ca.tonbot.tolca/tolca
Measured conclusion: Deep-tested. L2 outcome: tools_ok.
Verify a company before paying it: OFAC sanctions, UK/Canada registries, contractor licences (x402)
| Author | ca.tonbot.tolca |
|---|---|
| Access | remote |
| Publisher key required | No |
| Measured state | Deep-tested |
| L1 liveness | alive |
| L1 latency | 2606 ms |
| Last measured | 2026-10-24 |
Add to your agent
Copy this into your MCP client config:
{
"mcpServers": {
"tolca": {
"url": "https://tolca.tonbot.ca/mcp",
"transport": "streamable-http"
}
}
}
Measured tools (11)
pkg_checkread-onlyIs this package safe to install? One call, one verdict: safe / caution / avoid, with a score, concrete reasons (known vulnerabilities from OSV, deprecation, abandonment, adoption, install scripts, typosquat signals) and a one-line recommendation. Input: name, ecosystem (npm | PyPI), optional version. Free over MCP (100/day shared quota); unlimited via x402 at https://tolca.tonbot.ca/v1/pkg-check ($0.02).
Parameters:
name(required) — string — Package name as publishedecosystem(required) — stringversion— string — Exact version; defaults to latest
Hints: read-only yes · destructive no · idempotent yes · open-world yes
qc_contractor_checkread-onlyCall before hiring, paying or subcontracting a Québec (Canada) contractor. One call checks: active RBQ licence (status, categories, restrictions), RENA listing (banned from public contracts), environmental penalties, public contracts awarded on SEAO (count, total, buyers). Verdict ok / review / blocking with reasons and source dates. Input: name, NEQ or RBQ licence number. Official open data. Free over MCP (10/day shared quota); unlimited via x402 at https://tolca.tonbot.ca/v1/qc-contractor-check ($0.1).
Parameters:
neq— string — Numéro d'entreprise du Québec (10 digits)lang— stringname— string — Business name, exact or partiallicence— string — RBQ licence number
Hints: read-only yes · destructive no · idempotent yes · open-world yes
summarizeread-onlySummarize text (up to 40k chars) into a faithful, tight summary, with optional max_words and target language. Pay-per-call over x402 in USDC on Base; payment challenge answered in ~10 ms, 7-day average processing ~1.5 s across Tolca services. Costs $0.03 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/summarize with an x402 client.
Parameters:
text(required) — stringlanguage— stringmax_words— integer
Hints: read-only yes · destructive no · idempotent yes · open-world yes
translateread-onlyTranslate text between French (including Quebec French) and English, with optional tone. Pay-per-call over x402 in USDC on Base; payment challenge answered in ~25 ms, 7-day average processing ~1.5 s across Tolca services. Costs $0.04 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/translate with an x402 client.
Parameters:
text(required) — stringtarget(required) — stringtone— string
Hints: read-only yes · destructive no · idempotent yes · open-world yes
extractread-onlyTurn messy text into clean JSON matching the schema you provide (field names and types). Pay-per-call over x402 in USDC on Base; payment challenge answered in ~5 ms, 7-day average processing ~1.5 s across Tolca services. Costs $0.02 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/extract with an x402 client.
Parameters:
text(required) — stringschema(required) — object — Field name -> type or description
Hints: read-only yes · destructive no · idempotent yes · open-world yes
extract_urlread-onlyFetch a public URL (HTML article, PDF, or JSON) and return JSON matching your schema in one call, with page title and source. Pay-per-call over x402 in USDC on Base; payment challenge answered in ~8 ms. Costs $0.03 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/extract-url with an x402 client.
Parameters:
url(required) — stringschema(required) — object — Field name -> type or descriptionmax_chars— integer
Hints: read-only yes · destructive no · idempotent yes · open-world yes
qc_licenceread-onlyCheapest check: does this Québec contractor hold an ACTIVE RBQ licence right now? Returns active true/false, licence number, name, NEQ, city, restriction flag and authorized work categories. Use to vet many contractors fast; use qc-contractor-check for RENA and penalties. Input: name, NEQ or RBQ licence number. Costs $0.01 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/qc-licence with an x402 client.
Parameters:
neq— string — Numéro d'entreprise du Québec (10 digits)name— string — Business name, exact or partiallicence— string — RBQ licence number
Hints: read-only yes · destructive no · idempotent yes · open-world yes
pkg_metaread-onlyPackage metadata in one call, cheapest tier: latest and resolved version, license, first/last publish dates, weekly downloads, deprecation flag, install scripts, maintainers count. npm or PyPI. No vulnerability scan (see pkg-check for the full safe/caution/avoid verdict). Input: name, ecosystem (npm | PyPI), optional version. Costs $0.005 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/pkg-meta with an x402 client.
Parameters:
name(required) — stringecosystem(required) — stringversion— string
Hints: read-only yes · destructive no · idempotent yes · open-world yes
homework_checkread-onlyCan this homework be done by an AI? For teachers and schools: paste an assignment (or a public PDF URL) and get an overall AI-completion risk 0-100, a per-question breakdown (risk, why, concrete fix to make it AI-resistant) and general tips. No student data. Input: text or url, optional grade, subject, lang fr|en. / Ce devoir peut-il être fait par une IA? Score par question et corrections concrètes pour l'enseignant. Costs $0.25 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/homework-check with an x402 client.
Parameters:
url— string — Public URL of the assignment (PDF or page)lang— stringtext— string — Assignment textgrade— string — Grade level, e.g. secondaire 3subject— string
Hints: read-only yes · destructive no · idempotent yes · open-world yes
verify_businessread-onlyCall before paying, onboarding or contracting a company (KYB). One call: US restricted-party lists (CSL incl. OFAC SDN), company registries (UK Companies House, Canada federal), legal entity status (GLEIF, worldwide), contractor licences (Québec, Washington, Oregon). Verdict ok / review / blocking / not_found with reasons. Input: name, optional country (ISO-2) and region (WA, OR, QC). Businesses only. Costs $0.05 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/verify-business with an x402 client.
Parameters:
name(required) — string — Business legal or trade nameregion— string — State/province code: WA, OR or QC enables contractor-licence checkscountry— string — ISO 3166 alpha-2 country code, e.g. US, CA, GB
Hints: read-only yes · destructive no · idempotent yes · open-world yes
web_searchread-onlySearch the web and read the top pages in ONE call: 10 results (title, url, snippet, date) plus the clean text of the best pages, with fetch time and sha256. French and Canada by default when the query is French; official-sources mode (governments, registries, courts, laws); freshness filter; site: restriction. No results = HTTP 404 = you are not charged. Input: query, optional read (0-5), official, lang, country, freshness, site. Costs $0.008 USDC per call (x402 v2, Base). Send the HTTP header PAYMENT-SIGNATURE with your x402 payment, or call POST https://tolca.tonbot.ca/v1/web-search with an x402 client.
Parameters:
query(required) — string — Question or keywords; Brave operators allowed (site:, "exact", -word)lang— stringread— integer — Top pages to fetch and return as clean text (default 3)site— string — Restrict to one domaincountry— string — ISO country to prioritize (default CA)official— boolean — Only governments, registries, courts, lawsfreshness— string
Hints: read-only yes · destructive no · idempotent yes · open-world yes
Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.