ScrubMyText + Agent Infrastructure is a remote MCP server that gives an AI agent 49 tools, among them anchor_context_trace, cancel_approval, check_action. It answers at https://api.scrubmytext.com/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 6 of 6 times since 10 September 2026; the last check, on 19 October 2026, succeeded.
49 deterministic tools for text integrity, agent control, and contextual quality evidence.
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
anchor_context_trace | Create or inspect an immutable provenance anchor from a context digest, parent digests, and processing stage. No context content is stored. Production; subscription API key required. Inputs: operation, control_id, context_digest, parent_digests, stage |
cancel_approval | Paid: cancel a pending human approval request so its link can no longer approve the action. Inputs: approval_id |
check_action | Use to inspect an idempotency key before or after an agent action. Subscription API key required. Inputs: key |
check_agent_readiness | Deterministically check a supplied MCP server card against a narrow, published integration contract. The service does not fetch arbitrary URLs and does not certify security or correctness. Free or paid. Inputs: server_card, expected_version, required_tools, require_streamable_http |
check_approval | Paid: check whether a human approval request is pending, approved, rejected, expired, or cancelled. Inputs: approval_id |
compare_quality_targets | Return contextual quality cards for two to ten exact targets in caller-provided order. It exposes evidence and uncertainty without producing a paid ranking or universal winner. Free. Inputs: targets, task_category, region, max_latency_ms, max_price_micros, minimum_evidence_class |
compare_text | Use to verify what changed between two text versions and whether differences are only scrub/format artifacts. Trial, subscription, or x402 pay-per-call. Inputs: original, modified |
complete_action | Paid: mark the current lock completed and preserve the idempotency record for its configured retention period. Inputs: key, lock_id |
create_signal | Use when an agent must wait for an external callback, webhook, job completion, or asynchronous event. Subscription API key required. Inputs: label, expires_in_seconds, max_events |
delete_signal | Paid: immediately delete a signal inbox and all stored event bodies. Inputs: inbox_id |
detect_secrets | Use before an agent logs, stores, or forwards text that may contain credentials. Finds likely API keys, private keys, JWTs, cloud credentials, and secret patterns without echoing values. Trial, subscription, or x402 pay-per-call. Inputs: text |
fingerprint_action | Use before retryable work to derive a stable SHA-256 action fingerprint and idempotency key from an action name, optional scope, and JSON arguments. Object key order does not affect the result. Returns no input values and stores nothing. Fr Inputs: action, arguments, scope |
get_quality_card | Retrieve a public, contextual quality card for an exact MCP server or REST API version. Scores remain unavailable until at least three independent verified contributors submit structured observations. Free. Inputs: target_type, provider_domain, canonical_endpoint, version, interface_digest, task_category |
get_signal_events | Paid: retrieve events received by a temporary signal inbox in arrival order. Inputs: inbox_id, limit, after_ms |
inspect_text | Inspect exact Unicode, invisible characters, normalization, and mixed-script anomalies. Free or paid. Inputs: text |
list_quality_cards | List exact service-version/task quality cards that have reached the public three-verified-contributor evidence threshold. Results are ordered by recent evidence, not quality, payment, or sponsorship. Free. Inputs: target_type, task_category, limit |
lock_action | Use immediately before a consequential agent action to atomically claim an idempotency key so retries cannot execute it twice. Subscription API key required. Inputs: key, lock_ttl_seconds, completion_ttl_seconds |
lock_action_intent | Use immediately before a consequential retryable action when no stable idempotency key exists. Deterministically fingerprints the action and arguments, atomically claims that key, and returns safe_to_execute. Repeat calls with equivalent ob Inputs: action, arguments, scope, lock_ttl_seconds, completion_ttl_seconds |
manage_action_challenge | Create, inspect, consume, or cancel a digest-bound cooling-off window. A bearer challenger can veto before the deadline; afterward the owner can atomically consume one execution right during a bounded window. This is exception handling, not Inputs: operation, control_id, action_fingerprint, veto_window_seconds, execution_window_seconds |
