YourAITools MCP Hub MCP Server

About YourAITools MCP Hub

YourAITools MCP Hub is one remote MCP server (streamable HTTP, no auth, no signup) for all 20 YourAITools agent APIs, 31 tools: prompt-injection scanning, OFAC address screening, package vulnerability checks, secret-leak scanning, transaction signature checks, URL to Markdown, tech-stack detection, AI-readiness audits, domain and email checks, token and counterparty safety checks, x402 endpoint grading and read-only perp market data. 26 of 31 tools have a free tier (each tool's own daily quota). Paid tiers use prepaid credits or x402 per call (USDC on Base, Polygon, Arbitrum One or Solana) at the same prices as each tool's own API; the hub adds no fee. Failed tool calls aren't charged: credits are refunded automatically and x402 payments only settle on success. Safety checks are informational, not guarantees. Market-data tools are read-only and not financial advice; past performance does not guarantee future results. We built it: Crypto Money Maker, a project run by AI agents with human oversight (https://youraitools.co). Official MCP Registry: co.youraitools/hub.

YourAITools MCP Hub tools (45)

Read from the live server on Oct 26, 2026. These are the tools your AI assistant can call once connected.

check_agent

Check whether an AI agent is registered in the Concordium Agent Registry (CIS-8004), Active (not revoked), and Verified by Concordium (its Agent Card hash matches the on-chain metadata_hash). Accepts a badge (CIS-2 token address, e.g. Mf22s

read_url

Fetches one public web page and returns its main content as clean Markdown (boilerplate removed, links absolute) plus title and metadata. Respects robots.txt, refuses private/internal hosts, follows redirects; no JavaScript rendering. Retur

scan_text

Scans untrusted text (web page text, emails, documents, tool results, another agent's message) for prompt injection before your agent acts on it: instruction overrides, jailbreak personas, system-prompt extraction, fake delimiters, exfiltra

scan_url

Fetches a public web page and scans its visible text plus hidden HTML (comments, hidden elements, alt/aria/meta text) for prompt injection before your agent browses or summarizes it. Respects robots.txt; refuses private hosts. Returns risk_

scan_tools

Checks MCP / function-calling tool definitions for tool poisoning (hidden instructions, data-exfiltration requests, hijack attempts in names, descriptions and schemas) before your agent installs or calls them. Up to 100 tools per call. Retu

check_domain

Check a domain before your agent trusts a link, a sender or a counterparty: does it exist, where does its mail go, SPF and DMARC policy, nameservers, DNSSEC. Free tier (preview). For registration age, registrar, parking detection and a 0-10

check_email

Check an email address an agent is about to store, email or trust: syntax, disposable / throwaway provider, role account, free webmail. Free tier (no network). For MX, mail auth, domain age and a verdict (valid | risky | undeliverable) use

screen_address

Use for ONE wallet: is this address on the US Treasury OFAC SDN sanctions list (digital currency addresses, refreshed daily)? Any chain (BTC, ETH/EVM, TRX, SOL, LTC, XMR, BCH, XRP, ZEC and more). Returns sanctioned (true/false), match_count

screen_batch

Use for a LIST of 1-50 wallets in one request (billed as one call): payee lists, counterparties, transaction inputs/outputs. Mixed chains allowed; one invalid entry rejects the request. Same data as screen_address. Returns count, sanctioned

scan_dependencies

Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabilities and confirmed-malicious packages. Returns per-package advisory ids (CVE/GH

check_package

Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and malicious flags. Free tier: 30 calls/day per IP with full results, then $0.001 per

detect_stack

Detects the technologies a website uses (CMS, ecommerce platform, JS framework, web server, CDN/hosting, analytics, ad pixels, chat, payments, consent tools) from one page load. Free preview tier: technology names and categories. The paid x

check_signature

Call BEFORE your agent signs or sends anything from a wallet. Decodes a transaction, EIP-712 typed data (Permit, Permit2, EIP-3009 USDC authorizations, Seaport orders), an EIP-7702 delegation or an x402 payment (402 terms + payload) into pl

check_token

Safety verdict for a Base (chain 8453) ERC-20 token: SAFE / CAUTION / DANGER with a 0-100 score, from a simulated buy-transfer-sell (honeypot and tax detection), owner powers, proxy, liquidity, holders, verification and age. Free preview ti

check_counterparty

Pre-payment counterparty check: before paying, approving or interacting with an EVM (Base, Ethereum, Polygon, Arbitrum One) or Solana address, get ok / caution / block. Free preview tier: verdict, confidence, address kind and flag counts. T

check_x402_endpoint

x402 endpoint doctor: probes a paid x402 URL unpaid (never pays) and grades it A-F: 402 on GET / HEAD / empty POST, CORS, v2 PAYMENT-REQUIRED header and v1 body, accepts (USDC asset, EIP-712 domain, Solana feePayer, amounts, payTo), multich

check_solana_token

Safety check for any Solana SPL or Token-2022 mint before an agent or app interacts with it. SAFE / CAUTION / DANGER with a 0-100 score, from mint and freeze authority, Token-2022 extensions that can block or tax sells, liquidity and recent

audit_website

AI-agent readiness audit of a website: score 0-100, grade and verdict across agent access (robots.txt rules for AI bots, bot challenges), readable content (raw HTML, markdown), discovery (llms.txt, sitemap, JSON-LD, meta/OG), agent interfac

scan_for_leaks

Check text BEFORE your agent sends it to an LLM, tool, log or webhook: finds crypto wallet keys (BIP39 seed phrases with checksum, EVM/Solana private keys, WIF, xprv), API secrets (GitHub, AWS, Stripe, OpenAI, Anthropic, Slack, Telegram, np

perp_positioning

Cross-venue perpetual futures positioning read for an asset from funding rates on Hyperliquid, dYdX v4, Paradex and Aevo: crowded long / long bias / neutral / short bias / crowded short, venues that list it, confidence. Free preview tier. T

perp_funding_scan

Market-wide funding scan over Hyperliquid, dYdX v4 and Paradex perps: pass symbols (watchlist, up to 25, e.g. BTC,ETH,SOL) or universe=all (every market above min_oi_usd, default $1M). Returns the highest and lowest funding (APR), the wides

ta_bias

Descriptive technical read for a crypto asset on closed 15m/1h/4h/1d candles: bias (strong bearish ... strong bullish), trend (up/down/mixed) and regime (trending/ranging) from RSI, MACD, EMA 20/50/200, Bollinger and ADX. Free preview tier.

ta_risk

Same as GET, POST {"symbol":"ETH","timeframe":"4h","account_usd":10000,"risk_pct":1,"side":"long"} [TASignal via YourAITools MCP Hub] No free tier (paid route only). Paid: risk $0.02 per call, with a credits key (Authorization: Bearer yatc_

ta_backtest

Same as GET, POST {"symbol":"SOL","timeframe":"4h","strategy":"ema_cross","fast":20,"slow":50} [TASignal via YourAITools MCP Hub] No free tier (paid route only). Paid: backtest $0.05 per call, with a credits key (Authorization: Bearer yatc_

smart_money_bias

Is the smart money long or short this coin? For a Hyperliquid perp ticker, shows how the 120 Hyperliquid accounts with the highest 30-day PnL (public leaderboard) are positioned now: bias (strong long to strong short), traders long vs short

smart_money_scan

Same as GET, POST {"limit":10} [SmartPerps via YourAITools MCP Hub] No free tier (paid route only). Paid: scan $0.03 per call, with a credits key (Authorization: Bearer yatc_...) or x402 (USDC; the hub returns the payment terms). Failed too

hyperliquid_wallet

Same as GET, POST {"address":"0x0000000000000000000000000000000000000001"} [SmartPerps via YourAITools MCP Hub] No free tier (paid route only). Paid: wallet $0.01 per call, with a credits key (Authorization: Bearer yatc_...) or x402 (USDC;

find_paid_api

Which paid API should my agent call? Searches the 36,000+ paid x402 resources on the public x402 discovery indexes and returns how many match your need, how many seller hosts there are, and the top 3 services ranked by relevance, 30-day uni

check_perp_order

Checks a Hyperliquid perp order BEFORE your agent sends it: would the exchange reject it, and what does it cost and risk? Give coin, side and size (coins) or notional (USD); optional limit price, leverage, margin cross/isolated, reduceOnly.

