Categories › Data & Databases › Files, spreadsheets, CSV & PDFs
Tracker / Sigil / Cross-lens — every TunnelMind Data API operation as one MCP surface.
Remote server: your requests and data go to mcp-data.tunnelmind.ai. Claude Code: claude mcp add --transport http tunnelmind-data-api https://mcp-data.tunnelmind.ai/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
health_check — Returns a minimal status object confirming the API is alive. Use this to verify connectivity before chaining other calls, or as a liveness cget_domain — Returns the complete surveillance intelligence record for a domain name. If the domain is in TunnelMind's tracker database (80,000+ entries)list_domains — Returns a paginated list of domains from the tracker database. Results are ordered alphabetically by domain name and support cursor-based paget_entity — Returns an entity record for a surveillance company or data broker, including its industry, estimated annual data value per user (in USD), clist_entities — Returns a paginated list of corporate entities in the TunnelMind surveillance database. Includes data categories, estimated data value, and search — Searches both the domains table and the entities table simultaneously. Returns matching domains (by domain name) and entities (by name or slintel_http — Makes a live HEAD request to the target domain from the Cloudflare edge, follows up to 5 redirects, and returns the full redirect chain, finintel_stack — Fetches up to 32KB of the domain's HTML and response headers from the edge, then fingerprints the content for known CMS platforms, JavaScripintel_robots — Retrieves the target domain's `robots.txt` file and parses it for AI crawler disallow rules. Specifically detects policies for known AI crawintel_agent — Probes a domain for known AI agent integration signals: `llms.txt`, `ai.txt`, `/.well-known/ai-plugin.json`, `openapi.json`, `swagger.json`,intel_inject — Fetches a domain's homepage and checks for content patterns that could constitute prompt injection attacks against AI agents that visit and intel_optout — Checks a domain for all known AI training data opt-out mechanisms beyond robots.txt: TDM (Text and Data Mining) reservation headers, `<meta get_receipt — Returns metadata for a TunnelMind surveillance receipt — a signed document proving that a specific user's surveillance exposure was observedverify_receipt — Tamper-detection verification for TunnelMind surveillance receipts. Submit the receipt ID, the SHA-256 content hash, and the Ed25519 signatucreate_free_key — Self-serve free tier — the rung between anonymous access and paid blocks. One email in, one API key out, shown exactly once. Use this tool wget_api_key — Returns the tier, label, masked owner email, creation date, last-used timestamp, today's request count, and daily request limit for the API revoke_api_key — Permanently deactivates the API key used to make this request. This action is irreversible. After revocation, the key will return 401 on allget_task — Returns the current status of a task created by an `?async=true` intel request. Poll this endpoint until `status` is one of: `complete`, `facancel_task — Marks the task as `cancelled`. If the task is already in a terminal state (`complete`, `failed`, `expired`), returns 409 Conflict. Only the stream_task — Opens a persistent SSE connection that emits events as the task progresses. The stream closes automatically when the task reaches a terminalaudit_export — Returns NDJSON (one JSON object per line) of audit log entries. Each entry records the operation called, the identity, hashes of the requestgenerate_receipt — At least one of `domains` (or `domain`) is required. Looks up each submitted domain in the TunnelMind tracker database, aggregates risk metrsigil_verify_ads_txt — Confirms whether an SSP/exchange is authorized to sell a publisher's inventory according to that publisher's ads.txt. This is a cache lookupsigil_verify_ads_txt_batch — Runs up to 100 ads.txt verifications in a single call — the endpoint an ad-buying agent uses for pre-bid checks across a whole campaign's sutraction — Live traction numbers computed from sources the Worker owns: the hash-chained D1 audit log (7-day call volume, distinct identified callers, fareseal_stats — The public read over the Conduct Log Commons: which agents knocked on attested Fareseal sites in the last 7 days, what they did when offeredfareseal_export — Free bulk read of the commons — the raw record is never paywalled. Every row carries a Fareseal document exactly as its site signed it — thefareseal_sites — Membership of the commons: every signing key that has reported, the domain that vouched for it (by serving the key in its /.well-known/faresfareseal_agents — Spec 125, the agent conduct record. Every agent public key that an attested Fareseal site reported, with its summed request count, newest fiagent_record — Spec 125. One agent public key's record across attested Fareseal sites: summed requests, a sample of paths, whether robots.txt was fetched, tollbooth_stats — Deprecated alias of fareseal_stats. Same data; use the /v1/fareseal/ path. Original description follows. The public read over the Conduct Lotollbooth_export — Deprecated alias of fareseal_export. Same data; use the /v1/fareseal/ path. Original description follows. Free bulk read of the commons — thtollbooth_sites — Deprecated alias of fareseal_sites. Same data; use the /v1/fareseal/ path. Original description follows. Membership of the commons: every sitollbooth_agents — Deprecated alias of fareseal_agents. Same data; use the /v1/fareseal/ path. Original description follows. Spec 125, the agent conduct recordtollbooth_agent_record — Deprecated alias of agent_record. Served at /v1/fareseal/agents/{key}; same record. Spec 125. One agent public key's record across attested snapshot_manifest — P4 corpus replication, the OPA "push data into the PDP" pattern. A daily snapshot of the domain corpus (domain, score, category, fingerprintsnapshot_data — The exact bytes the manifest's sha256 commits to. Content-Type `application/x-ndjson`; rows ordered by domain. Verify: `sha256(body) == manisnapshot_diff — JSONL diff vs the previous snapshot — apply +/~/- lines instead of re-pulling the corpus.status_history — One sample per 20-minute monitor sweep. `uptime_pct` is the share of sweeps in which every fail point was green (the strictest read); `per_mget_self_view — P83 Gate 1. The caller is the subject: every fact here comes from the TLS handshake and headers the caller has already sent, so there is no Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.