Tolca

ca.tonbot.tolca由 tolca.tonbot.ca 發布官方發布者v1.0.0更新於 Oct 27, 2026

Verify a company before paying it: OFAC sanctions, UK/Canada registries, contractor licences (x402)

已驗證Streamable HTTP可網頁執行網頁搜尋與抓取安全與監控商業與電商

概覽

AI 產生的概覽

遠端 MCP 伺服器,用於付款前查核:套件安全性、企業與魁北克承包商資格驗證,以及以 USDC 計費的文字工具。

可以做什麼
  • 檢查 npm 與 PyPI 套件:給出安全/謹慎/避免的結論,含 OSV 漏洞、棄用、安裝腳本與仿冒套件訊號,或只取較便宜的詮釋資料
  • 查核企業與承包商:美國受限對象名單、英國與加拿大註冊資料庫、GLEIF 實體狀態,以及魁北克 RBQ 執照、RENA 與 SEAO 合約紀錄
  • 一次呼叫完成網頁搜尋並讀取最佳頁面正文,支援官方來源模式與時效篩選
  • 付費文字工具:摘要、法英互譯,以及把文字或抓取的網址依指定 schema 擷取為 JSON
  • 評估作業被 AI 完成的風險,並提供逐題分析與改善建議
適用情境
適合在涉及金錢或信任的決定前先查核:安裝相依套件、雇用或付款給承包商、企業上線(KYB)、判斷作業是否容易被 AI 完成。也適合一次呼叫完成網路調查與結構化擷取。
執行需求
遠端 streamable HTTP 端點;未宣告帳號、API 金鑰或環境變數。summarize、translate、extract、extract_url 四個工具透過 x402 在 Base 上按次以 USDC 付費,需要已儲值的錢包與 PAYMENT-SIGNATURE 標頭。需能連線該端點及其查詢的外部資料來源。
安裝前請注意
四個工具每次呼叫都會實際花費 USDC(約 0.02–0.04 美元)且需簽署付款標頭,應設定支出上限並預期每次呼叫都會扣款。查詢內容、貼上的文字與網址會傳送給第三方服務。結論僅供參考,來自外部註冊資料庫與名單,採取阻擋性行動前應自行複核。端點未宣告任何身分驗證。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Tolca,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/ca.tonbot.tolca%2Ftolca/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "tolca": {
      "type": "http",
      "url": "https://tolca.tonbot.ca/mcp"
    }
  }
}

工具

11

pkg_check

Package safety check (npm / PyPI)

Is this package safe to install? One call, one verdict: safe / caution / avoid, with a score, concrete reasons (known vulnerabilities from OSV, deprecation, abandonment, adoption, install scripts, typosquat signals) and a one-line recommendation. Input: name, ecosystem (npm | PyPI), optional version. Free over MCP (100/day shared quota); unlimited via x402 at https://tolca.tonbot.ca/v1/pkg-check ($0.02).

輸入參數name必填versionecosystem必填

qc_contractor_check

Québec contractor check (RBQ + RENA + environmental penalties + SEAO public contracts)

Call before hiring, paying or subcontracting a Québec (Canada) contractor. One call checks: active RBQ licence (status, categories, restrictions), RENA listing (banned from public contracts), environmental penalties, public contracts awarded on SEAO (count, total, buyers). Verdict ok / review / blocking with reasons and source dates. Input: name, NEQ or RBQ licence number. Official open data. Free over MCP (10/day shared quota); unlimited via x402 at https://tolca.tonbot.ca/v1/qc-contractor-check ($0.1).

輸入參數neqlangnamelicence

summarize

Summarize text (up to 40k chars) into a faithful, tight summary, with optional max_words and target language. Pay-per-call over x402 in USDC on Base; payment challenge answered in ~10 ms, 7-day average processing ~1.5 s across Tolca services. Costs $0.03 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/summarize with an x402 client.

輸入參數text必填languagemax_words

translate

Translate text between French (including Quebec French) and English, with optional tone. Pay-per-call over x402 in USDC on Base; payment challenge answered in ~25 ms, 7-day average processing ~1.5 s across Tolca services. Costs $0.04 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/translate with an x402 client.

輸入參數text必填tonetarget必填

extract

Turn messy text into clean JSON matching the schema you provide (field names and types). Pay-per-call over x402 in USDC on Base; payment challenge answered in ~5 ms, 7-day average processing ~1.5 s across Tolca services. Costs $0.02 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/extract with an x402 client.

輸入參數text必填schema必填

extract_url

extract-url

Fetch a public URL (HTML article, PDF, or JSON) and return JSON matching your schema in one call, with page title and source. Pay-per-call over x402 in USDC on Base; payment challenge answered in ~8 ms. Costs $0.03 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/extract-url with an x402 client.

輸入參數url必填schema必填max_chars

qc_licence

qc-licence

Cheapest check: does this Québec contractor hold an ACTIVE RBQ licence right now? Returns active true/false, licence number, name, NEQ, city, restriction flag and authorized work categories. Use to vet many contractors fast; use qc-contractor-check for RENA and penalties. Input: name, NEQ or RBQ licence number. Costs $0.01 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/qc-licence with an x402 client.

輸入參數neqnamelicence

pkg_meta

pkg-meta

Package metadata in one call, cheapest tier: latest and resolved version, license, first/last publish dates, weekly downloads, deprecation flag, install scripts, maintainers count. npm or PyPI. No vulnerability scan (see pkg-check for the full safe/caution/avoid verdict). Input: name, ecosystem (npm | PyPI), optional version. Costs $0.005 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/pkg-meta with an x402 client.

輸入參數name必填versionecosystem必填

homework_check

homework-check

Can this homework be done by an AI? For teachers and schools: paste an assignment (or a public PDF URL) and get an overall AI-completion risk 0-100, a per-question breakdown (risk, why, concrete fix to make it AI-resistant) and general tips. No student data. Input: text or url, optional grade, subject, lang fr|en. / Ce devoir peut-il être fait par une IA? Score par question et corrections concrètes pour l'enseignant. Costs $0.25 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/homework-check with an x402 client.

輸入參數urllangtextgradesubject

verify_business

verify-business

Call before paying, onboarding or contracting a company (KYB). One call: US restricted-party lists (CSL incl. OFAC SDN), company registries (UK Companies House, Canada federal), legal entity status (GLEIF, worldwide), contractor licences (Québec, Washington, Oregon). Verdict ok / review / blocking / not_found with reasons. Input: name, optional country (ISO-2) and region (WA, OR, QC). Businesses only. Costs $0.05 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/verify-business with an x402 client.

輸入參數name必填regioncountry

版本歷史

2
  1. v1.0.0最新Oct 16, 2026
  2. v0.9.0Oct 12, 2026

評分

已滿足適用檢查項的 83%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分

    請宣告包含 README 的 GitHub 儲存庫,或在 OAuth 受保護資源後設資料中提供 resource_documentation。

  • 授權條款不適用

    託管服務按其提供方的條款使用,因此這裡不要求授權條款。此檢查項不計入百分比。