Toolsnap Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Toolsnap Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Context-efficient microtools for AI agents. Pay per call with USDC on Base.
Live endpoint: https://mcp.toolsnap.app/mcp Server card: /.well-known/mcp.json Pricing: /.well-known/pricing.json Docs: toolsnap.app/agents
The biggest cost for AI agents isn't generation — it's context. When an agent loads a raw webpage to extract information it can burn 50,000+ tokens on HTML boilerplate. ToolSnap MCP moves that work server-side.
Benchmark (11 real pages, June 2026):
| Raw HTML | Extracted | Saving | |
|---|---|---|---|
| Median tokens | 53,820 | 2,001 | 98.1% |
| Cost @ Sonnet ($3/M) | $0.162 | $0.006 | $0.156/call |
| Break-even page size | — | — | 26 KB |
The tool costs $0.02 USDC → 7.8× ROI on a typical page.
{
"mcpServers": {
"toolsnap": {
"url": "https://mcp.toolsnap.app/mcp",
"transport": "streamable-http"
}
}
}curl -X POST https://mcp.toolsnap.app/mcp \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'| Tool | Description | Price |
|---|---|---|
fetch_extract | Fetch a URL → clean text. 98.1% median token reduction. | $0.02 USDC |
First call free per wallet address. After that, your agent pays $0.02 USDC on Base using x402 v2 (EIP-3009 transferWithAuthorization). No API key, no subscription — pay only when you call.
| Tool | Description |
|---|---|
pricing | Machine-readable pricing menu + ROI. Call this first. |
uuid_generate | 1–100 random UUID v4 values |
hash_text | SHA-256 / SHA-1 / SHA-512 (hex) |
base64_encode | UTF-8 → Base64 |
base64_decode | Base64 → UTF-8 |
url_encode | Percent-encode (encodeURIComponent) |
url_decode | Decode percent-encoded string |
json_format | Parse + pretty-print or minify JSON |
timestamp_convert | Unix ↔ ISO 8601 (auto-detects direction) |
text_stats | Chars, words, lines, sentences |
When an agent calls fetch_extract without payment, the server returns:
{
"jsonrpc": "2.0",
"id": 1,
"error": {
"code": 402,
"message": "Payment required",
"data": {
"x402Version": 2,
"accepts": [{
"scheme": "exact",
"network": "eip155:8453",
"amount": "20000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
}]
}
}
}An x402-enabled client reads accepts[0], signs an EIP-3009 TransferWithAuthorization, and retries with _meta["x402/payment"] set. See x402 spec.
npm install
cp .dev.vars.example .dev.vars # fill in wallet secrets
npm run dev
# Worker at http://localhost:8787npm run typechecknpm run deploytransferWithAuthorization via relayer walletfirst_free:{address}, verified but not settledPRs welcome for new free tools in src/tools/. Follow the pattern in src/tools/text-stats.ts and add the tool to src/tools/index.ts.
For paid tools or changes to the x402 payment logic, open an issue first.
Do not commit wallet private keys, `.dev.vars`, or any secrets.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.