"CodeQL for Code Auditing" matching MCP tools:

• audit_smart_contract_codeA

  Diogenes Autonomous Microservice GatewayA

  Statically audits Solidity, Vyper, or Move smart contract source code for honeypot transfer taxes, hidden mint backdoors, proxy upgrade traps, and reentrancy. Use when auditing smart contract source code or bytecode before deploying or interacting with a protocol; for scanning Solana Anchor/Rust programs specifically for Cross-Program Invocation (CPI) signer/account vulnerabilities, use scan_solana_cpi_reentrancy instead. Read-only edge call (32 KB, 60 RPM): accepts 'code_or_address' ('chain' defaults to 'evm_solidity'), uses '?demo=true' or L402 (45 sats); HTTP 400 if invalid.

  ConnectorNo auth

• audit_smart_contract_codeA

  Diogenes Web3, DeFi & 402 Security MCPA

  Statically audits Solidity, Vyper, or Move smart contract source code for honeypot transfer taxes, hidden mint backdoors, proxy upgrade traps, and reentrancy. Use when auditing smart contract source code or bytecode before deploying or interacting with a protocol; for scanning Solana Anchor/Rust programs specifically for Cross-Program Invocation (CPI) signer/account vulnerabilities, use scan_solana_cpi_reentrancy instead. Read-only edge call (32 KB, 60 RPM): accepts 'code_or_address' ('chain' defaults to 'evm_solidity'), uses '?demo=true' or L402 (45 sats); HTTP 400 if invalid.

  ConnectorNo auth

• plus-code-decodeA

  Burs-IA UtilsA

  Decodifica un Plus Code completo en su centro y caja delimitadora; rechaza códigos cortos. Cuándo: hay que calcular coordenadas, distancias, rumbos o áreas a partir de puntos dados. No para: codificar latitud/longitud como Plus Code (plus-code-encode). Efectos secundarios: ninguno (solo lectura, sin red, sin estado guardado). Determinista: la misma entrada da la misma salida. Límites: entrada JSON de hasta 64 KB, 1 s por llamada, resultado de hasta 1 MB. EN: Decodes a full Open Location Code (plus code) into its center latitude/longitude and bounding box. Short codes need a reference location and are rejected. When: coordinates, distances, bearings or areas have to be computed from given points. Not for: encoding a latitude/longitude as a global Open Location Code (plus-code-encode). Side effects: none (read-only, no network access, no stored state). Deterministic: the same input gives the same output. Limits: JSON input up to 64 KB, 1 s per call, result up to 1 MB.

  ConnectorNo auth

• request-booking-codeA

  Bronjoy MarketplaceA

  Send the user a 6-digit confirmation code, which book-appointment then requires. WHEN TO USE: the user has chosen a venue, a service and a slot, and has given you their email address or phone number. Call this before book-appointment — a booking without a code is rejected. YOU DO NOT RECEIVE THE CODE. It goes to the user's own inbox or phone; ask them to read it back to you. That is the point: it proves the contact belongs to the person booking, so a business does not get appointments from numbers nobody answers. The code lasts 5 minutes and covers one booking. Only a few codes may be sent to one contact — do not loop.

  ConnectorNo auth

• find_tariff_codesA

  Tariff & HS Code Duty FinderA

  Use this when the user asks for the tariff code, commodity code, customs code, HS code, HTS code, Harmonized System code or customs classification for a product, for example "what is the tariff code for a ceramic flower pot in the UK?", "HTS code for a lithium-ion battery" or "which heading covers cotton t-shirts for import into the US?". Pass a plain description of the product and country GB (United Kingdom) or US (United States). Returns candidate codes from the official schedule, each with its description, the headings above it and whether goods are declared under it, plus a notice that they are candidates and not a binding classification. Do not use it to classify goods with certainty, to give a binding customs ruling, to compute shipping or landed cost, or for countries other than GB and US.

