ProfitCollector
mcp remote · streamable-http · v1.0.0 · source: crawl
https://mcp.bakhour.ca/mcp
22 pay-per-call developer, security, network and data utilities using x402 on Base.
Works
90
Verified Oct 31, 2026 · p50 355 ms · p95 356 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'ProfitCollector' |
| tools_listed | 15 | pass | 31 tools |
| schema_complete | 15 | pass | 31 of 31 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 355 ms |
| latency_p95 | 5 | pass | p95 356 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | fail | post_media_image_convert: base64 payload; post_base64_encode: base64 payload; post_base64_decode: base64 payload |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (31)
| Name | Description | Schema |
|---|---|---|
post_x402_service_trust_report | Live, on-demand check of ONE x402-protected endpoint before you pay it: payment-requirements structure, TLS certificate, payTo on-chain balance, known-asset recognition, resource/host consistency, and | typed |
get_ssl_check | Inspect the TLS certificate for ONE hostname only. For TLS combined with HTTP headers and DNS, use /web/audit (raw) or /security/posture (scored). | typed |
get_dns_lookup | Resolve ONE DNS record type for a domain. For all record types at once use /domain/intelligence; for a bundled DNS+TLS+headers audit use /web/audit or /security/posture; for mail-security plus a score | typed |
get_jwt_decode | Decode a JWT payload without signature verification. | typed |
get_subnet_calculate | Calculate subnet information from CIDR notation. | typed |
post_json_repair | Repair common malformed JSON formatting issues. | typed |
post_media_image_convert | Convert an image between common formats (e.g. PNG/JPEG/WebP) from a URL or base64 payload. | typed |
post_security_repo_risk_report_standard | SBOM inventory plus real OSV.dev dependency-vulnerability matches and dependency-freshness signals for a public Git repository. One-shot alternative to a per-seat secret-scanning subscription. | typed |
post_security_repo_risk_report_deep | Everything in the standard report, plus a repo-wide secret/credential exposure scan (matched values are never returned). | typed |
post_security_repo_risk_report_due_diligence | Everything in the deep report, plus real OpenSSF Scorecard maintainer/governance signals and a prioritized recommendation. An automated baseline positioned against $5,000-$95,000 human technical due d | typed |
post_freshdep_scan | Flags pinned dependencies in a repository's requirements.txt, package-lock.json, or uv.lock published more recently than a freshness threshold -- a supply-chain-compromise tripwire. Free CLI (requirem | typed |
post_quebec_invoice_compliance_check | Verifies GST/QST were calculated correctly per Revenu Quebec's current (non-compounded) formula, and flags whether a French invoice version is present per Charter of the French Language s.57/89/91. Pu | typed |
post_quebec_invoice_generate | Assembles a bilingual (French/English) Quebec invoice document with GST/QST computed exactly per Revenu Quebec's current formula -- you supply both languages' line-item text, this does not translate. | typed |
post_json_validate | Validate JSON text and return parsing details. | typed |
post_json_pretty | Pretty-print valid JSON text. | typed |
post_json_minify | Minify valid JSON text. | typed |
post_base64_encode | Encode UTF-8 text using Base64. | typed |
post_base64_decode | Decode Base64 to UTF-8 text. | typed |
post_hash_sha256 | Generate SHA-256 digest from text. | typed |
post_hash_sha512 | Generate SHA-512 digest from text. | typed |
get_uuid_generate | Generate a random UUID version 4. | typed |
get_url_parse | Parse a URL into structured components. | typed |
post_text_stats | Calculate character, word, line and byte statistics. | typed |
post_text_dedupe_lines | Remove duplicate lines while preserving original order. | typed |
get_timestamp_convert | Convert a Unix timestamp to UTC ISO-8601. | typed |
post_domain_due_diligence | The most comprehensive domain assessment: DNS + mail security (SPF/DKIM/DMARC) + TLS + HTTP headers, scored. The only endpoint in this group that adds mail-security analysis. Use for a one-shot decisi | typed |
get_domain_intelligence | Collect ALL common DNS record types (A/AAAA/MX/NS/TXT/CAA) for a domain in one call -- the multi-record bundle version of /dns/lookup. | typed |
get_web_audit | Consolidated DNS, TLS and HTTP security audit for a public HTTPS website, returned as RAW findings (no score) -- the bundled version of /dns/lookup + /ssl/check + /security/headers. Use /security/post | typed |
get_security_posture | Assess TLS and HTTP security posture for a public HTTPS website -- the SAME inspection as /web/audit, but returns a 0-100 score/grade and findings instead of raw fields. | typed |
post_data_transform | Normalize and transform common structured text automatically. | typed |
get_security_headers | Inspect HTTP security headers for ONE URL only. For headers combined with TLS and DNS, use /web/audit (raw) or /security/posture (scored). | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/ca-bakhour-profitcollector)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.