73trust / 100

ToolFit + MCPCheck

by youraitools.co in Security & trust

MCP serverPassing, checked 9 h ago

Audit, pin and diff agent tool lists; preflight and watch remote MCP servers. Free tier; x402.

https://api.youraitools.co/toolfit/mcp
Tools
6
open to any client
Uptime
100%
last 30 days
Response time
77 ms
619 ms slowest 5%
Last check
Passed
9 h ago, next any minute now

Scan it nowHow to connect

This listing's own text contains instructions aimed at AI agents (see the security scan below). We withhold that text from agents and never recommend this service.

Reliability

All checks passedSome failedAll failedNot checked

Status and outage history · Atom feed · Watch with other listings

How to connect

Add it to any MCP client that supports remote servers.

{
  "mcpServers": {
    "toolfit-mcpcheck": {
      "type": "http",
      "url": "https://api.youraitools.co/toolfit/mcp"
    }
  }
}

6 tools

  • audit_tools

    Check the tool definitions an agent loads, before they cost tokens or fail: estimated tokens per tool, schema errors per provider (OpenAI, Anthropic, Gemini, Bedrock, MCP; add openai_strict for strict mode) with JSON paths and fixed definitions, tool pairs models will confuse…

  • diff_tools

    What changed in a tool list since you approved it? Compares "tools" or "url" now with "pin" (set_id from audit_tools/diff_tools) or "baseline" (earlier definitions). Each change is labeled breaking (removed tool or param, new required param, type or enum removal), suspicious…

  • check_mcp_server

    Does this remote MCP server work, and is it worth connecting or paying for? Sends initialize and tools/list only (never calls a tool) and reports reachability, protocol version, sign-in method (OAuth protected-resource metadata), x402 payment terms if it asks for payment…

  • watch_mcp_server

    Hosted watch (paid only; this MCP call validates and returns how to pay): ToolFit re-audits a public remote MCP server every 24 h ($0.25) or 6 h ($0.60) for 30 days and POSTs an HMAC-SHA256 signed JSON webhook to your https endpoint when its tools/list fingerprint or grade…

  • watch_status

    Free: state (active, expired, cancelled), interval, expiry, next check, last result (pin, grade, score, tool count) and webhook delivery counters for a watch. Needs watch_id and the secret returned when it was created.

  • watch_cancel

    Free: cancel a watch (no further checks or webhooks; not refunded). Needs watch_id and the secret returned when it was created.

Security scan

1 finding

  • Tries to override other tools in tool:diff_tools#/inputSchema/properties/baseline/description
    Instead of pin: the earlier tool definitions themselves.

Recent checks

WhenResultHTTPTime
9 h agoPassed20030 ms
23 h agoPassed20077 ms
36 h agoPassed200102 ms
2 days agoPassed200175 ms
3 days agoPassed200115 ms
Show 3 older checks
3 days agoPassed20059 ms
4 days agoPassed20034 ms
4 days agoPassed200619 ms