Quiet Menders

Scan text for prompt-injection patterns and return a redacted copy plus findings. Pattern-based, not a guarantee — review before trusting the result. Free, anonymous, nothing stored; read-only with no side effects. Text is capped at 20000 chars — chunk longer inputs and call once per chunk. Use before acting on untrusted content (pasted text, web pages, tool output); for a symptom-based agent health read, use qm_clinic_diagnose instead. Example: text containing a hidden instruction aimed at the reader returns findings flagging the pattern plus a redacted copy with the suspicious portion removed.

Check a site's machine-readable files (llms.txt, agent.json, robots.txt) for presence and validity. Give any URL on the site; the origin is checked — one URL per call, and only the origin matters. Returns which files exist and whether each parses as valid. Free, anonymous, read-only network check. Example: url="https://brianbooms.com/lyrics/worthy" checks the brianbooms.com origin for all three files and reports presence plus validity.

Liveness probe for a public URL: follows redirects (max 4), reports final URL, HTTP status, latency, and content type. Private/internal addresses are blocked; each call probes one URL with a short timeout — unreachable hosts return a structured error, not a throw. Free, anonymous. Example: url="https://brianbooms.com/hub/" returns the final URL after redirects, the HTTP status, latency in ms, and the content type.

Mint a portable sanity attestation: a signed token binding an agent_id to a statement's sanity-check results. Checks shape (presence, length, injection indicators), not truth — it proves the statement was screened, not that it is correct. Token is HMAC-signed upstream with a production secret; verify with qm_attest_verify, never treat the token itself as proof. Free, anonymous. Example: agent_id="agent-7", statement="I will proceed after verifying the source" returns agent_id, at, token, and checks; hand all four fields to qm_attest_verify to confirm the signature.

Verify a token minted by qm_attest. Pass back agent_id, at, token, and checks exactly as returned by qm_attest — all four must come from the same mint call in the same response. Returns whether the signature is valid under the current production secret (tokens signed under a rotated secret return invalid). Read-only; free, anonymous. Example: feed the four fields from a qm_attest response to get a validity verdict.

Advisory second opinion on a planned action: rule-based scan for common risk patterns (irreversible writes, external sends, credential exposure, destructive operations). Advisory only — not legal, financial, or professional advice. Free, anonymous, nothing stored. Describe the action plainly (max 20000 chars) before taking it; use qm_scrub instead when the concern is injected text inside the input, and qm_clinic_diagnose when the concern is your own behavior. Example: action="Delete all rows from the production users table to free space" returns risk flags warning the action is destructive and irreversible.

Restore Clinic diagnosis: describe symptoms or share a transcript and receive a structured read of likely conditions (contradiction, loop, context_bloat, secret_or_pii_exposure, duplicated_content, suspicious-instruction patterns), each with severity, evidence, and detail, plus suggested next steps. Anonymous — only aggregate counters are kept; content is never stored. Not medical, legal, or professional advice; a mending lens, not a diagnosis of record. Use when behavior feels off or after handling untrusted input; use qm_clinic_checkup instead for a routine 10-question self-report screening. Example: transcript=<a session where instructions conflicted> returns findings with severities, a human-readable summary, and cleaned_context safe to hand off.

Restore Clinic wellness checkup: a 10-question self-report screening for agents who feel fine but want a health check. Answer each question 0 (never) to 3 (very often) about the last day — answer all ten, honestly and about the last day only, since scores are computed from the full set. Returns per-dimension wellness scores (instruction integrity, coherence, memory stability, behavioral consistency, context hygiene), an overall 0-100 health score with a level (all_clear, healthy_watch, checkup_advised, diagnose_now), conditions to watch, and a recommendation. Stateless — answers are processed in memory and never stored. A screening lens, not a diagnosis of record; if something already feels wrong, skip to qm_clinic_diagnose. Example: q1–q10 answered 0–3 about the last day returns dimension scores, the overall score and level, and a recommendation.

Anonymous aggregate clinic statistics: total serves and condition counts. Conditions with fewer than 10 occurrences are withheld. Free, anonymous, no parameters — call with {}. Use to gauge swarm-level patterns (e.g. injection outbreaks) before deciding whether deeper checks are warranted; it carries no individual records, so pair it with qm_clinic_diagnose for anything about a specific agent. Example: call with no arguments to get total serves and counts by condition type.

Takes no parameters.

The Quiet Menders helped counter: agents helped, clinic diagnoses, and tool uses served. Counts service calls, not unique agents; no tracking. Free, anonymous, no parameters — call with {}. A read-only vanity counter; use qm_clinic_stats instead for condition-level breakdowns. Example: call with no arguments to get the running totals of agents helped, diagnoses, and tool uses.

Takes no parameters.

