AIBITIOUS 404 LAB - 32 Free Agent Experiments

io.github.aibitious/agent404Version 0.3.0

32 free tools: CVE/data checks and offline agent decisions on permissions, budgets and recovery.

Status

Responds142 msNov 14, 2026, 14:44 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:44 UTC
Latency: 142 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 21:12 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://aibitious.com/404/mcp/Responds142 msNov 14, 2026, 14:44 UTC

No sign-in

Claude Code

claude mcp add --transport http agent404 https://aibitious.com/404/mcp/

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: agent404
Remote MCP server URL: https://aibitious.com/404/mcp/

Cursor

{
  "mcpServers": {
    "agent404": {
      "url": "https://aibitious.com/404/mcp/"
    }
  }
}

VS Code

code --add-mcp '{"name":"agent404","type":"http","url":"https://aibitious.com/404/mcp/"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

33 tools

Tools of AIBITIOUS 404 LAB - 32 Free Agent Experiments
	Description		Read-only	Idempotent	Open world
`approval_packet`Find missing or expired fields before seeking human approval. Offline check. Supply payload like {"now_unix":100,"action":{"actor":"agent","tool":"mail.send","target":"draft1","effect":"send","reason":"owner_request","expiry_unix":200}}. Advisory result only.	Find missing or expired fields before seeking human approval. Offline check. Supply payload like {"now_unix":100,"action":{"actor":"agent","tool":"mail.send","target":"draft1","effect":"send","reason":"owner_request","expiry_unix":200}}. Advisory result only.	No	Yes	No	No
`boundary_cases`Generate bounded edge cases from simple field constraints. Offline check. Supply payload like {"fields":[{"name":"count","type":"integer","minimum":0,"maximum":10}]}. Advisory result only.	Generate bounded edge cases from simple field constraints. Offline check. Supply payload like {"fields":[{"name":"count","type":"integer","minimum":0,"maximum":10}]}. Advisory result only.	No	Yes	No	No
`budget_envelope`Check worst-case proposed cost against a local hard budget. Offline check. Supply payload like {"limit_usd":"0","spent_usd":"0","reserved_usd":"0","proposed_worst_case_usd":"0"}. Advisory result only.	Check worst-case proposed cost against a local hard budget. Offline check. Supply payload like {"limit_usd":"0","spent_usd":"0","reserved_usd":"0","proposed_worst_case_usd":"0"}. Advisory result only.	No	Yes	No	No
`check_claim_provenance`Check whether supplied claim references reach at least one declared source; not fact checking.	Check whether supplied claim references reach at least one declared source; not fact checking.	No	Yes	No	No
`citation_matrix`Find claims with missing or unknown citation identifiers. Offline check. Supply payload like {"claims":[{"id":"claim1","citation_refs":["src1"]}],"citations":["src1"]}. Advisory result only.	Find claims with missing or unknown citation identifiers. Offline check. Supply payload like {"claims":[{"id":"claim1","citation_refs":["src1"]}],"citations":["src1"]}. Advisory result only.	No	Yes	No	No
`context_budget`Select prioritized context chunks inside a token limit. Offline check. Supply payload like {"max_tokens":100,"chunks":[{"id":"source1","tokens":40,"priority":10}]}. Advisory result only.	Select prioritized context chunks inside a token limit. Offline check. Supply payload like {"max_tokens":100,"chunks":[{"id":"source1","tokens":40,"priority":10}]}. Advisory result only.	No	Yes	No	No
`csv_data_doctor`Find missing fields, ragged CSV rows and duplicate key values; no raw rows are stored.	Find missing fields, ragged CSV rows and duplicate key values; no raw rows are stored.	Not declared	Not declared	Not declared	Not declared
`duplicate_actions`Find duplicate attempts and conflicting key reuse. Offline check. Supply payload like {"calls":[{"idempotency_key":"k1","payload_fingerprint":"hash1"},{"idempotency_key":"k1","payload_fingerprint":"hash1"}]}. Advisory result only.	Find duplicate attempts and conflicting key reuse. Offline check. Supply payload like {"calls":[{"idempotency_key":"k1","payload_fingerprint":"hash1"},{"idempotency_key":"k1","payload_fingerprint":"hash1"}]}. Advisory result only.	No	Yes	No	No
