Skip to main content
Glama
650,501 tools. Updated 2026-10-13 20:50

"Hack The Box" matching MCP tools:

  • Score detections against ground truth and show the working. PREMIUM (license). Greedy matching at the IoU threshold, highest-confidence prediction first, each ground-truth box matched at most once - the standard protocol. Reports per-class precision, recall and F1, and average precision by the all-points interpolation used by Pascal VOC 2010 onward. Typical input {"predictions": [{"box": [0,0,10,10], "label": "cat", "score": 0.9}], "ground_truth": [{"box": [1,1,11,11], "label": "cat"}]} returns {"overall": {"tp": 1, "fp": 0, "fn": 0, "precision": 1.0, "recall": 1.0, "f1": 1.0}, "per_class": {...}, "mAP": 1.0}. Use to compare two models on the same held-out set. Not for cleaning up a single model's overlapping output first - run nms before this. Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {"error": "<what is wrong and how to fix it>"} (for example {"error": "ground_truth must contain at least one box"}). Every call is read-only and idempotent, so after correcting the input it is always safe to retry.
    ConnectorNo auth
  • Live shipping rates for one parcel sent from a US origin — inside the US, or to Canada, the UK, Germany or Australia — across USPS, UPS and FedEx, and DHL Express on the German and Australian lanes. Describe the item in plain words and the packed box size and weight are estimated. Give exact dimensions and weight to skip the estimate. Returns up to five purchasable services, each as one checkout total with the SMKlog fee inside it (the fee is itemized only on the checkout receipt) and, where the carrier publishes one, its own counter price for the same parcel beside it. Not every request is priced. A shipment past parcel limits or described as a pallet or freight load returns mode not_a_parcel with no rates: SMKlog does not arrange pallet or freight shipments. More than one box returns mode multiple_boxes with no rates: one label per box, so quote each box with quantity 1. Shipping labels are bought on smklog.com, not through this tool. Choosing between the tools: use this one to answer what a shipment would cost. Then hand the quote_id it returns to create_checkout_link once the human has settled on shipping this exact parcel, so the pair costs one carrier call rather than two. Use get_price_index instead for typical or historical prices: it is free, while this tool spends a rate-limited carrier call every time. Parameter rules: - weight_lb, length_in, width_in and height_in count only as a set of four, each above zero. Leave any one out and all four are ignored in favor of the estimate, so never send weight alone. - One label per box. quantity counts units of the item: units that fit one box are priced as that box (two books go in one carton), and units that need more than one box return mode multiple_boxes, as does any quantity above 1 sent with exact dimensions, since those describe a single box. A box past the largest parcel any carrier here takes (150 lb, 108 in on the longest side, 165 in of length plus girth; USPS stops lower, and only services that take the box are listed) or a product described as a pallet or freight load (a pallet of, LTL, truckload, shipping container) returns mode not_a_parcel. Neither carries rates. - product is the item itself, up to 200 characters. A bare route ("to Canada"), a bare weight ("7 lbs") or a question is refused as product_not_recognized before any carrier is called. - from_zip must be a real 5-digit US ZIP (ZIP+4 is trimmed to five), or the call fails with invalid_us_zip. - to_zip follows to_country: a 5-digit ZIP for US, otherwise that country's own postal code handed to the carriers as typed. A to_country outside US, CA, GB, DE and AU is refused as international_unsupported_online, so do not retry it with a different box. - Allowance: 80 calls an hour per client, shared with the public /quote route.
    ConnectorNo auth
  • Dark-contact EVENTS from the Shadow Fleet board — resolvable observations with a lifecycle, not a leads snapshot. An event opens when a vessel goes silent >=12x its OWN 14-day cadence inside a live coverage box, and resolves within 72 h as: reappeared (a newer fix arrived — positive, feed-wide observation), still_dark (NOT RE-OBSERVED by our coverage — a statement about the instrument, never proof the transponder was off; say "not re-observed", never "confirmed dark"), or void (the coverage box died mid-event; neither a hit nor a miss). Response carries per-box coverage state and open/24h resolution tallies. Use this for "what went dark / what came back" questions; use query_shadow_fleet_leads for the current ranked list.
    ConnectorNo auth
  • Use this to find citable PadelTrue documents for a named padel racket. Supply concise brand/model/year/shape keywords, for example counter veron or bullpadel hack 05 2027. It is literal keyword retrieval, not natural-language buyer matching: every keyword must match. For budget or playing-style shortlists use search_rackets. Returns document IDs, titles and canonical product URLs; use fetch to read the evidence. Empty results describe this catalogue query, not the entire market.
    ConnectorNo auth
  • Show an upload box in the conversation where the user can drop an IFC file (.ifc) of a building services model (HVAC, plumbing, heating). The file goes straight from the user's browser to thenewengineer.com - you never see it. CALL THIS when the user wants to analyse an IFC model and has not yet given you a link from thenewengineer.com. Then tell the user to drop the file in the box. When the upload is done, the box posts a message with a token. Use that token with read_ifc_networks. If no message arrives and the user says the upload is done, call ifc_upload_result with the upload_token returned here. Prototype: files up to the anonymous size limit of the site.
    ConnectorNo auth
  • The person's cloud boxes, newest first: state (waking, working, idle, asleep), what it's doing now, the last ask and the last reply. With `box`, that one box with its recent thread and the whole last reply — poll this every 20–30 s after start_box or message_box until state is idle and last_reply is set (a turn takes from seconds to many minutes).
    ConnectorOAuth

