ProfitCollector MCP Server

by bakhour Your server? Claim it

answering

ProfitCollector is answering right now. Last checked 13 min ago. It exposes 31 tools.

22 pay-per-call developer, security, network and data utilities using x402 on Base.

Uptime history 49 days of history · worst day 93%

49 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

420 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 33

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 30 August 2026. No other catalogue keeps this.

10 Sep a tool description was rewritten post_x402_service_trust_report

2 Sep 7 tool descriptions were rewritten get_dns_lookup, get_domain_intelligence, get_security_headers and 4 more

2 Sep 3 tools disappeared post_media_video_generate_long, post_media_video_generate_medium, post_media_video_generate_short

31 Aug 9 tool descriptions were rewritten post_freshdep_scan, post_media_image_convert, post_media_video_generate_long and 6 more

31 Aug 4 tools appeared post_freshdep_scan, post_quebec_invoice_compliance_check, post_quebec_invoice_generate and 1 more

30 Aug 7 tools appeared post_media_video_generate, post_media_video_generate_long, post_media_video_generate_medium and 4 more

30 Aug a tool description was rewritten post_security_repo_risk_report_deep

30 Aug a tool disappeared post_media_video_generate

Tools have disappeared from this server

A tool that vanishes takes a piece of your agent with it, and the change arrives silently. Watch this server and every such change lands in your inbox.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 13 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add profitcollector --transport http https://mcp.bakhour.ca/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "profitcollector": {
      "url": "https://mcp.bakhour.ca/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.profitcollector]
url = "https://mcp.bakhour.ca/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "profitcollector": {
      "url": "https://mcp.bakhour.ca/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "profitcollector": {
      "url": "https://mcp.bakhour.ca/mcp"
    }
  }
}

Available tools 31

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

post

post_base64_decode

Decode Base64 to UTF-8 text.

post_base64_encode

Encode UTF-8 text using Base64.

post_data_transform

Normalize and transform common structured text automatically.

post_domain_due_diligence

The most comprehensive domain assessment: DNS + mail security (SPF/DKIM/DMARC) + TLS + HTTP headers, scored. The only endpoint in this group that adds mail-security analysis. Use for a one-shot decision-grade verdict on an unfamiliar domain; use /dns/lookup, /ssl/check, /security/headers, /web/audit or /security/posture instead for a single fact or a cheaper signal.

post_freshdep_scan

Flags pinned dependencies in a repository's requirements.txt, package-lock.json, or uv.lock published more recently than a freshness threshold -- a supply-chain-compromise tripwire. Free CLI (requirements.txt/package-lock.json only, uv.lock support pending there): github.com/sbakhour/freshdep.

post_hash_sha256

Generate SHA-256 digest from text.

post_hash_sha512

Generate SHA-512 digest from text.

post_json_minify

Minify valid JSON text.

post_json_pretty

Pretty-print valid JSON text.

post_json_repair

Repair common malformed JSON formatting issues.

post_json_validate

Validate JSON text and return parsing details.

post_media_image_convert

Convert an image between common formats (e.g. PNG/JPEG/WebP) from a URL or base64 payload.

post_quebec_invoice_compliance_check

Verifies GST/QST were calculated correctly per Revenu Quebec's current (non-compounded) formula, and flags whether a French invoice version is present per Charter of the French Language s.57/89/91. Pure arithmetic + text check; not legal or tax advice.

post_quebec_invoice_generate

Assembles a bilingual (French/English) Quebec invoice document with GST/QST computed exactly per Revenu Quebec's current formula -- you supply both languages' line-item text, this does not translate. Not legal or tax advice.

post_security_repo_risk_report_deep

Everything in the standard report, plus a repo-wide secret/credential exposure scan (matched values are never returned).

post_security_repo_risk_report_due_diligence

Everything in the deep report, plus real OpenSSF Scorecard maintainer/governance signals and a prioritized recommendation. An automated baseline positioned against $5,000-$95,000 human technical due diligence.

post_security_repo_risk_report_standard

SBOM inventory plus real OSV.dev dependency-vulnerability matches and dependency-freshness signals for a public Git repository. One-shot alternative to a per-seat secret-scanning subscription.

post_text_dedupe_lines

Remove duplicate lines while preserving original order.

post_text_stats

Calculate character, word, line and byte statistics.

post_x402_service_trust_report

Live, on-demand check of ONE x402-protected endpoint before you pay it: payment-requirements structure, TLS certificate, payTo on-chain balance, known-asset recognition, resource/host consistency, and discovery-manifest cross-check -- not a cached aggregate reputation score.

security

get_security_headers

Inspect HTTP security headers for ONE URL only. For headers combined with TLS and DNS, use /web/audit (raw) or /security/posture (scored).

get_security_posture

Assess TLS and HTTP security posture for a public HTTPS website -- the SAME inspection as /web/audit, but returns a 0-100 score/grade and findings instead of raw fields.

dns

get_dns_lookup

Resolve ONE DNS record type for a domain. For all record types at once use /domain/intelligence; for a bundled DNS+TLS+headers audit use /web/audit or /security/posture; for mail-security plus a scored verdict use /domain/due-diligence.

domain

get_domain_intelligence

Collect ALL common DNS record types (A/AAAA/MX/NS/TXT/CAA) for a domain in one call -- the multi-record bundle version of /dns/lookup.

jwt

get_jwt_decode

Decode a JWT payload without signature verification.

ssl

get_ssl_check

Inspect the TLS certificate for ONE hostname only. For TLS combined with HTTP headers and DNS, use /web/audit (raw) or /security/posture (scored).

subnet

get_subnet_calculate

Calculate subnet information from CIDR notation.

timestamp

get_timestamp_convert

Convert a Unix timestamp to UTC ISO-8601.

url

get_url_parse

Parse a URL into structured components.

uuid

get_uuid_generate

Generate a random UUID version 4.

web

get_web_audit

Consolidated DNS, TLS and HTTP security audit for a public HTTPS website, returned as RAW findings (no score) -- the bundled version of /dns/lookup + /ssl/check + /security/headers. Use /security/posture instead for a 0-100 score/grade.

Tools removed

Tools this server used to expose. Anything built against them stopped working on the day they went.

post_media_video_generate

removed 30 Aug 2026

post_media_video_generate_long

removed 2 Sep 2026

post_media_video_generate_medium

removed 2 Sep 2026

post_media_video_generate_short

removed 2 Sep 2026

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.bakhour.ca/mcp	streamable-http	answering	432 ms	13 min ago

Alternatives to ProfitCollector

same job, measured the same way

Agent Toolkit

by white-hat-lab

Pay-per-call developer utilities and npm supply-chain security tools for coding agents, over x402.

41 installs/wk local only

mcp-toolbelt

by papacasper

29 pay-per-call DNS, SEO, SSL, security, and dev tools for AI agents. x402, no API key.

29 tools answering

Stackhal

by bahdanhal

Outside-in DNS, email security, SEO, GEO and app-link checks plus developer utilities.

13 tools answering

Toolcall

by toolcall

30 pay-per-call APIs for AI agents: compliance, trade, safety, web, data. USDC on Base via x402.

20 tools answering

Utility Matrix

by helphub369

Free browser-based calculators and analyzers for cloud cost, DevOps, security, and data governance.

31 tools answering

Secdim

by secdim

Personalised developer security learning pathways from SecDim's challenges and courses.

7 tools answering

Contract Scanner

by lordbasilaiassistant-sudo

Smart contract security scanner — vulnerabilities, risk scores, and calldata decoding

27 installs/wk local only

Tollbooth

by huwhitememes

37 paid x402 MCP tools for OSINT, prediction markets, web intel, and agent security on Base USDC.

104 tools answering

ProfitCollector — questions

Answers built from our own checks of this server.

What can ProfitCollector do?

It exposes 31 tools, read directly from the server on our last check. Among them: get_dns_lookup, get_domain_intelligence, get_jwt_decode, get_security_headers, get_security_posture, get_ssl_check and 25 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

What is ProfitCollector mostly used for?

Its tools cluster around post and security. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.

Is ProfitCollector working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 420 ms. The bar chart above shows every period we have measured.

Did ProfitCollector ever remove tools?

Yes. post_media_video_generate, post_media_video_generate_long, post_media_video_generate_medium, post_media_video_generate_short are no longer exposed — we recorded the date each one disappeared. A tool vanishing usually means a breaking change for anything that depended on it.

How do I connect ProfitCollector?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does ProfitCollector need an API key?

No. ProfitCollector completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 31 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is ProfitCollector?

It answers our handshake in 420 ms on average, which is faster than 29% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.