote, then prebook_stay to obtain prebook_id and confirm locked terms. The checkout URL expires (see expires_at in the response) — inform the user to complete it promptly. After the human completes checkout, Tell & Go sends a confirmation email to the primary guest. If the total exceeds a budget the user stated, do NOT call this yet: tell them the price, say it exceeds their budget, and get explicit confirmation first.

  ConnectorNo auth

• register_agentA

  Ask a HumanA

  Register once to get an API key (shown only once; store it securely and never post it). name: 3-40 chars, letters/numbers/_/-. description: one line on what you do and who runs you. New agents are 'unclaimed' (few posts per day, held for review) until their human owner confirms by email via request_claim.

  ConnectorNo auth

• create_api_keyA

  AgentPixelA

  Issue an API key after the email is confirmed. Not needed when confirm_signup already returned api_key. Each call issues another key, so call it once. Returns the key once. Store it securely and attach it to the connection.

  ConnectorAPI key

• registerA

  KadiConnectA

  Create a new KadiConnect account with a name, email and password, and receive an API key (starts with kc_). Use this only when the user wants a new account; if they already have an API key, use that instead. The key is shown once: tell the user to store it securely. Subsequent tools need it as an Authorization header or the apiKey argument.

  ConnectorNo auth

• get_api_tokenA

  AudD Music RecognitionA

  Returns the account api_token used to call api.audd.io. This is the preferred way to build an integration: save the token and call the API directly from your script rather than proxying each call through make_api_request. Sensitive: only available when the user granted the token:read scope.

  Connector

  Destructive

  OAuth

• list_zonesA

  Timeapi IoB

  Return all IANA timezone names supported by TimeAPI.io. Use as a directory to find valid timeZone strings for other calls.

  ConnectorNo auth

• oxylabs_scrapeA

  OxylabsA

  Scrape any URL via the Oxylabs Web Scraper API (rotating proxies, anti-bot handling) and return the page HTML with its upstream status code. Set render_js:true to load the page in a headless browser first — use for JS-heavy sites. Calls are synchronous proxying and can take 10-30 seconds. BYOK: _apiKey is "username:password" from the Oxylabs dashboard. Example: oxylabs_scrape({ url: "https://example.com", _apiKey: "myuser:mypass" })

  ConnectorNo auth

• oxylabs_amazon_productA

  OxylabsA

  Fetch structured Amazon product data by ASIN via the Oxylabs Web Scraper API — Amazon structured scraping: title, price, currency, rating, reviews count, stock/availability. Calls are synchronous proxying and can take 10-30 seconds. BYOK: _apiKey is "username:password" from the Oxylabs dashboard. Example: oxylabs_amazon_product({ asin: "B08N5WRWNW", domain: "com", _apiKey: "myuser:mypass" })

  ConnectorNo auth