tools

dev.workers.sebastiaan-ba3.mcpgateway/toolsVersion 1.0.0

Doormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.

Status

Responds170 msNov 14, 2026, 14:29 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:29 UTC
Latency: 170 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 22:14 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://mcpgateway.sebastiaan-ba3.workers.dev/mcpResponds170 msNov 14, 2026, 14:29 UTC

No sign-in

Claude Code

claude mcp add --transport http tools https://mcpgateway.sebastiaan-ba3.workers.dev/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: tools
Remote MCP server URL: https://mcpgateway.sebastiaan-ba3.workers.dev/mcp

Cursor

{
  "mcpServers": {
    "tools": {
      "url": "https://mcpgateway.sebastiaan-ba3.workers.dev/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"tools","type":"http","url":"https://mcpgateway.sebastiaan-ba3.workers.dev/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

4 tools

Tools of tools
	Description		Read-only	Idempotent	Open world
`apecheck_report`Paid (x402, USDC on Base). Full safety report for a Base ERC-20 token contract: metadata, raw owner address, mint-selector heuristic, approximate recent-activity signal. Call without 'tx' first to receive the exact x402 payment challenge (amount, asset, payTo address, chain); pay that amount in USDC on Base, then call again with the resulting transaction hash in 'tx' to receive the real report.	Paid (x402, USDC on Base). Full safety report for a Base ERC-20 token contract: metadata, raw owner address, mint-selector heuristic, approximate recent-activity signal. Call without 'tx' first to receive the exact x402 payment challenge (amount, asset, payTo address, chain); pay that amount in USDC on Base, then call again with the resulting transaction hash in 'tx' to receive the real report.	Not declared	Not declared	Not declared	Not declared
`crawlercheck_check`FREE, no payment required. Checks a site's robots.txt against a list of known AI crawlers (GPTBot, ClaudeBot, Google-Extended, etc.) and reports which are allowed or blocked.	FREE, no payment required. Checks a site's robots.txt against a list of known AI crawlers (GPTBot, ClaudeBot, Google-Extended, etc.) and reports which are allowed or blocked.	Not declared	Not declared	Not declared	Not declared
`llmstxt_check`FREE, no payment required. Checks whether a site has a valid llms.txt file (the emerging convention for telling AI crawlers/agents what a site is and how to use it): fetches it, reports status and any errors/warnings.	FREE, no payment required. Checks whether a site has a valid llms.txt file (the emerging convention for telling AI crawlers/agents what a site is and how to use it): fetches it, reports status and any errors/warnings.	Not declared	Not declared	Not declared	Not declared
`secheaders_report`Paid (x402, USDC on Base). Full HTTP security-headers report for a URL: every header checked, raw values, remediation detail. Call without 'tx' first to receive the exact x402 payment challenge; pay, then call again with the transaction hash in 'tx' to receive the full report.	Paid (x402, USDC on Base). Full HTTP security-headers report for a URL: every header checked, raw values, remediation detail. Call without 'tx' first to receive the exact x402 payment challenge; pay, then call again with the transaction hash in 'tx' to receive the full report.	Not declared	Not declared	Not declared	Not declared

Details

Registry status: Active
Published: Oct 7, 2026
Updated: Oct 7, 2026
Website: https://doormat.sebastiaan-ba3.workers.dev/⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing