papacasper29 pay-per-call DNS, SEO, SSL, security, and dev tools for AI agents. x402, no API key. Live at
29 pay-per-call DNS, SEO, SSL, security, and dev tools for AI agents. x402, no API key. Live at https://papacasper.com/mcp
·
mcp-toolbelt
Public MCP server behind https://papacasper.com/mcp/ (Streamable HTTP). 29 DNS, SEO, SSL,
security, WHOIS, mail, and AI tools for AI agents. initialize and tools/list are open; tools/call
is paid one of two ways:
Payment options
-
x402 pay-per-call - USDC on Base, no account or API key needed. An unpaid call returns HTTP 402 with the x402 payment requirements.
-
Card-paid API key (via Polar) - send
Authorization: Bearer mcptb_...(orx-api-key: mcptb_...). Each call uses its normal price in credits (cheap tools 1 credit,domain_report25).- Starter: $9/month, 2,000 credits - https://buy.polar.sh/polar_cl_ohAX5VD8UYJGDHAjfP8Y5jowuK2nRQu0jb2XU3c9PBm
- Pro: $29/month, 10,000 credits - https://buy.polar.sh/polar_cl_NSE3CdNGwKv97h1v4Koj5mQqMt0ow8CR8oJdR19py6p
The key is emailed right after checkout. When a key runs out of credits or its subscription ends, calls fall back to x402. Docs: https://papacasper.com/mcp-docs#api-key
Discovery documents
scripts/gen-discovery.ts generates openapi.json and .well-known/x402 from the live tool
registry (src/tools) and writes them into ../site/public/, since discovery crawlers probe the
domain root (papacasper.com/openapi.json), not /mcp/. Re-run it and redeploy the site
(~/dev/papacasper/site, ./scripts/deploy.sh) whenever a tool is added, removed, or repriced:
bun run scripts/gen-discovery.tsx402 protocol
Payments run on x402 v2 via @x402/hono, facilitated by https://facilitator.xpay.sh
(zero fees, gas-sponsored, no API key) on Base mainnet (eip155:8453). Configured through
X402_FACILITATOR_URL and X402_NETWORK env vars.
This repo does not document an install step we could read. Check the README on GitHub.
Install with your agent
Paste this prompt into your agent. It reads this page and does the setup for you.
Read https://aiagentslisting.com/mcp/mcp-toolbelt to learn what the "Mcp Toolbelt" MCP server does and how to install it. Add it to my coding agent's MCP configuration as documented on that page, then confirm the server connects and list the tools it exposes.Agents can also browse this directory over MCP at https://aiagentslisting.com/api/mcp
Tools29
| Name | What it does |
|---|---|
url_to_markdown | Fetch a URL and return its main text content as clean, readable plain text/markdown-ish output. Strips scripts, styles, and HTML tags. |
security_headers_audit | Fetch a URL and audit its response headers in one pass: security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) with a score, PLUS its CORS policy (t |
redirect_chain_check | Follow a URL through every HTTP redirect hop and report the full chain, final destination, and issues like redirect loops, too many hops, or HTTPS-to-HTTP downgrades. |
page_performance_check | Fetch a URL and measure time-to-first-byte, total fetch time, and response size from this server. Flags missing compression, missing Cache-Control, oversized payloads, and slow TTFB. Lightweight raw-t |
structured_data_extract | Fetch a URL and extract structured data deterministically: JSON-LD blocks (each one also VALIDATED — @context/@type presence plus required fields for common schema.org types like Article, Product, Org |
tech_stack_fingerprint | Fetch a URL and fingerprint its likely tech stack from response headers (server, x-powered-by, x-generator) and HTML markers (generator meta tag, framework/CMS-specific script or class patterns). Answ |
seo_audit | Fetch a URL and run a full on-page SEO audit: title/meta description length, canonical tag, Open Graph + Twitter Card tags, html lang attribute, viewport meta, heading structure, image alt-text covera |
check_robots_sitemap | Check a site's robots.txt and sitemap.xml in one call: raw contents (truncated), sitemap presence, an AI-crawler policy analysis (explicit rules for GPTBot, ClaudeBot, CCBot, PerplexityBot, Google-Ext |
broken_link_check | Find broken links two ways. Default (crawl mode): crawl a site starting from a URL (same-origin pages only, bounded by maxPages) and check every linked URL for broken status codes, returning each brok |
ai_readiness_audit | Score how ready a website is for AI agents and LLM-driven discovery, 0-100 with a letter grade: robots.txt presence, explicit AI-crawler policy (GPTBot, ClaudeBot, CCBot, PerplexityBot, and 8 more), l |
domain_health_check | Check a domain's registration expiry (via WHOIS) and DNS health: nameservers, A/AAAA, MX, SPF, and DMARC records. Flags common misconfigurations. WHOIS + DNS only — for the WHOIS record alone use whoi |
dns_propagation_check | Query a DNS record for a domain against several major public resolvers (Google, Cloudflare, Quad9, OpenDNS) in parallel and compare the answers. Flags mismatches, which usually mean propagation is sti |
email_deliverability_check | Deep-dive email deliverability check for a domain: MX records + reverse-DNS (PTR) on each MX host, common DKIM selector probing, SPF lookup-count (RFC 7208 caps at 10), DMARC policy strength, and DNSB |
whois_lookup | Look up a domain's WHOIS registration record: registrar, creation and expiry dates, days remaining, name servers, and domain statuses, direct from the TLD registry. Registration data only — for DNS/ma |
domain_availability_check | Check whether a domain is registered, plus scan common typo-squat variants (adjacent-key substitution, letter omission/doubling, transposition) across popular TLDs (.com, .net, .org, .io, .co, .ai, .a |
