io.github.Toramo747/mycelix

MYCELIX

Read-only MCP server checks and quote verification, free and keyless; results signed and publicly lo

Endpointhttps://neo-collettive.onrender.com/mcp (streamable-http)
Registry version0.99.69
Now23 tools · grade C (74) · pin ts_4a66f1f60fbbaa558c6b2d7d81681794 · protocol 2025-06-18
First / last listed2026-11-11 01:17 UTC / 2026-11-11 01:17 UTC
Grade over time2026-11-11: C (74), 23 tools

Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.

Timeline

First listing · 2026-11-11 01:17 UTC
23 tools, grade C (74)

Tools: neo_preflight neo_discover neo_ask_agents neo_collective neo_inspect_mcp verify_mcp_endpoint oxibay_doctor verify_quote paid_mcp_audit paid_injection_scan paid_citation_check paid_proof_of_publication paid_timestamp neo_web_search neo_jarvis neo_director neo_director_results neo_render_status neo_render_deploys neo_render_logs jarvis_render_status jarvis_render_deploys jarvis_render_logs

Current tools (23)

neo_preflightCheck whether NEO can reach public discovery registries.
params: none
neo_discoverSearch public A2A agents and the official MCP Registry.
params: query*, limit
neo_ask_agentsFind public A2A agents and ask several independently.
params: query*, question*, max_agents
neo_collectiveRun two collective rounds: independent answers, then peer critique.
params: query*, problem*, max_agents
neo_inspect_mcpDiscover relevant MCP servers and inspect initialize/tools-list only. Never invokes remote tools.
params: query*, limit
verify_mcp_endpointFree, no API key. Read-only verification of a public MCP HTTPS endpoint or official Registry server name. Checks DNS/SSRF safety, TLS/HTTP reachability, initialize, tools/list schema sanity, latency and discovery metadata. Never invokes remote tools or forwards credentials.
params: url, registry_name
oxibay_doctorFree, no API key. Read-only MCP diagnostic. Reuses MYCELIX endpoint verification, classifies technical failures, and optionally compares the requested capability with declared tool metadata. Never invokes remote tools, never forwards credentials, and never affects commercial gates.
params: url, registry_name, expected_capability
verify_quoteFree, no API key. Checks whether an exact sentence appears on a public HTTPS page: verbatim (quotes cut with '...' allowed if the pieces are in order and close), stitched (pieces far apart or reordered), paraphrase (most 4-word runs present), not_found or unreachable. not_found means these words are not on the page; it does NOT mean the claim is false (a faithful rewording also reads not_found). U
params: url, quote
paid_mcp_auditKnow what an MCP server can do to your agent before connecting it: hidden instructions in tool descriptions and schemas, tool shadowing, risky capabilities, annotation mismatches, transport faults, plus a fingerprint of every tool so a later silent change is detectable. Read-only (initialize and tools/list). Signed report, logged in a public witnessed log, with what was and was not checked. Free s
params: url*, previous_fingerprint
paid_injection_scanKnow whether a text or public page is trying to steer your agent before the agent reads it: overrides, fake roles, exfiltration, tool abuse, payment requests, invisible Unicode or HTML-hidden text, base64 payloads. Rule-based evidence (what matched and where), signed and logged, with what was not checked stated. Free signed sample: /x402/injection-scan/sample. Paid per call via x402 (USDC on Base)
params: text, url
paid_citation_checkCatch invented or stitched citations before an answer ships: up to 8 quote-and-link pairs (or the citations extracted from the text) checked against the live pages, each one graded verbatim, paraphrase, stitched or not found. One signed, logged report. Free signed sample: /x402/citation-check/sample. Paid per call via x402 (USDC on Base). Call without payment to get the requirements (isError resul
params: answer, citations
paid_proof_of_publicationKeep evidence that a public page said something, dated and independent of you: the fetched text, its sha256, final URL and status, signed by a third party and written to a public append-only log anchored daily on Bitcoin and Software Heritage. Useful for disputes, deleted pages and changed terms. Free signed sample: /x402/proof-of-publication/sample. Paid per call via x402 (USDC on Base). Call wit
params: url*
paid_timestampProve that a file or message existed at this time without revealing it: its sha256 gets a signed receipt with a position in a public log anchored daily on Bitcoin (OpenTimestamps) and Software Heritage. Free signed sample: /x402/timestamp/sample. Paid per call via x402 (USDC on Base). Call without payment to get the requirements (isError result, 402 object in structuredContent); retry with the sig
params: sha256*, note
neo_web_searchSearch the public web using a free RSS search surface. No paid API key.
params: query*, limit
neo_jarvisAsk the configured internal Jarvis endpoint. Requires JARVIS_URL on Render.
params: message*, context_json
neo_directorCoordinate external agents to research revenue opportunities. Research-only; no spending or external actions.
params: goal*, budget_eur, hours_per_week, max_agents
neo_director_resultsReturn recent compact Director results from the runtime log.
params: limit
neo_render_statusRead NEO's Render service status.
params: none
neo_render_deploysList recent Render deploys for NEO.
params: limit
neo_render_logsRead recent Render logs for NEO.
params: limit
jarvis_render_statusRead Jarvis Render service status using the shared Render API credentials.
params: none
jarvis_render_deploysList recent Render deploys for Jarvis.
params: limit
jarvis_render_logsRead recent Render logs for Jarvis.
params: limit

Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.