NestDaddy

Tinplate Edge AI Safety, Security & EU Compliance

dev.tinplate/edge-apis · v1.0.30

Zero-log MCP server with 49 tools for AI guardrails, secret scanning, MCP linting & EU compliance.

Connect Remote server

Terminal
claude mcp add --transport http edge-apis https://api.tinplate.dev/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "edge-apis": {
      "url": "https://api.tinplate.dev/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "edge-apis": {
      "type": "http",
      "url": "https://api.tinplate.dev/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://api.tinplate.dev/mcp

Tools 49 found in our last check

  • tinplate_pii_redactor

    PII Redactor API: Mask emails, phones, IBANs, cards, and EU IDs with reversible tokens before LLM calls. (Endpoint: POST /v1/pii-redactor)

  • tinplate_pii_redactor_restore

    PII Redactor API (restore): Mask emails, phones, IBANs, cards, and EU IDs with reversible tokens before LLM calls. (Endpoint: POST /v1/pii-redactor/restore)

  • tinplate_prompt_guard

    Prompt Injection Detection API: Catch prompt injections, role hijacks, and encoded jailbreaks in user inputs and RAG chunks. (Endpoint: POST /v1/prompt-guard)

  • tinplate_mcp_manifest_linter

    MCP Server Manifest & Tool Security Linter API: Audit MCP server manifests for hidden tool poisoning, shell risks, and excessive permissions. (Endpoint: POST /v1/mcp-manifest-linter)

  • tinplate_tool_call_validator

    Agent Tool-Call Validator & Repairer API: Validate and auto-repair broken LLM tool-call arguments against your JSON Schema. (Endpoint: POST /v1/tool-call-validator)

  • tinplate_hallucination_diff

    Deterministic Hallucination Diff API: Fast first filter to catch unsupported numbers, dates, and names in LLM answers vs RAG sources. (Endpoint: POST /v1/hallucination-diff)

  • tinplate_prompt_cache_budgeter

    Prompt Cache Key & Context Budgeter API: Estimate tokens, optimize message order for prompt caching, and calculate LLM API costs. (Endpoint: POST /v1/prompt-cache-budgeter)

  • tinplate_agent_action_receipts

    Agent Action Receipts API: Issue and verify tamper-evident HMAC-signed receipts for autonomous AI agent actions. (Endpoint: POST /v1/agent-action-receipts/issue)

  • tinplate_agent_action_receipts_verify

    Agent Action Receipts API (verify): Issue and verify tamper-evident HMAC-signed receipts for autonomous AI agent actions. (Endpoint: POST /v1/agent-action-receipts/verify)

  • tinplate_content_provenance

    Synthetic Content Provenance Checker API: Detect C2PA manifests, AI generator EXIF/XMP tags, and stripped metadata in files or headers. (Endpoint: POST /v1/content-provenance)

  • tinplate_json_heal

    Broken JSON & LLM Output Healer API: Repair malformed or truncated LLM JSON outputs into valid, schema-checked JSON in 1 ms. (Endpoint: POST /v1/json-heal)

  • tinplate_html_to_markdown

    LLM HTML-to-Markdown Cleaner API: Convert noisy web pages or raw HTML into clean, token-efficient Markdown for RAG. (Endpoint: POST /v1/html-to-markdown)

  • tinplate_locale_value_parser

    Text-to-Structured Date, Money & Unit Parser API: Normalize messy EU/US prices, dates, percentages, and measurements into structured JSON. (Endpoint: POST /v1/locale-value-parser)

  • tinplate_secret_scanner

    Log Redact & Secret Scanner API: Detect and mask leaked API keys, JWTs, and private keys in logs, diffs, and prompts. (Endpoint: POST /v1/secret-scanner)

  • tinplate_secret_scanner_restore

    Log Redact & Secret Scanner API (restore): Detect and mask leaked API keys, JWTs, and private keys in logs, diffs, and prompts. (Endpoint: POST /v1/secret-scanner/restore)

  • tinplate_ssrf_firewall

    Agent URL & SSRF Firewall API: Validate URLs and redirect chains against SSRF, private IPs, and cloud metadata targets. (Endpoint: POST /v1/ssrf-firewall)

  • tinplate_security_headers

    HTTP Security Header Scanner API: Audit CSP, HSTS, and browser security headers with an A+ to F grade and fix snippets. (Endpoint: POST /v1/security-headers)

