New Your team’s decisions, in one playbook every coding agent works from. Never answer your agent twice

Hyperion

355 tools. 10 can modify or destroy data without limits.

10 write tools that can modify data. Rate limits recommended.

Last updated:

10 can modify or destroy data
345 read-only
355 tools total

Community server · catalogue entry checked 10/10/2026 · full schemas captured for 18 of 355 tools

How to control Hyperion ↓

What Hyperion exposes to your agents

Read (345) Write / Execute (10) Destructive / Financial (0)

What Hyperion costs in tokens

15,496 tokens of tool definitions, loaded on every request
7.7% of a 200k context window
167 heaviest tool: math
High Risk

The most dangerous Hyperion tools

10 of Hyperion's 355 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control Hyperion

PolicyLayer is an MCP gateway — it sits between your AI agents and Hyperion, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations
{
  "o_base_convert": {
    "limits": [
      {
        "counter": "o_base_convert_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "ascii": {
    "limits": [
      {
        "counter": "ascii_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Hyperion — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON HYPERION →

Instant setup, no code required.

All 355 Hyperion tools

READ 345 tools
Read ascii Text → ASCII art (150 sats/call; free tier 100 calls/mo) Read chart SVG bar/line/pie/donut charts (350 sats/call; free tier 100 calls/mo) Read data_convert JSON/CSV/YAML/XML/query-string transforms (200 sats/call; free tier 100 calls/mo) Read diff Line-by-line diff of two texts (250 sats/call; free tier 100 calls/mo) Read echo_beacon Check voice/TTS API status (0 sats/call; free tier 100 calls/mo) Read echo_order Buy voice credits (BTCPay invoice) (0 sats/call; free tier 100 calls/mo) Read echo_tts Synthesize speech from text (needs echo key) (0 sats/call; free tier 100 calls/mo) Read encode Base64/URL/Hex/HTML/JWT encode+decode (200 sats/call; free tier 100 calls/mo) Read fc_map Map all links/routes of a website (350 sats/call; free tier 100 calls/mo) Read fc_scrape Scrape any URL to clean markdown (JS rendering) (300 sats/call; free tier 100 calls/mo) Read fc_search Web search returning clean page content (300 sats/call; free tier 100 calls/mo) Read hash MD5/SHA/HMAC/UUID/random tokens (250 sats/call; free tier 100 calls/mo) Read http_client Universal HTTP request to any API/webhook (300 sats/call; free tier 100 calls/mo) Read lynx_inspect Inspect a file: hashes/entropy/strings/PE/PDF/Office (base64) (200 sats/call; free tier 100 calls/mo) Read lynx_recon Recon external target (nmap/subfinder/nuclei/theHarvester/dnsrecon) (400 sats/call; free tier 100 calls/mo) Read lynx_steg Decode hidden data (steghide + zsteg LSB) (300 sats/call; free tier 100 calls/mo) Read math Eval formulas, stats, finance (200 sats/call; free tier 100 calls/mo) Read mcp_discover Search 1000+ MCP servers by capability (300 sats/call; free tier 100 calls/mo) Read mcp_readme Fetch setup/config for any MCP server (200 sats/call; free tier 100 calls/mo) Read mcp_stats MCP catalog counts + API-key flags (100 sats/call; free tier 100 calls/mo) Read mobsf_report Fetch a mobile app security report by hash (400 sats/call; free tier 100 calls/mo) Read mobsf_scans List recent mobile app security scans (200 sats/call; free tier 100 calls/mo) Read netutils URL/subnet/user-agent analysis (300 sats/call; free tier 100 calls/mo) Read o_abusecontact Authoritative abuse email (RIPEstat finder) (200 sats/call; free tier 100 calls/mo) Read o_agify Predict age from a first name (agify.io) (200 sats/call; free tier 100 calls/mo) Read o_airquality PM2.5/PM10/European AQI at coords (Open-Meteo, no key) (200 sats/call; free tier 100 calls/mo) Read o_antipode Opposite point on Earth for coords (offline) (200 sats/call; free tier 100 calls/mo) Read o_api_key_scan Scan GitHub/Pastebin/Google for exposed API keys/secrets (200 sats/call; free tier 100 calls/mo) Read o_archiveorg Internet Archive item metadata (200 sats/call; free tier 100 calls/mo) Read o_arxiv arXiv paper search by title/author/keyword (200 sats/call; free tier 100 calls/mo) Read o_ascii85 Ascii85 encode/decode (offline) (200 sats/call; free tier 100 calls/mo) Read o_asn ASN details or prefixes for an IP (200 sats/call; free tier 100 calls/mo) Read o_asnlookup ASN org/country/prefixes via RIPEstat (200 sats/call; free tier 100 calls/mo) Read