manage_action_compensation | Bind a compensating-action digest before execution, record that the primary action executed, and atomically mark compensation once. Stores digests only and does not perform either action. Subscription API key required. Inputs: operation, control_id, action_fingerprint, compensation_fingerprint, expires_in_seconds |
manage_action_quorum | Create, inspect, consume, or cancel an N-of-M bearer authorization quorum. Each unique bearer can decide once; only a successful one-time consume grants an execution right. Subscription API key required. Inputs: operation, control_id, action_fingerprint, required_votes, member_count, expires_in_seconds |
manage_action_reconciliation | Open, inspect, append digest-only evidence to, or resolve a discrepancy between expected and observed action outcomes. Production; subscription API key required. Inputs: operation, control_id, action_fingerprint, expected_digest, observed_digest, evidence_digest |
manage_agent_escalation | Create, inspect, or cancel a digest-only incident with a private bearer operator link and deterministic response and resolution SLA state. Link delivery remains the caller’s responsibility. Subscription API key required. Inputs: operation, control_id, incident_fingerprint, severity, response_sla_seconds, resolution_sla_seconds |
manage_agent_stop | Set, inspect, or clear a durable stop signal for a hashed agent or workflow key. Callers should fail closed whenever stopped is true. Production; subscription API key required. Inputs: operation, subject_key, reason_code |
manage_attention_budget | Create, inspect, reserve, release, or close a finite review-capacity pool with per-subject caps, retry-safe reservations, and protected priority capacity. Subscription API key required. Inputs: operation, control_id, total_units, max_units_per_subject, protected_priority_units, period_seconds |
manage_authority_delegation | Issue, consume, inspect, or revoke a narrow bearer capability bound to one action fingerprint and a maximum use count. This is a technical capability, not identity proof or a legal delegation. Production; subscription API key required. Inputs: operation, control_id, token, action_fingerprint, max_uses, expires_in_seconds |
manage_context_rights | Issue, inspect, evaluate, or revoke a digest-bound machine-readable context-rights envelope. It is a technical policy signal, not legal advice or proof of ownership. Subscription API key required. Inputs: operation, control_id, context_digest, policy_digest, rights, requested_right |
manage_context_status | Publish, inspect, supersede, dispute, or revoke digest-only context status so downstream agents can stop using stale inputs. Stores no context body and does not invalidate copies outside this service. Subscription API key required. Inputs: operation, control_id, context_digest, successor_digest, reason_code, expires_in_seconds |
manage_disclosure_budget | Create, inspect, record against, or close a cumulative disclosure budget with total, per-recipient, and per-category limits. Stores hashes and counters, not disclosed content or recipient identities. Subscription API key required. Inputs: operation, control_id, total_units, per_recipient_limit, per_category_limit, period_seconds |
manage_resource_lease | Atomically acquire, inspect, or release a short-lived exclusive lease on a hashed resource key. Production; subscription API key required. Inputs: operation, resource_key, lease_token, ttl_seconds |
manage_task_contract | Offer, accept, inspect, complete, or cancel a digest-bound technical task commitment. This records service state; it is not a legal contract, escrow, payment, or identity verification. Production. Inputs: operation, control_id, token, task_fingerprint, terms_digest, expires_in_seconds |
manage_task_deadline | Create, inspect, complete, or cancel a task deadline whose due and escalation state is derived from an independent server clock even when the agent is offline. Subscription API key required. Inputs: operation, control_id, task_fingerprint, due_in_seconds, escalation_grace_seconds |
manage_task_handoff | Create a bearer-token task handoff, let another paid API identity claim it exactly once, and inspect, complete, or cancel the transfer. Only task fingerprints are stored. Production. Inputs: operation, control_id, token, task_fingerprint, expires_in_seconds |
manage_terms_pin | Pin, inspect, or revoke an immutable digest-bound record of observed terms, interface, version, and price. Stores bounded metadata and digests, not the terms body. This is technical evidence, not a legal agreement. Subscription API key requ Inputs: operation, control_id, terms_digest, interface_digest, counterparty_fingerprint, version_label |
match_policy_requirements | Deterministically compare bounded provider capabilities with consumer-required and forbidden policy tokens. Processes supplied tokens without storing policy content and does not make legal or compliance conclusions. Subscription API key req Inputs: provider_capabilities, consumer_required, consumer_forbidden |
prepare_for_agent | Use as the default preprocessing step before an AI agent consumes untrusted external text. Returns agent-ready text plus inspection, risk-scan, and secret-detection reports. Trial, subscription, or x402 pay-per-call. Inputs: text, mode, redact_sensitive |
record_action_receipt | Create or retrieve an immutable receipt digest for an action outcome without storing the action or outcome payload. Production; subscription API key required. Inputs: operation, receipt_id, action_fingerprint, outcome_digest, outcome_status |
record_quality_observation | Submit an opt-in structured observation for an exact target and task. Receipt-linked observations are labeled E1; other observations are E0. Stores no prompt, response, credential, email, or free-form review. Free verified contributor or su Inputs: target_type, provider_domain, canonical_endpoint, version, interface_digest, task_category |
redact_sensitive_text | Use before storing, sharing, logging, or sending text downstream when it may contain credentials or identifiers. Pattern-based redaction; trial, subscription, or x402 pay-per-call. Inputs: text |
release_action | Paid: release an uncompleted action lock using its lock_id so another attempt can safely acquire it. Inputs: key, lock_id |
request_approval, request_quality_correction, reserve_action_budget, rework_text, sanitize_agent_context, scan_untrusted_text, scrub_text, validate_output, verify_signed_signal
Every block below points at https://api.scrubmytext.com/mcp. Pick your client and copy.
claude mcp add --transport http scrubmytext-agent-infrastructure https://api.scrubmytext.com/mcp
{
"mcpServers": {
"scrubmytext-agent-infrastructure": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://api.scrubmytext.com/mcp"]
}
}
}{
"mcpServers": {
"scrubmytext-agent-infrastructure": {
"url": "https://api.scrubmytext.com/mcp"
}
}
}{
"servers": {
"scrubmytext-agent-infrastructure": {
"type": "http",
"url": "https://api.scrubmytext.com/mcp"
}
}
}{
"context_servers": {
"scrubmytext-agent-infrastructure": {
"url": "https://api.scrubmytext.com/mcp"
}
}
}{
"mcpServers": {
"scrubmytext-agent-infrastructure": {
"serverUrl": "https://api.scrubmytext.com/mcp"
}
}
}{
"mcpServers": {
"scrubmytext-agent-infrastructure": {
"url": "https://api.scrubmytext.com/mcp"
}
}
}name: ScrubMyText + Agent Infrastructure
version: 0.0.1
schema: v1
mcpServers:
- name: ScrubMyText + Agent Infrastructure
type: streamable-http
url: https://api.scrubmytext.com/mcp{
"mcpServers": {
"scrubmytext-agent-infrastructure": {
"httpUrl": "https://api.scrubmytext.com/mcp"
}
}
}{
"mcpServers": {
"scrubmytext-agent-infrastructure": {
"type": "http",
"url": "https://api.scrubmytext.com/mcp"
}
}
}{
"mcpServers": {
"scrubmytext-agent-infrastructure": {
"url": "https://api.scrubmytext.com/mcp"
}
}
}goose://extension?url=https%3A%2F%2Fapi.scrubmytext.com%2Fmcp&type=streamable_http&id=scrubmytext-agent-infrastructure&name=ScrubMyText%20%2B%20Agent%20Infrastructure
It answered our last check on 19 October 2026 in 144 ms. Over 6 checks since 10 September 2026 it answered 6. Status here comes from Neuronto's own probes, not from the publisher.
Yes. It is published by scrubmytext.com and served from api.scrubmytext.com, the vendor's own domain: https://api.scrubmytext.com/mcp.
49, as returned by the server's own tools/list on 11 September 2026: anchor_context_trace, cancel_approval, check_action, check_agent_readiness, check_approval, compare_quality_targets, compare_text, complete_action, and 41 more.
It answered our last check on 19 October 2026 in 144 ms. Over 6 checks since 10 September 2026 it answered 6.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://api.scrubmytext.com/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: com.scrubmytext. Endpoint host: api.scrubmytext.com. ARD identifier: urn:air:com.scrubmytext:mcp:tools.
First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.