"Authy" matching MCP tools:

• authA

  QuadraticA

  Authenticate the MCP session with Quadratic. Actions: • login() — Start an OAuth device authorization flow. Returns a URL the user must open in a browser to authorize. The flow is completed by confirm_login. • confirm_login(device_code) — Complete an in-progress login by polling for user authorization. If the response indicates the user has not yet authorized, this action can be called again with the same device_code to continue polling. confirm_login is idempotent: if a later tool call reports "Not authenticated on this connection", call confirm_login again with the same device_code to re-establish auth (some clients use a new session per request, so the session that ran the tool may differ from the one that logged in). • set_token(token, email?) — Set a JWT directly (used when the OAuth device flow is not available). • logout() — Clear saved authentication for the current session.

  Connector

  Destructive

  No auth

• ofac_wallet_screenA

  Agent Preflight: OFAC, DNS, Email Auth, Domain, Email & URLA

  Screens a crypto wallet address (EVM, BTC, TRON, SOL, XMR and every other chain OFAC lists) against all Digital Currency Addresses on the US Treasury OFAC SDN list. Returns sanctioned true/false, verdict block/no_match, SDN entity name, sdnType, programs and the list publish date. Use when an agent is about to send funds to, pay, or accept funds from an unfamiliar wallet. $0.01 USDC on Base. Paid tool: call it once to get the x402 PaymentRequired object, then retry with params._meta["x402/payment"].

  ConnectorNo auth

• authA

  b59.linkA

  Sign in to b59.link to raise the rate limit from 2 to 300 requests/minute and own what you create. Pass api_key to get a session key straight away. Or pass email to have a 6-digit code emailed, then call again with email and otp to get a session key (new emails are signed up and also get their api_key). Send the session key as the HTTP header 'Authorization: Bearer <session_key>'.

  ConnectorNo auth

• add_domainA

  Faable — Deploy & AuthA

  Attach a custom domain to an app. Returns the CNAME record the user must create at their DNS provider; Faable verifies it and issues the certificate on its own. If the domain already serves traffic somewhere else, tell the user to create `prevalidation_cname` (`_acme-challenge.<fqdn>` CNAME) FIRST and switch the main CNAME only once check_domain shows it ready: the certificate then exists before traffic moves, with no TLS gap.

  ConnectorOAuth

• get_pricingA

  Genko Prior Auth public docsA

  Current Genko Prior Auth plans in US dollars per practice per month, with each plan's monthly draft and AI-token limits and the free trial's terms. Use this to answer 'how much does it cost'; never estimate prices.

  ConnectorNo auth

• authA

  b59.linkA

  Sign in to b59.link to raise the rate limit from 2 to 300 requests/minute and own what you create. Pass api_key to get a session key straight away. Or pass email to have a 6-digit code emailed, then call again with email and otp to get a session key (new emails are signed up and also get their api_key). Send the session key as the HTTP header 'Authorization: Bearer <session_key>'.

  ConnectorNo auth

• authA

  HatchA

  Put a sign-in screen in front of any roost so visitors must authenticate. Works on free, workspace, and forever hatches. Pass `hatchId` plus an `action`: • `enable` with `mode: "password"` and a `password` → ONE shared site password (everyone uses the same one). Best for a private demo or staging link. • `setPassword` with a new `password` → rotate the shared password. • `disable` → remove the login and serve the site publicly again. • `status` → report whether auth is on and which mode. Returns `{ enabled, mode, loginUrl }`. The sign-in screen lives at `/__roost/login`. Prefer `password` mode; `useraccounts` is unavailable (per-hatch databases are no longer provisioned).

  Connector

  Destructive

  No auth

• url_unshortenA

  Agent Preflight: OFAC, DNS, Email Auth, Domain, Email & URLA

  Follows a URL's HTTP redirects hop by hop (max 10, page bodies never read) and returns the final URL, status, the full chain and heuristic safety flags: shortener_used, cross_domain_redirect, https_downgrade, ip_address_host, punycode_host, userinfo_in_url, high_abuse_tld, credential_keyword_after_redirect, loops. Risk low/medium/high. Use before an agent clicks, fetches or forwards an unfamiliar or shortened link. Not a malware-reputation lookup. $0.01 USDC. Paid tool: call it once to get the x402 PaymentRequired object, then retry with params._meta["x402/payment"].

  ConnectorNo auth

• email_mx_verifyA

  Agent Preflight: OFAC, DNS, Email Auth, Domain, Email & URLA

  Checks an email address without sending mail or opening SMTP: syntax, domain exists, MX records (or RFC 5321 A/AAAA fallback), RFC 7505 null MX, MX host resolves, disposable-domain list (~9.9k domains), role account (info@, support@) and free provider. Verdict deliverable_domain, risky, undeliverable or unknown. Cannot prove the mailbox itself exists. Use when an agent validates a signup, lead or contact email before using it. $0.01 USDC. Paid tool: call it once to get the x402 PaymentRequired object, then retry with params._meta["x402/payment"].

  ConnectorNo auth

• authA

  email59A

  Sign up or sign in to email59. Pass email to have a 6-digit code emailed, then call again with email and otp to get a session key (a new email is signed up with 200 free emails a day). Or pass api_key to swap an API key for a session key. Send the key as the HTTP header 'Authorization: Bearer <session_key>'.

