Home / MCP registry index / io.github.johnpua1/universal-data-api
Universal Data API
io.github.johnpua1/universal-data-api in the official MCP registry.
Endpoint https://universal-data-api.jkpua1.workers.dev/mcp/general.
The registry describes it as: Remote MCP for research, commerce sourcing, and AI agent tools with x402 Base USDC payments.
We read its 131 tools on 2026-11-08. Nothing in them matched our tool-poisoning rules.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again about every two weeks.
Connect it
The endpoint answers MCP over HTTP; that is how we read it. Add it to your client:
claude mcp add --transport http universal-data-api https://universal-data-api.jkpua1.workers.dev/mcp/general{
"mcpServers": {
"universal-data-api": {
"url": "https://universal-data-api.jkpua1.workers.dev/mcp/general"
}
}
}code --add-mcp '{"name":"universal-data-api","type":"http","url":"https://universal-data-api.jkpua1.workers.dev/mcp/general"}'Some servers ask you to sign in the first time a client connects, or want a key from the people who run them; the server's own docs say which.
Let Claude Code check servers as it adds them
With the free lazaretto-guard plugin installed, when Claude Code adds a server for you or writes one into an MCP config, the plugin reads the server's tools first and asks you if one of our rules matches. Install it, restart Claude Code, then ask it to run the command above.
claude plugin marketplace add lazaretto-ai/lazaretto-plugins
claude plugin install lazaretto-guard@lazaretto-pluginsTools it advertises
api_agent_commerce_hunter api_agent_web_research api_agent_intelligence api_payment_setup api_extract api_product_check api_page_change api_policy_extract api_company_profile api_source_verify api_pdf_extract api_safe_url api_wallet_intelligence api_local_business api_b2b_leads api_video_timeline api_music_arrangement api_investment_return api_hr_payroll api_order_profit api_live_commerce api_video_metadata api_music_metadata api_investor_disclosures api_government_services api_bank_terms api_public_safety_contacts api_healthcare_directory api_herb_formula_scale api_herb_lot_fefo api_bazi_four_pillars api_bazi_lunar_calendar api_bazi_ten_gods api_bazi_five_elements api_bazi_solar_terms api_medical_egfr2021 api_medical_bsa api_medical_anion_gap api_medical_corrected_calcium api_medical_serum_osmolality api_therapy_rom_progress api_therapy_visit_scheduler api_ktv_round_robin api_series_watch_plan api_subtitle_srt_to_vtt api_video_storyboard_list api_music_midi_beat api_finance_position_risk api_finance_loan_amortization api_hr_shift_rest api_commerce_reorder_point api_live_run_of_show api_bank_fx_spread api_brain_text_chunker api_weather_heat_index api_herb_batch_cost api_herb_reorder api_herb_traceability api_bazi_nayin api_medical_ideal_body_weight and 71 more
Tool changes
We compare every full read of this server with the one before. No change in what its tools say has been seen since we started keeping this record on 2026-10-30.
Fingerprint of its tools at our last full read (2026-11-08):
59e9e4d7ddb2f2a6. A client can hash the tools it is served the same way and compare;
the full value and a hash per tool are in this page as JSON.
Rather than checking back: subscribe to this server's tool changes (a feed, no account and no address needed). Tool names and dates only, never what a tool says.
Run this server? Show the check in your README
The badge reflects the latest read:
[](https://lazaretto.dev/mcp-registry/io-github-johnpua1-universal-data-api)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. How tool poisoning works. What we found across the registry. Check another server.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.
Related
| Crank Protocol ing.crank/crank | 196 tools, nothing matched 2026-10-28 |
| Crypto, web, finance and app data tools com.onrender.bess-x402/data-tools | 185 tools, nothing matched 2026-11-07 |
| Wever Labs Agent Products io.github.CodeWever/wever-labs-products | 178 tools, nothing matched 2026-11-06 |
| AI 代理人任務中樞 dev.workers.panda198271.agent-hub-tw/agent-hub | 174 tools, nothing matched 2026-11-06 |
| AgentIndex x402 world.agentindex/x402 | 143 tools, nothing matched 2026-11-09 |
| Geode com.geodeapps.mcp/geode | 138 tools, nothing matched 2026-11-07 |