subdomain_discovery | Enumerate a domain's subdomains from public Certificate Transparency logs (crt.sh, with a Cert Spotter fallback): every hostname that has ever appeared on a certificate for the domain. Passive reconna |
ssl_cert_check | Connect to a host over TLS and report its certificate's expiry date, days remaining, issuer, and subject. Fast facts only — for a full graded TLS assessment (protocols, ciphers, vulnerabilities) use s |
check_open_ports | TCP-connect scan a host for open ports, plus network intel on the host's resolved IPs (ASN, network owner, BGP prefix, country — via Team Cymru). Defaults to a list of ~20 common service ports (SSH, H |
websocket_endpoint_check | Test a WebSocket endpoint (ws:// or wss://): attempts the handshake, reports success/failure, time-to-open in ms, and close code/reason. Useful for verifying a WebSocket server is reachable and comple |
domain_report | Bundle: runs seo_audit, domain_health_check (WHOIS + DNS: nameservers, A/AAAA, MX, SPF, DMARC), and email_deliverability_check (DKIM, SPF lookup-count, DMARC strength, DNSBL) against a domain in one c |
safe_browsing_check | Check a URL against Google Safe Browsing's malware/phishing/unwanted-software/PUA blocklists. Requires GOOGLE_SAFE_BROWSING_API_KEY to be configured server-side (free Google Cloud API key). |
ssl_labs_grade | Full SSL Labs-style TLS assessment: overall letter grade, protocol support (TLS 1.0-1.3), cipher strength, certificate chain issues, and known vulnerabilities (Heartbleed, POODLE, etc.) for each endpo |
exposed_files_check | Probe a site for publicly exposed sensitive files attackers scan for: /.env and variants, /.git/config and /.git/HEAD, /.svn/entries, docker-compose files, /.aws/credentials, /.ssh/id_rsa, database du |
pagespeed_insights | Run Google's real PageSpeed Insights (Lighthouse + Chrome UX Report) against a URL: performance score, Core Web Vitals (LCP, CLS, INP/TBT), and real-user field data where available. The authoritative, |
package_vulnerability_check | Look up a package (optionally pinned to a version) against OSV.dev's aggregated vulnerability database (GitHub Advisories, PyPA, RustSec, Go vuln DB, etc.) for known CVEs/advisories. Supports npm, PyP |
github_repo_health_check | Check a GitHub repository's health signals: stars, forks, open issues, license, archived/disabled status, and days since last push. Flags likely-abandoned or unlicensed repos. Useful before depending |
email_address_validate | Validate a single email address: RFC syntax check, MX record lookup on the domain, disposable/temporary-email-provider detection, and role-account detection (info@, admin@, etc.). Per-address check — |
smtp_server_check | Live-probe a mail server over SMTP: connects to port 25 (or a given port), reads the banner, issues EHLO and lists advertised capabilities (STARTTLS, AUTH mechanisms, SIZE, 8BITMIME, PIPELINING), then |
mcp_server_probe | Probe a remote MCP server end-to-end: performs the initialize handshake, captures server info and protocol version, lists its tools, and grades tool-quality the way directories like Glama do — descrip |
Read live from the server on November 13, 2026.
What's missing
- Easy installA paste-ready client config (an mcpServers block) is documented.0/12
- Ships promptsThe server exposes at least one prompt template.0/8
- Ships resourcesThe server exposes at least one resource.0/8
- Claimed by ownerThe maintainer proved ownership of this listing.0/4
All 9 checks (5 passed)
- Installation methodRequiredThe README documents at least one way to install or connect.15/15
- Exposes toolsRequiredThe server reports at least one tool, from its manifest or a live read.15/15
- Has a READMERequiredThe repository ships documentation we could read.10/10
- Verified liveWe connected to the server and it answered a real MCP handshake.20/20
- Easy installA paste-ready client config (an mcpServers block) is documented.0/12
- Has a licenseThe repository declares a license.8/8
- Ships promptsThe server exposes at least one prompt template.0/8
- Ships resourcesThe server exposes at least one resource.0/8
- Claimed by ownerThe maintainer proved ownership of this listing.0/4
Show this grade in your README
Paste this line near the top of your repository's README. The badge always renders the current score.
[](https://aiagentslisting.com/mcp/mcp-toolbelt)Alternatives to Mcp Toolbelt
View all in Developer Tools
Connection examples and metadata for the hosted SoldFetch eBay MCP server
Official SpriteFuse hosted OAuth MCP connection configurations and documentation; proprietary
Welcome to the Storybook MCP Addon monorepo! This project enables AI agents to work more efficiently
No tagged releases on record.
Send this prompt to your agent to leave a review
Connect to the AI Agents Listing MCP server at https://aiagentslisting.com/api/mcp using the HTTP transport and complete the sign-in when it asks. Then call the submit_review tool for the listing "mcp-toolbelt" with a rating from 1 to 5 and a short note on what worked and what did not.No reviews yet
Be the first to share your experience with this tool.
Related MCP Servers
Connection examples and metadata for the hosted SoldFetch eBay MCP server
Developer Tools
Official SpriteFuse hosted OAuth MCP connection configurations and documentation; proprietary
Developer Tools
Welcome to the Storybook MCP Addon monorepo! This project enables AI agents to work more efficiently
Developer Tools
Subscribe to our newsletter
One email a week. New agents, MCP servers and skills, and what is actually getting traction.