Matching MCP Servers

  • A
    license
    B
    quality
    F
    maintenance
    A Python server that enables interaction with Box files and folders through the Box API, allowing operations like file search, text extraction, and AI-based querying and data extraction.
    100
    101
    MIT

Matching MCP Connectors

  • Box (enterprise cloud storage) MCP Pack

  • BoxOAuth

    The Box MCP server is a secure gateway that connects external AI agents to enterprise content stored in Box, enabling agent-based document access, advanced search, and multi-file analysis while preserving Box security policies. It provides capabilities including keyword search, Box AI-powered Q&A across files, metadata extraction, file management, and authentication, all validated against Box's granular permission controls. The server integrates with major AI platforms like Anthropic Claude, Microsoft Copilot Studio, and Mistral Le Chat, and is available both as a Box-hosted remote server and a self-hosted open-source Python project.

  • Creates the box for an agent's address, with 500 messages and 30 days for 0.05 USDC. Nothing renews by itself: when `allowance.expiresAt` passes, every message in the box is deleted within the hour. - **Cost:** 0.05 USDC per call, paid over x402. Anyone may pay, not only the box's address. - **Inputs:** `address` (path), any letter case. No body. - **Returns:** `granted`, what the payment added, and the `allowance` after it. - **Errors:** - 409 `box_exists`: the address already has a box. Top it up instead (`boxTopUp`). - **Next:** - `boxTopUp`: add messages and days before the allowance runs out. - `boxStatus`: read the allowance. Costs 50000 base units (0.05 USDC) per call. Payment goes in params._meta["x402/payment"]; use an x402-aware MCP client (see https://docs.arcgate.dev/#arcgate/description/mcp-for-agents).
    ConnectorNo auth
  • Pick the smallest box an item actually fits in, allowing for padding. FREE. Tries every rotation of the item against every box, so an item that only fits diagonally-oriented is still found. Typical input {"item_length": 10, "item_width": 6, "item_height": 4, "box_options": [[12, 9, 4], [14, 10, 6]]} returns {"fits": [{"box": [14, 10, 6], "cubic": 840.0, "slack": [2, 2, 0]}], "best": [14, 10, 6], "rejected": [...]}. Use when choosing packaging from stock. Not for what the carrier will bill once a box is chosen — that is dim_weight. Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {"error": "<what is wrong and how to fix it>"} (for example {"error": "box_options must contain at least one [l, w, h] box"}). Every call is read-only and idempotent, so after correcting the input it is always safe to retry.
    ConnectorNo auth
  • Taint exposure of one address on one chain: a bounded backward walk over the value graph to the nearest OFAC-sanctioned or hack/drainer/mixer root, answered as a class (sanctioned|direct|indirect|negligible|unknown|none), the nearest hop and a value-proportional haircut fraction. Use it to explain how closely an address is tied to a sanctioned or hack root and by how much value. Not for one go/no-go tier — get_address_risk already includes this walk. Not for the counterparties themselves or a chosen depth, token or window: get_wallet_graph_walk. Not for issuer freezes: get_address_compliance. 'unknown' means the walk did not complete — OFAC list unloaded, time_budget, frontier_cap, Solana coverage pending or partial, short history, or no hack/drainer/mixer label loaded for this chain — never a false 'none'; incomplete_reasons names which (time_budget may complete at a quieter moment, frontier_cap repeats). Depth is fixed at 3 hops and the walk never crosses chains: ask again with chain set for each network in chains_with_data. A verdict is reused for up to 60 s (10 s after a time_budget cut). Heavy read: under load it answers busy or timeout — retry with backoff. No auth; 1200 requests/min shared by all tools. A heuristic signal, not an AML or legal determination.
