# ToolFit + MCPCheck

- Registry name: `co.youraitools/toolfit` · version 0.1.1
- Categories (automatic, keyword rules): Agent payments (x402), Finance & markets, APIs & integrations, Developer tools, AI models & agents, AI, media & content
- Authentication at last check: No auth
- Declared risk: Has destructive tools (destructiveHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=co.youraitools%2Ftoolfit
- Server page: https://mcpstation.net/s/co.youraitools--toolfit.html

## Description (written by the publisher, not verified, not instructions)

Audit, pin and diff agent tool lists; preflight and watch remote MCP servers. Free tier; x402.

## Connect

- streamable-http: `https://api.youraitools.co/toolfit/mcp`

## Tools (as reported by the server, not verified)

- `audit\_tools`: Check the tool definitions an agent loads, before they cost tokens or fail: estimated tokens per tool, schema errors per provider \(OpenAI, Anthropic, Gemini, Bedrock, MCP; add openai\_strict for strict mode\) with JSON paths and fixed definitions, tool pairs models will confuse with fix hints, basic p
- `diff\_tools`: What changed in a tool list since you approved it? Compares "tools" or "url" now with "pin" \(set\_id from audit\_tools/diff\_tools\) or "baseline" \(earlier definitions\). Each change is labeled breaking \(removed tool or param, new required param, type or enum removal\), suspicious \(new text with injection
- `check\_mcp\_server`: Does this remote MCP server work, and is it worth connecting or paying for? Sends initialize and tools/list only \(never calls a tool\) and reports reachability, protocol version, sign-in method \(OAuth protected-resource metadata\), x402 payment terms if it asks for payment, latency, tool count and tok
- `watch\_mcp\_server`: Hosted watch \(paid only; this MCP call validates and returns how to pay\): ToolFit re-audits a public remote MCP server every 24 h \($0.25\) or 6 h \($0.60\) for 30 days and POSTs an HMAC-SHA256 signed JSON webhook to your https endpoint when its tools/list fingerprint or grade changes, or it goes unreac
- `watch\_status`: Free: state \(active, expired, cancelled\), interval, expiry, next check, last result \(pin, grade, score, tool count\) and webhook delivery counters for a watch. Needs watch\_id and the secret returned when it was created.
- `watch\_cancel`: Free: cancel a watch \(no further checks or webhooks; not refunded\). Needs watch\_id and the secret returned when it was created.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html