health_checkReturns a minimal status object confirming the API is alive. Use this to verify connectivity before chaining other calls, or as a liveness check in a
get_domainReturns the complete surveillance intelligence record for a domain name. If the domain is in TunnelMind's tracker database (80,000+ entries), the resp
list_domainsReturns a paginated list of domains from the tracker database. Results are ordered alphabetically by domain name and support cursor-based pagination f
get_entityReturns an entity record for a surveillance company or data broker, including its industry, estimated annual data value per user (in USD), categories
list_entitiesReturns a paginated list of corporate entities in the TunnelMind surveillance database. Includes data categories, estimated data value, and industry c
searchSearches both the domains table and the entities table simultaneously. Returns matching domains (by domain name) and entities (by name or slug) in a s
intel_httpMakes a live HEAD request to the target domain from the Cloudflare edge, follows up to 5 redirects, and returns the full redirect chain, final HTTP st
intel_stackFetches up to 32KB of the domain's HTML and response headers from the edge, then fingerprints the content for known CMS platforms, JavaScript framewor
intel_robotsRetrieves the target domain's `robots.txt` file and parses it for AI crawler disallow rules. Specifically detects policies for known AI crawlers (GPTB
intel_agentProbes a domain for known AI agent integration signals: `llms.txt`, `ai.txt`, `/.well-known/ai-plugin.json`, `openapi.json`, `swagger.json`, MCP manif
intel_injectFetches a domain's homepage and checks for content patterns that could constitute prompt injection attacks against AI agents that visit and ingest the
intel_optoutChecks a domain for all known AI training data opt-out mechanisms beyond robots.txt: TDM (Text and Data Mining) reservation headers, `<meta name="ai">
get_receiptReturns metadata for a TunnelMind surveillance receipt — a signed document proving that a specific user's surveillance exposure was observed, measured
verify_receiptTamper-detection verification for TunnelMind surveillance receipts. Submit the receipt ID, the SHA-256 content hash, and the Ed25519 signature from th
get_ghostroute_certReturns the proof-of-existence record for a TunnelMind GhostRoute jurisdiction certificate. A GhostRoute certificate is a signed document proving that
verify_ghostroute_certTamper-detection verification for GhostRoute jurisdiction certificates. Submit the certificate ID, the SHA-256 content hash, and the Ed25519 signature
get_api_keyReturns the tier, label, masked owner email, creation date, last-used timestamp, today's request count, and daily request limit for the API key used i
revoke_api_keyPermanently deactivates the API key used to make this request. This action is irreversible. After revocation, the key will return 401 on all subsequen
+36 more tools
No proxied traffic observed for this host yet. Connect it at /connect and its grade gains a measured Reliability score + per-tool behavioral evidence — the half a static scan can't produce.
We re-grade mcp-data.tunnelmind.ai on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.
Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:
https://wmcp.sh/mcp/trust
readOnly vs observed behavior) layer on via the wmcp.sh proxy.