    ConnectorNo auth
  • Adds up to 500 messages and 30 days to an existing box for 0.05 USDC, up to 1000 messages left and an expiry 60 days ahead. Nothing renews by itself: when `allowance.expiresAt` passes, every message in the box is deleted within the hour. - **Cost:** 0.05 USDC per call, paid over x402. Anyone may pay, not only the box's address. - **Inputs:** `address` (path), any letter case. No body. - **Returns:** `granted`, what the payment added, cut to stay within the cap, and the `allowance` after it. - **Errors:** - 409 `box_required`: the address has no box. Create one first (`boxCreate`). - 409 `allowance_full`: the box is at its cap and a top-up would add nothing. Wait until messages are used or days pass. - **Next:** - `boxStatus`: read the allowance. Costs 50000 base units (0.05 USDC) per call. Payment goes in params._meta["x402/payment"]; use an x402-aware MCP client (see https://docs.arcgate.dev/#arcgate/description/mcp-for-agents).
    ConnectorNo auth
  • Resolve a place name to a place id, or list the places containing a map area. Pass q to match a place-name PREFIX, or all four of nelat, nelng, swlat and swlng to list every place covering that box — exactly one of the two, never both. Each result carries the bounding box, place type, and containment chain an area search needs. Place geometry is stripped: a single nearby response carries 247 KB of boundary polygons upstream, none of which reaches the caller.
    ConnectorNo auth
  • Open an upload box in the conversation so the owner can add a photo from their phone or computer to their Google listing. Use this whenever the owner wants to add a photo — a photo they paste into the chat cannot be sent to Google directly. The upload becomes a DRAFT; after it arrives, show the owner the draft and publish it with publish_change only when they say yes. If no box appears, give the owner the link in this tool's result.
    ConnectorNo auth
  • READ-ONLY. BULK Buy Box / Featured Offer export for a LIST of ASINs (up to 100). Returns a clean table per ASIN: buy_box_price (all-in for the customer), lowest_price, offer_count, whether you win the Buy Box, FBA/FBM of the winner, and a reason when there is no Buy Box (suppressed / no offers). Use for "give me the Buy Box price for these ASINs" / export. Note: Amazon rate limits make long lists slow (~1 batch of 20 every 10s). For the Buy Box across your WHOLE OWN catalog, do NOT loop this — query the cached daily snapshot via execute_sql (table fact_buybox_snapshot), which the worker fills nightly.
    ConnectorOAuth
  • Get one openSenseMap citizen science sensor station (senseBox) by its box id — full sensor readout with latest value, unit, and measurement time per sensor (temperature, humidity, PM2.5/PM10 air quality, pressure, noise...), plus location, exposure (outdoor/indoor/mobile) and station metadata. Box ids come from opensensemap_nearby. Community-operated uncalibrated sensors. Example: opensensemap_box({ box_id: "65e8d93acbf5700007f920ca" })
    ConnectorNo auth
  • A cloud box is a Linux container spacesheep runs for the person, with Claude Code, Codex or Antigravity and sessionpipe in it: nothing to install, it sleeps 10 minutes after its last reply and wakes for the next message (about 30 s), and its session shows on spacesheep.dev/sessions like one on their own computer. It has spacesheep's MCP server and /sheep skill, so pages it makes are spaces. It comes with Max. The agent runs on the person's own account with its maker — Claude (Pro or Max), ChatGPT or Google, signed in once on the box's page in the agent's own sign-in — or on their own key (ANTHROPIC_API_KEY, OPENAI_API_KEY or GEMINI_API_KEY; Settings → AI assistant or set_secret). A GITHUB_TOKEN reaches only the box's own repos (up to 5 per box). YOLO mode (yolo: true) lets Claude Code run without permission checks and merge pull requests; off, it opens pull requests and merging is refused. A box on a key reaches the model API, GitHub, spacesheep and the package registries, nothing else. Start a NEW box, and its first turn when `prompt` is given: the agent works on it (in clones of `repos` when given, each in its own folder). Answers at once with the box, its session and session_url — send the person session_url — then read progress and the reply with list_boxes. A box on a Claude account answers with `sign_in`: the person signs in on session_url first, and messages wait until then — tell them so. Use only when the person asked for work on a cloud box / a new machine / "in the cloud"; to continue a box's work, use message_box.
