Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Description from the maker (original English)
225 pay-per-call agent tools: Polymarket, chain reads, DeFi, web, SEC, KYB, geo, dev, AI. x402
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Works in Claude on the web, desktop and mobile:
https://api.sitecheck-api.workers.dev/mcp?ref=registryRun this in your terminal
claude mcp add --transport http sitecheck 'https://api.sitecheck-api.workers.dev/mcp?ref=registry'Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"sitecheck": {
"url": "https://api.sitecheck-api.workers.dev/mcp?ref=registry"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"sitecheck": {
"type": "http",
"url": "https://api.sitecheck-api.workers.dev/mcp?ref=registry"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
ChatGPT connects only to servers on the internet:
https://api.sitecheck-api.workers.dev/mcp?ref=registryMenu names can differ slightly by plan and over time.
Your choice stays on this device in a cookie; no account needed.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
We have not read this server’s tool list yet; we check endpoints in rotation.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026
The registry name was verified with the GitHub account bck-stack, which owns the repo
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Not checked yet; we check endpoints in rotation
Not checked yet; we check endpoints in rotation
Not checked yet; we read the tool list when we check the endpoint
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
The registry does not list a required key, though some servers ask you to sign in on first use.
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
The GitHub repo last changed –, and the latest version (1.8.5) reached the registry 21 days ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: Spec Driven Development, Remote Desktop Commander, BankBridge
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Works in any MCP agent, including local models. Read-only bank accounts, spending, investments.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Live: https://api.sitecheck-api.workers.dev · listed on x402scan, the official MCP Registry (io.github.bck-stack/sitecheck), Smithery and mcpservers.org · MCP: /mcp · discovery: /.well-known/x402, /openapi.json
SiteCheck is a small API that AI agents can use without an account or API key: 29 pay-per-call tools in all. Besides its AI and web tools (including a web page to Markdown reader), it sells PDF to text, translation, tech stack detection, sitemap URLs, exchange rates, e-mail, domain and Solana token and wallet data, business and compliance data (EU VAT, IBAN, LEI, US recalls, OSHA/EPA enforcement, UK insolvency notices), prediction-market data and unsigned trade transactions powered by Panta. Every call is paid per request in USDC with the x402 protocol, on Base, Solana or Arc (Circle's L1), whichever the buyer holds USDC on. Call it, get a 402 Payment Required listing the price on each network, sign the payment and get the result. It runs on Cloudflare Workers and Workers AI.
| Endpoint | Price | What it does |
|---|---|---|
GET /api/audit?url= | $0.02 | Website audit: WCAG 2.2 accessibility issues with fixes and a score (European Accessibility Act), SEO basics, security headers, tech stack |
GET /api/contacts?url= | $0.01 | Company contact enrichment from a domain: emails, phones, socials, tech |
GET /api/hiring?q=&remote= | $0.01 | Searches the current Hacker News "Who is hiring?" thread |
POST /api/chat | $0.004 | Llama 3.3 70B chat completion |
POST /api/image | $0.005 | FLUX.1 schnell text-to-image |
POST /api/transcribe | $0.01 | Whisper large-v3-turbo speech-to-text |
POST /api/tts | $0.02 | Deepgram Aura-2 text-to-speech |
POST /api/embed | $0.001 | BGE-M3 embeddings (1024-d, multilingual) |
GET /api/vat?number= | $0.002 | EU VAT number check: format and checksum locally, then the official VIES service (27 EU states + Northern Ireland) |
GET /api/iban?iban= | $0.001 | IBAN validation with no network call: registry structure and length, mod-97, national check digits, bank/branch/account split; ibans= for up to 50 |
GET /api/lei?q= | $0.005 | GLEIF lookup by LEI or company name: status, registration, parents, children, one-line kycSummary |
GET /api/recalls?q=&source=&since=&classification=&limit= | $0.003 | US product recalls from openFDA and CPSC in one schema, with a high/medium/low severity |
GET /api/violations?company=&state=&since=&minPenalty=&source=&limit= | $0.005 | US enforcement cases: OSHA (DOL API, needs a key on the deployment) and EPA ECHO, with official record links |
GET /api/uk-insolvency?since=&q=&postcode=&type=&limit= | $0.003 | UK company insolvency notices from The Gazette (our nightly cache of the last 8 days), optional Companies House enrichment |
GET /api/read?url=&format=&maxChars=&links= | $0.002 | One web page as clean Markdown or text for an LLM: main content only, title, description, author, date, language, canonical; robots.txt respected |
GET /api/email-check?email= | $0.001 | E-mail pre-check without SMTP: syntax, mail DNS, disposable domain, role account, free provider, typo suggestion; emails= for up to 50 |
GET /api/domain?domain= | $0.002 | RDAP (WHOIS successor) and DNS: registered or available, registrar, created/expiry dates, status, DNSSEC, name servers, IPs, MX |
GET /api/solana/token?address= | $0.002 | Solana token check: price, market cap, liquidity, holders, 24h trading, organic score, top-holder share, on-chain mint/freeze authority and Token-2022 extensions, red flags |
GET /api/solana/trending?mode=&interval=&minLiquidityUsd= | $0.003 | Trending, new, top-traded or top-organic Solana tokens with the same fields and flags |
GET /api/solana/wallet?address= | $0.003 | Solana wallet holdings: SOL and every token with symbol, USD price and value, total in USD |
GET /api/tech?url= | $0.003 | Website technology detection (CMS, e-commerce, analytics, CDN, hosting, chat, payments, e-mail provider) with version, confidence and evidence |
POST /api/pdf | $0.003 | PDF to text by URL or base64 (up to 15 MB), page by page, with title, author and dates; text PDFs only |
GET /api/sitemap?url=&pathPrefix=&since= | $0.002 | Every URL in a site's XML sitemaps with lastmod, newest first |
GET /api/fx?from=&to=&amount=&date= | $0.001 | ECB exchange rates (latest, a past date or a time series) with amount conversion |
POST /api/translate | $0.002 | Translation with Llama 3.1 8B, up to 6,000 characters, formatting kept |
Agents can buy market intelligence and ready-to-sign trade transactions per call, with no account and no API key. An agent researching an event pays a fraction of a cent to find the markets and one cent for a market's odds and a neutral brief. An agent that wants to act pays for an unsigned Panta buy transaction and signs it with its own wallet. Panta runs USDC prediction markets on Solana.
