Next free-source huntWe check for new free data every weekday.
WeatherNews & RSSOSINTMCP serverFirst audited Nov 13, 2026

NanoTools

44 tools for AI agents: Trends, SERP, SEO audits, screenshots, weather, FX, whois, RSS.The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: 45 of 45 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 398 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
Doesn't sayIts tools do not say whether they only read, so treat them as able to change things.
Endpointhttps://nano.vodka-24.com/mcp

Source code Streamable HTTP · protocol 2025-11-25 · server version 4.0.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 45 of 45 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • api_sha256
    • api_base64
    • api_hash_multi
    • api_random
    • api_uuid
    • api_slug
    • api_password
    • api_json
    • and 37 more

Tools

  • Passed: 45 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (45)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • api_sha256SHA-256 and SHA-512 digests for any text (?text=). Deterministic, local, stable JSON. [HTTP x402 price: $0.001]Doesn't say
  • api_base64Base64 encode or decode. ?op=enc|dec&data=... Tolerant to missing padding. [HTTP x402 price: $0.001]Doesn't say
  • api_hash_multiMD5, SHA-1, SHA-256, SHA-512 in one call. ?text=... [HTTP x402 price: $0.001]Doesn't say
  • api_randomCryptographically secure random number. ?min=&max= (ints, default 0..100). [HTTP x402 price: $0.001]Doesn't say
  • api_uuidGenerate UUIDv4 (and optional count ?n= up to 100). [HTTP x402 price: $0.001]Doesn't say
  • api_slugURL slug from any text. ?text=Hello%20World -> hello-world [HTTP x402 price: $0.001]Doesn't say
  • api_passwordSecure random password. ?len=16&symbols=1 [HTTP x402 price: $0.001]Doesn't say
  • api_jsonValidate + pretty-print JSON. ?data={...} (urlencoded). [HTTP x402 price: $0.001]Doesn't say
  • api_text_statsText statistics: words, chars, sentences, reading time. ?text=... [HTTP x402 price: $0.001]Doesn't say
  • api_csv2jsonConvert CSV to JSON array. ?data=<csv urlencoded>&delim=, [HTTP x402 price: $0.001]Doesn't say
  • api_urlcodeURL encode/decode. ?op=enc|dec&data=... [HTTP x402 price: $0.001]Doesn't say
  • api_timestampUnix timestamp <-> ISO8601 both ways. ?ts=1690000000 or ?iso=2026-01-01T00:00:00Z [HTTP x402 price: $0.001]Doesn't say
  • api_searchGoogle web search. ?q=query&num=5 returns organic results with title, link, snippet. [HTTP x402 price: $0.002]Doesn't say
  • api_scrapeFetch a web page and return clean readable text. ?url=https://example.com [HTTP x402 price: $0.003]Doesn't say
  • api_dnsDNS lookup: A, AAAA, MX, TXT, NS, CNAME records for a domain. ?name=example.com&type=A [HTTP x402 price: $0.001]Doesn't say
  • api_qrQR code generator. ?data=<text>&size=256 -> PNG as base64 in JSON. [HTTP x402 price: $0.001]Doesn't say
  • api_jwt_decodeDecode a JWT header and payload WITHOUT signature verification. ?token=<jwt> [HTTP x402 price: $0.001]Doesn't say
  • api_regexTest a regex against text: matches with groups and positions. ?pattern=<re>&text=<text>&flags=i [HTTP x402 price: $0.001]Doesn't say
  • api_cron_parseExplain a cron expression: next 3 run times in UTC. ?expr=*/5 * * * * [HTTP x402 price: $0.001]Doesn't say
  • api_yaml2jsonConvert YAML to JSON. ?data=<yaml urlencoded> [HTTP x402 price: $0.001]Doesn't say
  • api_toml2jsonConvert TOML to JSON. ?data=<toml urlencoded> [HTTP x402 price: $0.001]Doesn't say
  • api_markdown2htmlConvert Markdown to HTML (tables, fenced code). ?text=<markdown urlencoded> [HTTP x402 price: $0.001]Doesn't say