o_asrank Global ASN ranking + customer cone size (200 sats/call; free tier 100 calls/mo) Read o_atbash Atbash A↔Z mirror cipher (offline, self-inverse) (200 sats/call; free tier 100 calls/mo) Read o_attack_surface Map attack surface: services + endpoints + API (200 sats/call; free tier 100 calls/mo) Read o_barcode EAN-13 / UPC-A check digit validation (offline) (200 sats/call; free tier 100 calls/mo) Read o_base32 RFC 4648 Base32 encode or decode (200 sats/call; free tier 100 calls/mo) Read o_base36 Encode int <-> base36, autodetecting direction (offline) (200 sats/call; free tier 100 calls/mo) Read o_base64 Auto decode/encode base64 (offline) (200 sats/call; free tier 100 calls/mo) Read o_bgphistory Routing origin history (RIPE Stat) (200 sats/call; free tier 100 calls/mo) Read o_bimi Brand-indicator (logo) DNS record (200 sats/call; free tier 100 calls/mo) Read o_binarytext Text ↔ 8-bit binary (offline) (200 sats/call; free tier 100 calls/mo) Read o_blockheight Current Bitcoin + Ethereum block height (200 sats/call; free tier 100 calls/mo) Read o_bluesky AT Protocol public profile (200 sats/call; free tier 100 calls/mo) Read o_breach_aggregator Aggregate breach databases (XposedOrNot, LeakCheck, etc) (200 sats/call; free tier 100 calls/mo) Read o_breachdb Aggregated breach collection search (200 sats/call; free tier 100 calls/mo) Read o_breachdirectory ProxyNova COMB dataset search for credential exposure (200 sats/call; free tier 100 calls/mo) Read o_breachsearch Public HIBP breach metadata search (200 sats/call; free tier 100 calls/mo) Read o_btcaddr Bitcoin balance/tx via mempool.space (200 sats/call; free tier 100 calls/mo) Read o_btcfees Recommended Bitcoin fees sat/vB (mempool.space) (200 sats/call; free tier 100 calls/mo) Read o_c2_infrastructure Detect C2 infrastructure + hosting (200 sats/call; free tier 100 calls/mo) Read o_caesar ROT-N / Caesar brute force, all 25 shifts (offline) (200 sats/call; free tier 100 calls/mo) Read o_casify snake/camel/Pascal/kebab/CONSTANT case (offline) (200 sats/call; free tier 100 calls/mo) Read o_cdnjs Hosted JS library version + assets (200 sats/call; free tier 100 calls/mo) Read o_cfradar Domain rank + categories from Cloudflare Radar (200 sats/call; free tier 100 calls/mo) Read o_checksum CRC32 + Adler32 checksum of input text (offline) (200 sats/call; free tier 100 calls/mo) Read o_chesscom Public player profile + ratings (200 sats/call; free tier 100 calls/mo) Read o_cidr Subnet calc: network, mask, host range, count (offline) (200 sats/call; free tier 100 calls/mo) Read o_circlhash Known-file lookup (CIRCL hashlookup) (200 sats/call; free tier 100 calls/mo) Read o_clickjacking X-Frame-Options + CSP frame-ancestors check (200 sats/call; free tier 100 calls/mo) Read o_cloud AWS/GCP/Azure/etc. detection + hosting flag (200 sats/call; free tier 100 calls/mo) Read o_codeberg Codeberg/Gitea public user (200 sats/call; free tier 100 calls/mo) Read o_codeforces Codeforces competitive programmer rating & rank (200 sats/call; free tier 100 calls/mo) Read o_color hex/rgb -> rgb/hsl + nearest name (offline) (200 sats/call; free tier 100 calls/mo) Read o_cookies Secure/HttpOnly/SameSite flag review (200 sats/call; free tier 100 calls/mo) Read o_cors Origin-reflection / wildcard misconfig (200 sats/call; free tier 100 calls/mo) Read o_cratedownloads Download totals for a Rust crate (200 sats/call; free tier 100 calls/mo) Read o_crates Rust crate stats + downloads (200 sats/call; free tier 100 calls/mo) Read o_cratestats Rust crate downloads, version, repo (no key) (200 sats/call; free tier 100 calls/mo) Read o_crc32 Compute CRC-32 of input (200 sats/call; free tier 100 calls/mo) Read o_credential_stuffing Check breach + stuffing risk (200 sats/call; free tier 100 calls/mo) Read o_crossrefauthor Works by author/keyword (Crossref) (200 sats/call; free tier 100 calls/mo) Read o_crypto BTC/ETH balance & tx history (200 sats/call; free tier 100 calls/mo) Read o_cryptomarket Global market cap, BTC dominance, 24h volume (CoinGecko) (200 sats/call; free tier 100 calls/mo) Read o_cve CVE detail + CVSS (CIRCL, no key) (200 sats/call; free tier 100 calls/mo) Read o_cve_poc_checker Check if a CVE has public POC/exploit code (200 sats/call; free tier 100 calls/mo) Read o_cve_severity CVSS + EPSS + KEV for a CVE (200 sats/call; free tier 100 calls/mo) Read o_cve_timeline When a CVE was discussed (Twitter/Reddit/News) (200 sats/call; free tier 100 calls/mo) Read o_cvedetail Full