
ToolYour
com.toolyourPublished by toolyour.comOfficial publisherv1.0.1Updated Nov 2, 2026
Remote MCP: plan, run, verify for SEO/security/ship-gate. Same REST API key; 500 free credits/month.
Overview
Remote ToolYour MCP gateway that lets an assistant plan a task, run a playbook or solve it, then verify results until a pass gate is reached.
- What you can do
- Plan, run and verify work: plan_task, run_playbook, solve_task, run_workflow and verify_task drive a plan-run-verify loop with a pass gate.
- Recall stored context: recall_context recalls purpose-typed memory before a rebuild.
- Check async jobs and identity: get_run polls runs by runId, and get_profile returns the authenticated account identity.
- Manage saved playbooks (private beta): create, list, get, update and run named, versioned recipes and fetch their run receipts.
- When to use it
- Useful when you want an agent to work through repeatable engineering tasks such as SEO, security or ship-gate checks in a structured plan-run-verify loop, with the host editor, git and terminal kept in charge. Also relevant if you want to save a repeatable workflow as a named playbook for later runs.
- Requirements
- A remote Streamable HTTP endpoint; no local package is needed for the hosted service. Authentication is required: an OAuth flow plus an X-Api-Key header carrying a ToolYour API key (prefix ty_), the same key as the REST API. A free tier of 500 credits per month is mentioned. The saved-playbooks beta needs a private deployment with PLAYBOOKS_BETA=true.
Installation
In SourceWeft
- Open ToolYour in the dashboard and add it to a workspace.
- Connect the required credentials. They are stored privately and never shown on public pages.
- Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/com.toolyour%2Fmcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Other MCP clients
Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.
{
"mcpServers": {
"toolyour": {
"type": "http",
"url": "https://api.toolyour.com/mcp/http"
}
}
}README
Open-source ToolYour MCP
Remote MCP gateway for AI agents: plan → run playbook/solve → verify until pass.
MIT licensed. Hosted API/SaaS backends are optional — offline evals and local file control-plane run without them.
Product docs: https://www.toolyour.com/developers/mcp
Official registry: com.toolyour/mcp
npm client (separate): @toolyour/sdk (MIT)
Quick start
Endpoints: http://localhost:3090/mcp (legacy SSE for compatible hosts) · Streamable HTTP: /mcp or /mcp/http.
All Streamable HTTP endpoints are stateless: clients do not need session
affinity, and a stale Mcp-Session-Id is ignored. The OAuth-protected
/mcp/chatgpt endpoint validates its bearer token on every request. GET /mcp
remains the legacy SSE endpoint and keeps its session behavior.
Health: GET /health/mcp · Ready: GET /health/mcp/ready · Metrics: GET /health/mcp/metrics (Prometheus text)
Auth
Same key as ToolYour REST. Free tier: 500 credits/month (tools cost 1–10 credits). MCP exposes API-backed catalog tools only (hasApi).
Host contract
ToolYour does not replace Cursor/Claude. The host keeps editor, git, and terminal. Agents should:
plan_task(free)run_playbookorsolve_task- Apply only rank-1
loop.nextActionsin the workspace verify_taskwith prior result as baseline untilloop.gateispass(or stop)
Skill-loop responses also include an additive execution envelope (runId, intentId,
intentType, idempotencyKey, and projectScope). Preserve it when handing a result to
another MCP tool. Async jobs reuse execution.runId as the get_run polling id.
Internally, plan_task, solve_task, run_playbook, run_workflow, and verify_task use
one executeIntent lifecycle boundary for correlation and the execution envelope.
Credits settle on each gateway tool invoke (billing.settledBy = gateway_per_tool) — MCP
does not double-bill. Free recall_context recalls purpose-typed memory before rebuilds.
Saved Playbooks (private beta)
Saved Playbooks turns a repeatable ToolYour workflow into a named, versioned recipe that an MCP-capable agent can run again. V1 deliberately points only to existing ToolYour skills or workflows; it does not store arbitrary shell commands, control another agent, or bypass host approval. Each account gets owner-scoped playbooks and durable run receipts.
Enable this only on a private/default MCP deployment with PLAYBOOKS_BETA=true. The beta adds
create_saved_playbook, list_saved_playbooks, get_saved_playbook, update_saved_playbook,
run_saved_playbook, and get_saved_playbook_run. It is intentionally excluded from
/mcp/chatgpt so the reviewed public tool surface stays separate. The public
surface includes the authenticated get_profile identity tool.
See Saved Playbooks beta design for the data model, safe execution boundary, and rollout guidance.
Offline evals (no API key)
Fixtures: tests/eval/synth-fixtures.json · Goals: tests/eval/goals.jsonl
Observability (open protocols)
No proprietary APM required.
What stays hosted (optional)
- Live tool execution via gateway + API key
- Feature Memory / verification profiles (SaaS Mongo)
- Redis for multi-replica async
get_run
Local defaults use file-backed control-plane jobs.
License
MIT — see LICENSE.
Source: README.md at commit fabc0c2
Tools
0Version history
1- v1.0.1LatestSep 16, 2026
Score
85% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 daysRequired25 pts
- Auth declaredRequired10 pts
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts