Independent trust grade B+ (89/100). No blocking issues found in the static + spec checks. wmcp.sh continuously watches agentbits.dev for tool drift and rug-pulls. The grade is free and identical whether or not the operator pays.
base64_decodeDecode a Base64 string into UTF-8 text and report invalid payloads as errors when recovering embedded credentials, tokens, or transport-encoded conten
base64_encodeConvert a UTF-8 string into standard Base64 when you need a portable text encoding for credentials, binary-safe transport, or embedding data in JSON/H
countries_bulkDownload the complete versioned countries dataset as JSON for caching, offline use, or multi-country analysis when a single country_lookup call is not
country_lookupResolve an ISO 3166-1 alpha-2 country code (for example CA, US, JP) to official name, region, currency, calling code, languages, and related country m
currency_lookupResolve an ISO 4217 currency code such as USD, EUR, or JPY to its name, symbol, decimal places, and which countries use it when you need currency meta
http_status_lookupExplain what a numeric HTTP status code such as 404 or 429 means by returning its standard reason phrase and a short description for debugging or API
isbn_validateVerify whether an ISBN-10 or ISBN-13 passes checksum rules and return normalized digits when checking book identifiers before catalog or purchase flow
json_validateParse a string as JSON to confirm it is well-formed and return a normalized representation when possible before further processing or storage. Use whe
language_lookupResolve an ISO 639-1 language code such as en, fr, or ja to its English name and native name when you need language metadata from a two-letter code. U
luhn_validateRun the Luhn checksum on a numeric string such as a payment-card-like identifier to verify the check digit before accepting or storing the value. Use
mime_lookupMap a file extension such as webp or png, or a MIME type string, to curated Content-Type metadata when setting headers, validating uploads, or choosin
timestamp_convertConvert Unix epoch seconds or milliseconds to ISO-8601, or an ISO-8601 datetime to Unix epoch values, when bridging APIs that disagree on time formats
timezone_convertConvert an ISO-8601 datetime from one IANA timezone to another while preserving the same instant, including daylight-saving-aware wall times such as T
tld_lookupIdentify what a DNS top-level domain such as com, io, or ai is classified as and commonly used for when classifying domains or answering TLD questions
unit_convertConvert a numeric value between supported length, mass, or temperature units—for example miles to kilometers or Celsius to Fahrenheit—when you need a
url_decodeDecode a percent-encoded URL component into plain text when reading query parameters, path segments, or form values that contain escaped characters. U
url_encodeApply encodeURIComponent-style percent-encoding so query parameters, path segments, or form values are safe to place in a URL. Use when: - Percent-enc
uuid_validateCheck whether a string is a well-formed UUID and, when recognizable, report its version and variant so you can accept or reject identifier inputs conf
No proxied traffic observed for this host yet. Connect it at /connect and its grade gains a measured Reliability score + per-tool behavioral evidence — the half a static scan can't produce.
We re-grade agentbits.dev on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.
Run agentbits.dev? Claim it (free) to get drift alerts and show an independently-verified trust badge. The grade stays free — claiming just ties it to you.
Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:
https://wmcp.sh/mcp/trust
readOnly vs observed behavior) layer on via the wmcp.sh proxy.