NestDaddy

AIBITIOUS 404 LAB - 32 Free Agent Experiments

io.github.aibitious/agent404 · v0.3.0

32 free tools: CVE/data checks and offline agent decisions on permissions, budgets and recovery.

Connect Remote server

Terminal
claude mcp add --transport http agent404 https://aibitious.com/404/mcp/
~/.cursor/mcp.json
{
  "mcpServers": {
    "agent404": {
      "url": "https://aibitious.com/404/mcp/"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "agent404": {
      "type": "http",
      "url": "https://aibitious.com/404/mcp/"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://aibitious.com/404/mcp/

Tools 33 found in our last check

  • resolve_public_fact

    Resolve one CVE identifier (e.g. CVE-2024-3094) using NIST NVD records. This tool does not execute code, scan targets, or accept arbitrary URLs.

  • report_missing_information

    Opt-in report of a PUBLIC missing-data topic, never include private data or secrets.

  • json_schema_guard

    Validate one JSON object against a SAFE subset of JSON Schema. No remote refs. Offline.

  • csv_data_doctor

    Find missing fields, ragged CSV rows and duplicate key values; no raw rows are stored.

  • invoice_math_audit

    Independently recalculate invoice arithmetic, NOT legal/tax compliance. Synthetic data only.

  • secret_pattern_shield

    Detect probable token patterns without returning or storing secret values. Never send real secrets.

  • openapi_contract_preflight

    Static OpenAPI 3.x lint: missing operation IDs, responses and malformed operations. Offline.

  • mcp_registry_preflight

    Check a candidate MCP server.json metadata structure; this is NOT official validation.

  • http_headers_audit

    Assess supplied HTTP security response headers. No network or live website probe.

  • robots_policy_check

    Evaluate supplied robots.txt for one agent/path. Not a legal scraping permission.

  • json_shape_diff

    Compare JSON object shapes for added, deleted or changed field types. Offline.

  • simulate_agent_action_policy

    Dry-run one proposed tool action against explicit allow/deny/approval rules; no enforcement.

  • plan_workflow_recovery

    Plan reverse-order compensations for a supplied workflow DAG; never execute actions.

  • triage_webhook_deliveries

    Find duplicate, failed and rate-limited deliveries from supplied HTTP status metadata.

  • check_claim_provenance

    Check whether supplied claim references reach at least one declared source; not fact checking.

  • minimize_agent_data

    Check declared fields, retention and model transfer against a supplied local policy.

  • scope_delta

    Find newly granted permissions outside an approved set. Offline check. Supply payload like {"before":["read"],"after":["read","send"],"approved_additions":[]}. Advisory result only.

  • approval_packet

    Find missing or expired fields before seeking human approval. Offline check. Supply payload like {"now_unix":100,"action":{"actor":"agent","tool":"mail.send","target":"draft1","effect":"send","reason":"owner_request","expiry_unix":200}}. Advisory result only.

  • budget_envelope

    Check worst-case proposed cost against a local hard budget. Offline check. Supply payload like {"limit_usd":"0","spent_usd":"0","reserved_usd":"0","proposed_worst_case_usd":"0"}. Advisory result only.

  • retry_schedule

    Preview capped exponential retries against a deadline. Offline check. Supply payload like {"attempts":3,"first_delay_seconds":2,"max_delay_seconds":10,"deadline_seconds":30}. Advisory result only.

  • duplicate_actions

    Find duplicate attempts and conflicting key reuse. Offline check. Supply payload like {"calls":[{"idempotency_key":"k1","payload_fingerprint":"hash1"},{"idempotency_key":"k1","payload_fingerprint":"hash1"}]}. Advisory result only.

  • prerequisite_gate

    Check whether all declared evidence prerequisites are present. Offline check. Supply payload like {"requirements":[{"id":"deploy","evidence_refs":["ci"]}],"available_evidence":["ci"]}. Advisory result only.

  • evidence_expiry

    Flag stale observations before an agent acts. Offline check. Supply payload like {"now_unix":200,"records":[{"id":"health","observed_unix":100,"ttl_seconds":120}]}. Advisory result only.

  • citation_matrix

    Find claims with missing or unknown citation identifiers. Offline check. Supply payload like {"claims":[{"id":"claim1","citation_refs":["src1"]}],"citations":["src1"]}. Advisory result only.

  • schema_impact

    Identify downstream consumers broken by changed fields. Offline check. Supply payload like {"before":{"id":1},"after":{},"consumers":[{"id":"client","required_fields":["id"]}]}. Advisory result only.

  • boundary_cases

    Generate bounded edge cases from simple field constraints. Offline check. Supply payload like {"fields":[{"name":"count","type":"integer","minimum":0,"maximum":10}]}. Advisory result only.

  • slo_burn

    Measure error-budget burn against a supplied target. Offline check. Supply payload like {"target_percent":"99","total":1000,"bad":20,"alert_burn_rate":2}. Advisory result only.

  • queue_forecast

    Project backlog and drain time from supplied rates. Offline check. Supply payload like {"backlog":100,"incoming_per_hour":10,"capacity_per_hour":20,"horizon_hours":4}. Advisory result only.

  • permission_paths

    Find sensitive targets reachable through declared capability edges. Offline check. Supply payload like {"start":"agent","edges":[{"from":"agent","to":"secret"}],"sensitive_targets":["secret"]}. Advisory result only.

  • context_budget

    Select prioritized context chunks inside a token limit. Offline check. Supply payload like {"max_tokens":100,"chunks":[{"id":"source1","tokens":40,"priority":10}]}. Advisory result only.

  • release_gate

    Require named checks to be green before a release. Offline check. Supply payload like {"required":["test"],"checks":[{"id":"test","status":"success"}]}. Advisory result only.

  • manifest_drift

    Compare expected and observed resource manifests. Offline check. Supply payload like {"expected":{"version":"1"},"observed":{"version":"2"}}. Advisory result only.

  • receipt_chain

    Check links in a supplied digest receipt chain. Offline check. Supply payload like {"root_sha256":"0000000000000000000000000000000000000000000000000000000000000000","receipts":[{"previous_sha256":"0000000000000000000000000000000000000000000000000000000000000000","sha256":"111111…

Details

Endpointhttps://aibitious.com/404/mcp/ (Streamable HTTP)
First published12 Nov 2026
Last updated12 Nov 2026
Registry nameio.github.aibitious/agent404

More ai and media servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.