Zero-log MCP server with 49 tools for AI guardrails, secret scanning, MCP linting & EU compliance.
Connect Remote server
claude mcp add --transport http edge-apis https://api.tinplate.dev/mcp
{
"mcpServers": {
"edge-apis": {
"url": "https://api.tinplate.dev/mcp"
}
}
}
{
"servers": {
"edge-apis": {
"type": "http",
"url": "https://api.tinplate.dev/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://api.tinplate.dev/mcp
Tools 49 found in our last check
tinplate_pii_redactorPII Redactor API: Mask emails, phones, IBANs, cards, and EU IDs with reversible tokens before LLM calls. (Endpoint: POST /v1/pii-redactor)
tinplate_pii_redactor_restorePII Redactor API (restore): Mask emails, phones, IBANs, cards, and EU IDs with reversible tokens before LLM calls. (Endpoint: POST /v1/pii-redactor/restore)
tinplate_prompt_guardPrompt Injection Detection API: Catch prompt injections, role hijacks, and encoded jailbreaks in user inputs and RAG chunks. (Endpoint: POST /v1/prompt-guard)
tinplate_mcp_manifest_linterMCP Server Manifest & Tool Security Linter API: Audit MCP server manifests for hidden tool poisoning, shell risks, and excessive permissions. (Endpoint: POST /v1/mcp-manifest-linter)
tinplate_tool_call_validatorAgent Tool-Call Validator & Repairer API: Validate and auto-repair broken LLM tool-call arguments against your JSON Schema. (Endpoint: POST /v1/tool-call-validator)
tinplate_hallucination_diffDeterministic Hallucination Diff API: Fast first filter to catch unsupported numbers, dates, and names in LLM answers vs RAG sources. (Endpoint: POST /v1/hallucination-diff)
tinplate_prompt_cache_budgeterPrompt Cache Key & Context Budgeter API: Estimate tokens, optimize message order for prompt caching, and calculate LLM API costs. (Endpoint: POST /v1/prompt-cache-budgeter)
tinplate_agent_action_receiptsAgent Action Receipts API: Issue and verify tamper-evident HMAC-signed receipts for autonomous AI agent actions. (Endpoint: POST /v1/agent-action-receipts/issue)
tinplate_agent_action_receipts_verifyAgent Action Receipts API (verify): Issue and verify tamper-evident HMAC-signed receipts for autonomous AI agent actions. (Endpoint: POST /v1/agent-action-receipts/verify)
tinplate_content_provenanceSynthetic Content Provenance Checker API: Detect C2PA manifests, AI generator EXIF/XMP tags, and stripped metadata in files or headers. (Endpoint: POST /v1/content-provenance)
tinplate_json_healBroken JSON & LLM Output Healer API: Repair malformed or truncated LLM JSON outputs into valid, schema-checked JSON in 1 ms. (Endpoint: POST /v1/json-heal)
tinplate_html_to_markdownLLM HTML-to-Markdown Cleaner API: Convert noisy web pages or raw HTML into clean, token-efficient Markdown for RAG. (Endpoint: POST /v1/html-to-markdown)
tinplate_locale_value_parserText-to-Structured Date, Money & Unit Parser API: Normalize messy EU/US prices, dates, percentages, and measurements into structured JSON. (Endpoint: POST /v1/locale-value-parser)
tinplate_secret_scannerLog Redact & Secret Scanner API: Detect and mask leaked API keys, JWTs, and private keys in logs, diffs, and prompts. (Endpoint: POST /v1/secret-scanner)
tinplate_secret_scanner_restoreLog Redact & Secret Scanner API (restore): Detect and mask leaked API keys, JWTs, and private keys in logs, diffs, and prompts. (Endpoint: POST /v1/secret-scanner/restore)
tinplate_ssrf_firewallAgent URL & SSRF Firewall API: Validate URLs and redirect chains against SSRF, private IPs, and cloud metadata targets. (Endpoint: POST /v1/ssrf-firewall)