| Endpoint | Price | What it does | |
|---|---|---|---|
GET /api/markets?q=&status=&category=&limit= | $0.002 | Searches Panta's markets. Compact rows: id, question, YES/NO prices and implied probabilities, volume, close and resolution times, resolution source | |
GET /api/markets/brief?id= | $0.01 | One market: current odds, recent trading activity and a short neutral AI summary of what it asks, what resolves it and what the price implies | |
POST /api/markets/quote | $0.005 | Body `{ id, side: "yes"\ | "no", amountUsdc, wallet }`. Panta's quote: expected shares, average price, fee, and price impact against the spot price |
POST /api/markets/build-buy | $0.01 | Same body, plus an optional maxSlippageBps. Returns the unsigned transaction (Solana v0, base64) and Panta's instructions for the agent to sign and broadcast itself, plus the fields for the trade report | |
POST /api/markets/report | free | After broadcasting, send { signature, orderId, quoteId, id, wallet }. SiteCheck forwards it to Panta, which confirms and attributes the trade |
build-buy hands back an unsigned transaction whose only signer is the agent's wallet.disclaimer), and the brief never recommends a trade. If the model's text reads like advice, a factual template is returned instead.poweredBy: { text: "Powered by Panta", url: "https://panta.market" }, as Panta's Terms of Use require.PANTA_API_KEY secret is set. Otherwise they are hidden, and GET /health says why. Endpoints, shapes, attribution and open questions: docs/PANTA.md.node scripts/demo-markets.mjs --q bitcoin # search, brief and quote, paid on Solana (~0.017 USDC)
node scripts/demo-markets.mjs --q bitcoin --build # also builds the unsigned transaction (+0.01); never signs or sends it
| Tool | Source | Notes |
|---|---|---|
/api/read | The page itself, fetched once with the SiteCheckReader User-Agent | robots.txt is respected (a disallowed page answers 403 and is not charged). No JavaScript is run, so pages that only render in the browser come back empty (422, not charged). PDFs and other binary files answer 415. The content belongs to its publisher. |
/api/email-check | DNS over HTTPS (Cloudflare, Google) and the disposable-email-domains list (CC0) | No SMTP connection is made: unknown means nothing is wrong with the address or its domain, not that the mailbox exists. |
/api/domain | The IANA RDAP bootstrap and each registry's RDAP server; DNS over HTTPS | available means the registry has no record; premium or reserved names can still be unavailable to buy. TLDs without RDAP are inferred from DNS. |
/api/solana/token, /api/solana/trending, /api/solana/wallet | Jupiter token, price and holdings APIs, Solana mainnet JSON-RPC (mint account), GeckoTerminal for pools (best effort) | Information only, not financial advice. Nothing is signed or sent. On-chain mint and freeze authority win over the API's audit when both are available. |
/api/tech | The site's home page, headers, cookies and DNS (MX, TXT); 231 own fingerprints (MIT, not derived from Wappalyzer) | No JavaScript is run; a site behind a bot challenge returns what its headers and DNS show. |
/api/pdf | The PDF's text layer, read with unpdf (PDF.js) | No OCR: a scanned PDF answers 422 and is not charged. |
/api/sitemap | The site's robots.txt and XML sitemaps | Indexes are followed up to 25 child sitemaps per call. |
/api/fx | European Central Bank reference rates via Frankfurter | Published on working days around 16:00 CET; weekends return the last published day. |
/api/translate | Workers AI @cf/meta/llama-3.1-8b-instruct-fast | Machine translation: review important texts. |
Six tools for an agent that has to check a counterparty before it trades with it. All of them read free official sources (or our own cache of one), need no key from the caller, and follow the same rule as every route here: a call that fails (bad input, upstream down, timeout) returns 4xx/5xx and is not settled, so the buyer is not charged.
| Tool | Source | Terms |
|---|---|---|
/api/vat | European Commission VIES REST API | Public service of the Commission. A member state that is down gives HTTP 503 with a viesStatus such as MS_UNAVAILABLE, so an unknown answer is never reported as "invalid". Some states (e.g. DE, ES) confirm validity but do not disclose name and address: those fields are null. |
/api/iban | Computed locally from the SWIFT IBAN registry structure (release 101) | No network, no bank-name or BIC lookup (no open dataset is bundled; the response says bankLookup: false). National check digits are applied only where a public algorithm exists (FR, ES, IT, BE, NL for ABNA/INGB/RABO, NO, FI, PL, PT, RS, ME, MK, XK, SI); other countries report not-available. Germany has no general national algorithm. |
/api/lei | GLEIF Global LEI Index | CC0 public domain. No key. |
/api/recalls | openFDA enforcement reports (food, drug, device) and the CPSC SaferProducts.gov Recall API | openFDA data is public domain under its terms of use (not for medical decisions). CPSC does not classify recalls: its severity is derived from the hazard text, FDA Class I/II/III maps to high/medium/low. |
| /api/violations | US Department of Labor Data API v4 (OSHA) and EPA ECHO | US government works. OSHA needs the optional DOL_API_KEY secret: without it the route returns E
Only the beginning is shown; read the rest in the repo