Tinplate Edge AI Safety, Security & EU Compliance

Install

Pick the AI app you use, then copy the settings.

Passed 2/3 checks · What you ask goes through the maker’s server (api.tinplate.dev) · ✓ Commands checked Nov 15, 2026

claude mcp add --transport http --scope user edge-apis https://api.tinplate.dev/mcp

{
  "mcpServers": {
    "edge-apis": {
      "url": "https://api.tinplate.dev/mcp"
    }
  }
}

{
  "servers": {
    "edge-apis": {
      "type": "http",
      "url": "https://api.tinplate.dev/mcp"
    }
  }
}

Which apps can use it

Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.

Connect over the internet in

ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast

All apps, with pros and cons →

What it can do

Tool names and descriptions exactly as the server reported them on Nov 15, 2026. The maker wrote them, not us; we show them as plain text.

• tinplate_pii_redactor

  PII Redactor API: Mask emails, phones, IBANs, cards, and EU IDs with reversible tokens before LLM calls. (Endpoint: POST /v1/pii-redactor)

• tinplate_prompt_guard

  Prompt Injection Detection API: Catch prompt injections, role hijacks, and encoded jailbreaks in user inputs and RAG chunks. (Endpoint: POST /v1/prompt-guard)

• tinplate_mcp_manifest_linter

  MCP Server Manifest & Tool Security Linter API: Audit MCP server manifests for hidden tool poisoning, shell risks, and excessive permissions. (Endpoint: POST /v1/mcp-manifest-linter)

• tinplate_tool_call_validator

  Agent Tool-Call Validator & Repairer API: Validate and auto-repair broken LLM tool-call arguments against your JSON Schema. (Endpoint: POST /v1/tool-call-validator)

• tinplate_hallucination_diff

  Deterministic Hallucination Diff API: Fast first filter to catch unsupported numbers, dates, and names in LLM answers vs RAG sources. (Endpoint: POST /v1/hallucination-diff)

• tinplate_prompt_cache_budgeter

  Prompt Cache Key & Context Budgeter API: Estimate tokens, optimize message order for prompt caching, and calculate LLM API costs. (Endpoint: POST /v1/prompt-cache-budgeter)

• tinplate_agent_action_receipts

  Agent Action Receipts API: Issue and verify tamper-evident HMAC-signed receipts for autonomous AI agent actions. (Endpoint: POST /v1/agent-action-receipts/issue)

• tinplate_content_provenance

  Synthetic Content Provenance Checker API: Detect C2PA manifests, AI generator EXIF/XMP tags, and stripped metadata in files or headers. (Endpoint: POST /v1/content-provenance)

• tinplate_json_heal

  Broken JSON & LLM Output Healer API: Repair malformed or truncated LLM JSON outputs into valid, schema-checked JSON in 1 ms. (Endpoint: POST /v1/json-heal)

• tinplate_html_to_markdown

  LLM HTML-to-Markdown Cleaner API: Convert noisy web pages or raw HTML into clean, token-efficient Markdown for RAG. (Endpoint: POST /v1/html-to-markdown)

• tinplate_locale_value_parser

  Text-to-Structured Date, Money & Unit Parser API: Normalize messy EU/US prices, dates, percentages, and measurements into structured JSON. (Endpoint: POST /v1/locale-value-parser)

• tinplate_secret_scanner

  Log Redact & Secret Scanner API: Detect and mask leaked API keys, JWTs, and private keys in logs, diffs, and prompts. (Endpoint: POST /v1/secret-scanner)

• tinplate_ssrf_firewall

  Agent URL & SSRF Firewall API: Validate URLs and redirect chains against SSRF, private IPs, and cloud metadata targets. (Endpoint: POST /v1/ssrf-firewall)

• tinplate_security_headers

  HTTP Security Header Scanner API: Audit CSP, HSTS, and browser security headers with an A+ to F grade and fix snippets. (Endpoint: POST /v1/security-headers)

• tinplate_webhook_verify

  Webhook Signature Verifier API: Verify Stripe, GitHub, Slack, Shopify, and Svix HMAC webhook signatures and timestamps. (Endpoint: POST /v1/webhook-verify)

• tinplate_email_dns

  Email DNS Deliverability Auditor API: Audit MX, SPF 10-lookup limits, DMARC, DKIM, BIMI, and MTA-STS with a 0–100 score. (Endpoint: POST /v1/email-dns)