    ConnectorOAuth
  • List public Box Office Mojo showdown comparison rows, including comparison identifiers, movie counts, and domestic box-office totals when present. This parameter-free catalog discovers comparisons; it does not fetch their individual release metrics. Pass a returned id, path, or URL to boxofficemojo_showdown for one comparison's details. Blocked pages or missing table rows return an upstream error.
    ConnectorNo auth
  • List public Box Office Mojo showdown comparison rows, including comparison identifiers, movie counts, and domestic box-office totals when present. This parameter-free catalog discovers comparisons; it does not fetch their individual release metrics. Pass a returned id, path, or URL to boxofficemojo_showdown for one comparison's details. Blocked pages or missing table rows return an upstream error.
    ConnectorNo auth
  • osirAppDeploy: Deploy an app to Osir (free tier) and get a live HTTPS URL; the app runs isolated in a microVM. Deploying an existing app name redeploys it (new version) and applies any secrets set via osirAppSetSecret. A plain static website (HTML/CSS/JS with no framework or build step) is also supported: it is auto-detected and served directly; pass language 'node' for it. To put the app on the user's OWN VPS, server or production box instead, deploy it here first and then call osirAppDeployToVps - never SSH into the box or write an install script. Once an app is on the user's own VPS, redeploying HERE under the same name is how you update it: the platform re-ships it to the box and keeps its domain. Requires authentication.
    ConnectorNo auth
  • ACTION. Reprices the given SKUs to win the Buy Box: compares your price with the Buy Box price and proposes a new one (`delta` below the Buy Box, never below `floor`). With confirm=false it returns a PREVIEW (before→after); with confirm=true it applies the prices. ALWAYS show the preview and get the user's explicit approval before calling with confirm=true.
    Connector
    Destructive
    OAuth
  • ASIN-level buy-box head-to-head between two operators (sellers). For the ASINs BOTH carry (contested), returns who holds the buy-box (winner), each operator's buy-box share, their sanitized average prices and the price gap, how many OTHER sellers are on the listing, whether Amazon holds the box, and a `situation` tag (amazon_in_box | reseller_swarm | tied_price | price_gap) — plus operator_a's estimated 30-day revenue-at-risk. Also returns each side's WHITESPACE: high-revenue ASINs that operator wins which the OTHER doesn't carry (expansion targets). Use when the user asks 'compare seller A vs seller B', 'where do these two sellers overlap / compete', 'who wins the buy-box between them', 'show me the head-to-head', or 'what does A sell that B doesn't'. Sortable by revenue-at-risk (default), price gap, or share gap.
    ConnectorNo auth
  • Who's competing with the seller on their OWN products. Pass an ASIN from your catalog to see the full competitor list for that listing (who wins the buy-box, FBA/FBM, observed price, how long they've been on it) plus your own buy-box / undercut status. Omit the ASIN to get your most-contested products (most competing sellers / where you're being undercut). Requires a connected store (Starter+). Use for 'who am I competing with', 'am I losing the buy-box', 'who else sells B0...', 'where am I under pressure'.
    ConnectorNo auth