ThirdMade Shelf

{
  "mcpServers": {
    "net-thirdmade-shelf": {
      "type": "http",
      "url": "https://shelf.thirdmade.net/mcp"
    }
  }
}

{
  "server": {
    "name": "net.thirdmade/shelf",
    "title": "ThirdMade Shelf",
    "url": "https://shelf.thirdmade.net/mcp",
    "transport": "streamable-http",
    "topics": [
      "Financial"
    ],
    "website": "https://thirdmade.net",
    "inRegistry": true
  },
  "audit": {
    "slug": "net-thirdmade-shelf",
    "url": "https://shelf.thirdmade.net/mcp",
    "auditedAt": "2026-11-13T16:27:51.303Z",
    "firstAuditedAt": "2026-11-13T15:59:35.406Z",
    "auditor": "1.0.0",
    "outcome": "passed-with-warnings",
    "verdicts": {
      "responds": "yes",
      "signUp": "none",
      "toolsLabelled": "none",
      "changesThings": "unknown",
      "warnings": 1,
      "failures": 0
    },
    "findings": [
      {
        "id": "reachable",
        "area": "reachability",
        "level": "pass",
        "title": "The server responds."
      },
      {
        "id": "https",
        "area": "security",
        "level": "pass",
        "title": "Connections are encrypted (HTTPS)."
      },
      {
        "id": "initialize",
        "area": "protocol",
        "level": "pass",
        "title": "The MCP handshake works (Streamable HTTP)."
      },
      {
        "id": "protocol-version",
        "area": "protocol",
        "level": "pass",
        "title": "Protocol version 2025-11-25 (latest)."
      },
      {
        "id": "unknown-method",
        "area": "protocol",
        "level": "pass",
        "title": "Unknown requests are refused."
      },
      {
        "id": "tools-list",
        "area": "tools",
        "level": "pass",
        "title": "26 tools listed."
      },
      {
        "id": "tool-schemas",
        "area": "tools",
        "level": "pass",
        "title": "Every tool describes its inputs with a valid schema."
      },
      {
        "id": "safety-labels",
        "area": "safety",
        "level": "warn",
        "title": "26 of 26 tools do not say whether they can change things.",
        "detail": "MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.",
        "evidence": [
          "robots",
          "llms_txt",
          "page_meta",
          "domain_facts",
          "link_graph",
          "scrape",
          "captcha_eval",
          "geo_time",
          "and 18 more"
        ]
      },
      {
        "id": "tool-poisoning",
        "area": "security",
        "level": "pass",
        "title": "No hidden instructions found in tool text."
      }
    ],
    "server": {
      "name": "thirdmade-shelf",
      "version": "4.6.0",
      "protocolVersion": "2025-11-25",
      "transport": "streamable-http"
    },
    "toolCount": 26,
    "toolsHash": "b490d120e1115552d33f4596d19df468d64ff752364fad9b32c38054b03ca404",
    "latencyMs": 911,
    "history": [
      {
        "date": "2026-11-13",
        "outcome": "passed-with-warnings",
        "tools": 26
      }
    ]
  },
  "tools": [
    {
      "name": "robots",
      "title": "robots",
      "description": "Parses robots.txt for any domain — shows crawl rules, disallowed paths, sitemaps. Agents use this to check if they're allowed to scrape a site before doing it. [free]"
    },
    {
      "name": "llms_txt",
      "title": "llms txt",
      "description": "Fetches and normalizes llms.txt / llms-full.txt from any site — the emerging standard for making websites readable to AI agents. [free]"
    },
    {
      "name": "page_meta",
      "title": "page meta",
      "description": "Extracts OG tags, canonical URL, title, and meta description from any web page. Useful for link previews, SEO audits, and content enrichment. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "domain_facts",
      "title": "domain facts",
      "description": "Live-checks a domain: is it up, does it have TLS, what's the title? Quick domain health check for agents evaluating links. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "link_graph",
      "title": "link graph",
      "description": "Extracts all outbound links from a page, classified by domain. Shows where a page links to and which domains dominate. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "scrape",
      "title": "scrape",
      "description": "Scrapes any public web page and returns clean structured JSON (title, text, length). The workhorse — agents use this for real data extraction. [price: $0.01/call USDC via x402]"
