# White Hat Lab Agent Toolkit MCP server

Source: https://glimind.com/server/mcp-registry%2Fio.github.white-hat-lab%2Fagent-toolkit
Registry id: `mcp-registry/io.github.white-hat-lab/agent-toolkit`
Status: unknown

## Install

```json
{
  "mcpServers": {
    "white-hat-lab-agent-toolkit-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "agent-toolkit-mcp"
      ]
    }
  }
}
```

Claude Code:

```sh
claude mcp add white-hat-lab-agent-toolkit-mcp-server -- npx -y agent-toolkit-mcp
```

## Tools (33)

- `address_activity_summary`: Summarize address activity
- `api_uptime`: Point-in-time URL status, latency, HTTPS and security headers
- `blockchain_preflight`: Blockchain preflight check (free)
- `content_repurposing_package`: Headline, meta description, key terms, social drafts from supplied content
- `contract_capability`: What a contract can do from public bytecode
- `cron_parse`: Parse a cron expression
- `dependency_audit`: Audit a whole package.json (vulns, deprecations, licenses)
- `document_compare`: Line-level diff and similarity of two supplied texts
- `invoice_receipt_extraction`: Pull reference number, date, total from supplied text
- `json_tool`: JSON utilities
- `jwt_inspect`: Inspect a JWT
- `license_check`: Flag GPL/AGPL/unknown licenses for commercial-use review
- `lockfile_audit`: Audit the full resolved tree from package-lock.json / yarn.lock
- `malicious_scan`: Deep malicious-package scan with an install verdict
- `package_risk`: Supply-chain risk score for one package version
- `regex_test`: Test a regex
- `release_summary`: Digest changes between two versions, flag breaking/security
- `sca_scan`: Complete SCA report for a lockfile: prioritized vulnerabilities with fix versions, license warnings, install-script risks, CycloneDX SBOM
- `secret_scan`: Scan for secrets
- `semver`: Semver operations
- `seo_audit`: On-page SEO audit of a public page
- `threat_intel`: URL/domain/IP check against URLhaus and OpenPhish feeds
- `token_risk`: Danger signs in a token contract
- `transaction_confirmation`: Confirmed/failed/pending with confirmation count
- `transaction_receipt`: Get transaction receipt
- `transaction_reconciliation_report`: Exact multiset matching of supplied ledger vs transaction records
- `transaction_status`: Get transaction status
- `upgrade_decision`: Should I upgrade this package between two versions?
- `wallet_balance`: Get wallet balance
- `wallet_risk`: Address check against public scam blocklists and on-chain signals
- `webhook_reliability_assessment`: Success rate and latency stats from supplied delivery logs
- `website_change_comparison`: Added/removed text between two supplied HTML snapshots
- `x402_trust_check`: Inspect a paid x402 API's live payment challenge before paying it

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.