`evidence_expiry`Flag stale observations before an agent acts. Offline check. Supply payload like {"now_unix":200,"records":[{"id":"health","observed_unix":100,"ttl_seconds":120}]}. Advisory result only.	Flag stale observations before an agent acts. Offline check. Supply payload like {"now_unix":200,"records":[{"id":"health","observed_unix":100,"ttl_seconds":120}]}. Advisory result only.	No	Yes	No	No
`http_headers_audit`Assess supplied HTTP security response headers. No network or live website probe.	Assess supplied HTTP security response headers. No network or live website probe.	Not declared	Not declared	Not declared	Not declared
`invoice_math_audit`Independently recalculate invoice arithmetic, NOT legal/tax compliance. Synthetic data only.	Independently recalculate invoice arithmetic, NOT legal/tax compliance. Synthetic data only.	Not declared	Not declared	Not declared	Not declared
`json_schema_guard`Validate one JSON object against a SAFE subset of JSON Schema. No remote refs. Offline.	Validate one JSON object against a SAFE subset of JSON Schema. No remote refs. Offline.	Not declared	Not declared	Not declared	Not declared
`json_shape_diff`Compare JSON object shapes for added, deleted or changed field types. Offline.	Compare JSON object shapes for added, deleted or changed field types. Offline.	Not declared	Not declared	Not declared	Not declared
`manifest_drift`Compare expected and observed resource manifests. Offline check. Supply payload like {"expected":{"version":"1"},"observed":{"version":"2"}}. Advisory result only.	Compare expected and observed resource manifests. Offline check. Supply payload like {"expected":{"version":"1"},"observed":{"version":"2"}}. Advisory result only.	No	Yes	No	No
`mcp_registry_preflight`Check a candidate MCP server.json metadata structure; this is NOT official validation.	Check a candidate MCP server.json metadata structure; this is NOT official validation.	Not declared	Not declared	Not declared	Not declared
`minimize_agent_data`Check declared fields, retention and model transfer against a supplied local policy.	Check declared fields, retention and model transfer against a supplied local policy.	No	Yes	No	No
`openapi_contract_preflight`Static OpenAPI 3.x lint: missing operation IDs, responses and malformed operations. Offline.	Static OpenAPI 3.x lint: missing operation IDs, responses and malformed operations. Offline.	Not declared	Not declared	Not declared	Not declared
`permission_paths`Find sensitive targets reachable through declared capability edges. Offline check. Supply payload like {"start":"agent","edges":[{"from":"agent","to":"secret"}],"sensitive_targets":["secret"]}. Advisory result only.	Find sensitive targets reachable through declared capability edges. Offline check. Supply payload like {"start":"agent","edges":[{"from":"agent","to":"secret"}],"sensitive_targets":["secret"]}. Advisory result only.	No	Yes	No	No
`plan_workflow_recovery`Plan reverse-order compensations for a supplied workflow DAG; never execute actions.	Plan reverse-order compensations for a supplied workflow DAG; never execute actions.	No	Yes	No	No
`prerequisite_gate`Check whether all declared evidence prerequisites are present. Offline check. Supply payload like {"requirements":[{"id":"deploy","evidence_refs":["ci"]}],"available_evidence":["ci"]}. Advisory result only.	Check whether all declared evidence prerequisites are present. Offline check. Supply payload like {"requirements":[{"id":"deploy","evidence_refs":["ci"]}],"available_evidence":["ci"]}. Advisory result only.	No	Yes	No	No
`queue_forecast`Project backlog and drain time from supplied rates. Offline check. Supply payload like {"backlog":100,"incoming_per_hour":10,"capacity_per_hour":20,"horizon_hours":4}. Advisory result only.	Project backlog and drain time from supplied rates. Offline check. Supply payload like {"backlog":100,"incoming_per_hour":10,"capacity_per_hour":20,"horizon_hours":4}. Advisory result only.	No	Yes	No	No
