Next free-source huntWe check for new free data every weekday.
WeatherMCP serverFirst audited Nov 13, 2026

profullstack-mcp

53 tools: domains, SEO, Lighthouse, WCAG, gov data, weather, QR (mcp.profullstack.com)The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: The server only speaks the first MCP version (2024-11-05).

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 463 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
YesSome tools say they can change things. Your AI client should ask you first.
Endpointhttps://mcp.profullstack.com/mcp

Website Streamable HTTP · protocol 2024-11-05 · server version 1.7.1

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Note: 6 tools are labelled as able to change things.

    Expected for tools that send, write or buy. Your AI client should ask before calling them.

    • readme-badges
    • scanner
    • social-post
    • social-login
    • link-shortener
    • backlinks
  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 53 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Warning: The server only speaks the first MCP version (2024-11-05).

    Newer versions (latest 2025-11-25) add tool safety labels, structured output and a safer authorization model.

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (53)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • templateA template for creating new MCP server modulesRead-only
  • readme-badgesGenerate shields.io badges and update README.md with idempotent markersCan change things
  • craigslistSearch across all Craigslist sites with filtering by categoriesRead-only
  • seo-rankingSEO ranking checker using ValueSERP APIRead-only
  • wcagWCAG compliance testing module using Pa11y for MCP serverRead-only
  • fleet_list_servicesList the Profullstack fleet: every product with its URL, category, and which surfaces it has (API, MCP, llms.txt, installer, PWA). Filter by category or by a surface.Read-only
  • fleet_get_serviceEverything about one Profullstack service by domain, URL or name: surfaces, MCP endpoint, npm packages, pwamart install page, auth.Read-only
  • fleet_search_servicesSearch the Profullstack fleet by what you need, e.g. "podcast directory" or "webhooks".Read-only
  • fleet_get_authHow to sign in to any Profullstack service: CoinPay OAuth (OIDC) issuer, discovery URL, scopes, PKCE and callback path.Read-only
  • scannerWeb application security scanning module for MCP serverCan change things
  • social-postMCP module for social media posting using @profullstack/social-posterCan change things
  • social-loginMCP module for social media posting using @profullstack/social-posterCan change things
  • social-statusMCP module for social media posting using @profullstack/social-posterRead-only
  • social-platformsMCP module for social media posting using @profullstack/social-posterRead-only
  • social-supported-platformsMCP module for social media posting using @profullstack/social-posterRead-only
  • social-sample-contentMCP module for social media posting using @profullstack/social-posterRead-only
  • social-validate-contentMCP module for social media posting using @profullstack/social-posterRead-only
  • social-posting-statsMCP module for social media posting using @profullstack/social-posterRead-only
  • social-module-infoMCP module for social media posting using @profullstack/social-posterRead-only
  • webhook_verifyTiming-safe, replay-resistant webhook signature verification for Stripe, GitHub, Slack, Shopify, Twilio and generic HMACRead-only
  • fake_jsonMCP module that generates fake JSON responses for any endpoint using OpenAIRead-only
  • tides-currentsTides and Currents module using NOAA CO-OPS API for marine navigation dataRead-only
  • crypto-badgeGenerate crypto payment badges using PayBadge API with support for Bitcoin, Ethereum, Solana, USDC and custom configurationsRead-only
  • link-shortenerLink Shortener module using hynt.us API for creating short URLsCan change things
  • datamart_searchSearch Datamart near a place: public library branches, public schools and colleges within a radius, plus government services. Give one origin (zip, lat+lng, address, or city+state); default is ZIP 95…Read-only
  • resource_getGet one Datamart resource by id: a provider (e.g. "us.loc") or a directory record (library branch, school, college).Read-only
  • resource_capabilitiesWhat Datamart can and cannot do for a provider, per operation: directory_only, public_read, … or unsupported with the reason.Read-only
  • provider_statusConfiguration and health of Datamart providers (configured or not, last success/error), separate from capability.Read-only
  • gov_services_searchFind government services Datamart knows (IRS, Data.gov, California BizFile, FTB, DMV, EDD) with official links and what Datamart can do for each.Read-only
  • datagov_searchSearch the Data.gov catalog (dataset metadata from federal, state, local and tribal publishers). Cursor-paginated.Read-only
  • datagov_get_recordGet the Data.gov catalog (harvest) record for one dataset, by the harvest_record_id from datagov_search.Read-only
  • datagov_list_organizationsList Data.gov publishing organizations with their slugs and dataset counts.Read-only
  • libraries_searchPublic library branches within a radius (IMLS FY2024 survey). Bookmobiles excluded unless type includes "bookmobile". Distance is straight-line; card eligibility is reported separately.Read-only
  • library_getOne public library outlet by Datamart id (e.g. "us.ca.lib.ca0164-002").Read-only
  • loc_searchSearch Library of Congress digital collections on loc.gov. Optionally limit to a format (photos, maps, books…) or a collection slug.Read-only
  • loc_list_collectionsList or search Library of Congress digital collections.Read-only
  • loc_get_itemMetadata for one Library of Congress item, including rights notes and a link to the original record.Read-only
  • loc_get_resource_linksFiles and resource links (images, PDFs, full text) for one Library of Congress item, with its rights notes.Read-only
  • education_searchPublic schools (pre-K-12 sites, from NCES) and public colleges/universities (IPEDS) within a radius. Proximity is not enrollment eligibility.Read-only
  • education_getOne school site or college campus by Datamart id.Read-only
  • contracts_sourcesOfficial government contract-opportunity sources for federal, California, Santa Clara County and City of Santa Clara buyers. Datamart does not index opportunities yet (Phase B); this lists where to l…Read-only
  • qr-generatorQR Code Generator module for generating QR codes from text inputRead-only
  • lighthouseLighthouse performance audit MCP module for website speed assessmentsRead-only
  • weatherWeather data and imagery module using the National Weather Service APIRead-only
  • backlinksAutomated backlink discovery and submission tool for SEO optimizationCan change things
  • email_checkerAn MCP server module for checking email validity using the un.limited.mx APIRead-only
  • news-aggregatorA news aggregator module for MCP server that parses RSS feeds and scrapes websitesRead-only
  • check_domain_availabilityDomain availability checker and brainstorming tool using tldx CLIRead-only
  • generate_domain_suggestionsDomain availability checker and brainstorming tool using tldx CLIRead-only
  • get_tld_presetsDomain availability checker and brainstorming tool using tldx CLIRead-only
  • bulk_domain_checkDomain availability checker and brainstorming tool using tldx CLIRead-only
  • linkcheckerAn MCP server module for checking links using linkinatorRead-only
  • convert2docDocument conversion module using convert2doc.com API for converting between various document formatsRead-only

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200463 ms
initializedHTTP 202401 ms
tools/listHTTP 200269 ms
resources/listHTTP 200188 ms
unknown-methodHTTP 200129 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.