TOTP secret charset, secret discarded is answering right now. Last checked 2 min ago. It exposes 30 tools. Last commit 10 Sep 2026.
TOTP secret charset, secret discarded
Today is the operative word: we check TOTP secret charset, secret discarded every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.
claude mcp add totp-shape --transport http https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/totp-shape/mcp
{
"mcpServers": {
"totp-shape": {
"url": "https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/totp-shape/mcp"
}
}
}
[mcp_servers.totp-shape]
url = "https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/totp-shape/mcp"
{
"mcpServers": {
"totp-shape": {
"url": "https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/totp-shape/mcp"
}
}
}
{
"mcpServers": {
"totp-shape": {
"url": "https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/totp-shape/mcp"
}
}
}
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
fetch-status
status-catalog
agent-tool-index
browser-url-ok
calc-eval
citation
compatibility
domain-shape
figma-url-shape
file-path-ok
hn-front-count
geo-hint
github-repo-shape
iana-zones
inspect-robots
jira-key-shape
search-query-len
lib-docs-hint
memory-key-count
normalize-url
people-search-index
playwright-url-ok
think-steps
timezone
totp-shape
utc-time
validate-json
weather-hint
web-fetch
wiki-title-ok
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/totp-shape/mcp | streamable-http | answering | 40 ms | 2 min ago |
Check a Sentry DSN shape. Secret discarded.
Check a Slack webhook URL shape. Secret discarded.
Check a Discord webhook URL shape. Secret discarded.
Check a Supabase project URL shape. Secrets discarded.
Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.
Bitwarden/Vaultwarden for agents: list tagged items, TOTP codes, one-time Sends, save new secrets.
Memory, secret scanning and code findings across every AI coding tool
Apache Superset MCP server — 135+ tools for dashboards, charts, datasets, SQL Lab, and security
Answers built from our own checks of this server.