CVE record (CVSS, refs) via CIRCL (200 sats/call; free tier 100 calls/mo) Read o_datacite Research datasets/DOIs by keyword (200 sats/call; free tier 100 calls/mo) Read o_decode Auto base64/hex/URL-decode + refang (200 sats/call; free tier 100 calls/mo) Read o_dehashed_domain DeHashed public page scrape for domain breach exposure (200 sats/call; free tier 100 calls/mo) Read o_depsdev Open-source insights: versions, default (200 sats/call; free tier 100 calls/mo) Read o_devto Forem/dev.to public profile (200 sats/call; free tier 100 calls/mo) Read o_dirlisting Open directory-index exposure (per-target) (200 sats/call; free tier 100 calls/mo) Read o_disasters Active worldwide disasters: quakes/cyclones/floods (feeds globe) (200 sats/call; free tier 100 calls/mo) Read o_dns A/AAAA/MX/NS/TXT/CNAME/SOA/CAA records (200 sats/call; free tier 100 calls/mo) Read o_dnsbl Spamhaus/Barracuda/SORBS/SpamCop check (200 sats/call; free tier 100 calls/mo) Read o_dnsgraph Hurricane Electric DNS delegation info (200 sats/call; free tier 100 calls/mo) Read o_dnsmx MX records via Google DNS-over-HTTPS (200 sats/call; free tier 100 calls/mo) Read o_dnsprop Compare A records across Google/Cloudflare/Quad9 (200 sats/call; free tier 100 calls/mo) Read o_dnsquery DNS A record lookup via Google DoH (200 sats/call; free tier 100 calls/mo) Read o_dnsrecon Query ALL DNS record types at once (200 sats/call; free tier 100 calls/mo) Read o_dnsverify Which SaaS a domain is enrolled in (TXT tokens) (200 sats/call; free tier 100 calls/mo) Read o_doh Uncommon DNS records (HTTPS/SVCB/TLSA/SRV/NAPTR…) (200 sats/call; free tier 100 calls/mo) Read o_doi Crossref publication metadata for a DOI (200 sats/call; free tier 100 calls/mo) Read o_ean EAN/UPC check digit + GS1 country prefix (offline) (200 sats/call; free tier 100 calls/mo) Read o_elevation Ground elevation in metres (Open-Meteo) (200 sats/call; free tier 100 calls/mo) Read o_email Gravatar, MX, disposable detection (200 sats/call; free tier 100 calls/mo) Read o_emailrep emailrep.io: malicious/spam/breach flags for email (no key, limited) (200 sats/call; free tier 100 calls/mo) Read o_emailsec SPF / DMARC / DKIM posture (200 sats/call; free tier 100 calls/mo) Read o_ens ENS name <-> ETH address + avatar (200 sats/call; free tier 100 calls/mo) Read o_epoch Unix timestamp <-> UTC datetime (200 sats/call; free tier 100 calls/mo) Read o_epss Exploitation probability (FIRST EPSS) (200 sats/call; free tier 100 calls/mo) Read o_exploit_cve Exploit-DB + GitHub POCs for a CVE (200 sats/call; free tier 100 calls/mo) Read o_favicon favicon md5/sha256 for pivoting (200 sats/call; free tier 100 calls/mo) Read o_feeds Discover syndication feeds on a site (200 sats/call; free tier 100 calls/mo) Read o_feodoips Is IP on abuse.ch Feodo botnet C2 list (200 sats/call; free tier 100 calls/mo) Read o_flightsnear Live aircraft within ~1° of coords (OpenSky) (200 sats/call; free tier 100 calls/mo) Read o_genderize Predict gender from a first name (genderize.io) (200 sats/call; free tier 100 calls/mo) Read o_geocode Place name → coordinates (OSM Nominatim) (200 sats/call; free tier 100 calls/mo) Read o_gh_dorking GitHub code search for target string exposure in public repos (200 sats/call; free tier 100 calls/mo) Read o_gh_secret_scan Scan GitHub user's public repos for leaked secrets/passwords (200 sats/call; free tier 100 calls/mo) Read o_ghkeysgpg Whether a user publishes a GPG key (200 sats/call; free tier 100 calls/mo) Read o_github_code GitHub unauthenticated code search (10 results) (200 sats/call; free tier 100 calls/mo) Read o_githubsearch Search GitHub repos by keyword (200 sats/call; free tier 100 calls/mo) Read o_gitlab Public user profile (200 sats/call; free tier 100 calls/mo) Read o_gleif_name GLEIF fuzzy legal-entity name → LEI codes (200 sats/call; free tier 100 calls/mo) Read o_golangpkg Latest version of a Go module (200 sats/call; free tier 100 calls/mo) Read o_goproxy Latest version of a Go module via module proxy (no key) (200 sats/call; free tier 100 calls/mo) Read o_gravatarfull Full public Gravatar profile + linked accounts (200 sats/call; free tier 100 calls/mo) Read o_greynoise Is the IP a known internet scanner — benign/malicious (200 sats/call; free tier 100 calls/mo) Read o_hackernews Profile: karma, age, activity (200 sats/call; free tier 100 calls/mo) Read o_hashid Guess hash algorithm from length/charset (200 sats/call; free tier 100 calls/mo) Read o_hashtext md5/sha1/sha256/sha512 