tinplate_security_headersHTTP Security Header Scanner API: Audit CSP, HSTS, and browser security headers with an A+ to F grade and fix snippets. (Endpoint: POST /v1/security-headers)
tinplate_webhook_verifyWebhook Signature Verifier API: Verify Stripe, GitHub, Slack, Shopify, and Svix HMAC webhook signatures and timestamps. (Endpoint: POST /v1/webhook-verify)
tinplate_email_dnsEmail DNS Deliverability Auditor API: Audit MX, SPF 10-lookup limits, DMARC, DKIM, BIMI, and MTA-STS with a 0–100 score. (Endpoint: POST /v1/email-dns)
tinplate_email_dns_generatorSPF, DKIM & DMARC Record Linter & Generator API: Lint existing SPF/DMARC strings and generate clean, RFC-compliant DNS TXT records. (Endpoint: POST /v1/email-dns-generator)
tinplate_consent_tokensStateless Consent & One-Click Unsubscribe Tokens API: Issue and verify stateless HMAC unsubscribe tokens and RFC 8058 List-Unsubscribe headers. (Endpoint: POST /v1/consent-tokens/issue)
tinplate_consent_tokens_verifyStateless Consent & One-Click Unsubscribe Tokens API (verify): Issue and verify stateless HMAC unsubscribe tokens and RFC 8058 List-Unsubscribe headers. (Endpoint: POST /v1/consent-tokens/verify)
tinplate_eu_vat_ibanEU VAT & IBAN/BIC Validator API: Validate IBANs, BIC/SWIFT codes, and EU/UK VAT numbers with live EU VIES lookup. (Endpoint: POST /v1/eu-vat-iban/iban)
tinplate_eu_vat_iban_vatEU VAT & IBAN/BIC Validator API (vat): Validate IBANs, BIC/SWIFT codes, and EU/UK VAT numbers with live EU VIES lookup. (Endpoint: POST /v1/eu-vat-iban/vat)
tinplate_invoice_validatorInvoice & EU EN 16931 / Peppol Validator API: Audit extracted invoices for line-item math errors, VAT mismatches, and Peppol compliance. (Endpoint: POST /v1/invoice-validator)
tinplate_hu_business_validatorHungarian Business Document & NAV Validator API: Validate Hungarian adószám, cégjegyzékszám, GIRO bank accounts, and NAV invoice rules. (Endpoint: POST /v1/hu-business-validator)
tinplate_workday_holidayWorkday & Holiday Calculator API: Calculate business days and SLA deadlines across 30+ countries including HU swap Saturdays. (Endpoint: POST /v1/workday-holiday/between)
tinplate_workday_holiday_addWorkday & Holiday Calculator API (add): Calculate business days and SLA deadlines across 30+ countries including HU swap Saturdays. (Endpoint: POST /v1/workday-holiday/add)
tinplate_workday_holiday_is_workdayWorkday & Holiday Calculator API (is-workday): Calculate business days and SLA deadlines across 30+ countries including HU swap Saturdays. (Endpoint: POST /v1/workday-holiday/is-workday)
tinplate_signup_fraudSignup Fraud & Disposable Email Scorer API: Block disposable emails, alias abuse, and bot signups with a 0–100 fraud risk score. (Endpoint: POST /v1/signup-fraud)
tinplate_cron_explainerCron & Schedule Explainer & Validator API: Validate cron expressions, translate to plain English, and compute next N runs with DST. (Endpoint: POST /v1/cron-explainer)
tinplate_schema_diffOpenAPI & JSON Schema Breaking-Change Diff API: Diff two OpenAPI 3.x or JSON Schemas to catch breaking changes and recommend SemVer bumps. (Endpoint: POST /v1/schema-diff)
tinplate_ua_bot_parserUser-Agent & AI Bot Parser API: Detect AI training crawlers, RAG bots, headless browsers, and device/OS details from User-Agent. (Endpoint: POST /v1/ua-bot-parser)
tinplate_url_normalizerURL Normalizer & Tracking Parameter Stripper API: Canonicalize URLs and strip 120+ ad-tracking and click-ID parameters for clean deduplication. (Endpoint: POST /v1/url-normalizer)