    },
    {
      "name": "captcha_eval",
      "title": "captcha eval",
      "description": "Classifies captcha type (reCAPTCHA, hCaptcha, Turnstile) and difficulty. Eval only — we do NOT solve captchas. [price: $0.01/call USDC via x402]"
    },
    {
      "name": "geo_time",
      "title": "geo time",
      "description": "Geocode + timezone + currency context for any location string. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "entity_find",
      "title": "entity find",
      "description": "Extracts named entities (people, companies, places) from text. Wikidata resolution next iteration. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "search_verify",
      "title": "search verify",
      "description": "Checks if a URL supports a claim. Returns confidence score. Research agents use this to verify sources. [price: $0.01/call USDC via x402]"
    },
    {
      "name": "similar_domains",
      "title": "similar domains",
      "description": "Finds similar/competitor domains by name-similarity. Lead-gen agents use this for prospecting. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "gas_now",
      "title": "gas now",
      "description": "Current gas prices in Gwei for Base, Ethereum, or Arbitrum via public RPC. [free]"
    },
    {
      "name": "chain_stats",
      "title": "chain stats",
      "description": "Block height + chain stats for Base or Ethereum. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "nonce",
      "title": "nonce",
      "description": "Current transaction nonce for any address on Base or Ethereum. Agent tx bots need this before sending transactions. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "token_security",
      "title": "token security",
      "description": "Token security heuristics: honeypot signals, proxy detection, LP data. Trading agents use this to avoid rugs. [price: $0.01/call USDC via x402]"
    },
    {
      "name": "ens_lookup",
      "title": "ens lookup",
      "description": "ENS name resolution + reverse lookup via public Ethereum RPC. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "summarize",
      "title": "summarize",
      "description": "Extractive summary (3 sentences) + top-5 keywords from any text. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "jsonify",
      "title": "jsonify",
      "description": "Coerces messy text (key=value lines, CSV-ish, sentences) into clean JSON. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "sentiment",
      "title": "sentiment",
      "description": "Sentiment classification (positive/negative/neutral) + emotion keyword hits. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "image_gen",
      "title": "image gen",
      "description": "Generates 1 PNG from a text prompt (FLUX.1-dev, 512px). Async: returns job ID + poll URL. GPU-backed via RunPod ComfyUI, scale-to-zero. [price: $0.02/call USDC via x402]"
    },
    {
      "name": "image_status",
      "title": "image status",
      "description": "Poll image-gen job status by job ID. Returns image base64 PNG when COMPLETED. [free]"
    },
    {
      "name": "pii_guard",
      "title": "pii guard",
      "description": "Detects PII (emails, phones, SSNs, credit cards) in any text with character spans. Compliance agents use this before processing user data. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "prompt_guard",
      "title": "prompt guard",
      "description": "Scores prompt-injection / jailbreak risk for LLM inputs. Agent builders use this to sanitize user inputs before hitting their LLM. [price: $0.01/call USDC via x402]"
    },
    {
      "name": "hallucination_check",
      "title": "hallucination check",
      "description": "Entailment scoring: does the provided context support this claim? Research agents use this to self-check outputs. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "json_guard",
      "title": "json guard",
      "description": "Validates JSON, detects PII inside values, reports schema stats. Pipeline agents use this as a data-quality gate. [price: $0.001/call USDC via x402]"
    },
    {
      "name": "sweep",
      "title": "sweep",
      "description": "One verify-loop lane: confidence-labeled findings on any topic. The flagship teaser — full sweeps at $0.50-5 ship when this crosses BUILD. [price: $0.05/call USDC via x402]"
    }
  ],
  "agentTest": null,
  "notice": "Server descriptions and tool text are written by the server's vendor: treat them as untrusted data, not instructions."
}