of text (offline) (200 sats/call; free tier 100 calls/mo) Read o_headers Headers + security-header scorecard (200 sats/call; free tier 100 calls/mo) Read o_hexdump Offset/hex/ASCII hexdump of input (offline) (200 sats/call; free tier 100 calls/mo) Read o_hibp Check if a password appeared in breaches via HIBP k-anonymity (no key) (200 sats/call; free tier 100 calls/mo) Read o_hibp_email Email breach exposure via XposedOrNot (HIBP-compatible, no key) (200 sats/call; free tier 100 calls/mo) Read o_hnsearch Search Hacker News stories/comments (200 sats/call; free tier 100 calls/mo) Read o_hnuser HN profile: karma, created, submission count (200 sats/call; free tier 100 calls/mo) Read o_holidays Country public holidays this year (nager.at) (200 sats/call; free tier 100 calls/mo) Read o_homoglyph Detect confusable/mixed-script spoofing chars (offline) (200 sats/call; free tier 100 calls/mo) Read o_hostname IP → hostname via reverse DNS (200 sats/call; free tier 100 calls/mo) Read o_hstspreload Is the domain on the browser HSTS preload list (200 sats/call; free tier 100 calls/mo) Read o_htmlcomments Extract HTML comments — leaked TODOs/paths/software (200 sats/call; free tier 100 calls/mo) Read o_htmlencode HTML entity encode/decode (200 sats/call; free tier 100 calls/mo) Read o_httpcode HTTP status code meaning & family (offline) (200 sats/call; free tier 100 calls/mo) Read o_httping Reachability + response timing (200 sats/call; free tier 100 calls/mo) Read o_httpmethods Allowed methods + TRACE/risky-verb check (200 sats/call; free tier 100 calls/mo) Read o_hudsonrock Stealer-log exposure check via HudsonRock Cavalier free API (200 sats/call; free tier 100 calls/mo) Read o_huggingface HuggingFace user profile or model card (200 sats/call; free tier 100 calls/mo) Read o_imagerev Google Lens / Yandex / Bing / TinEye search links (200 sats/call; free tier 100 calls/mo) Read o_infra_fingerprint Infrastructure fingerprinting + hosting (200 sats/call; free tier 100 calls/mo) Read o_intelx_email Email breach exposure — breach names, data types, paste hits (XposedOrNot, no key) (200 sats/call; free tier 1 Read o_internetdb Open ports, CPEs, tags, known CVEs for a host (200 sats/call; free tier 100 calls/mo) Read o_ioc_reputation Cross-check IP/domain/hash across feeds (200 sats/call; free tier 100 calls/mo) Read o_ip_math CIDR: network/broadcast/range/host count (offline) (200 sats/call; free tier 100 calls/mo) Read o_ipfull Rich geo+ASN+proxy/mobile/hosting flags (200 sats/call; free tier 100 calls/mo) Read o_ipgeo Geo, ISP, ASN, proxy/hosting flags (200 sats/call; free tier 100 calls/mo) Read o_ipint IPv4 ↔ integer ↔ hex (offline) (200 sats/call; free tier 100 calls/mo) Read o_ipv4classify Classify IP: private/loopback/multicast/global (offline) (200 sats/call; free tier 100 calls/mo) Read o_ipwhois Network owner, range, abuse contact (200 sats/call; free tier 100 calls/mo) Read o_isbn Book metadata (OpenLibrary) + checksum (200 sats/call; free tier 100 calls/mo) Read o_isexitnode Is this a Tor exit node? (200 sats/call; free tier 100 calls/mo) Read o_isin Validate ISIN security identifier check digit (offline) (200 sats/call; free tier 100 calls/mo) Read o_isotime Parse/convert a timestamp (offline) (200 sats/call; free tier 100 calls/mo) Read o_jarm Shodan InternetDB: ports, CPEs, vulns, tags (no key) (200 sats/call; free tier 100 calls/mo) Read o_jslibs Enumerate <script> sources + detect JS libs/versions (200 sats/call; free tier 100 calls/mo) Read o_kev Is the CVE actively exploited (KEV catalog) (200 sats/call; free tier 100 calls/mo) Read o_keybase Crypto identity + linked social proofs (200 sats/call; free tier 100 calls/mo) Read o_latlonformat DD ↔ DMS ↔ DM coordinate format conversion (offline) (200 sats/call; free tier 100 calls/mo) Read o_leakcheck Breach exposure via leakcheck.io public endpoint (no key) (200 sats/call; free tier 100 calls/mo) Read o_leaklookup Infostealer compromise check — stealer logs, credential count (Hudson Rock, no key) (200 sats/call; free tier Read o_leet Leetspeak transform (offline) (200 sats/call; free tier 100 calls/mo) Read o_leetcode_user LeetCode solved problems, ranking, badges (200 sats/call; free tier 100 calls/mo) Read o_links All links + external domains + emails on a page (200 sats/call; free tier 100 calls/mo) Read o_linktree Extract destination links from a linktr.ee profile (200 sats/call; free tier 100 calls/mo) Read o_lobsters Public user