  ConnectorNo auth

• inspect_eve_assembly_stateA

  Diogenes EVE: Frontier Sui Move MCPA

  Inspects live EVE Frontier Smart Assembly on-chain object metadata, owner capability ID, online power status, and attached Sui Move package digest. Use when verifying whether a Smart Turret, Smart Gate, or Smart Storage Unit is online and checking its bound Move module before interacting; for generating or auditing custom Sui Move assembly source code, use generate_eve_assembly_move instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'assembly_id' ('assembly_class' defaults to 'smart_gate'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

  ConnectorNo auth

• get_domain_audit_logA

  AiVikings.aiB

  Read append-only domain change history for the authenticated customer. Omit domain for portfolio history. Requires audit:read. Results are newest recorded first; pass next_cursor with the same filters for another page. Times must include a timezone. Requested, state_changed, and outcome events share an operation_id. Accepted is not proof of provider completion. History starts when domain auditing was enabled; agent labels are self-reported.

  ConnectorOAuth

• get_graph_schema_at_versionA

  RationalBloksA

  Get the graph schema as it existed at a specific version/commit. Use get_graph_version_history to find commit SHAs. Useful for comparing schemas across versions or auditing changes.

  ConnectorNo auth

• lookup_icd10A

  mcpB

  Look up an ICD-10-CM diagnosis code or search by keyword. Input is either an exact code (e.g. 'E11.21') or a free-text description phrase ('type 2 diabetes with nephropathy'). Returns either the matching code + description or up to 20 candidate matches. Use when a clinical note uses non-standard phrasing and the correct code is needed for billing. WHEN TO USE: User asks about a specific ICD-10 diagnosis code or wants RAG-search over ICD-10 for a condition name. WHEN NOT: For the matching CPT codes (cpt_to_icd_mapper). For code validation against a payer (code_validation). EXAMPLES: - Find ICD-10 for hypertension: `{"query":"essential hypertension"}`

  ConnectorNo auth

• get_graph_schema_at_versionA

  RationalBloksA

  Get the graph schema as it existed at a specific version/commit. Use get_graph_version_history to find commit SHAs. Useful for comparing schemas across versions or auditing changes.

  ConnectorNo auth

• get_duty_rateA

  Tariff & HS Code Duty FinderA

  Use this when the user asks what import duty, customs duty, tariff, import tax or VAT applies to a tariff code or HS code, for example "what is the US duty on HTS 8507.60.00?", "what duty applies to UK commodity code 6914100000 from Vietnam?" or "what is under heading 6914 in the UK tariff?". Pass the code (4 to 10 digits, dots allowed), country GB or US, and originCountry when the user names where the goods come from. For a code goods are declared under it returns the description and the rate: for the UK the third-country duty, VAT rates as a list, the preferential rate and any additional duty for the origin, and other measures; for the US the general, special and column 2 rates and units. For a code that is only a heading it returns the lines beneath it instead. Chapter 99 additional duties for the US and quotas or trade remedies are not included. Do not use it for a landed cost estimate, for excise or customs-broker fees, or for legal advice.

  ConnectorNo auth

• swiftbic_validateA

  Checksum ValidatorA

  Structural format validation only for a SWIFT/BIC code: 8 or 11 characters (4 letters bank code + 2 letters country code + 2 alphanumeric location code + optional 3 alphanumeric branch code). The country code is not cross-checked against ISO 3166-1.

  ConnectorNo auth

• country_lookupA

  Agent BitsA

  Resolve an ISO 3166-1 alpha-2 country code (for example CA, US, JP) to official name, region, currency, calling code, languages, and related country metadata when you already have the two-letter code. Use when: - What currency and calling code does country code JP use? - Get official name, region, and languages for ISO country CA - Look up standardized metadata for a two-letter ISO 3166-1 country code Do not use when: - Download the full countries dataset for offline or multi-country use (use countries_bulk) - Look up currency symbol or decimals by ISO 4217 code alone (use currency_lookup) - Search for a country when you only know its English name and not the ISO code

  ConnectorNo auth

• country_lookupA

  Agent BitsA

  Resolve an ISO 3166-1 alpha-2 country code (for example CA, US, JP) to official name, region, currency, calling code, languages, and related country metadata when you already have the two-letter code. Use when: - What currency and calling code does country code JP use? - Get official name, region, and languages for ISO country CA - Look up standardized metadata for a two-letter ISO 3166-1 country code Do not use when: - Download the full countries dataset for offline or multi-country use (use countries_bulk) - Look up currency symbol or decimals by ISO 4217 code alone (use currency_lookup) - Search for a country when you only know its English name and not the ISO code

  ConnectorNo auth

• get_wilayaA

  UpGrowth: business data for Algeria, Tunisia and MoroccoA

  Get one Algerian wilaya by its two-digit code, for example 16 for Alger: its names, capital, region, population and the details of its local CNRC (trade register) and CASNOS (social security of the self-employed) offices. For Tunisia (country TN) pass the governorate code, for example 11 for Tunis: its ISO 3166-2 code, national statistics (INS) code, names in the three languages and chief town. For Morocco (country MA) pass the region code, for example 06 for Casablanca-Settat: its ISO 3166-2 code, names in the three languages and chief town. Returns an error when the code is unknown. Use list_wilayas to see the codes. Tunisia and Morocco need an API key.

  ConnectorNo auth

• code-executeA

  SuprsonicA

  Execute code in a secure sandbox with pre-configured environments. Returns stdout, stderr, the exit code, the run time, and the files the code wrote to /home/user/output/ as base64. Use for calculations, data processing and running scripts. Each call runs in a fresh sandbox that is destroyed afterwards, so nothing carries over from one call to the next. Cost: 2 credits, charged only when a call succeeds.

  ConnectorNo auth

• code-evolutionA

  ClairvoyanceA

  Evaluates whether changes to existing code maintain or degrade design quality. Use when the user asks to review a diff or PR (for example before merging it), or asks about recently modified files, to judge whether each change looks designed-in or bolted-on. Not for scanning design smells (use red-flags) or assessing overall design investment (use strategic-mindset).

  ConnectorNo auth

• pin_code_nearbyA

  WIA Code & WIA Pin CodeA

  List the WIA Pin Code cells around a point or a code, nearest first, with distance and direction. Useful for "which codes cover this building/plaza". Give either code, or lat+lng. Radius 10–200 m.

  ConnectorNo auth

• wait_for_codeA

  Agentline NZ: email inboxes for AI assistantsA

  Wait for a verification code (OTP) to arrive by email and return it. Trigger the code first (e.g. submit the sign-up form with your @agentline.nz address), then call this. Waits up to 55s; if it returns found=false, call it again. Each code is returned once.

  ConnectorAPI key

• x402-publish-1793450128858-scanpay-code-securitA

  minia2a-mcp-remoteD

  ScanPay Code Security Gate: Deterministic pre-execution code security gate: scans Python/JS/TS source and returns findings, severity, and a PASS/WARN/BLOCK verdict without executing it (45 rules, no LLM). Paid per call in USDC over x402 on Base or Solana. Method: POST. Input: {"source_code": "string — code to scan", "language": "python|javascript|typescript|tsx"}

  ConnectorNo auth

• x402-publish-1793450128858-scanpay-code-securitA

  minia2a-mcpC

  ScanPay Code Security Gate: Deterministic pre-execution code security gate: scans Python/JS/TS source and returns findings, severity, and a PASS/WARN/BLOCK verdict without executing it (45 rules, no LLM). Paid per call in USDC over x402 on Base or Solana. Method: POST. Input: {"source_code": "string — code to scan", "language": "python|javascript|typescript|tsx"}

  ConnectorNo auth