  ConnectorNo auth

• totpA

  ScorpTech x402 APIB

  TOTP / HOTP two-factor codes (RFC 6238 / 4226), compatible with Google Authenticator, Authy, 1Password and pyotp: generate the current code (plus previous / next and seconds remaining), verify a code with a drift window, create a new base32 secret with its otpauth:// URI for QR enrolment, or parse an otpauth URI. SHA1 / SHA256 / SHA512, 6–8 digits, any period; set time for reproducible results or counter for HOTP. POST so secrets never appear in URLs; secrets are not stored. Price: $0.001 USDC per successful call (x402, Solana). Same tool over HTTPS: POST https://scorptech.it.com/api/x402/v1/totp

  ConnectorNo auth

• totpA

  ScorpTech x402 ToolsB

  TOTP / HOTP two-factor codes (RFC 6238 / 4226), compatible with Google Authenticator, Authy, 1Password and pyotp: generate the current code (plus previous / next and seconds remaining), verify a code with a drift window, create a new base32 secret with its otpauth:// URI for QR enrolment, or parse an otpauth URI. SHA1 / SHA256 / SHA512, 6–8 digits, any period; set time for reproducible results or counter for HOTP. POST so secrets never appear in URLs; secrets are not stored. Price: $0.001 USDC per successful call (x402, Solana). Same tool over HTTPS: POST https://scorptech.it.com/api/x402/v1/totp

  ConnectorNo auth

• authA

  Fast.ioA

  Fastio session and credential state (read): sign-in check, session and scope details, email availability, 2FA status, API keys, OAuth sessions. Sign-in, sign-up, 2FA changes, PKCE login and credential changes are on `auth_manage`.

  ConnectorNo auth

• dns_lookupA

  Agent Preflight: OFAC, DNS, Email Auth, Domain, Email & URLA

  Resolves live DNS records for any domain or hostname via 1.1.1.1: A, AAAA, CNAME, MX, NS, TXT, SOA and CAA in one call (type=ALL), or a single type incl. SRV, PTR, DS, DNSKEY, HTTPS. Clean JSON with TTLs, NXDOMAIN flag and DNSSEC-authenticated bit. A URL or email address is reduced to its host. Use when an agent needs to verify a domain, find mail servers or nameservers, or read TXT/SPF records. $0.01 USDC on Base. Paid tool: call it once to get the x402 PaymentRequired object, then retry with params._meta["x402/payment"].

  ConnectorNo auth

• email_auth_checkA

  Agent Preflight: OFAC, DNS, Email Auth, Domain, Email & URLA

  Checks a domain's email authentication: parses SPF (+all, ?all, multiple records, over 10 DNS lookups), DMARC (p, sp, pct, rua), DKIM keys (your selector or 15 common ones) and MX, then returns an A-F grade, 0-100 score and coded issues (spf_missing, dmarc_p_none, ...). Use when an agent must judge if a domain can be spoofed, debug deliverability, or vet a sender/vendor domain. $0.01 USDC on Base. Paid tool: call it once to get the x402 PaymentRequired object, then retry with params._meta["x402/payment"].

  ConnectorNo auth

• whois_domain_ageA

  Agent Preflight: OFAC, DNS, Email Auth, Domain, Email & URLA

  Looks up a domain in its registry's RDAP server (the ICANN successor to WHOIS, found via the IANA bootstrap): registration date, age in days/years, newlyRegistered (<30 days), expiry, last change, registrar name + IANA ID, EPP status, nameservers and DNSSEC. No personal contact data. Use when an agent must judge if a domain, sender or vendor is brand-new (a phishing/fraud signal). Unsupported TLDs return 400, uncharged. $0.01 USDC. Paid tool: call it once to get the x402 PaymentRequired object, then retry with params._meta["x402/payment"].

  ConnectorNo auth

• domain_expiryA

  Email Auth CheckerA

  Registration data for a domain from the registry's RDAP server (IANA bootstrap): registrar, created/updated/expiry dates, days until expiry with ok/expiring_soon/expired status, EPP status codes, nameservers and DNSSEC. Works for gTLDs and ccTLDs that publish RDAP. Deterministic, no AI. Price: $0.002 USDC per call via x402 (Base); the first 5 calls per day per client are free.

  ConnectorNo auth

• set_secretsA

  Faable — Deploy & AuthA

  Add or update environment variables of an app. When the app is running, it restarts to apply them (only if a value changed); if its last deployment failed at runtime and nothing is running, Faable redeploys it with the new variables. Returns the names added, updated and unchanged — never the values — and `redeploy`: null when there was nothing to relaunch; otherwise `status` is `started` (follow `deployment_id` with get_deployment), `needs_rebuild` (the last deployment failed to build: retry `failed_deployment_id` with redeploy) or `not_started` (the platform refused the relaunch: retry it with redeploy to see why).

  ConnectorOAuth

• link_repoA

  Faable — Deploy & AuthA

  Link a GitHub repository to an app that already exists, so a push deploys it (for a new app, create_app does both). What is live keeps serving until the next push — linking starts no deploy. Needs the Faable GitHub App installed on the repository; if not, the error says what to fix.

  ConnectorOAuth

• audit_domainA

  Auth Posture — Email Deliverability & Spoofability AuditA

  Audit an email domain in one call: can it receive mail (MX), can it be spoofed (SPF/DMARC/DKIM posture), disposable check. Returns {can_receive, can_be_spoofed, score, reasons, checks}.

  ConnectorNo auth

• email_auth_reportA

  Email Auth CheckerA

  Full email-auth report for a domain: SPF (recursive 10-lookup count, void lookups, +all/?all, terms after all), DMARC (policy, pct, alignment, rua authorization), DKIM (keys and RSA key bits at common selectors or your own via selectors=), MX/null MX, MTA-STS policy, TLS-RPT, BIMI, and a Gmail/Yahoo/Outlook bulk-sender readiness verdict. Deterministic DNS-over-HTTPS, no AI. Price: $0.003 USDC per call via x402 (Base); the first 5 calls per day per client are free.

  ConnectorNo auth