  • tinplate_webhook_verify

    Webhook Signature Verifier API: Verify Stripe, GitHub, Slack, Shopify, and Svix HMAC webhook signatures and timestamps. (Endpoint: POST /v1/webhook-verify)

  • tinplate_email_dns

    Email DNS Deliverability Auditor API: Audit MX, SPF 10-lookup limits, DMARC, DKIM, BIMI, and MTA-STS with a 0–100 score. (Endpoint: POST /v1/email-dns)

  • tinplate_email_dns_generator

    SPF, DKIM & DMARC Record Linter & Generator API: Lint existing SPF/DMARC strings and generate clean, RFC-compliant DNS TXT records. (Endpoint: POST /v1/email-dns-generator)

  • tinplate_consent_tokens

    Stateless Consent & One-Click Unsubscribe Tokens API: Issue and verify stateless HMAC unsubscribe tokens and RFC 8058 List-Unsubscribe headers. (Endpoint: POST /v1/consent-tokens/issue)

  • tinplate_consent_tokens_verify

    Stateless Consent & One-Click Unsubscribe Tokens API (verify): Issue and verify stateless HMAC unsubscribe tokens and RFC 8058 List-Unsubscribe headers. (Endpoint: POST /v1/consent-tokens/verify)

  • tinplate_eu_vat_iban

    EU VAT & IBAN/BIC Validator API: Validate IBANs, BIC/SWIFT codes, and EU/UK VAT numbers with live EU VIES lookup. (Endpoint: POST /v1/eu-vat-iban/iban)

  • tinplate_eu_vat_iban_vat

    EU VAT & IBAN/BIC Validator API (vat): Validate IBANs, BIC/SWIFT codes, and EU/UK VAT numbers with live EU VIES lookup. (Endpoint: POST /v1/eu-vat-iban/vat)

  • tinplate_invoice_validator

    Invoice & EU EN 16931 / Peppol Validator API: Audit extracted invoices for line-item math errors, VAT mismatches, and Peppol compliance. (Endpoint: POST /v1/invoice-validator)

  • tinplate_hu_business_validator

    Hungarian Business Document & NAV Validator API: Validate Hungarian adószám, cégjegyzékszám, GIRO bank accounts, and NAV invoice rules. (Endpoint: POST /v1/hu-business-validator)

  • tinplate_workday_holiday

    Workday & Holiday Calculator API: Calculate business days and SLA deadlines across 30+ countries including HU swap Saturdays. (Endpoint: POST /v1/workday-holiday/between)

  • tinplate_workday_holiday_add

    Workday & Holiday Calculator API (add): Calculate business days and SLA deadlines across 30+ countries including HU swap Saturdays. (Endpoint: POST /v1/workday-holiday/add)

  • tinplate_workday_holiday_is_workday

    Workday & Holiday Calculator API (is-workday): Calculate business days and SLA deadlines across 30+ countries including HU swap Saturdays. (Endpoint: POST /v1/workday-holiday/is-workday)

  • tinplate_signup_fraud

    Signup Fraud & Disposable Email Scorer API: Block disposable emails, alias abuse, and bot signups with a 0–100 fraud risk score. (Endpoint: POST /v1/signup-fraud)

  • tinplate_cron_explainer

    Cron & Schedule Explainer & Validator API: Validate cron expressions, translate to plain English, and compute next N runs with DST. (Endpoint: POST /v1/cron-explainer)

  • tinplate_schema_diff

    OpenAPI & JSON Schema Breaking-Change Diff API: Diff two OpenAPI 3.x or JSON Schemas to catch breaking changes and recommend SemVer bumps. (Endpoint: POST /v1/schema-diff)

  • tinplate_ua_bot_parser

    User-Agent & AI Bot Parser API: Detect AI training crawlers, RAG bots, headless browsers, and device/OS details from User-Agent. (Endpoint: POST /v1/ua-bot-parser)

  • tinplate_url_normalizer

    URL Normalizer & Tracking Parameter Stripper API: Canonicalize URLs and strip 120+ ad-tracking and click-ID parameters for clean deduplication. (Endpoint: POST /v1/url-normalizer)