profile + karma (200 sats/call; free tier 100 calls/mo) Read o_mac OUI → hardware vendor (200 sats/call; free tier 100 calls/mo) Read o_macvalid MAC address parser (colon/dash/plain) (200 sats/call; free tier 100 calls/mo) Read o_macvendor MAC vendor + local/multicast bits from local OUI table (offline) (200 sats/call; free tier 100 calls/mo) Read o_macvendorlookup OUI → hardware vendor (macvendors.com) (200 sats/call; free tier 100 calls/mo) Read o_maidenhead Coords → ham-radio grid locator (offline) (200 sats/call; free tier 100 calls/mo) Read o_manifest Web app manifest: name, icons, theme (200 sats/call; free tier 100 calls/mo) Read o_marineweather Wave height/period/direction + sea temp at coords (200 sats/call; free tier 100 calls/mo) Read o_maven Java artifact: 'group:artifact' or name (200 sats/call; free tier 100 calls/mo) Read o_medium Author feed: recent post titles (200 sats/call; free tier 100 calls/mo) Read o_metatags OpenGraph / Twitter-card / generator meta tags (200 sats/call; free tier 100 calls/mo) Read o_mgrs Lat/lon → MGRS military grid reference (offline) (200 sats/call; free tier 100 calls/mo) Read o_mimetype File extension → MIME type (offline) (200 sats/call; free tier 100 calls/mo) Read o_moonphase Current moon phase & illumination (offline) (200 sats/call; free tier 100 calls/mo) Read o_morse Morse encode/decode, autodetecting direction (offline) (200 sats/call; free tier 100 calls/mo) Read o_mtasts Inbound-mail TLS enforcement policy (200 sats/call; free tier 100 calls/mo) Read o_musicbrainz Artist search: type, country, MBID (200 sats/call; free tier 100 calls/mo) Read o_musicbrainzartist Artist type, country, lifespan (200 sats/call; free tier 100 calls/mo) Read o_nationalize Predict nationality from a name (nationalize.io) (200 sats/call; free tier 100 calls/mo) Read o_nato Spell text in NATO phonetic alphabet (offline) (200 sats/call; free tier 100 calls/mo) Read o_nearbywiki Wikipedia places near a coordinate (200 sats/call; free tier 100 calls/mo) Read o_npm Packages published by an author (200 sats/call; free tier 100 calls/mo) Read o_npmdl npm download counts day/week/month (200 sats/call; free tier 100 calls/mo) Read o_npmdownloads npm package download counts, last week + month (no key) (200 sats/call; free tier 100 calls/mo) Read o_npmorg npm organization: all published packages (200 sats/call; free tier 100 calls/mo) Read o_npmpkg npm package version, deps, maintainers (200 sats/call; free tier 100 calls/mo) Read o_nstrace Trace NS delegation: TLD → registrar → authoritative (200 sats/call; free tier 100 calls/mo) Read o_nuget .NET package stats + downloads (200 sats/call; free tier 100 calls/mo) Read o_numlookup Validity, region, carrier, line type, timezones (libphonenumber) (200 sats/call; free tier 100 calls/mo) Read o_numwords Integer → English words (offline) (200 sats/call; free tier 100 calls/mo) Read o_nvdcve Full NVD record: CVSS, CWE, references (200 sats/call; free tier 100 calls/mo) Read o_onthisday Historical events on a date (Wikipedia; MM/DD or today) (200 sats/call; free tier 100 calls/mo) Read o_openalexauthor Author works count, h-index, institution (200 sats/call; free tier 100 calls/mo) Read o_openalexwork Scholarly work: citations, concepts, OA (200 sats/call; free tier 100 calls/mo) Read o_openfoodfacts EAN/UPC -> product, brand, nutrition (200 sats/call; free tier 100 calls/mo) Read o_openphish Community phishing-URL feed membership (200 sats/call; free tier 100 calls/mo) Read o_osv Known package vulns (OSV.dev). 'eco:name' (200 sats/call; free tier 100 calls/mo) Read o_otxdomain AlienVault OTX threat pulses for a domain (200 sats/call; free tier 100 calls/mo) Read o_otxip AlienVault OTX threat pulses for an IP (200 sats/call; free tier 100 calls/mo) Read o_pageinfo Common Crawl capture index lookup (200 sats/call; free tier 100 calls/mo) Read o_passgen Generate strong random passwords + passphrase (offline) (200 sats/call; free tier 100 calls/mo) Read o_password_dumps Search Dehashed for leaked passwords (query-only) (200 sats/call; free tier 100 calls/mo) Read o_paste_domain Find domain in public pastes via psbdmp.ws (no key) (200 sats/call; free tier 100 calls/mo) Read o_paste_email Find email in public pastes via Wayback CDX + search links (no key) (200 sats/call; free tier 100 calls/mo) Read o_peers Upstream/downstream BGP neighbours (200 sats/call; free tier 100 calls/mo) Read o_permissions_pol Permissions-Policy: camera/mic/geo