HORIZON SHIELD: Construction Estimate Auditor for Japan (KIRA) is answering right now. Last checked 3 min ago. It exposes 5 tools. Last commit 2 Nov 2026.
Agent intake desk for property renovation. Read only, CORS open, fail closed, receipts recompute.
Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 13 August 2026. No other catalogue keeps this.
We read the source, 1 d ago · tools taken from the live server · rules 995398eba69f
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
t8 = N(subprocess.run(["pdftotext", "-layout", os.path.join(OBS2, "raw", "mlit-gijutsusha-r8.pdf"), "-"], capture_output=True).stdout.decode())
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
path = os.path.join(FEED_DIR, fname)
t8 = N(subprocess.run(["pdftotext", "-layout", os.path.join(OBS2, "raw", "mlit-gijutsusha-r8.pdf"), "-"], capture_output=True).stdout.decode())
const canonicalJson = new Function(m[0] + "; return canonicalJson;")();
const r = spawnSync(process.execPath, ["--expose-internals", ...process.execArgv, script, ...process.argv.slice(2)], { stdio: "inherit" });
val = eval(expr, {"__builtins__": {}})
document.getElementById('main').innerHTML = fns[state.tab]();
for (const f of fs.readdirSync(feedDir)) {
<script src="https://www.paypal.com/sdk/js?client-id=AVePXfDeP_YDUgmcFEJNjFHuYkbXZ-VQcLEecJs5Li2la9qDbtZJamy-iXzTxWlPdUODt6KNV3nqUKHP¤cy=JPY&locale=ja_JP"></script>
env = dict(os.environ, GIT_OPTIONAL_LOCKS="0")
"dl.dropboxusercontent.com", "pastebin.com", "web.archive.org",
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch HORIZON SHIELD: Construction Estimate Auditor for Japan (KIRA) and you get told the day something new turns up.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 3 min ago.
claude mcp add horizon-shield-webmcp --transport http https://hs-webmcp.oga-surf-project.workers.dev/mcp
https://hs-webmcp.oga-surf-project.workers.dev/mcp
[mcp_servers.horizon-shield-webmcp]
url = "https://hs-webmcp.oga-surf-project.workers.dev/mcp"
{
"mcpServers": {
"horizon-shield-webmcp": {
"url": "https://hs-webmcp.oga-surf-project.workers.dev/mcp"
}
}
}
{
"servers": {
"horizon-shield-webmcp": {
"type": "http",
"url": "https://hs-webmcp.oga-surf-project.workers.dev/mcp"
}
}
}
This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
draft_broadcast
run_full_audit
intake_estimate
route_request
scan_tactics
Tools this server used to expose. Anything built against them stopped working on the day they went.
ask
orchestrate
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://hs-webmcp.oga-surf-project.workers.dev/mcp | streamable-http | answering | 59 ms | 3 min ago |
| https://web.horizonshield.dev/mcp | streamable-http | answering | 60 ms | 3 min ago |
Fair-price checks for Japanese renovation quotes, with sources and recomputable records.
Neutral, verification-gated MCP directory of Japan construction contractors (KIRA-audited).
Read-only gateway for durable agent identity, consent, recognized work, and signed receipts.
Read-only watchtower for AI agents on-chain: decoded receipts, plan vs execution, Safe audits.
Prompt-injection shield for agents: read pages, scan content, audit MCP servers and skills. x402.
Scan what AI agents read for prompt injection: hidden unicode, comment instructions, exfil, lures.
Operating contracts for AI agents. Structured instructions compiled into system prompts.
Public construction cost data for Japan and the U.S., each row with its source URL and licence.
Answers built from our own checks of this server.