• tinplate_email_dns_generator

  SPF, DKIM & DMARC Record Linter & Generator API: Lint existing SPF/DMARC strings and generate clean, RFC-compliant DNS TXT records. (Endpoint: POST /v1/email-dns-generator)

• tinplate_consent_tokens

  Stateless Consent & One-Click Unsubscribe Tokens API: Issue and verify stateless HMAC unsubscribe tokens and RFC 8058 List-Unsubscribe headers. (Endpoint: POST /v1/consent-tokens/issue)

• tinplate_eu_vat_iban

  EU VAT & IBAN/BIC Validator API: Validate IBANs, BIC/SWIFT codes, and EU/UK VAT numbers with live EU VIES lookup. (Endpoint: POST /v1/eu-vat-iban/iban)

• tinplate_invoice_validator

  Invoice & EU EN 16931 / Peppol Validator API: Audit extracted invoices for line-item math errors, VAT mismatches, and Peppol compliance. (Endpoint: POST /v1/invoice-validator)

• tinplate_hu_business_validator

  Hungarian Business Document & NAV Validator API: Validate Hungarian adószám, cégjegyzékszám, GIRO bank accounts, and NAV invoice rules. (Endpoint: POST /v1/hu-business-validator)

• tinplate_workday_holiday

  Workday & Holiday Calculator API: Calculate business days and SLA deadlines across 30+ countries including HU swap Saturdays. (Endpoint: POST /v1/workday-holiday/between)

• tinplate_signup_fraud

  Signup Fraud & Disposable Email Scorer API: Block disposable emails, alias abuse, and bot signups with a 0–100 fraud risk score. (Endpoint: POST /v1/signup-fraud)

• tinplate_cron_explainer

  Cron & Schedule Explainer & Validator API: Validate cron expressions, translate to plain English, and compute next N runs with DST. (Endpoint: POST /v1/cron-explainer)

• tinplate_schema_diff

  OpenAPI & JSON Schema Breaking-Change Diff API: Diff two OpenAPI 3.x or JSON Schemas to catch breaking changes and recommend SemVer bumps. (Endpoint: POST /v1/schema-diff)

• tinplate_ua_bot_parser

  User-Agent & AI Bot Parser API: Detect AI training crawlers, RAG bots, headless browsers, and device/OS details from User-Agent. (Endpoint: POST /v1/ua-bot-parser)

• tinplate_url_normalizer

  URL Normalizer & Tracking Parameter Stripper API: Canonicalize URLs and strip 120+ ad-tracking and click-ID parameters for clean deduplication. (Endpoint: POST /v1/url-normalizer)

• tinplate_ics_sanitizer

  ICS / iCalendar Feed Sanitizer & Validator API: Repair broken .ics calendar feeds, normalize Windows timezones to IANA, and parse VEVENTs. (Endpoint: POST /v1/ics-sanitizer)

• tinplate_robots_llms_analyzer

  robots.txt & llms.txt AI Crawler Analyzer & Generator API: Audit which AI crawlers your robots.txt allows and generate a valid llms.txt file. (Endpoint: POST /v1/robots-llms-analyzer)

• tinplate_semver_lockfile_judge

  SemVer & Package Manifest / Lockfile Diff Judge API: Diff two package.json files to flag breaking SemVer bumps and risky dependency changes. (Endpoint: POST /v1/semver-lockfile-judge)

• tinplate_llm_output_guard

  LLM Output Safety, Leakage & Format Guardrail API: Scan and sanitize LLM outputs for prompt leakage, Markdown beacons, XSS, and policy violations. (Endpoint: POST /v1/llm-output-guard)

• tinplate_command_sql_guard

  Agent Shell Command & SQL Query Safety Firewall API: Audit agent shell commands and Text-to-SQL queries for RCE, reverse shells, and destructive SQL. (Endpoint: POST /v1/command-sql-guard)

• tinplate_eu_id_validator

  European Corporate Tax, LEI, EORI & National ID Validator API: Validate LEI, EORI, SIREN/SIRET, Steuer-ID, Codice Fiscale, NIF/CIF, NIP, BSN, CRN & EIN checksums. (Endpoint: POST /v1/eu-id-validator)

• tinplate_jwt_jwk_inspector

  JWT, JWS & JWK Security Auditor & RFC 8725 Linter API: Audit JWT tokens and JWK sets against RFC 8725 for alg:none, weak secrets, and leaked keys. (Endpoint: POST /v1/jwt-jwk-inspector)

• tinplate_rag_chunker

  Markdown & Code Aware Smart RAG Document Chunker API: Split Markdown into token-budgeted RAG chunks with heading breadcrumbs and intact code/tables. (Endpoint: POST /v1/rag-chunker)

• tinplate_regex_safety

  Regex ReDoS Vulnerability Scanner & Pattern Explainer API: Audit regular expressions for O(2^n) ReDoS backtracking, explain patterns, and test matches. (Endpoint: POST /v1/regex-safety)

• tinplate_llm_messages_guard

  LLM Chat Messages Policy Proxy & Sanitizer API: Sanitize entire multi-turn LLM messages[] arrays in one call before forwarding to OpenAI, Anthropic, or Gemini. (Endpoint: POST /v1/llm-messages-guard)

• tinplate_tabular_rag_cleaner

  Tabular CSV/JSON RAG Sanitizer & Formula-Injection Firewall API: Neutralize CSV formula injection, redact cell-level PII, and convert tables into RAG-ready Markdown & row chunks. (Endpoint: POST /v1/tabular-rag-cleaner)

• tinplate_peppol_ubl_invoice

  Peppol UBL 2.1 / XRechnung E-Invoice Converter & EPC-QR API: Generate EN 16931 / Peppol BIS 3.0 UBL 2.1 XML and SEPA EPC-QR payloads from JSON, or parse UBL XML to JSON. (Endpoint: POST /v1/peppol-ubl-invoice)

• tinplate_eu_vat_calculator

  EU Cross-Border VAT Rate & Reverse-Charge Calculator API: Determine exact EU VAT rates, B2B reverse charge, EN 16931 tax category codes, and mandatory invoice legal text. (Endpoint: POST /v1/eu-vat-calculator)

• tinplate_sanctions_screener

  Sanctions, Watchlist & Embargo Entity Screener API: Screen beneficiaries, vendors, BICs, and wallets against embargo rules and fuzzy sanctions watchlists. (Endpoint: POST /v1/sanctions-screener)

• tinplate_agent_code_guard

  AI-Generated Code & CI Workflow Sandbox Auditor API: Audit LLM-generated Python, JS/TS, Shell, or GitHub Actions code for sandbox escapes before execution. (Endpoint: POST /v1/agent-code-guard)

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 15, 2026

• ! Caution

  Maker matches the repo

  The registry lists no source repo, so we cannot match the publisher (tinplate.dev) to the code

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• ✓ Pass

  Endpoint responds

  Responded in 208 ms (HTTP 200)

• – Not applicable

  Sign-in with OAuth

  No sign-in needed

• ✓ Pass

  No hidden instructions in tool descriptions

  Read 42 tool descriptions and found no hidden instructions to the AI

What we check → · JSON

User reviews

No reviews yet

Sign in to write a review

Compared with others in Law & government datai

• More stars than 0% of the other 1859 servers in this category
• Published to the registry more recently than 100% of the other 1859 servers in this category
• Basic checks equal to or better than 46% of the other 1859 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Similar alternatives

Same category, other makers, commands already checked. Official ones first, then by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Global law

The law of nearly every country on earth, any date: read it, see what changed it, check citations.

by lexifina·Widely used·★ 2K·Updated 5 days ago

Runs in the cloud✓ lexifina.com

How to connect

Open Legal Data (Germany)

German court decisions (Rechtsprechung) and laws (Gesetze) with citation graph and citation checks.

by openlegaldata·Growing·★ 161·Updated 4 days ago

Runs in the cloud✓ service owner · openlegaldata.io

How to connect

LibreJustice

Search French-language and European case law and French legal texts (codes, statutes, treaties).

by librejustice·Early·★ 35·Updated 2 months ago

Runs in the cloud✓ service owner · librejustice.fr

How to connect

InfraNode

Keyless open data for 84 German cities: 12 lean read-only MCP tools covering 67 data types.

by street1983nk·Early·★ 17·Updated 4 months ago

Runs in the cloud✓ service owner · infranode.dev

How to connect

Fedlex Connector

Search Swiss federal legislation: laws, articles, amendments via the Fedlex SPARQL endpoint.

by JayTheSkier·Early·★ 8·Updated 7 months ago

Runs in the cloud✓ service owner · fedlex-connector.ch

How to connect

• Global law — Runs in the cloud, nothing to install · No key needed
• Open Legal Data (Germany) — Runs in the cloud, nothing to install · No key needed
• LibreJustice — Runs in the cloud, nothing to install · No key needed
• InfraNode — Runs in the cloud, nothing to install · No key needed
• Fedlex Connector — Runs in the cloud, nothing to install · No key needed

README from the maker

No README found in the repo