controls (200 sats/call; free tier 100 calls/mo) Read o_pgp Public key published on keys.openpgp.org (200 sats/call; free tier 100 calls/mo) Read o_phishing_intel Phishing kit tracking + URL detection (200 sats/call; free tier 100 calls/mo) Read o_phoneapps WhatsApp / Telegram / Viber / Signal deep links (200 sats/call; free tier 100 calls/mo) Read o_phonecc Country, trunk & intl dialing prefixes (offline) (200 sats/call; free tier 100 calls/mo) Read o_phonefmt E.164 / national / international / RFC3966 formats (offline) (200 sats/call; free tier 100 calls/mo) Read o_phonepivot Caller-ID / reputation site links (Truecaller, Sync.me…) (200 sats/call; free tier 100 calls/mo) Read o_phonespam Robocall / scam report-database links (200 sats/call; free tier 100 calls/mo) Read o_phonevcard Generate a .vcf contact card (offline) (200 sats/call; free tier 100 calls/mo) Read o_pluscode Coords → Open Location Code / Google Plus Code (offline) (200 sats/call; free tier 100 calls/mo) Read o_port Service + exposure notes for a port number (200 sats/call; free tier 100 calls/mo) Read o_portlookup IANA port → service name (offline) (200 sats/call; free tier 100 calls/mo) Read o_pubmed PubMed biomedical paper search (NCBI) (200 sats/call; free tier 100 calls/mo) Read o_punycode IDN domain ↔ Punycode (xn--) homograph check (offline) (200 sats/call; free tier 100 calls/mo) Read o_pypi Python package metadata + links (200 sats/call; free tier 100 calls/mo) Read o_pypiproject PyPI version/license/links (200 sats/call; free tier 100 calls/mo) Read o_pypistats PyPI recent download counts (200 sats/call; free tier 100 calls/mo) Read o_quakes USGS recent quakes — global or near coords (M2.5+) (200 sats/call; free tier 100 calls/mo) Read o_quoted_printable Quoted-printable encode/decode (200 sats/call; free tier 100 calls/mo) Read o_railfence Rail-fence cipher over 3 rails (offline) (200 sats/call; free tier 100 calls/mo) Read o_rdap Structured domain registration record (RDAP/IANA bootstrap, no key) (200 sats/call; free tier 100 calls/mo) Read o_rdap_domain RDAP structured domain registration data (200 sats/call; free tier 100 calls/mo) Read o_rdapip Authoritative RDAP record for an IP (200 sats/call; free tier 100 calls/mo) Read o_redirects Full HTTP redirect chain (200 sats/call; free tier 100 calls/mo) Read o_referrer_pol Referrer-Policy header — URL leakage risk (200 sats/call; free tier 100 calls/mo) Read o_regdomain Extract eTLD+1 registered domain from URL (offline) (200 sats/call; free tier 100 calls/mo) Read o_reversedns PTR record / hostname (200 sats/call; free tier 100 calls/mo) Read o_revgeo lat,lon -> address (OSM Nominatim) (200 sats/call; free tier 100 calls/mo) Read o_revgeocode Coordinates → nearest address (OSM) (200 sats/call; free tier 100 calls/mo) Read o_revimg Reverse-image-search links (Lens/Yandex/TinEye/Bing) (200 sats/call; free tier 100 calls/mo) Read o_robots Disallowed paths + sitemaps (200 sats/call; free tier 100 calls/mo) Read o_robotsmeta meta-robots + X-Robots-Tag: noindex/nofollow/noarchive (200 sats/call; free tier 100 calls/mo) Read o_roman Convert int <-> roman numeral, autodetecting (offline) (200 sats/call; free tier 100 calls/mo) Read o_rot13 ROT-13 encode/decode (200 sats/call; free tier 100 calls/mo) Read o_rot47 ROT47 ASCII cipher (offline, self-inverse) (200 sats/call; free tier 100 calls/mo) Read o_rpki Route-origin validation for the covering prefix (200 sats/call; free tier 100 calls/mo) Read o_rubygemrev Reverse dependencies of a RubyGem (200 sats/call; free tier 100 calls/mo) Read o_rubygems Ruby gem stats + downloads (200 sats/call; free tier 100 calls/mo) Read o_s3buckets S3/GCS/Azure buckets named for the domain (200 sats/call; free tier 100 calls/mo) Read o_securitytxt RFC 9116 disclosure policy & contacts (200 sats/call; free tier 100 calls/mo) Read o_semanticscholar Paper TLDR, citations, influence (200 sats/call; free tier 100 calls/mo) Read o_semver Parse and validate semantic versioning (200 sats/call; free tier 100 calls/mo) Read o_sitemap Fetch sitemap.xml + list URLs (200 sats/call; free tier 100 calls/mo) Read o_slug Text → URL-safe slug (offline) (200 sats/call; free tier 100 calls/mo) Read o_smtpbanner SMTP banner & EHLO capabilities (ports 25/587/465) (200 sats/call; free tier 100 calls/mo) Read o_snusbase_hash Reverse MD5/SHA1 hash via breach-sourced hash DB (md5decrypt.net) (200 sats/call; free tier 100 calls/mo) Read o_social Direct profile URLs across 20 platforms (200 sats/call; free tier 100 calls/mo) Read o_sopostuser SO profile + reputation by numeric id (200 sats/call; free tier 100 calls/mo) Read o_spacepeople Who is in space right now (names + craft) (200 sats/call; free tier 100 calls/mo) Read o_sri_check Subresource Integrity: external scripts without integrity= (200 sats/call; free tier 100 calls/mo) Read o_srvlookup SIP/XMPP/mail/CalDAV SRV record discovery (200 sats/call; free tier 100 calls/mo) Read o_stackoverflow SO/SE user search by display name (200 sats/call; free tier 100 calls/mo) Read o_steam_user Steam community profile via public XML (200 sats/call; free tier 100 calls/mo) Read o_stringmetrics Length, entropy, character breakdown (200 sats/call; free tier 100 calls/mo) Read o_subbrute Resolve a common-subdomain wordlist (per-target) (200 sats/call; free tier 100 calls/mo) Read o_suntimes Sunrise/sunset/twilight for a coordinate (UTC) (200 sats/call; free tier 100 calls/mo) Read o_supply_chain_risk Dependency vulns + typosquatting (200 sats/call; free tier 100 calls/mo) Read o_swagger Exposed API docs at common paths (per-target) (200 sats/call; free tier 100 calls/mo) Read o_teamcymru IP → ASN via Team Cymru DNS (fastest ASN lookup) (200 sats/call; free tier 100 calls/mo) Read o_tech CMS/framework/server detection (200 sats/call; free tier 100 calls/mo) Read o_telegram_channel Public channel preview: subscribers, description (200 sats/call; free tier 100 calls/mo) Read o_threatcrowd OTX passive DNS resolution history (200 sats/call; free tier 100 calls/mo) Read o_tldinfo TLD registry operator, type, purpose (offline) (200 sats/call; free tier 100 calls/mo) Read o_tls Live cert: issuer, validity, SANs, cipher (200 sats/call; free tier 100 calls/mo) Read o_tlsa Certificate-pinning DANE records on :443 (200 sats/call; free tier 100 calls/mo) Read o_tlsscan Which SSL/TLS protocols the host accepts (200 sats/call; free tier 100 calls/mo) Read o_tor Is the IP a known Tor exit node (200 sats/call; free tier 100 calls/mo) Read o_trendingwiki Most-read Wikipedia articles today (200 sats/call; free tier 100 calls/mo) Read o_trufflehog_url Scan raw URL content for API keys, tokens, private keys, JWTs (200 sats/call; free tier 100 calls/mo) Read o_unicode_lookup Unicode codepoint: name, category, HTML entity (offline) (200 sats/call; free tier 100 calls/mo) Read o_unpaywall Is a DOI open-access? Direct PDF link (200 sats/call; free tier 100 calls/mo) Read o_urlparse Parse URL into components + query params (200 sats/call; free tier 100 calls/mo) Read o_urlscan Past scans, verdicts, infra (IP/ASN/server) for a site (200 sats/call; free tier 100 calls/mo) Read o_urlscansearch Public urlscan.io scan history for a domain (200 sats/call; free tier 100 calls/mo) Read o_useragent Parse a User-Agent into OS/browser (offline) (200 sats/call; free tier 100 calls/mo) Read o_username Presence across 16 public sites (200 sats/call; free tier 100 calls/mo) Read o_utm Lat/lon → UTM coordinates (WGS84, offline) (200 sats/call; free tier 100 calls/mo) Read o_uuencode Unix-to-Unix encoding (200 sats/call; free tier 100 calls/mo) Read o_uuid Version/variant + v1 timestamp/MAC (offline) (200 sats/call; free tier 100 calls/mo) Read o_uuid_validate UUID v1-v5 version and variant detector (200 sats/call; free tier 100 calls/mo) Read o_waf Detect WAF/CDN from headers & cookies (200 sats/call; free tier 100 calls/mo) Read o_wayback_leaks Search Wayback Machine for historically exposed .env/config/secrets (200 sats/call; free tier 100 calls/mo) Read o_weather Current weather at a coordinate (Open-Meteo) (200 sats/call; free tier 100 calls/mo) Read o_wellknown Which /.well-known/ resources exist (200 sats/call; free tier 100 calls/mo) Read o_whois Registration, status, nameservers, DNSSEC (200 sats/call; free tier 100 calls/mo) Read o_whoisserver TLD → WHOIS server mapping (offline + IANA fallback) (200 sats/call; free tier 100 calls/mo) Read o_wikidata Search Wikidata entities by label (no key) (200 sats/call; free tier 100 calls/mo) Read o_wikidatasearch Free-text → Wikidata entities (200 sats/call; free tier 100 calls/mo) Read o_wikipedia Wikipedia REST summary: extract, type, coords (no key) (200 sats/call; free tier 100 calls/mo) Read o_wikisummary Page extract/description for a topic (200 sats/call; free tier 100 calls/mo) Read o_wordcount Text stats: words/chars/lines/reading time (offline) (200 sats/call; free tier 100 calls/mo) Read o_zenodo Zenodo