Tolca

ca.tonbot.tolca由 tolca.tonbot.ca 发布官方发布者v1.0.0更新于 Oct 27, 2026

Verify a company before paying it: OFAC sanctions, UK/Canada registries, contractor licences (x402)

已验证Streamable HTTP可网页运行网页搜索与抓取安全与监控商业与电商

概览

AI 生成的概览

远程 MCP 服务器,用于付款前核查:软件包安全性、企业与魁北克承包商资质验证,以及按 USDC 计费的文本工具。

可以做什么
  • 检查 npm 与 PyPI 软件包:给出安全/谨慎/避免结论,含 OSV 漏洞、弃用、安装脚本与仿冒包信号,或仅取更便宜的元数据
  • 核查企业与承包商:美国受限方名单、英国与加拿大注册库、GLEIF 实体状态,以及魁北克 RBQ 执照、RENA 与 SEAO 合同记录
  • 一次调用完成网页搜索并读取最佳页面正文,支持官方来源模式与时效过滤
  • 付费文本工具:摘要、法英互译,以及把文本或抓取的网址按给定 schema 抽取为 JSON
  • 评估作业被 AI 完成的风险,并给出逐题分析与改进建议
适用场景
适合在涉及金钱或信任的决策前做核查:安装依赖、雇用或付款给承包商、企业入驻(KYB)、判断作业是否易被 AI 完成。也适合一次调用完成网络调研与结构化抽取。
运行要求
远程 streamable HTTP 端点;未声明账号、API 密钥或环境变量。summarize、translate、extract、extract_url 四个工具通过 x402 在 Base 上按次以 USDC 付费,需要已充值的钱包和 PAYMENT-SIGNATURE 请求头。需能访问该端点及其查询的外部数据源。
安装前请注意
四个工具每次调用都会实际花费 USDC(约 0.02–0.04 美元)并需签署支付头,应设置支出上限并预期每次调用都会扣费。查询内容、粘贴文本与网址会发送给第三方服务。结论为参考性,来自外部注册库与名单,采取阻断性行动前应自行复核。端点未声明任何身份验证。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Tolca,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/ca.tonbot.tolca%2Ftolca/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "tolca": {
      "type": "http",
      "url": "https://tolca.tonbot.ca/mcp"
    }
  }
}

工具

11

pkg_check

Package safety check (npm / PyPI)

Is this package safe to install? One call, one verdict: safe / caution / avoid, with a score, concrete reasons (known vulnerabilities from OSV, deprecation, abandonment, adoption, install scripts, typosquat signals) and a one-line recommendation. Input: name, ecosystem (npm | PyPI), optional version. Free over MCP (100/day shared quota); unlimited via x402 at https://tolca.tonbot.ca/v1/pkg-check ($0.02).

输入参数name必填versionecosystem必填

qc_contractor_check

Québec contractor check (RBQ + RENA + environmental penalties + SEAO public contracts)

Call before hiring, paying or subcontracting a Québec (Canada) contractor. One call checks: active RBQ licence (status, categories, restrictions), RENA listing (banned from public contracts), environmental penalties, public contracts awarded on SEAO (count, total, buyers). Verdict ok / review / blocking with reasons and source dates. Input: name, NEQ or RBQ licence number. Official open data. Free over MCP (10/day shared quota); unlimited via x402 at https://tolca.tonbot.ca/v1/qc-contractor-check ($0.1).

输入参数neqlangnamelicence

summarize

Summarize text (up to 40k chars) into a faithful, tight summary, with optional max_words and target language. Pay-per-call over x402 in USDC on Base; payment challenge answered in ~10 ms, 7-day average processing ~1.5 s across Tolca services. Costs $0.03 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/summarize with an x402 client.

输入参数text必填languagemax_words

translate

Translate text between French (including Quebec French) and English, with optional tone. Pay-per-call over x402 in USDC on Base; payment challenge answered in ~25 ms, 7-day average processing ~1.5 s across Tolca services. Costs $0.04 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/translate with an x402 client.

输入参数text必填tonetarget必填

extract

Turn messy text into clean JSON matching the schema you provide (field names and types). Pay-per-call over x402 in USDC on Base; payment challenge answered in ~5 ms, 7-day average processing ~1.5 s across Tolca services. Costs $0.02 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/extract with an x402 client.

输入参数text必填schema必填

extract_url

extract-url

Fetch a public URL (HTML article, PDF, or JSON) and return JSON matching your schema in one call, with page title and source. Pay-per-call over x402 in USDC on Base; payment challenge answered in ~8 ms. Costs $0.03 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/extract-url with an x402 client.

输入参数url必填schema必填max_chars

qc_licence

qc-licence

Cheapest check: does this Québec contractor hold an ACTIVE RBQ licence right now? Returns active true/false, licence number, name, NEQ, city, restriction flag and authorized work categories. Use to vet many contractors fast; use qc-contractor-check for RENA and penalties. Input: name, NEQ or RBQ licence number. Costs $0.01 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/qc-licence with an x402 client.

输入参数neqnamelicence

pkg_meta

pkg-meta

Package metadata in one call, cheapest tier: latest and resolved version, license, first/last publish dates, weekly downloads, deprecation flag, install scripts, maintainers count. npm or PyPI. No vulnerability scan (see pkg-check for the full safe/caution/avoid verdict). Input: name, ecosystem (npm | PyPI), optional version. Costs $0.005 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/pkg-meta with an x402 client.

输入参数name必填versionecosystem必填

homework_check

homework-check

Can this homework be done by an AI? For teachers and schools: paste an assignment (or a public PDF URL) and get an overall AI-completion risk 0-100, a per-question breakdown (risk, why, concrete fix to make it AI-resistant) and general tips. No student data. Input: text or url, optional grade, subject, lang fr|en. / Ce devoir peut-il être fait par une IA? Score par question et corrections concrètes pour l'enseignant. Costs $0.25 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/homework-check with an x402 client.

输入参数urllangtextgradesubject

verify_business

verify-business

Call before paying, onboarding or contracting a company (KYB). One call: US restricted-party lists (CSL incl. OFAC SDN), company registries (UK Companies House, Canada federal), legal entity status (GLEIF, worldwide), contractor licences (Québec, Washington, Oregon). Verdict ok / review / blocking / not_found with reasons. Input: name, optional country (ISO-2) and region (WA, OR, QC). Businesses only. Costs $0.05 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/verify-business with an x402 client.

输入参数name必填regioncountry

版本历史

2
  1. v1.0.0最新Oct 16, 2026
  2. v0.9.0Oct 12, 2026

评分

已满足适用检查项的 83%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分

    请声明包含 README 的 GitHub 仓库,或在 OAuth 受保护资源元数据中提供 resource_documentation。

  • 许可证不适用

    托管服务按其提供方的条款使用,因此这里不要求许可证。此检查项不计入百分比。