{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_u24ys237he7y","handle":"mcp-toolbelt","url":"https://wellknown.network/agents/mcp-toolbelt","links":{"self":"https://wellknown.network/agents/mcp-toolbelt/record.json","html":"https://wellknown.network/agents/mcp-toolbelt","markdown":"https://wellknown.network/agents/mcp-toolbelt/record.md","api":"https://wellknown.network/api/v1/agents/mcp-toolbelt","status":"https://wellknown.network/api/v1/agents/mcp-toolbelt/status","claim":"https://wellknown.network/agents/mcp-toolbelt/claim","claimApi":"https://wellknown.network/api/v1/claims","badge":"https://wellknown.network/agents/mcp-toolbelt/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air:papacasper.com:server:mcp-toolbelt","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-toolbelt","summary":"29 pay-per-call DNS, SEO, SSL, security, and dev tools for AI agents. x402, no API key.","description":"29 pay-per-call DNS, SEO, SSL, security, and dev tools for AI agents. x402, no API key.","publisher":{"name":"com.papacasper","url":null},"homepage":null,"repository":null,"version":"1.1.0","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://papacasper.com/mcp","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-08-30T10:57:47.401772Z","publishedAt":"2026-08-30T10:57:47.401772Z","registryName":"com.papacasper/mcp-toolbelt"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"derived"},{"slug":"data.database","name":"Databases","confidence":1,"provenance":"derived"},{"slug":"dev.version-control","name":"Version Control","confidence":1,"provenance":"derived"},{"slug":"infra.browser-automation","name":"Browser Automation","confidence":1,"provenance":"derived"},{"slug":"data.web-scraping","name":"Web Scraping","confidence":0.992,"provenance":"derived"},{"slug":"content.seo","name":"SEO","confidence":0.807,"provenance":"derived"},{"slug":"documents.extraction","name":"Data Extraction","confidence":0.583,"provenance":"derived"},{"slug":"security.identity","name":"Identity & Access","confidence":0.569,"provenance":"derived"}],"categories":["code","content","data","dev","documents","infra","security"]},"observed":{"status":"live","statusReason":"Responded 1h ago.","lastOkAt":"2026-09-05T22:26:16.690Z","lastProbedAt":"2026-09-05T22:26:16.690Z","statusComputedAt":"2026-09-05T22:26:44.086Z","reliability30d":{"probes":1,"successRate":1,"p50Ms":91},"latestObservations":[{"at":"2026-09-05T22:26:16.690Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":91,"error":null,"detail":{"tools":[{"name":"url_to_markdown","description":"Fetch a URL and return its main text content as clean, readable plain text/markdown-ish output. Strips scripts, styles, and HTML tags."},{"name":"security_headers_audit","description":"Fetch a URL and audit its response for security-relevant HTTP headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy)."},{"name":"redirect_chain_check","description":"Follow a URL through every HTTP redirect hop and report the full chain, final destination, and issues like redirect loops, too many hops, or HTTPS-to-HTTP downg"},{"name":"page_performance_check","description":"Fetch a URL and measure time-to-first-byte, total fetch time, and response size. Flags missing compression, missing Cache-Control, oversized payloads, and slow "},{"name":"cors_policy_check","description":"Send a probe request with a foreign Origin header to a URL and report its CORS response headers. Flags wildcard-origin + credentials combinations and arbitrary-"},{"name":"structured_data_extract","description":"Fetch a URL and extract structured data deterministically: JSON-LD blocks, OpenGraph/meta tags, and optional caller-supplied CSS-selector fields (e.g. { price: "},{"name":"tech_stack_fingerprint","description":"Fetch a URL and fingerprint its likely tech stack from response headers (server, x-powered-by, x-generator) and HTML markers (generator meta tag, framework/CMS-"},{"name":"ai_crawler_policy_check","description":"Check a site's robots.txt for explicit directives targeting known AI crawlers (GPTBot, ClaudeBot, CCBot, PerplexityBot, Google-Extended, Bytespider, Amazonbot, "},{"name":"seo_audit","description":"Fetch a URL and run an SEO audit: title/meta description length, canonical tag, Open Graph + Twitter Card tags, html lang attribute, viewport meta, heading stru"},{"name":"check_robots_sitemap","description":"Check whether a site has a valid robots.txt and sitemap.xml, and return their raw contents (truncated)."},{"name":"broken_link_check","description":"Crawl a site starting from a URL (same-origin pages only, bounded by maxPages) and check every linked URL for broken status codes. Returns broken links with the"},{"name":"favicon_manifest_check","description":"Check a site for favicon, apple-touch-icon, web app manifest, and theme-color presence — a quick completeness check for browser/OS chrome and PWA metadata."},{"name":"json_ld_schema_validator","description":"Fetch a URL, extract every JSON-LD (<script type=\"application/ld+json\">) block, and validate basic structure — @context/@type presence plus required fields for "},{"name":"sitemap_url_validator","description":"Parse a site's sitemap.xml (following one level of sitemap-index nesting) and check the HTTP status of every listed URL. Concurrency-limited, capped at 200 URLs"},{"name":"domain_health_check","description":"Check a domain's registration expiry (via WHOIS) and DNS health: nameservers, A/AAAA, MX, SPF, and DMARC records. Flags common misconfigurations."},{"name":"dns_propagation_check","description":"Query a DNS record for a domain against several major public resolvers (Google, Cloudflare, Quad9, OpenDNS) in parallel and compare the answers. Flags mismatche"},{"name":"ip_geolocation_asn_lookup","description":"Resolve a hostname to its IPv4 addresses and look up each one's ASN, network prefix, country code, and network owner via Team Cymru's DNS-based WHOIS service (n"},{"name":"email_deliverability_check","description":"Deep-dive email deliverability check for a domain: MX records + reverse-DNS (PTR) on each MX host, common DKIM selector probing, SPF lookup-count (RFC 7208 caps"},{"name":"domain_availability_check","description":"Check whether a domain is registered, plus scan common typo-squat variants (adjacent-key substitution, letter omission/doubling, transposition) across popular T"},{"name":"ssl_cert_check","description":"Connect to a host over TLS and report its certificate's expiry date, days remaining, issuer, and subject."},{"name":"check_open_ports","description":"TCP-connect scan a host for open ports. Defaults to a list of ~20 common service ports (SSH, HTTP/S, mail, DBs, etc.) if none are given. For checking your own i"},{"name":"websocket_endpoint_check","description":"Test a WebSocket endpoint (ws:// or wss://): attempts the handshake, reports success/failure, time-to-open in ms, and close code/reason. Useful for verifying a "},{"name":"domain_report","description":"Bundle: runs seo_audit, domain_health_check (WHOIS + DNS: nameservers, A/AAAA, MX, SPF, DMARC), and email_deliverability_check (DKIM, SPF lookup-count, DMARC st"},{"name":"safe_browsing_check","description":"Check a URL against Google Safe Browsing's malware/phishing/unwanted-software/PUA blocklists. Requires GOOGLE_SAFE_BROWSING_API_KEY to be configured server-side"},{"name":"ssl_labs_grade","description":"Full SSL Labs-style TLS assessment: overall letter grade, protocol support (TLS 1.0-1.3), cipher strength, certificate chain issues, and known vulnerabilities ("},{"name":"pagespeed_insights","description":"Run Google's real PageSpeed Insights (Lighthouse + Chrome UX Report) against a URL: performance score, Core Web Vitals (LCP, CLS, INP/TBT), and real-user field "},{"name":"package_vulnerability_check","description":"Look up a package (optionally pinned to a version) against OSV.dev's aggregated vulnerability database (GitHub Advisories, PyPA, RustSec, Go vuln DB, etc.) for "},{"name":"github_repo_health_check","description":"Check a GitHub repository's health signals: stars, forks, open issues, license, archived/disabled status, and days since last push. Flags likely-abandoned or un"},{"name":"email_address_validate","description":"Validate a single email address: RFC syntax check, MX record lookup on the domain, disposable/temporary-email-provider detection, and role-account detection (in"}],"toolCount":29,"serverName":"mcp-toolbelt","capabilities":["tools"],"serverVersion":"1.0.0","protocolVersion":"2024-11-05"}}],"tools":[{"name":"url_to_markdown","description":"Fetch a URL and return its main text content as clean, readable plain text/markdown-ish output. Strips scripts, styles, and HTML tags."},{"name":"security_headers_audit","description":"Fetch a URL and audit its response for security-relevant HTTP headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy)."},{"name":"redirect_chain_check","description":"Follow a URL through every HTTP redirect hop and report the full chain, final destination, and issues like redirect loops, too many hops, or HTTPS-to-HTTP downg"},{"name":"page_performance_check","description":"Fetch a URL and measure time-to-first-byte, total fetch time, and response size. Flags missing compression, missing Cache-Control, oversized payloads, and slow "},{"name":"cors_policy_check","description":"Send a probe request with a foreign Origin header to a URL and report its CORS response headers. Flags wildcard-origin + credentials combinations and arbitrary-"},{"name":"structured_data_extract","description":"Fetch a URL and extract structured data deterministically: JSON-LD blocks, OpenGraph/meta tags, and optional caller-supplied CSS-selector fields (e.g. { price: "},{"name":"tech_stack_fingerprint","description":"Fetch a URL and fingerprint its likely tech stack from response headers (server, x-powered-by, x-generator) and HTML markers (generator meta tag, framework/CMS-"},{"name":"ai_crawler_policy_check","description":"Check a site's robots.txt for explicit directives targeting known AI crawlers (GPTBot, ClaudeBot, CCBot, PerplexityBot, Google-Extended, Bytespider, Amazonbot, "},{"name":"seo_audit","description":"Fetch a URL and run an SEO audit: title/meta description length, canonical tag, Open Graph + Twitter Card tags, html lang attribute, viewport meta, heading stru"},{"name":"check_robots_sitemap","description":"Check whether a site has a valid robots.txt and sitemap.xml, and return their raw contents (truncated)."