Toolpin

dev.toolpin由 toolpin.dev 發布官方發布者v0.1.0更新於 Oct 25, 2026

Check whether an MCP server answers, what its tools claim, and whether that claim has changed.

已驗證Streamable HTTP可網頁執行開發者工具安全與監控

概覽

AI 產生的概覽

一個遠端 MCP 伺服器,用來查詢其他 MCP 伺服器:可達性、所宣告的工具定義、雜湊值以及記錄到的變更。

可以做什麼
  • 依名稱或標題在公開 MCP 登錄中搜尋伺服器,把粗略想法解析成標準名稱
  • 讀取單一伺服器的觀測狀態:各端點可達性、最近檢查與驗證時間、儲存庫活躍度、目前工具定義雜湊及 90 天內變更次數
  • 不必連線即可查看某伺服器宣告的工具定義,每項附有依規範欄位計算的 SHA-256 雜湊
  • 查看單一伺服器記錄到的變更,包括哪些工具異動、哪些欄位不同,以及變更前後的雜湊
  • 查詢目前 MCP 規範版本、追蹤的提案,以及目錄中已遷移的比例
  • 在 Toolpin 帳號上開始監控某個伺服器,變更或停止回應時以電子郵件通知
適用情境
適合在助理挑選要依賴的 MCP 伺服器時使用,也適合在出問題時判斷某個伺服器的工具是否異動、端點是否中斷。亦可用來把先前固定的工具定義雜湊與目前值比對。
執行需求
遠端 Streamable HTTP 端點;讀取不需註冊或金鑰。以 Authorization Bearer 標頭提供 API 金鑰可提高每日上限,watch_server 必須使用金鑰。匿名呼叫每天限 25 個不同伺服器,登入免費帳號 200 個,付費方案不限量。
安裝前請注意
工具描述與註解依各伺服器作者發布的內容原樣呈現,未經查證;標示為唯讀的工具也可能做任何事。Toolpin 不提供評分、等級或安全判斷。watch_server 會操作你的帳號、需要 API 金鑰並寄送電子郵件通知;金鑰應放在標頭中,切勿放入 URL。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Toolpin,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/dev.toolpin%2Ftoolpin/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "toolpin": {
      "type": "http",
      "url": "https://toolpin.dev/mcp"
    }
  }
}

README

Toolpin MCP server

An MCP server that answers questions about other MCP servers: whether one answered when we last probed it, what its tools claimed to do, and whether that claim has changed since.

Useful when an agent is choosing which server to depend on, and useful in the moment something breaks and you want to know whether the tools moved under you.

https://toolpin.dev/mcp   Streamable HTTP, stateless, no sign-up.

json
{  "mcpServers": {    "toolpin": {      "url": "https://toolpin.dev/mcp"    }  }}

Tools

ToolWhat it answers
search_serversFind MCP servers in the public registry by name or title.
get_serverEverything Toolpin has observed about one MCP server: reachability of each remote endpoint and when each was last checked and last verified, repository activity, the current tool-definition hash, and how many changes it has recorded in the last 90 days.
get_server_toolsThe tool definitions one MCP server advertised when Toolpin last read them, each with a SHA-256 hash of the fields the MCP specification defines.
get_server_changesChanges Toolpin recorded for one MCP server: tool definitions changing, and endpoints going down or coming back.
get_spec_statusThe current MCP specification revision, which of its proposals Toolpin checks for, and how much of the catalog has migrated.
watch_serverStart monitoring an MCP server on the caller's Toolpin account, so they are emailed when it changes or stops answering.

Full parameters and response shapes: https://toolpin.dev/api, or the machine-readable schema at https://toolpin.dev/openapi.json.

Limits

No key needed to read. Add one as an Authorization: Bearer header to raise the limit, and to use watch_server, which acts on your account.

CallerDistinct servers per day
Anonymous25
Signed in, free200
Any paid planUnmetered

The limit counts distinct servers, not requests. Asking about the same servers all day costs one against the limit each, however often you ask, so watching your own dependencies never runs out. Never put a key in a URL.

What it will not tell you

No score, no grade, no rating, no safety judgment. Tool descriptions and annotations are reproduced exactly as the server published them: they are claims by that server's author, not anything Toolpin verified. A tool whose annotations say it only reads may do anything at all.

What Toolpin can tell you is whether the claim changed, because it hashes the fields the MCP specification defines and compares them daily. That is the whole product.

Methodology: https://toolpin.dev/methodology

This repository

Documentation and the published registry manifest. The service itself is closed source. Tool-definition changes are recorded in CHANGELOG.md, which is the same thing Toolpin watches for on everyone else.

Questions: [email protected]

來源:README.md,提交 3f6eefc

工具

6

search_servers

Find MCP servers in the public registry by name or title. Returns the canonical name, description, and whether the server answered our last probe. Use this to turn a rough idea of a server into the exact name the other tools need.

輸入參數limitquery必填

get_server

Everything Toolpin has observed about one MCP server: reachability of each remote endpoint and when each was last checked and last verified, repository activity, the current tool-definition hash, and how many changes it has recorded in the last 90 days. The reply includes the catalog-wide drift rate so that count can be read against a baseline.

輸入參數name必填

get_server_tools

The tool definitions one MCP server advertised when Toolpin last read them, each with a SHA-256 hash of the fields the MCP specification defines. Use this to see what a server's tools claim to do without connecting to it, or to compare a hash you pinned earlier.

輸入參數name必填

get_server_changes

Changes Toolpin recorded for one MCP server: tool definitions changing, and endpoints going down or coming back. Each change says which tools moved and which of their fields differed, with the hash before and after. Includes the catalog-wide drift rate for comparison.

輸入參數daysname必填

get_spec_status

The current MCP specification revision, which of its proposals Toolpin checks for, and how much of the catalog has migrated. Use this to find out what the current revision is and how unusual it is to still be on an older one.

無需輸入參數。

watch_server

Start monitoring an MCP server on the caller's Toolpin account, so they are emailed when it changes or stops answering. Needs an API key. Says so plainly if the account is already at its plan limit rather than failing.

輸入參數name必填

版本歷史

1
  1. v0.1.0最新Sep 20, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分