audit_tools

Check the tool definitions an agent loads, before they cost tokens or fail: estimated tokens per tool, schema errors per provider (OpenAI, Anthropic, Gemini, Bedrock, MCP; add openai_strict for strict mode) with JSON paths and fixed definit

diff_tools

What changed in a tool list since you approved it? Compares "tools" or "url" now with "pin" (set_id from audit_tools/diff_tools) or "baseline" (earlier definitions). Each change is labeled breaking (removed tool or param, new required param

check_mcp_server

Does this remote MCP server work, and is it worth connecting or paying for? Sends initialize and tools/list only (never calls a tool) and reports reachability, protocol version, sign-in method (OAuth protected-resource metadata), x402 payme

watch_mcp_server

Hosted watch for a remote MCP server: ToolFit re-audits it for 30 days and POSTs an HMAC-SHA256 signed JSON webhook to your https endpoint when its tools/list fingerprint or grade changes, or it goes unreachable or recovers. tier watch = ev

watch_status

Use to read a hosted watch: state (active, expired, cancelled), interval, expiry, next check time, last result (pin, grade, score, tool count) and webhook delivery counters. Read-only; changes nothing. Free. Not for: stopping a watch (watch

watch_cancel

Use to stop a hosted watch now: no further checks or webhooks are sent. Irreversible; remaining days are not refunded. Free. Not for: reading progress or results (watch_status). [ToolFit via YourAITools MCP Hub] Free tier: same as ToolFit's

register_tools

Register a tool list once and get a set_id for route_tools. Pass "tools" (array in MCP, OpenAI, Anthropic, Gemini or Bedrock form, max 500) or "url" (public remote MCP server; its tools are listed, never called). Same tools always get the s

route_tools

Which of my tools does this task need? Send "set_id" (from register_tools) or "tools", plus "query" (the task). Returns a ranked shortlist (adaptive 3-12 tools, or "k"), confidence (high/medium/low/none), matched terms, token savings and th

convert_currency

Convert an amount between two currencies at the official ECB reference rate (latest or a past date). Inputs: from, to (ISO codes like USD, EUR, JPY), amount (default 1), date (optional YYYY-MM-DD). Returns rate, result, inverse_rate and the

fx_rates

All ECB reference exchange rates for a base currency (default EUR), or only the listed quotes, latest or on a past date. Free: 30 calls/day per IP, then $0.001 per call. [FXRate via YourAITools MCP Hub] Free tier: same as FXRate's own MCP s

fx_history

Daily ECB reference rates for one currency pair between start and end (max 366 days), with first, last, min, max and percent change. Free: 30 calls/day per IP, then $0.002 per call. [FXRate via YourAITools MCP Hub] Free tier: same as FXRate

How to connect YourAITools MCP Hub to Claude, Cursor or VS Code

YourAITools MCP Hub runs as a hosted remote MCP server at https://api.youraitools.co/mcp/hub. Add that URL to your MCP client's config (Claude Code, Cursor, Windsurf or VS Code) and the tools appear immediately, no install required.

{
  "mcpServers": {
    "youraitools-mcp-hub": {
      "url": "https://api.youraitools.co/mcp/hub"
    }
  }
}

Claude Code: claude mcp add --transport http youraitools-mcp-hub https://api.youraitools.co/mcp/hub. Servers that require OAuth or an API key will prompt on first use.