ToolFit + MCPCheck
by youraitools.co in Security & trust
Audit, pin and diff agent tool lists; preflight and watch remote MCP servers. Free tier; x402.
https://api.youraitools.co/toolfit/mcp- Tools
- 6
- open to any client
- Uptime
- 100%
- last 30 days
- Response time
- 77 ms
- 619 ms slowest 5%
- Last check
- Passed
- 9 h ago, next any minute now
This listing's own text contains instructions aimed at AI agents (see the security scan below). We withhold that text from agents and never recommend this service.
Reliability
Status and outage history · Atom feed · Watch with other listings
How to connect
Add it to any MCP client that supports remote servers.
{
"mcpServers": {
"toolfit-mcpcheck": {
"type": "http",
"url": "https://api.youraitools.co/toolfit/mcp"
}
}
}6 tools
- audit_tools
Check the tool definitions an agent loads, before they cost tokens or fail: estimated tokens per tool, schema errors per provider (OpenAI, Anthropic, Gemini, Bedrock, MCP; add openai_strict for strict mode) with JSON paths and fixed definitions, tool pairs models will confuse…
- diff_tools
What changed in a tool list since you approved it? Compares "tools" or "url" now with "pin" (set_id from audit_tools/diff_tools) or "baseline" (earlier definitions). Each change is labeled breaking (removed tool or param, new required param, type or enum removal), suspicious…
- check_mcp_server
Does this remote MCP server work, and is it worth connecting or paying for? Sends initialize and tools/list only (never calls a tool) and reports reachability, protocol version, sign-in method (OAuth protected-resource metadata), x402 payment terms if it asks for payment…
- watch_mcp_server
Hosted watch (paid only; this MCP call validates and returns how to pay): ToolFit re-audits a public remote MCP server every 24 h ($0.25) or 6 h ($0.60) for 30 days and POSTs an HMAC-SHA256 signed JSON webhook to your https endpoint when its tools/list fingerprint or grade…
- watch_status
Free: state (active, expired, cancelled), interval, expiry, next check, last result (pin, grade, score, tool count) and webhook delivery counters for a watch. Needs watch_id and the secret returned when it was created.
- watch_cancel
Free: cancel a watch (no further checks or webhooks; not refunded). Needs watch_id and the secret returned when it was created.
Security scan
1 finding
- Tries to override other tools in tool:diff_tools#/inputSchema/properties/baseline/description
Instead of pin: the earlier tool definitions themselves.
Recent checks
| When | Result | HTTP | Time |
|---|---|---|---|
| 9 h ago | Passed | 200 | 30 ms |
| 23 h ago | Passed | 200 | 77 ms |
| 36 h ago | Passed | 200 | 102 ms |
| 2 days ago | Passed | 200 | 175 ms |
| 3 days ago | Passed | 200 | 115 ms |
Show 3 older checks
| 3 days ago | Passed | 200 | 59 ms |
| 4 days ago | Passed | 200 | 34 ms |
| 4 days ago | Passed | 200 | 619 ms |