  • api_diffUnified diff of two texts with changed line count. ?a=<text>&b=<text> [HTTP x402 price: $0.001]Doesn't say
  • api_html_entitiesEscape or unescape HTML entities. ?op=enc|dec&data=<text> [HTTP x402 price: $0.001]Doesn't say
  • api_unit_convertConvert units: length, weight, volume, data size, temperature. ?value=100&from=cm&to=inch [HTTP x402 price: $0.001]Doesn't say
  • api_color_convertConvert colors between hex, rgb, hsl. ?color=#ff0000 or rgb(255,0,0) [HTTP x402 price: $0.001]Doesn't say
  • api_loremLorem ipsum placeholder generator. ?paras=3 or ?words=50 [HTTP x402 price: $0.001]Doesn't say
  • api_weatherCurrent weather + 7-day forecast by city name or lat/lon (open-meteo, no key needed). ?city=Moscow [HTTP x402 price: $0.002]Doesn't say
  • api_fx_ratesECB reference currency exchange rates. ?base=USD&symbols=EUR,GBP or ?date=2026-01-15 [HTTP x402 price: $0.002]Doesn't say
  • api_whoisDomain registration data via RDAP: registrar, created/updated/expires, status, nameservers. ?domain=example.com [HTTP x402 price: $0.003]Doesn't say
  • api_rssParse any RSS or Atom feed into clean JSON items. ?url=<feed>&limit=10 [HTTP x402 price: $0.002]Doesn't say
  • api_ip_infoIP geolocation and network info: country, city, ASN/org, timezone. ?ip=1.2.3.4 [HTTP x402 price: $0.002]Doesn't say
  • api_trendsGoogle Trends interest over time for a keyword (weekly points, peak). ?q=casino&geo=US&time=12-m|5-y [HTTP x402 price: $0.02]Doesn't say
  • api_trends_relatedGoogle Trends related queries: top and rising search terms for a keyword. ?q=casino&geo=&time=12-m [HTTP x402 price: $0.02]Doesn't say
  • api_trends_regionGoogle Trends interest by region/country for a keyword. ?q=casino&geo=&time=12-m [HTTP x402 price: $0.02]Doesn't say
  • api_seo_metaSEO snapshot of a page: title, description, OG/Twitter meta, h1s, h2 count, canonical, robots meta, lang, word count. ?url= [HTTP x402 price: $0.005]Doesn't say
  • api_robots_auditAudit robots.txt + sitemap.xml of a site: rules, sitemaps listed, sitemap reachable, URL counts. ?url=<site root> [HTTP x402 price: $0.005]Doesn't say
  • api_serp_googleGoogle SERP: organic results with position, ads count, related searches. ?q=&num=5&gl=us [HTTP x402 price: $0.01]Doesn't say
  • api_serp_yandexYandex SERP for RU-market keyword research (region by ?lr=). ?q=&lr=213 [HTTP x402 price: $0.01]Doesn't say
  • api_readabilityText readability: Flesch score, level, avg sentence length, keyword density, top words. ?text=<text>&keyword= [HTTP x402 price: $0.003]Doesn't say
  • api_screenshotReal browser screenshot of any page as PNG (base64), JS rendered. ?url=&width=1280&height=800&full=0|1 [HTTP x402 price: $0.02]Doesn't say
  • api_pdfRender any page to PDF (A4, print background) via headless Chrome. ?url= [HTTP x402 price: $0.02]Doesn't say
  • api_render_textRender a JS-heavy page in a real browser and return the visible text. ?url= [HTTP x402 price: $0.015]Doesn't say
  • api_og_imageGenerate an Open Graph image 1200x630 from title/subtitle/theme. ?title=&subtitle=&theme=indigo|dark|green|red|blue [HTTP x402 price: $0.015]Doesn't say
  • api_seo_reportFull SEO audit report of a domain: health score 0-100, prioritized issues list, title/description/H1/canonical, robots.txt review, word count. Returns ready markdown report. ?url=https://example.com…Doesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200398 ms
initializedHTTP 202350 ms
tools/listHTTP 200233 ms
resources/listHTTP 200119 ms
prompts/listHTTP 200116 ms
unknown-methodHTTP 200114 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.