open-research records search (200 sats/call; free tier 100 calls/mo) Read px_info Proxy service capabilities, auth, billing info (50 sats/call; free tier 100 calls/mo) Read px_order Check proxy order payment/fulfilment status (50 sats/call; free tier 100 calls/mo) Read px_plans List residential proxy plans + sats pricing (50 sats/call; free tier 100 calls/mo) Read qr SVG QR codes + barcodes (250 sats/call; free tier 100 calls/mo) Read re_report Cited multi-source research report. Call with {q} -> job_id, poll with {job_id} until done (charged on complet Read re_search Search a private crawled+indexed knowledge cloud (OpenSearch+Qdrant) (200 sats/call; free tier 100 calls/mo) Read re_semantic Vector/semantic search over the private knowledge cloud (250 sats/call; free tier 100 calls/mo) Read re_summarize LLM summary of specific URLs (pass urls=comma-separated) (400 sats/call; free tier 100 calls/mo) Read regex Test/replace regex patterns (200 sats/call; free tier 100 calls/mo) Read search Synthesize a research answer via local LLM (500 sats/call; free tier 100 calls/mo) Read styx_beacon Tor gateway status + current exit IP (50 sats/call; free tier 100 calls/mo) Read styx_fetch Fetch a URL through the Tor network (300 sats/call; free tier 100 calls/mo) Read styx_renew Rotate to a fresh Tor circuit/identity (100 sats/call; free tier 100 calls/mo) Read summarize Summarize docs, extract entities, sentiment (500 sats/call; free tier 100 calls/mo) Read titan_beacon Check RTX 4080 GPU compute status (0 sats/call; free tier 100 calls/mo) Read titan_order Buy GPU compute credits (BTCPay invoice) (0 sats/call; free tier 100 calls/mo) Read v_b64dec Base64-decode to text + hex (100 sats/call; free tier 100 calls/mo) Read v_b64enc Base64-encode text (100 sats/call; free tier 100 calls/mo) Read v_baseconv Convert a number between bases 2-36 (100 sats/call; free tier 100 calls/mo) Read v_case camel/snake/kebab/pascal/title/upper/lower (100 sats/call; free tier 100 calls/mo) Read v_cron Break down a 5-field cron expression (100 sats/call; free tier 100 calls/mo) Read v_epoch Convert a unix epoch to UTC + relative (100 sats/call; free tier 100 calls/mo) Read v_hash MD5/SHA1/SHA256/SHA512 of a string (100 sats/call; free tier 100 calls/mo) Read v_hex2txt Decode hex bytes to text (100 sats/call; free tier 100 calls/mo) Read v_htmldec Decode HTML entities (100 sats/call; free tier 100 calls/mo) Read v_json_csv Flatten a JSON array of objects to CSV (100 sats/call; free tier 100 calls/mo) Read v_json_diff Diff two JSON values (added/removed/changed) (100 sats/call; free tier 100 calls/mo) Read v_json_format Validate + pretty-print JSON (100 sats/call; free tier 100 calls/mo) Read v_jwt Decode a JWT header + payload (100 sats/call; free tier 100 calls/mo) Read v_metrics Length/word/line counts + Shannon entropy (100 sats/call; free tier 100 calls/mo) Read v_now Current unix time (UTC) (100 sats/call; free tier 100 calls/mo) Read v_regex Test a regex, return matches + groups (100 sats/call; free tier 100 calls/mo) Read v_slug Slugify text (lowercase, dashes, ascii) (100 sats/call; free tier 100 calls/mo) Read v_txt2hex Encode text to hex (100 sats/call; free tier 100 calls/mo) Read v_urldec Percent-decode a string (100 sats/call; free tier 100 calls/mo) Read v_urlenc Percent-encode a string (100 sats/call; free tier 100 calls/mo) Read v_urlparse Split a URL into scheme/host/path/query (100 sats/call; free tier 100 calls/mo) Read v_uuid Generate a random UUID v4 (100 sats/call; free tier 100 calls/mo) Read web_scrape Fetch any URL → clean markdown + metadata (400 sats/call; free tier 100 calls/mo)

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about Hyperion

How do I prevent bulk modifications through Hyperion? +

The Hyperion server has 6 write tools including o_base_convert, o_datauri, o_dockerhub. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Hyperion.

How many tools does the Hyperion MCP server expose? +

355 tools across 3 categories: Execute, Read, Write. 345 are read-only. 10 can modify, create, or delete data.

How do I enforce a policy on Hyperion? +

Register the Hyperion MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Hyperion tool call.

Deterministic rules across all 355 Hyperion tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Instant setup, no code required.

355 Hyperion tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Hyperion's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.