{"url":"https://fetchgate.dev/mcp","sessionIdIssued":false,"requestsSent":["initialize","notifications/initialized","tools/list"],"scannedAt":"2026-08-29T06:15:42.193Z","outcome":"ok","httpStatus":200,"server":{"name":"fetchgate","version":"0.1.0","protocolVersion":"2025-06-18"},"instructions":{"length":327,"text":"Fetchgate: read_url and get_metadata fetch/convert a URL server-side (free tier: 30 calls/day per caller, then $0.002/$0.001 per call via x402). list_products and get_purchase_info browse and explain how to buy Fetchgate's digital-goods catalog (x402, no account). See https://fetchgate.dev/llms.txt for the full API reference.","findings":[]},"toolCount":6,"tools":[{"name":"read_url","description":"Fetch a URL server-side and return its main content as clean Markdown, with scripts/styles/nav/ads/boilerplate stripped out. Wraps GET /v1/read. Free tier: 30 calls/day per caller; priced at $0.002/call via x402 once that's exhausted (see get_purchase_info for how the x402 flow works). Only http:// and https:// URLs are accepted; private/internal-network hosts are rejected.","descriptionLength":376,"parameterCount":1,"findings":[],"score":0,"band":"clean"},{"name":"get_metadata","description":"Fetch a URL server-side and return structured metadata: title, description, canonical URL, OpenGraph/Twitter card fields, favicon URL, language, and published/modified timestamps when present. Wraps GET /v1/meta. Same free tier as read_url; priced at $0.001/call via x402 once exhausted.","descriptionLength":287,"parameterCount":1,"findings":[],"score":0,"band":"clean"},{"name":"list_products","description":"List Fetchgate's digital-goods catalog: id, name, description, priceUsd, currency, file format, size, sha256, and a walletless humanUrl checkout link for each product for sale. Wraps GET /v1/products. Free, no rate limit, no payment required just to browse.","descriptionLength":257,"parameterCount":0,"findings":[],"score":0,"band":"clean"},{"name":"get_purchase_info","description":"Look up a product by id (from list_products) and explain exactly how to buy it: its price, and the x402 purchase flow step by step (the 402 challenge shape, the PAYMENT-SIGNATURE header, and the signed download URL you get back on success). Does not take payment itself — informational only, mirroring the pre-payment leg of GET /v1/buy/:id.","descriptionLength":341,"parameterCount":1,"findings":[],"score":0,"band":"clean"},{"name":"get_agent_census","description":"Return the Agent Web Crawler Census: every named bot observed crawling a live, publicly-listed x402 + MCP endpoint over a 24-hour window, each with a case-insensitive regex `matcher` and a behavioural `category` (liveness-monitor, directory-crawler, price-scraper, security-research, ai-training, ...) so you can classify your own access log. Observed first-hand, not aggregated from third-party bot lists. Notable finding: of the named agent-web crawlers in the census, zero have ever presented a payment, and several declare that in their own User-Agent string. Wraps GET /v1/agent-census.json. Free, unmetered, no payment required. CC BY 4.0.","descriptionLength":645,"parameterCount":1,"findings":[],"score":0,"band":"clean"},{"name":"scan_mcp_server","description":"Connect to a remote Streamable HTTP MCP server, fetch its tools/list (sends only initialize, notifications/initialized and tools/list — never tools/call) and scan every tool name, description, parameter description and the server's initialize `instructions` string for tool-poisoning patterns: hidden-instruction markers, invisible Unicode, directives aimed at the model, credential/secret references, exfiltration shapes and instructions about other tools. Returns per-tool findings with severity, excerpt and a score band. Use it before installing or trusting a third-party server. Heuristic: a clean result means nothing obvious in what the server declares about itself, not that it is safe. Wraps GET /v1/mcp-scan. Free, rate-limited per caller; private/internal-network hosts are rejected.","descriptionLength":794,"parameterCount":1,"findings":[{"id":"MCP-SEC-002","severity":"low","title":"Mentions API keys, passwords or tokens","location":"description","excerpt":"…nvisible Unicode, directives aimed at the model, credential/secret references, exfiltration shapes and instructions about othe…"}],"score":5,"band":"low"}],"summary":{"critical":0,"high":0,"medium":0,"low":1,"info":0,"toolsWithFindings":1}}