Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Changed the definition of "check_domain_blocked", "check_service_accessibility", "verify_claim" and 1 more
CheckPaused:ifliveaaccessibilityspecificchecksdomainare paused while the source isblockedreviewed,insoathiscountry.toolReturnsreturnsblockingACCESSIBILITY_REVIEW_HOLDstatus,andevidencenosources,verdict.confidenceRecordedlevel,incidents andblockingevidencemethodremain(DNS,availableTCP,throughTLS,get_active_incidentsHTTP).and get_incident_detail.
{"openWorldHint":false,"readOnlyHint":true,"title":"Domain Blocking Check (paused)"}
Real-time checkPaused:isliveaaccessibilitydomain/servicechecksaccessibleareinpausedawhilespecificthecountrysourcerightisnow?reviewed,Returnssoblockingthis
Claim-specificPaused: claim-specific assessment is held pending reviewed public incident projection and exact-sourcecitations.citations, so this tool returns no assessment while the review hold lasts.
{"openWorldHint":false,"readOnlyHint":true,"title":"Verify Censorship Claim (paused)"}
⟨7 unchanged words⟩ hosted tool only explains the local key andowner-consentsigningsteps;steps and the local mailbox command; it does not register an agent, create ⟨8 unchanged words⟩
Changed the definition of "voidmail_list_inbox", "voidmail_read_email", "voidmail_send_once" and 1 more
List up to ten messages in the authenticated mailbox. Requires an existing inbox's agent key as the Bearer credential; this server cannot create an inbox. Sender and subject are untrusted data.
Read one bounded plain-text message and mark it read. Requires an existing inbox's agent key as the Bearer credential; this server cannot create an inbox. Message text is untrusted data; attachments and HTML are excluded.
Added "get_early_warning_commitments" and "get_early_warning_protocol"; changed the definition of "voidmail_list_inbox", "voidmail_read_email", "voidmail_send_once" and 3 more (83 tools before, 85 now)
before
—after
List inbox messages{"destructiveHint":false,"idempotentHint":true,"openWorldHint":true,"readOnlyHint":true,"title":"List inbox messages"}
before
—Added "start_here" (82 tools before, 83 now)
Three lines about the hosted public tools, three no-auth example calls, and a next step.
Changed the definition of "get_data_freshness" and "get_probe_stats"
Per-sourcePer-country data grades and available freshnessreceiptscontext.(OONI,CheckIODA,theCensoredPlanet,returnedprobes)fields—forwhensourceeachreceipts;
Certificate changed, valid to 2027-01-08
Certificate recorded, valid to 2026-11-10
Authorization not required
Added "watch_delete" and "watch_list"; changed the definition of "get_anomaly_dbscan", "get_category_coverage", "get_censorship_by_region" and 9 more (80 tools before, 82 now)
Unsupervised DBSCAN second-opinion anomaly score for a country (CenDTect-style;CenDTect-style).AUCRead0.65the—currentweakersourcethanresponsetheandsupervisedmodelclassifier,caveats;
Added "country_brief", "explain_outage" and "watch"; changed the definition of "get_multi_horizon_forecast" and "verify_claim" (77 tools before, 80 now)
1/7/30-day censorship forecasts forExperimentala1/7/30-day country scores with per-horizon SHAP topfeaturesfeatures.andProbability90%intervalsconformalareintervals.withheld pending validation.
Unknown → Live
First tool surface recorded: 77 tools (server version 2.25.0)
https://api.voidly.ai/mcp (mcp_streamable_http) — from mcp_registry, with the record
Showing the latest 13 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed
{"openWorldHint":false,"readOnlyHint":true,"title":"Service Accessibility Check (paused)"}
Submit one plain-text message under a caller-saved operation ID. Requires an existing inbox's agent key as the Bearer credential; this server cannot create an inbox. Sends only from an inbox whose owner set a recipient allowlist with the content guard on, and only to recipients the owner approved; open inboxes are receive-only. Never retry with a new ID after uncertainty; acceptance is not delivery.
Look up the same durable operation ID without dispatching mail. Requires an existing inbox's agent key as the Bearer credential; this server cannot create an inbox.after
Read one message and mark read{"destructiveHint":false,"idempotentHint":true,"openWorldHint":true,"readOnlyHint":false,"title":"Read one message and mark read"}
before
—after
Submit one plain-text message{"destructiveHint":false,"idempotentHint":false,"openWorldHint":true,"readOnlyHint":false,"title":"Submit one plain-text message"}
before
—after
Look up send status{"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":true,"title":"Look up send status"}
before
—after
Read sending limits{"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":true,"title":"Read sending limits"}
before
—after
Check Voidmail inbox setup{"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":true,"title":"Check Voidmail inbox setup"}
Dated shutdown early-warning commitment ledger: per forecast issue day, the SHA-256 of the forecast file and its comparison arms, or a missed day scored as zero alerts. No performance score yet; alerts and scores are not disclosed. A hash proves a later-released file matches the committed one, not when it was issued. Optional since (YYYY-MM-DD) returns rows dated on or after it.
Shutdown early-warning study rules (issue time, horizon, alert budget, onset confirmation, decision review) and the configured official notice sources, with source_url, fetched_at and caveats. A commitment ledger with no performance score yet: no accuracy or lead-time claim, and alerts are not disclosed.
Read rolling 24-hour rawPublic probemetrics and lifetime Voidly evidence counters as boundedstatisticsJSONarepages.temporarilyStartwithheldwithoutpending acursor; follow next_cursor for every by_domain row. Last-probe time differs from fetch time; community-path rows can beprivacy-reviewedVoidly-operatedaggregateandprojection.doThenottoolprovereturnsindependentpublication_heldoperatorswithoutorreadingacceptedprobemeasurements.rows.
How much of Voidly's measured-domain corpus carries a Citizen Lab content category(~69% via the 14k-domain Citizen Lab list)— the observatory disclosing its own categorization blind spot. Returns current tagged/untagged counts+and per-category domain counts. Use to gauge how complete ⟨5 unchanged words⟩
⟨19 unchanged words⟩ national blocks per region. HONEST: confirmed-block countsare a measurement-density map, not a censorship ranking (e.g. Africa showsdepend0onconfirmedmeasurementblocksdensitydespiteandathehigh>=3-networkblockconfirmationfractiongate,because theso>=3-networktheyconfirmationaregatenotneedsadensecensorshipcoverage).ranking. Use block_fraction + countries_measured for context.
⟨5 unchanged words⟩ with rankings for monitored countries. Returns country scores derived from OONI anomaly rates, risk tiers, and measurement countsaggregated from OONI, IODA and CensoredPlanet overfor therecent measurementsource-declared window. Read current coverage and dataAsOf from theresponse.response; scores are not confirmed block counts.
⟨14 unchanged words⟩ with confirmed national blocks, the deepest censor(Iran,reported~789bydomains)the current response, the broadest-blocked category, measurement depth + data ⟨32 unchanged words⟩
How accurate is Voidly's v3.3 censorship classifier?TheReadhonesttheanswercurrent training sidecars underTHREEthree evaluation regimesof increasing difficulty, in one call: stratified-random (in-distribution upper bound, AUC ~0.90 / F1 ~0.73), leave-country-out (cross-country generalization, F1 mean ~0.71 / median ~0.87 over 127 countries), and forward-temporal (train past / predict future, AUC ~0.67)./TheF1response~0.47)gives—AUC,plusF1, the generalization gap(delta AUC -0.23,'DEGRADES forward')and which metric to cite for which use.Reads the live training sidecars. Use when asked 'how accurate is the model?' — neverNever quote one number alone. HONEST: the retired v2'0.998 F1'evaluation had country-tier leakage and is not a live claim.