  • tinplate_ics_sanitizer

    ICS / iCalendar Feed Sanitizer & Validator API: Repair broken .ics calendar feeds, normalize Windows timezones to IANA, and parse VEVENTs. (Endpoint: POST /v1/ics-sanitizer)

  • tinplate_robots_llms_analyzer

    robots.txt & llms.txt AI Crawler Analyzer & Generator API: Audit which AI crawlers your robots.txt allows and generate a valid llms.txt file. (Endpoint: POST /v1/robots-llms-analyzer)

  • tinplate_semver_lockfile_judge

    SemVer & Package Manifest / Lockfile Diff Judge API: Diff two package.json files to flag breaking SemVer bumps and risky dependency changes. (Endpoint: POST /v1/semver-lockfile-judge)

  • tinplate_llm_output_guard

    LLM Output Safety, Leakage & Format Guardrail API: Scan and sanitize LLM outputs for prompt leakage, Markdown beacons, XSS, and policy violations. (Endpoint: POST /v1/llm-output-guard)

  • tinplate_command_sql_guard

    Agent Shell Command & SQL Query Safety Firewall API: Audit agent shell commands and Text-to-SQL queries for RCE, reverse shells, and destructive SQL. (Endpoint: POST /v1/command-sql-guard)

  • tinplate_eu_id_validator

    European Corporate Tax, LEI, EORI & National ID Validator API: Validate LEI, EORI, SIREN/SIRET, Steuer-ID, Codice Fiscale, NIF/CIF, NIP, BSN, CRN & EIN checksums. (Endpoint: POST /v1/eu-id-validator)

  • tinplate_jwt_jwk_inspector

    JWT, JWS & JWK Security Auditor & RFC 8725 Linter API: Audit JWT tokens and JWK sets against RFC 8725 for alg:none, weak secrets, and leaked keys. (Endpoint: POST /v1/jwt-jwk-inspector)

  • tinplate_rag_chunker

    Markdown & Code Aware Smart RAG Document Chunker API: Split Markdown into token-budgeted RAG chunks with heading breadcrumbs and intact code/tables. (Endpoint: POST /v1/rag-chunker)

  • tinplate_regex_safety

    Regex ReDoS Vulnerability Scanner & Pattern Explainer API: Audit regular expressions for O(2^n) ReDoS backtracking, explain patterns, and test matches. (Endpoint: POST /v1/regex-safety)

  • tinplate_llm_messages_guard

    LLM Chat Messages Policy Proxy & Sanitizer API: Sanitize entire multi-turn LLM messages[] arrays in one call before forwarding to OpenAI, Anthropic, or Gemini. (Endpoint: POST /v1/llm-messages-guard)

  • tinplate_tabular_rag_cleaner

    Tabular CSV/JSON RAG Sanitizer & Formula-Injection Firewall API: Neutralize CSV formula injection, redact cell-level PII, and convert tables into RAG-ready Markdown & row chunks. (Endpoint: POST /v1/tabular-rag-cleaner)

  • tinplate_peppol_ubl_invoice

    Peppol UBL 2.1 / XRechnung E-Invoice Converter & EPC-QR API: Generate EN 16931 / Peppol BIS 3.0 UBL 2.1 XML and SEPA EPC-QR payloads from JSON, or parse UBL XML to JSON. (Endpoint: POST /v1/peppol-ubl-invoice)

  • tinplate_eu_vat_calculator

    EU Cross-Border VAT Rate & Reverse-Charge Calculator API: Determine exact EU VAT rates, B2B reverse charge, EN 16931 tax category codes, and mandatory invoice legal text. (Endpoint: POST /v1/eu-vat-calculator)

  • tinplate_sanctions_screener

    Sanctions, Watchlist & Embargo Entity Screener API: Screen beneficiaries, vendors, BICs, and wallets against embargo rules and fuzzy sanctions watchlists. (Endpoint: POST /v1/sanctions-screener)

  • tinplate_agent_code_guard

    AI-Generated Code & CI Workflow Sandbox Auditor API: Audit LLM-generated Python, JS/TS, Shell, or GitHub Actions code for sandbox escapes before execution. (Endpoint: POST /v1/agent-code-guard)

Details

Endpointhttps://api.tinplate.dev/mcp (Streamable HTTP)
First published15 Nov 2026
Last updated15 Nov 2026
Registry namedev.tinplate/edge-apis

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.