ProfitCollector

22 pay-per-call developer, security, network and data utilities using x402 on Base.

CommunityDegradedNo sign-inGlobalFreeRead-only

What it can do

    What data it sees

    Do you need an account

    No: the server works without sign-in

    22 pay-per-call developer, security, network and data utilities using x402 on Base.

    How to connect

    How to connect ProfitCollector to Claude

    The server address to paste into Claude settings:

    https://mcp.bakhour.ca/mcp

    1. Open Claude (claude.ai or the desktop app).
    2. Go to Settings → Connectors.
    3. Click Add custom connector.
    4. Paste the server address copied below into Remote MCP server URL and click Add.
    5. In a chat, click + → Connectors and switch the new connector on.

    Custom connectors are available on Free, Pro, Max, Team and Enterprise plans (Free is limited to one). On Team and Enterprise an organization Owner adds the connector first under Organization settings → Connectors.

    Authorization

    After you click Add, a sign-in window for the service opens. Sign in with your own account and approve access. Claude never sees your password.

    How to connect ProfitCollector to ChatGPT

    The server address to paste into ChatGPT settings:

    https://mcp.bakhour.ca/mcp

    1. Open ChatGPT in a browser (chatgpt.com). A Plus, Pro, Business, Enterprise or Edu plan is required.
    2. Turn on developer mode once: Settings → Apps → Advanced settings → Developer mode.
    3. Open Settings → Connectors and click Create.
    4. Fill in the form: Name (anything), Description (one line about what the service does), MCP server URL (copy it below).
    5. Under Authentication choose OAuth if the service requires sign-in, otherwise None. Click Create.
    6. In a new chat open + → Apps/Connectors and enable the connector.

    OpenAI has renamed this section before (Connectors → Apps/Plugins). If the label differs, search settings for "developer mode". On Business/Enterprise workspaces an admin must allow custom connectors first.

    Authorization

    On first use ChatGPT opens the service's sign-in window. Sign in and approve access.

    How to connect ProfitCollector to Cursor

    The server address to paste into Cursor settings:

    https://mcp.bakhour.ca/mcp

    Fastest: click Open in Cursor below and confirm the prompt.

    Manually:

    1. In Cursor open Settings → Cursor Settings → MCP and click Add new global MCP server.
    2. Paste the JSON copied below into ~/.cursor/mcp.json (per project: .cursor/mcp.json in the repo root).
    3. Save the file. The server appears in the MCP list; authorize it there if asked.

    Authorization

    If the service needs sign-in, an authorize button appears next to the server in the MCP list.

    Server tool list (31)

    Raw names from tools/list. Only developers need these.

    get_dns_lookupResolve ONE DNS record type for a domain. For all record types at once use /domain/intelligence; for a bundled DNS+TLS+headers audit use /web/audit or /security/posture; for mail-security plus a scored verdict use /domain/due-diligence.
    get_jwt_decodeDecode a JWT payload without signature verification.
    get_subnet_calculateCalculate subnet information from CIDR notation.
    post_json_repairRepair common malformed JSON formatting issues.
    post_media_image_convertConvert an image between common formats (e.g. PNG/JPEG/WebP) from a URL or base64 payload.
    post_security_repo_risk_report_standardSBOM inventory plus real OSV.dev dependency-vulnerability matches and dependency-freshness signals for a public Git repository. One-shot alternative to a per-seat secret-scanning subscription.
    post_security_repo_risk_report_deepEverything in the standard report, plus a repo-wide secret/credential exposure scan (matched values are never returned).
    post_security_repo_risk_report_due_diligenceEverything in the deep report, plus real OpenSSF Scorecard maintainer/governance signals and a prioritized recommendation. An automated baseline positioned against $5,000-$95,000 human technical due diligence.
    post_x402_service_trust_reportLive, on-demand check of ONE x402-protected endpoint before you pay it: payment-requirements structure, TLS certificate, payTo on-chain balance, known-asset recognition, resource/host consistency, and discovery-manifest cross-check -- not a cached aggregate reputation score.
    post_freshdep_scanFlags pinned dependencies in a repository's requirements.txt, package-lock.json, or uv.lock published more recently than a freshness threshold -- a supply-chain-compromise tripwire. Free CLI (requirements.txt/package-lock.json only, uv.lock support pending there): github.com/sbakhour/freshdep.
    post_quebec_invoice_compliance_checkVerifies GST/QST were calculated correctly per Revenu Quebec's current (non-compounded) formula, and flags whether a French invoice version is present per Charter of the French Language s.57/89/91. Pure arithmetic + text check; not legal or tax advice.
    post_quebec_invoice_generateAssembles a bilingual (French/English) Quebec invoice document with GST/QST computed exactly per Revenu Quebec's current formula -- you supply both languages' line-item text, this does not translate. Not legal or tax advice.
    post_json_validateValidate JSON text and return parsing details.
    post_json_prettyPretty-print valid JSON text.
    post_json_minifyMinify valid JSON text.
    post_base64_encodeEncode UTF-8 text using Base64.
    post_base64_decodeDecode Base64 to UTF-8 text.
    post_hash_sha256Generate SHA-256 digest from text.
    post_hash_sha512Generate SHA-512 digest from text.
    get_uuid_generateGenerate a random UUID version 4.
    get_url_parseParse a URL into structured components.
    post_text_statsCalculate character, word, line and byte statistics.
    post_text_dedupe_linesRemove duplicate lines while preserving original order.
    get_timestamp_convertConvert a Unix timestamp to UTC ISO-8601.
    post_domain_due_diligenceThe most comprehensive domain assessment: DNS + mail security (SPF/DKIM/DMARC) + TLS + HTTP headers, scored. The only endpoint in this group that adds mail-security analysis. Use for a one-shot decision-grade verdict on an unfamiliar domain; use /dns/lookup, /ssl/check, /security/headers, /web/audit or /security/posture instead for a single fact or a cheaper signal.
    get_domain_intelligenceCollect ALL common DNS record types (A/AAAA/MX/NS/TXT/CAA) for a domain in one call -- the multi-record bundle version of /dns/lookup.
    get_web_auditConsolidated DNS, TLS and HTTP security audit for a public HTTPS website, returned as RAW findings (no score) -- the bundled version of /dns/lookup + /ssl/check + /security/headers. Use /security/posture instead for a 0-100 score/grade.
    get_security_postureAssess TLS and HTTP security posture for a public HTTPS website -- the SAME inspection as /web/audit, but returns a 0-100 score/grade and findings instead of raw fields.
    post_data_transformNormalize and transform common structured text automatically.
    get_security_headersInspect HTTP security headers for ONE URL only. For headers combined with TLS and DNS, use /web/audit (raw) or /security/posture (scored).
    get_ssl_checkInspect the TLS certificate for ONE hostname only. For TLS combined with HTTP headers and DNS, use /web/audit (raw) or /security/posture (scored).