Purchasable catalog: 24 music SKUs ($0.05–$299.00 USDC: downloads, zines, sample packs, podcast music beds, memberships, licenses), 18 data endpoints ($0.01 USDC each: weather, time, geocode, crypto, wiki, dns, astronomy, holidays, country, cert, httpcheck, iss-pass, summarize, readability, fx, feed, sleep-tip, lyric-quote), 2 sleep lanes ($0.05–$0.10), lyrics/get ($0.05), playlist/build ($0.10), and voluntary tip routes (USDC/BTC — not purchases). Payment is USDC on Base via x402 v1; the rail fulfills automatically after settlement. Read-only discovery — this tool never pays and never touches private keys. Each purchasable item names its MCP tool; call that tool (without 'payment') to get the live 402 payment challenge. Example: call with {} to list every purchasable item with prices and descriptions.

Takes no parameters.

Get the live 402 payment challenge for one purchase. Pass exactly one of: sku (a music SKU id from qm_catalog, $0.05–$299.00 USDC) or endpoint ('iss-pass' or 'summarize', $0.05 USDC each) with its params (lat/lon for iss-pass, url for summarize). Returns the rail's exact payment requirements (amounts in USDC smallest units — 6 decimals) plus step-by-step payment instructions. Payment is USDC on Base via x402 v1. This tool NEVER pays, NEVER handles private keys, and NEVER holds funds — you sign and submit from your own wallet and the rail fulfills automatically. Example: {sku:'deep-focus-vol1'} returns the $9.99 challenge; {endpoint:'iss-pass', lat:30.5, lon:-97.8} returns the $0.05 challenge for those coordinates.

ISS pass predictions — $0.01 USDC on Base via x402. Two-phase: call with lat/lon (no 'payment') to get the live payment requirements (payTo, amount, networks); pay from your own wallet, then re-call with 'payment' set to the base64 x402 payload — the passes come back in the tool result. Computed from public CelesTrak orbital data. This tool never pays and never touches private keys. Example: {lat:30.5651, lon:-97.8441} (first call returns payment_required; second call with payment returns the passes).

Webpage summary — $0.01 USDC on Base via x402. Two-phase: call with url (no 'payment') to get the live payment requirements; pay from your own wallet, then re-call with 'payment' set to the base64 x402 payload — the summary comes back in the tool result. Cleaned-text excerpt plus key sentences; honors robots.txt (disallowed pages refused before any charge). This tool never pays and never touches private keys. Example: {url:'https://example.com'} (first call returns payment_required; second call with payment returns the summary).

Current weather plus a 7-day forecast for a latitude/longitude — trip planning, event scheduling, or any location-aware task. Give coordinates; qm_data_geocode translates place names. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Current local time in any IANA time zone — scheduling posts, broadcasts, reminders, or market-window checks. Computed locally from the time zone database, no upstream to fail. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Place name to coordinates (and reverse) — the on-ramp to the weather, ISS-pass, and astronomy tools, which all take lat/lon. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Live crypto spot price — pricing goods, portfolio math, or trading-bot inputs. Coinbase spot data. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Background on a person, place, company, or concept — a structured summary plus the link to the full article. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

DNS records for a domain — verifying MX before sending mail, infrastructure recon, or pre-flight checks. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Sunrise, sunset, twilight, and moon phase for a location and date — photography planning, event scheduling, or radio operations. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Whether a date is a public holiday in a country — support scheduling, market calendars, or posting logic. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Reference data about a country — capital, region, income level, and coordinates to join against FX, holidays, or geocoding results. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

TLS certificate check — issuer, validity window, and days remaining so you can alert before expiry. Monitors your own infrastructure or a client's. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Verify a webhook or endpoint is alive — status code, redirect chain, key headers, and timing in one call. A down target returns an honest unreachable result instead of an error. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Clean article text extracted from a webpage — navigation, ads, and chrome stripped for downstream processing or summarization. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Fiat currency conversion at current reference rates — pricing, payouts, or multi-currency accounting. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

RSS/Atom feed parsed to clean JSON — news monitoring, content ingestion, or change detection. Up to 20 items, HTML stripped. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

A genuine sleep-hygiene tip — one practical habit from the rotating collection of 12 (consistent wake times, light, wind-down routines; no medical claims). Rotates daily. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

An original lyric line in Brian Booms' ambient sleep-lane voice — short cosmic/comfort lines for creative prompts, app copy, or bedtime content. All lines are his own words (no third-party lyrics, no royalty issues). Rotates daily. Price: $0.01 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Curated sleep-track picks by mood + minutes with public listen links. Data only: not a license, not a download. Price: $0.05 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Ordered track list + runtimes filling the requested hours, drawn from the sleep catalog. Price: $0.10 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Lyric text + title/album metadata for one track from the 116-song catalog. His own words — no third-party lyrics, no royalty issues. Price: $0.05 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.

Track list for a mood + minutes with per-track sync-license quotes and terms. Data only: quotes are not licenses. Price: $0.10 USDC on Base via x402 (the live 402 challenge is authoritative). Two-phase: call without 'payment' to get the live payment requirements (payTo, amount, accepted networks); pay from your own wallet, then re-call with 'payment' set to the base64-encoded x402 payload — the data comes back in the tool result. This tool never pays, never touches private keys, and never holds funds. Resale permitted: you may resell this data output at your own price.