Meta Agent Tools Check API

openapi: 3.2.0
info:
  title: Agentalog — Agent Auto Log Check API
  version: 1.0.0
  description: 'Agent Auto Log: catalog of MCP servers, skills and plugins with an automatic change log, plus a monitor for what your agents install.'
servers:
- url: https://agentalog.com
tags:
- name: Check
paths:
  /api/check:
    get:
      operationId: check_tool
      summary: 'Check an MCP server address before installing it: what we already measured…'
      description: 'Send the endpoint URL. The answer never contacts that address: it reads what our weekly visits measured and what our domain data knows. `sinais_do_endereco` comes from the address alone (consumer tunnel, `http://` without TLS). `registros` lists the catalog listings with this exact address first (`exato: true`), then up to 20 others on the same host, each with its level and signals; `mesmo_host` counts them all. `dominio` has the facts about the host''s domain. An address outside the catalog answers `no_catalogo: false` and `registrar`: submit it to get it reviewed. Cached for 5 minutes.

        Returns: { url, host, no_catalogo, sinais_do_endereco, registros, mesmo_host, dominio, registrar, api }'
      security: []
      parameters:
      - name: url
        in: query
        required: true
        schema:
          type: string
        description: The http(s) endpoint of the MCP server, without credentials.
        example: https://agentalog.com/mcp
      - name: X-API-Pass
        in: header
        required: false
        schema:
          type: string
        description: 'MAT-only private pass: mat_<32 random hex>_<64 random hex>. Generate and save before buying.'
      - name: Idempotency-Key
        in: header
        required: false
        schema:
          type: string
        description: Optional retry key, up to 80 ASCII characters; same read for five minutes.
      responses:
        '200':
          description: '{ url, host, no_catalogo, sinais_do_endereco, registros, mesmo_host, dominio, registrar, api }'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Checagem'
        '400':
          description: Missing, invalid or credential-bearing `url`.
        '401':
          description: Invalid MAT pass.
        '402':
          description: Free allowance or MAT credits exhausted; buy a package.
        '409':
          description: Retry conflict or pending read.
        '413':
          description: Basic read exceeds 1 MiB.
        '429':
          description: Temporary reading capacity.
        '503':
          description: Origin or payment verification temporarily unavailable.
      tags:
      - Check
components:
  schemas:
    Checagem:
      type: object
      properties:
        url:
          type: string
          description: 'The address as the catalog keeps it: lower-case host, no query, fragment or credential.'
        host:
          type: string
          description: The host of the address.
        no_catalogo:
          type: boolean
          description: '`true` when a catalog listing has this exact address.'
        sinais_do_endereco:
          type: array
          items:
            type: object
          description: '`{ codigo, valor, rotulo?, degrau }` from the address alone: `tunel` (consumer tunnel) and `sem_https`.'
        registros:
          type: array
          items:
            type: object
          description: '`{ id, nome, exato, nivel, sinais, verificado_em, ficha, security }`: the exact address first, then up to 20 others on the same host, most serious first.'
        mesmo_host:
          type: integer
          description: How many live remote listings share this host.
        dominio:
          type: object
          description: The domain facts, as in `Seguranca.dominio`, or null.
          nullable: true
        registrar:
          type: string
          description: Where to submit the address when it is not in the catalog; null otherwise.
          nullable: true
        api:
          type: string
          description: Absolute URL of this check.
      required:
      - url
      - host
      - no_catalogo
      - sinais_do_endereco
      - registros
      - mesmo_host
      - dominio
      - registrar
      - api
      description: What we already know about an MCP server address, without visiting it.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: Guest mr_… or ADMIN_TOKEN; the account is a cookie, never a bearer.
    monitorReader:
      type: http
      scheme: bearer
      bearerFormat: mmq_…
      description: Read one private project's event cursor only. No ingestion, approval or purchase. Do not mix with cookies.
    monitorInstallation:
      type: http
      scheme: bearer
      bearerFormat: mmi_…
      description: One private installation and project. No approval, purchase or credential issuance.
    monitorNotices:
      type: http
      scheme: bearer
      bearerFormat: mmn_…
      description: Product notice service only. Reserve, start and confirm; no account or installation authority.
    x402:
      type: apiKey
      in: header
      name: X-PAYMENT
      description: x402 payment per call (USDC on Base). Call without it to get the 402 with `accepts`; sign the authorization and repeat with the base64 payment in X-PAYMENT.
    globalAccount:
      type: apiKey
      in: cookie
      name: __Host-mm-auth
      description: Global session in the product's HttpOnly cookie; writes require exact Origin and X-CSRF-Token.
    contaChaveApi:
      type: http
      scheme: bearer
      bearerFormat: mmk_…
      description: 'Account API key: `Authorization: Bearer mmk_…` or `X-Api-Key: mmk_…`. Created on the account page (API keys), valid only in the product where it was created; it acts as the account (or the organization that owns it).'
    carteiraAgente:
      type: http
      scheme: bearer
      bearerFormat: mmw_…
      description: 'Wallet credential of an agent without an account (`Authorization: Bearer mmw_…`, 30 days, this product only): POST /api/auth/wallet/agent/start, sign the message with the wallet, POST /api/auth/wallet/agent/token. The owner is `x402:<address>`.'
x-service-info:
  categories:
  - ai-agents
  - mcp
  - directory
  docs:
    homepage: https://agentalog.com/
    apiReference: https://agentalog.com/developers
    llms: https://agentalog.com/llms.txt
x-provenance:
  method: harvested
  publisher: Meta Agent Tools
  source: https://agentalog.com/openapi.json
  note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
    stamped by stamp-openapi-provenance.py (roadmap#793)