tinplate_ics_sanitizerICS / iCalendar Feed Sanitizer & Validator API: Repair broken .ics calendar feeds, normalize Windows timezones to IANA, and parse VEVENTs. (Endpoint: POST /v1/ics-sanitizer)
tinplate_robots_llms_analyzerrobots.txt & llms.txt AI Crawler Analyzer & Generator API: Audit which AI crawlers your robots.txt allows and generate a valid llms.txt file. (Endpoint: POST /v1/robots-llms-analyzer)
tinplate_semver_lockfile_judgeSemVer & Package Manifest / Lockfile Diff Judge API: Diff two package.json files to flag breaking SemVer bumps and risky dependency changes. (Endpoint: POST /v1/semver-lockfile-judge)
tinplate_llm_output_guardLLM Output Safety, Leakage & Format Guardrail API: Scan and sanitize LLM outputs for prompt leakage, Markdown beacons, XSS, and policy violations. (Endpoint: POST /v1/llm-output-guard)
tinplate_command_sql_guardAgent Shell Command & SQL Query Safety Firewall API: Audit agent shell commands and Text-to-SQL queries for RCE, reverse shells, and destructive SQL. (Endpoint: POST /v1/command-sql-guard)
tinplate_eu_id_validatorEuropean Corporate Tax, LEI, EORI & National ID Validator API: Validate LEI, EORI, SIREN/SIRET, Steuer-ID, Codice Fiscale, NIF/CIF, NIP, BSN, CRN & EIN checksums. (Endpoint: POST /v1/eu-id-validator)
tinplate_jwt_jwk_inspectorJWT, JWS & JWK Security Auditor & RFC 8725 Linter API: Audit JWT tokens and JWK sets against RFC 8725 for alg:none, weak secrets, and leaked keys. (Endpoint: POST /v1/jwt-jwk-inspector)
tinplate_rag_chunkerMarkdown & Code Aware Smart RAG Document Chunker API: Split Markdown into token-budgeted RAG chunks with heading breadcrumbs and intact code/tables. (Endpoint: POST /v1/rag-chunker)
tinplate_regex_safetyRegex ReDoS Vulnerability Scanner & Pattern Explainer API: Audit regular expressions for O(2^n) ReDoS backtracking, explain patterns, and test matches. (Endpoint: POST /v1/regex-safety)
tinplate_llm_messages_guardLLM Chat Messages Policy Proxy & Sanitizer API: Sanitize entire multi-turn LLM messages[] arrays in one call before forwarding to OpenAI, Anthropic, or Gemini. (Endpoint: POST /v1/llm-messages-guard)
tinplate_tabular_rag_cleanerTabular CSV/JSON RAG Sanitizer & Formula-Injection Firewall API: Neutralize CSV formula injection, redact cell-level PII, and convert tables into RAG-ready Markdown & row chunks. (Endpoint: POST /v1/tabular-rag-cleaner)
tinplate_peppol_ubl_invoicePeppol UBL 2.1 / XRechnung E-Invoice Converter & EPC-QR API: Generate EN 16931 / Peppol BIS 3.0 UBL 2.1 XML and SEPA EPC-QR payloads from JSON, or parse UBL XML to JSON. (Endpoint: POST /v1/peppol-ubl-invoice)
tinplate_eu_vat_calculatorEU Cross-Border VAT Rate & Reverse-Charge Calculator API: Determine exact EU VAT rates, B2B reverse charge, EN 16931 tax category codes, and mandatory invoice legal text. (Endpoint: POST /v1/eu-vat-calculator)
tinplate_sanctions_screenerSanctions, Watchlist & Embargo Entity Screener API: Screen beneficiaries, vendors, BICs, and wallets against embargo rules and fuzzy sanctions watchlists. (Endpoint: POST /v1/sanctions-screener)
tinplate_agent_code_guardAI-Generated Code & CI Workflow Sandbox Auditor API: Audit LLM-generated Python, JS/TS, Shell, or GitHub Actions code for sandbox escapes before execution. (Endpoint: POST /v1/agent-code-guard)
Details
| Endpoint | https://api.tinplate.dev/mcp (Streamable HTTP) |
| First published | 15 Nov 2026 |
| Last updated | 15 Nov 2026 |
| Registry name | dev.tinplate/edge-apis |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
