ProfitCollector
22 pay-per-call developer, security, network and data utilities using x402 on Base.
| Endpoint | https://mcp.bakhour.ca/mcp (streamable-http) |
|---|---|
| Registry version | 1.0.0 |
| Now | 31 tools · grade C (68) · pin ts_ad33c3070e856cc9cc84209d7cf1d171 · protocol 2025-06-18 |
| First / last listed | 2026-10-24 19:41 UTC / 2026-10-24 19:41 UTC |
| Grade over time | 2026-10-24: C (68), 31 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: get_dns_lookup get_jwt_decode get_subnet_calculate post_json_repair post_media_image_convert post_security_repo_risk_report_standard post_security_repo_risk_report_deep post_security_repo_risk_report_due_diligence post_x402_service_trust_report post_freshdep_scan post_quebec_invoice_compliance_check post_quebec_invoice_generate post_json_validate post_json_pretty post_json_minify post_base64_encode post_base64_decode post_hash_sha256 post_hash_sha512 get_uuid_generate get_url_parse post_text_stats post_text_dedupe_lines get_timestamp_convert post_domain_due_diligence get_domain_intelligence get_web_audit get_security_posture post_data_transform get_security_headers get_ssl_check
get_dns_lookup | Resolve ONE DNS record type for a domain. For all record types at once use /domain/intelligence; for a bundled DNS+TLS+headers audit use /web/audit or /security/posture; for mail-security plus a scored verdict use /domain/due-diligence. params: domain*, record_type |
get_jwt_decode | Decode a JWT payload without signature verification. params: token* |
get_subnet_calculate | Calculate subnet information from CIDR notation. params: cidr* |
post_json_repair | Repair common malformed JSON formatting issues. params: text* |
post_media_image_convert | Convert an image between common formats (e.g. PNG/JPEG/WebP) from a URL or base64 payload. params: none |
post_security_repo_risk_report_standard | SBOM inventory plus real OSV.dev dependency-vulnerability matches and dependency-freshness signals for a public Git repository. One-shot alternative to a per-seat secret-scanning subscription. params: repo_url*, ref |
post_security_repo_risk_report_deep | Everything in the standard report, plus a repo-wide secret/credential exposure scan (matched values are never returned). params: repo_url*, ref |
post_security_repo_risk_report_due_diligence | Everything in the deep report, plus real OpenSSF Scorecard maintainer/governance signals and a prioritized recommendation. An automated baseline positioned against $5,000-$95,000 human technical due diligence. params: repo_url*, ref |
post_x402_service_trust_report | Live, on-demand check of ONE x402-protected endpoint before you pay it: payment-requirements structure, TLS certificate, payTo on-chain balance, known-asset recognition, resource/host consistency, and discovery-manifest cross-check -- not a cached aggregate reputation score. params: target_url*, target_method |
post_freshdep_scan | Flags pinned dependencies in a repository's requirements.txt, package-lock.json, or uv.lock published more recently than a freshness threshold -- a supply-chain-compromise tripwire. Free CLI (requirements.txt/package-lock.json only, uv.lock support pending there): github.com/sbakhour/freshdep. params: repo_url*, ref, threshold_days |
post_quebec_invoice_compliance_check | Verifies GST/QST were calculated correctly per Revenu Quebec's current (non-compounded) formula, and flags whether a French invoice version is present per Charter of the French Language s.57/89/91. Pure arithmetic + text check; not legal or tax advice. params: subtotal*, gst_amount*, qst_amount*, english_text, french_text |
post_quebec_invoice_generate | Assembles a bilingual (French/English) Quebec invoice document with GST/QST computed exactly per Revenu Quebec's current formula -- you supply both languages' line-item text, this does not translate. Not legal or tax advice. params: invoice_number*, seller_name*, seller_gst_number, seller_qst_number, line_items* |
post_json_validate | Validate JSON text and return parsing details. params: text* |
post_json_pretty | Pretty-print valid JSON text. params: text* |
post_json_minify | Minify valid JSON text. params: text* |
post_base64_encode | Encode UTF-8 text using Base64. params: text* |
post_base64_decode | Decode Base64 to UTF-8 text. params: text* |
post_hash_sha256 | Generate SHA-256 digest from text. params: text* |
post_hash_sha512 | Generate SHA-512 digest from text. params: text* |
get_uuid_generate | Generate a random UUID version 4. params: count |
get_url_parse | Parse a URL into structured components. params: url* |
post_text_stats | Calculate character, word, line and byte statistics. params: text* |
post_text_dedupe_lines | Remove duplicate lines while preserving original order. params: text* |
get_timestamp_convert | Convert a Unix timestamp to UTC ISO-8601. params: timestamp* |
post_domain_due_diligence | The most comprehensive domain assessment: DNS + mail security (SPF/DKIM/DMARC) + TLS + HTTP headers, scored. The only endpoint in this group that adds mail-security analysis. Use for a one-shot decision-grade verdict on an unfamiliar domain; use /dns/lookup, /ssl/check, /security/headers, /web/audit or /security/posture instead for a single fact or a cheaper signal. params: domain* |
get_domain_intelligence | Collect ALL common DNS record types (A/AAAA/MX/NS/TXT/CAA) for a domain in one call -- the multi-record bundle version of /dns/lookup. params: domain* |
get_web_audit | Consolidated DNS, TLS and HTTP security audit for a public HTTPS website, returned as RAW findings (no score) -- the bundled version of /dns/lookup + /ssl/check + /security/headers. Use /security/posture instead for a 0-100 score/grade. params: url* |
get_security_posture | Assess TLS and HTTP security posture for a public HTTPS website -- the SAME inspection as /web/audit, but returns a 0-100 score/grade and findings instead of raw fields. params: url* |
post_data_transform | Normalize and transform common structured text automatically. params: text*, operation |
get_security_headers | Inspect HTTP security headers for ONE URL only. For headers combined with TLS and DNS, use /web/audit (raw) or /security/posture (scored). params: url* |
get_ssl_check | Inspect the TLS certificate for ONE hostname only. For TLS combined with HTTP headers and DNS, use /web/audit (raw) or /security/posture (scored). params: hostname* |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.