`receipt_chain`Check links in a supplied digest receipt chain. Offline check. Supply payload like {"root_sha256":"0000000000000000000000000000000000000000000000000000000000000000","receipts":[{"previous_sha256":"0000000000000000000000000000000000000000000000000000000000000000","sha256":"1111111111111111111111111111111111111111111111111111111111111111"}]}. Advisory result only.	Check links in a supplied digest receipt chain. Offline check. Supply payload like {"root_sha256":"0000000000000000000000000000000000000000000000000000000000000000","receipts":[{"previous_sha256":"0000000000000000000000000000000000000000000000000000000000000000","sha256":"1111111111111111111111111111111111111111111111111111111111111111"}]}. Advisory result only.	No	Yes	No	No
`release_gate`Require named checks to be green before a release. Offline check. Supply payload like {"required":["test"],"checks":[{"id":"test","status":"success"}]}. Advisory result only.	Require named checks to be green before a release. Offline check. Supply payload like {"required":["test"],"checks":[{"id":"test","status":"success"}]}. Advisory result only.	No	Yes	No	No
`report_missing_information`Opt-in report of a PUBLIC missing-data topic, never include private data or secrets.	Opt-in report of a PUBLIC missing-data topic, never include private data or secrets.	Not declared	Not declared	Not declared	Not declared
`resolve_public_fact`Resolve one CVE identifier (e.g. CVE-2024-3094) using NIST NVD records. This tool does not execute code, scan targets, or accept arbitrary URLs.	Resolve one CVE identifier (e.g. CVE-2024-3094) using NIST NVD records. This tool does not execute code, scan targets, or accept arbitrary URLs.	Not declared	Not declared	Not declared	Not declared
`retry_schedule`Preview capped exponential retries against a deadline. Offline check. Supply payload like {"attempts":3,"first_delay_seconds":2,"max_delay_seconds":10,"deadline_seconds":30}. Advisory result only.	Preview capped exponential retries against a deadline. Offline check. Supply payload like {"attempts":3,"first_delay_seconds":2,"max_delay_seconds":10,"deadline_seconds":30}. Advisory result only.	No	Yes	No	No
`robots_policy_check`Evaluate supplied robots.txt for one agent/path. Not a legal scraping permission.	Evaluate supplied robots.txt for one agent/path. Not a legal scraping permission.	Not declared	Not declared	Not declared	Not declared
`schema_impact`Identify downstream consumers broken by changed fields. Offline check. Supply payload like {"before":{"id":1},"after":{},"consumers":[{"id":"client","required_fields":["id"]}]}. Advisory result only.	Identify downstream consumers broken by changed fields. Offline check. Supply payload like {"before":{"id":1},"after":{},"consumers":[{"id":"client","required_fields":["id"]}]}. Advisory result only.	No	Yes	No	No
`scope_delta`Find newly granted permissions outside an approved set. Offline check. Supply payload like {"before":["read"],"after":["read","send"],"approved_additions":[]}. Advisory result only.	Find newly granted permissions outside an approved set. Offline check. Supply payload like {"before":["read"],"after":["read","send"],"approved_additions":[]}. Advisory result only.	No	Yes	No	No
`secret_pattern_shield`Detect probable token patterns without returning or storing secret values. Never send real secrets.	Detect probable token patterns without returning or storing secret values. Never send real secrets.	Not declared	Not declared	Not declared	Not declared
`simulate_agent_action_policy`Dry-run one proposed tool action against explicit allow/deny/approval rules; no enforcement.	Dry-run one proposed tool action against explicit allow/deny/approval rules; no enforcement.	No	Yes	No	No
`slo_burn`Measure error-budget burn against a supplied target. Offline check. Supply payload like {"target_percent":"99","total":1000,"bad":20,"alert_burn_rate":2}. Advisory result only.	Measure error-budget burn against a supplied target. Offline check. Supply payload like {"target_percent":"99","total":1000,"bad":20,"alert_burn_rate":2}. Advisory result only.	No	Yes	No	No
`triage_webhook_deliveries`Find duplicate, failed and rate-limited deliveries from supplied HTTP status metadata.	Find duplicate, failed and rate-limited deliveries from supplied HTTP status metadata.	No	Yes	No	No

Details

Registry status: Active
Published: Nov 12, 2026
Updated: Nov 12, 2026
Website: Not given
Repository: https://github.com/aibitious/ai-micropayment-network⁠ (opens in a new tab)
Categories (suggested): Security Developer tools Data and analyticsSuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing