Home / MCP registry index / io.github.XogZ3/botoi-mcp

io.github.XogZ3/botoi-mcp

io.github.XogZ3/botoi-mcp in the official MCP registry. Endpoint https://api.botoi.com/mcp. Source: github.com/XogZ3/botoi.

The registry describes it as: 49 developer tools via MCP: DNS, WHOIS, IP lookup, JWT, hashing, QR, and more.

We read its 49 tools on 2026-10-21. Nothing in them matched our tool-poisoning rules.

A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.

Tools it advertises

lookup_ip lookup_dns lookup_whois lookup_ssl lookup_email lookup_headers lookup_url_metadata lookup_domain_availability lookup_tech_detect lookup_vpn_detect lookup_phone lookup_company text_base64_encode text_base64_decode text_json_format text_json_validate text_markdown_to_html text_html_to_markdown text_csv_to_json text_yaml_to_json text_json_to_yaml text_xml_to_json dev_hash dev_uuid dev_jwt_sign dev_jwt_verify dev_cron_describe dev_password_generate dev_url_encode dev_url_decode dev_regex_test dev_diff dev_semver_parse dev_timestamp_convert security_encrypt security_decrypt security_totp_generate security_validate_credit_card security_pii_detect transform_minify_js transform_minify_css transform_sql_format transform_code_format transform_json_to_typescript lookup_address_validate lookup_breach_check lookup_ssl_cert_expiry lookup_dns_monitor lookup_accessibility

Run this server? Show the check in your README

The badge reflects the latest weekly read: MCP tool check badge

Markdown
[![MCP tool check](https://lazaretto.dev/mcp-registry/io-github-xogz3-botoi-mcp/badge.svg)](https://lazaretto.dev/mcp-registry/io-github-xogz3-botoi-mcp)

How this was checked

Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.

To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.