URL origin only
ConnectorNo auth
677,173 tools. Updated 2026-10-19 14:59
"Origin" matching MCP tools:
- Origin header shape, value discardedConnectorNo auth
- Origin scheme+host shape, URL discardedConnectorNo auth
- Core dossier check: Send a CORS preflight OPTIONS request to https://<domain>/ and return the access-control-* response headers. Use to verify CORS policy for a specific origin-method pair, or to check whether a domain allows cross-origin requests; provide origin and method to simulate a precise preflight, or omit to use defaults (origin: https://domainposture.com, method: GET). Single OPTIONS request via fetch, 5 s timeout. Returns a CheckResult: on success, {status:"ok", headers:{access-control-allow-origin,...}}; on failure, {status:"error", reason}.ConnectorNo auth
- Add an IP or Origin allowlist rule to a Global node. New rules are deactivated and do nothing until activated. Active IP rules limit which client IPs can call the node; active origin rules limit which Origin headers it accepts. With both kinds active, a request must pass both. Everything else gets HTTP 403 within about 10 seconds. Rules don't affect the Chainstack API, so they can always be changed or deactivated with these tools. Before activating, confirm with the user that the IP rules cover every IP that calls the node (servers, CI, their own machine); you can't check this. Origin rules are for browser-only access: once one is active, every request without an Origin header (servers, scripts, curl) is blocked, even from an allowed IP. If an identical rule exists, it is returned instead of a duplicate.ConnectorDestructiveNo auth
- Activate or deactivate every access rule on a node at once. Activating enforces every rule within about 10 seconds: active IP rules limit which IPs can call the node, active origin rules limit which Origin headers it accepts, and a request must pass both kinds. Others get HTTP 403. First confirm with the user that the IP rules cover every IP that calls the node (servers, CI, their own machine); you can't check this. Origin rules block every request without an Origin header (servers, scripts, curl), even from an allowed IP. Deactivating opens the node to any IP and origin.ConnectorDestructiveNo auth
Matching MCP Servers
- AlicenseAqualityAmaintenanceEnables AI assistants to control Origin/OriginPro on Windows, including data import, worksheet editing, graphing, analysis, and figure export.25151 PyPI128MIT
- AlicenseBqualityBmaintenanceEnables automated data import, analysis, graphing, and project management for Origin/OriginPro through a hardened MCP interface with constrained file access and optional expert LabTalk mode.24MIT
Matching MCP Connectors
URL origin only
Origin header shape, value discarded
- FREE catalog of Rainmaker wells (001–012, 015, 016): id, name, tool, origin, price_usd, description, mcp_path. Also returns catalog_url. After picking a well, open {origin}/mcp directly.ConnectorNo auth
- Search the Software Heritage archive for archived origins (repository URLs) whose URL matches a substring or pattern. Returns each matching origin with its visit count and the date it was last captured. Use this to find the archived URL for a project before asking about its status — the archive keys everything on the ORIGIN URL, so "torvalds/linux" finds the GitHub origin and any separately archived copy of the same project on another forge. Sourced from the Software Heritage archive.ConnectorNo auth
- Report whether one repository URL is archived, and as of when. Returns the most recent visit that produced a usable snapshot: the visit date, the snapshot id, and the visit type (git, hg, svn, npm, pypi…). This is the tool that answers "is this code safe" — a repository that vanishes tomorrow is recoverable from the snapshot named here. Pass the origin URL exactly as it appears in origin_search; the archive treats a differing URL as a different origin. Sourced from the Software Heritage archive.ConnectorNo auth
- Test a URL for CORS misconfigurations. Sends preflight (OPTIONS) requests with various Origin headers to detect: wildcard origins with credentials, origin reflection (echoing any origin), null origin acceptance, subdomain wildcard bypass, and missing Vary headers. Returns risk level (safe/low/medium/high/critical) plus per-origin results. "unknown" means nothing was actually tested — every origin either failed to connect or answered 5xx, so the target returned no CORS decision; never read it as "safe". A 4xx preflight IS a real result (the server refused it and a browser would fail closed).ConnectorNo auth
- Look up origin ASN, network name, prefix and country for an IP via Team Cymru origin lookup (DoH) plus RDAP. Read-only; price 0.0 (free).ConnectorNo auth
- Look up origin ASN, network name, prefix and country for an IP via Team Cymru origin lookup (DoH) plus RDAP. Read-only; price 0.0 (free).ConnectorNo auth
- One origin country, whole, in a single call: US containerised import volume and value through the 8 major gateways with the trend, the top commodity chapters, which gateways receive it, the effective tariff burden that origin actually pays at the national border, and the pre-registered studies that touch it. Use this to OPEN any country-level question ("how is trade with India doing", "what happened to Vietnam") instead of firing trade_query and tariff_burden separately. Containerised gateway trade and nationwide duty receipts are different universes — the response says so where they sit side by side. Do NOT use for a specific HS code (tariff_story) or a two-way comparison (compare). No API key required.ConnectorNo auth
- WRITE. Purge the cached content of one pull zone — everything, or only files carrying a cache tag. Nothing is lost (the CDN refetches from the origin) but the origin takes the refill load. bunny.net: POST /pullzone/{id}/purgeCache.ConnectorDestructiveNo auth
- Resolve one font by family name or origin URL from get_fonts. Returns family plus origin download URLs. Original bytes are stored in the capture; read resources[].path with get_capture_asset.ConnectorAPI key
- Send a probe request with a foreign Origin header to a URL and report its CORS response headers. Flags wildcard-origin + credentials combinations and arbitrary-origin reflection, both common CORS misconfigurations.ConnectorNo auth
- Repair transport/flight items missing origin coordinates by parsing the item name and geocoding. For example, "Train: Paddington → Oxford" will extract "Paddington" as origin and geocode it. Can repair a single item or all transport items in a trip.ConnectorAPI key
- Repair transport/flight items missing origin coordinates by parsing the item name and geocoding. For example, "Train: Paddington → Oxford" will extract "Paddington" as origin and geocode it. Can repair a single item or all transport items in a trip.ConnectorAPI key
- Get the routed driving commute for a job site. Drive times use typical weekday rush-hour traffic. Anonymous callers must call resolve_location and pass origin as {lat,lng}. Connected callers may use a saved origin with filters:read. location_index comes from search_jobs.ConnectorNo auth
- HEAD request to a URL from this environment. Returns status code, time, and response headers, or resolution/connection/timeout error. Optional connectHost, headers (e.g. Host), and servername for direct origin probes bypassing CDN DNS (curl -H Host to origin IP).ConnectorOAuth
- Check a site's machine-readable files (llms.txt, agent.json, robots.txt) for presence and validity. Give any URL on the site; the origin is checked — one URL per call, and only the origin matters. Returns which files exist and whether each parses as valid. Free, anonymous, read-only network check. Example: url="https://brianbooms.com/lyrics/worthy" checks the brianbooms.com origin for all three files and reports presence plus validity.ConnectorNo auth