},{"name":"broken_link_check","description":"Crawl a site starting from a URL (same-origin pages only, bounded by maxPages) and check every linked URL for broken status codes. Returns broken links with the"},{"name":"favicon_manifest_check","description":"Check a site for favicon, apple-touch-icon, web app manifest, and theme-color presence — a quick completeness check for browser/OS chrome and PWA metadata."},{"name":"json_ld_schema_validator","description":"Fetch a URL, extract every JSON-LD (<script type=\"application/ld+json\">) block, and validate basic structure — @context/@type presence plus required fields for "},{"name":"sitemap_url_validator","description":"Parse a site's sitemap.xml (following one level of sitemap-index nesting) and check the HTTP status of every listed URL. Concurrency-limited, capped at 200 URLs"},{"name":"domain_health_check","description":"Check a domain's registration expiry (via WHOIS) and DNS health: nameservers, A/AAAA, MX, SPF, and DMARC records. Flags common misconfigurations."},{"name":"dns_propagation_check","description":"Query a DNS record for a domain against several major public resolvers (Google, Cloudflare, Quad9, OpenDNS) in parallel and compare the answers. Flags mismatche"},{"name":"ip_geolocation_asn_lookup","description":"Resolve a hostname to its IPv4 addresses and look up each one's ASN, network prefix, country code, and network owner via Team Cymru's DNS-based WHOIS service (n"},{"name":"email_deliverability_check","description":"Deep-dive email deliverability check for a domain: MX records + reverse-DNS (PTR) on each MX host, common DKIM selector probing, SPF lookup-count (RFC 7208 caps"},{"name":"domain_availability_check","description":"Check whether a domain is registered, plus scan common typo-squat variants (adjacent-key substitution, letter omission/doubling, transposition) across popular T"},{"name":"ssl_cert_check","description":"Connect to a host over TLS and report its certificate's expiry date, days remaining, issuer, and subject."},{"name":"check_open_ports","description":"TCP-connect scan a host for open ports. Defaults to a list of ~20 common service ports (SSH, HTTP/S, mail, DBs, etc.) if none are given. For checking your own i"},{"name":"websocket_endpoint_check","description":"Test a WebSocket endpoint (ws:// or wss://): attempts the handshake, reports success/failure, time-to-open in ms, and close code/reason. Useful for verifying a "},{"name":"domain_report","description":"Bundle: runs seo_audit, domain_health_check (WHOIS + DNS: nameservers, A/AAAA, MX, SPF, DMARC), and email_deliverability_check (DKIM, SPF lookup-count, DMARC st"},{"name":"safe_browsing_check","description":"Check a URL against Google Safe Browsing's malware/phishing/unwanted-software/PUA blocklists. Requires GOOGLE_SAFE_BROWSING_API_KEY to be configured server-side"},{"name":"ssl_labs_grade","description":"Full SSL Labs-style TLS assessment: overall letter grade, protocol support (TLS 1.0-1.3), cipher strength, certificate chain issues, and known vulnerabilities ("},{"name":"pagespeed_insights","description":"Run Google's real PageSpeed Insights (Lighthouse + Chrome UX Report) against a URL: performance score, Core Web Vitals (LCP, CLS, INP/TBT), and real-user field "},{"name":"package_vulnerability_check","description":"Look up a package (optionally pinned to a version) against OSV.dev's aggregated vulnerability database (GitHub Advisories, PyPA, RustSec, Go vuln DB, etc.) for "},{"name":"github_repo_health_check","description":"Check a GitHub repository's health signals: stars, forks, open issues, license, archived/disabled status, and days since last push. Flags likely-abandoned or un"},{"name":"email_address_validate","description":"Validate a single email address: RFC syntax check, MX record lookup on the domain, disposable/temporary-email-provider detection, and role-account detection (in"}],"package":null},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"com.papacasper/mcp-toolbelt","url":"https://registry.modelcontextprotocol.io/v0/servers/com.papacasper%2Fmcp-toolbelt","firstSeenAt":"2026-09-05T20:18:54.168Z","fetchedAt":"2026-09-05T20:18:54.168Z","normalizedAt":"2026-09-05T20:18:54.168Z"}]},"firstSeenAt":"2026-09-05T20:18:54.168Z","updatedAt":"2026-09-05T22:26:55.482Z"}