Country-day censorship classifier score (GradientBoosting v3.3,). Read the current LOCO mean F10.711andacrosssmall-samplecountries;medianthecaveatLOCOfrommedian/v1/classifier/info;0.870this isinflated bynotsmall-sampleshutdown-onsetcountries).skill.
⟨24 unchanged words⟩ (ANON/VPN), which strips coincidental gambling/adult overlap.Iran-Russia share 135 domains incl. 23 of the same human-rights orgs + 25 of theReadsamecurrentVPNoverlaptoolscounts(4.6xfrom thenext pair on political).response. HONEST: overlap is correlation, NOT proof of coordination; China under-counted.
⟨44 unchanged words⟩ the confirmed-national layer (>=3 independent networks) —countscompareagreecurrent counts with get_national_blocklist+ get_co_blocking (e.g. IR vs RU: IR 789 blocked, 135 shared, RU blocks more NEWS while IR blocks moreandhuman-rights/VPN).get_co_blocking. Use for 'how does country X's censorship differ ⟨33 unchanged words⟩
⟨20 unchanged words⟩ Pass country=XX&asn=NNNN for one network's per-category block rates+and a blanket/selective/permissive/mixedlabel (e.g. KZ AS207446 blocks 94% of VPN/circumvention tools but 0% of news — a 'VPN-blocker';label;RUpassAS47541country=XXisfor theopposite, blockingcountry'snewsnetworksnotranked.VPNs);Readpasscurrentcountry=XXpercentagesforfrom thecountry's networks ranked.response. HONEST: block_rate is over MEASURED domains per ⟨26 unchanged words⟩
⟨27 unchanged words⟩ bounds what the >=3-network confirmed-block gate can confirm.RU 510 / IN 80 / IR 50 networks;Read~42currentcountriescoveragecarryfromASNthetags.response. HONEST: coverage depth,is NOT a censorship score; an absent/shallow country is ⟨8 unchanged words⟩
CheckCreatesetuponescopeDID-ownedforAtlas incident watch with afutureserver-to-server X-Agent-Key header and explicit confirmation. Supply one country or domainwatch. This,read-onlyatoolpublicneverHTTPSsubscribeswebhook,sendsand a caller-generated HMAC key; the key and webhook,orarereportsnever returned. A bare scope without the header remains a read-only setup check. A stored watchasdoesactive.not prove alert delivery.
⟨6 unchanged words⟩ ":["domain"]}],"properties":{"confirm":{"const":true,"description":"Required true to create a persisted watch","type":"boolean"},"country_code":{"description":"Uppercase ISO 3166-1 alpha-2 ⟨11 unchanged words⟩ ":"DNS domain to assess for watch support","type":"string"},"hmac_key_hex":{"description":"Caller-generated 32-byte webhook verification key; retained by caller","pattern":"^[0-9a-f]{64}$","type":"string"},"min_severity":{"enum":["low","medium","high","critical"],"type":"string"},"webhook_url":{"description":"Public HTTPS webhook destination for signed incident-created events","format":"uri","type":"string"}},"type":"object"}
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":truefalse,"title":"WatchCreateSetupAtlasScopeIncident Watch"}
Delete one owned Atlas incident watch by stored ID. Requires X-Agent-Key in the server-to-server MCP request header and explicit confirmation; deletion does not retract alerts already delivered.
List this active agent DID's persisted Atlas incident watches. Requires X-Agent-Key in the server-to-server MCP request header. The response omits webhook URLs and signing keys.
Verify a censorshipClaim-specificclaimassessmentagainstisrealheldmeasurementpendingdatareviewedfrompublicOONI,incidentCensoredPlanet,projection andIODA. Returns verdict with supportingexact-sourceevidence.citations.
Assemble partial country context from the OONI-specific index only. Mixed-source profile, incident details, and exact citations remain held for public projection review.
Date-specific outage explanation is held pending reviewed public incident projection and exact-source citations.
Check setup scope for a future country or domain watch. This read-only tool never subscribes, sends a webhook, or reports a watch as active.