Toolbox MCP Server

by allthepossibles Your server? Claim it

answering

Toolbox is answering right now. Last checked 4 min ago. It exposes 14 tools.

Small tools for agent builders: AI-writing tells, tools/list token cost, CLAUDE.md lint, and more.

Uptime history 7 days of history

7 days agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

170 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 1

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 21 October 2026. No other catalogue keeps this.

21 Oct a tool appeared lint_mcp_tools

Nothing serious here today

Today is the operative word: we check Toolbox every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 4 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add toolbox --transport http https://toolbox.allthepossibles.com/mcp

Settings → Connectors → Add custom connector, then paste this address

https://toolbox.allthepossibles.com/mcp

~/.codex/config.toml

[mcp_servers.toolbox]
url = "https://toolbox.allthepossibles.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "toolbox": {
      "url": "https://toolbox.allthepossibles.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "toolbox": {
      "type": "http",
      "url": "https://toolbox.allthepossibles.com/mcp"
    }
  }
}

Available tools 14

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

lint

lint_agent_md

Lint a CLAUDE.md, AGENTS.md or MEMORY.md: line count against Claude Code's 200-line memory index cap, estimated tokens, duplicate lines, contradicting rules, leftover TODO markers, hidden characters, empty headings.

lint_mcp_tools

Lint the tools an MCP server lists, from the model's side of the wire: names that break Claude's ^[a-zA-Z0-9_-]{1,64}$ rule, duplicate names, missing or near-identical descriptions, instruction-like text in a description, arguments with no description, required arguments missing from properties, destructive-sounding tools with no destructiveHint, and unbounded free-text arguments on them. Pass a live Streamable HTTP endpoint or a tools array.

crawlers

check_ai_crawlers

Read a site's robots.txt and report which AI crawlers (GPTBot, ClaudeBot, Google-Extended, PerplexityBot, CCBot, Bytespider and more) are allowed, blocked or partially blocked; check for llms.txt and draft one from the site's metadata and sitemap.

decode

decode_jwt

Decode a JWT's header and payload without verifying the signature (it never takes a secret). Returns the claims with iat, nbf and exp as ISO times, a plain-text expiresIn, issuer, subject and audience, and findings: alg none, HS* with a URL-like kid, missing or distant exp, expired, nbf or iat in the future, payload over 4 KB, sensitive field names, and jku or x5u pointing off-site.

explain

explain_cron

Explain a five-field cron expression in plain English, list the next runs in UTC, and warn about the cases Cloudflare Workers, GitHub Actions and crontab handle differently (nicknames, six fields, day-of-month plus day-of-week, sub-5-minute intervals, day 31).

headers

check_headers

Fetch a URL once and grade its response headers: HSTS, Content-Security-Policy, X-Content-Type-Options, frame control, Referrer-Policy, Permissions-Policy, Cache-Control, cookie Secure/HttpOnly/SameSite flags, and server version leaks. Returns a grade, a score and the exact header to add for each gap.

json

json_to_schema

Turn a JSON sample (or an array of samples of the same shape) into a JSON Schema draft 2020-12 and a TypeScript type. Infers required vs optional keys across samples, nullable fields, integer vs number, date/email/uri/uuid formats, and small enums. Use it to draft an MCP tool inputSchema from an example payload.

manifest

manifest_cost

Estimate what an MCP server's tools/list costs in tokens on every session start, per tool, with the three most expensive tools and flags for oversized descriptions, base64 blobs and echoed schemas. Pass a live Streamable HTTP endpoint or a tools array.

mcp

mcp_install_snippets

Generate install snippets for an MCP endpoint (Claude Code, Claude Desktop, Cursor, Codex, VS Code, curl) and probe the endpoint once to confirm it answers initialize and tools/list.

page

check_page_meta

Fetch a URL and report what crawlers and link unfurlers see: title and meta description with lengths, canonical, lang, viewport, robots meta, h1s, Open Graph and Twitter card tags, favicon, JSON-LD types, the resulting preview card, and findings for anything missing or too long.

scrub

scrub_env

Scrub a .env file into a safe .env.example: every value is blanked or replaced with a placeholder that keeps its shape (postgres://USER:PASSWORD@HOST/DB). Returns the example, the secrets found (AWS, GitHub, Stripe, Slack, Google, OpenAI, Anthropic, Resend, SendGrid, Twilio, Cloudflare, JWTs, private keys, database URLs, high-entropy strings) by key, kind and line with only the first 4 characters and the length, and findings for duplicate keys, non-UPPER_SNAKE names, unbalanced quotes, export prefixes and trailing spaces.

sitemap

check_sitemap

Check a site's sitemaps: discovers them from robots.txt, /sitemap.xml and /sitemap_index.xml, reads index files one level deep (20 children max), counts URLs per file and per host, summarises lastmod, and fetches a sample of URLs (HEAD, then GET) to count the ones that are not 200. Flags a missing sitemap, no robots.txt entry, over 50,000 URLs, other hosts, http URLs on https sites and missing lastmod.

tells

check_tells

Check text for AI-writing tells (em-dashes, 'not just X but Y', rule-of-three lists, stock vocabulary like delve or seamlessly, hedge words, smart quotes, hidden Unicode) and return a score, each tell with its position, and a cleaned copy. Run it on anything you are about to publish on a human's behalf.

trace

trace_redirects

Trace a URL's redirect chain hop by hop (up to 10 hops, 8 s each) with status, location, timing and scheme per hop. Flags chains over two redirects, loops, HTTPS-to-HTTP downgrades, 302s used for www or https canonicalisation, dropped paths or query strings, cross-domain moves, meta-refresh or JS redirects on a 200, and a final page that is not 200.

Endpoints

URL	Transport	State	Latency	Checked
https://toolbox.allthepossibles.com/mcp	streamable-http	answering	89 ms	4 min ago

Alternatives to Toolbox

same job, measured the same way

Secureflows MCP

by michal-lefler

MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.

18 tools answering

Secureflows MCP Server

by michal-lefler

MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.

18 tools answering

Tokmeter — AI Agent Usage & Cost

by sriinnu

Tokens and cost for Claude Code, Codex and 22 more AI coding agents, from local session files.

437 installs/wk local only

skillkit

by furkan708

Toolbox for AI agent skills: scaffold, lint, pack, install, and serve SKILL.md skills

111 installs/wk local only

Llmkit

by smigolsmigol

AI cost tracking: 11 tools for spend, budgets, and Claude Code + Cursor + Cline costs

49 installs/wk local only

Minnimemory

by minniai-com

Curated, on-demand memory for AI coding agents. Cuts Claude Code token cost per session.

226 installs/wk local only

Claude Handoff

by vasilispapg

Session handoff for Claude Code: list sessions and build handoff docs another agent continues from.

351 installs/wk local only

SkillFM Claude Code Token Usage

by ericm1018

Claude Code token usage, cost visibility, and SkillFM Beacon AI health checks for MCP agents.

21 installs/wk local only

Toolbox — questions

Answers built from our own checks of this server.

What can Toolbox do?

It exposes 14 tools, read directly from the server on our last check. Among them: check_ai_crawlers, check_headers, check_page_meta, check_sitemap, check_tells, decode_jwt and 8 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Toolbox working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 170 ms. The bar chart above shows every period we have measured.

How do I connect Toolbox?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Toolbox need an API key?

No. Toolbox completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 14 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Toolbox?

It answers our handshake in 170 ms on average, which is faster than 85% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.