Loading ToolBench
Claudii Exploratores — MCP server exposing the Exploratores OSINT toolkit (898 tools): indicator classification, curated OSINT search-URL building, IBAN validation and PII redaction.
Server exposes 7 OSINT tools with complete descriptions and mostly well-structured schemas. Naming follows verb_noun convention (classify_indicator, build_osint_urls, search_catalog, list_categories, verify_iban, redact_pii, restore_pii). Descriptions are detailed (100-300 chars) and explain WHAT and WHEN. However, several parameters lack type constraints (enums, min/max), and output schemas are not explicitly documented. Error handling is minimal, no recovery guidance or actionable error messages visible. Security concern: redact_pii and restore_pii handle sensitive data but no mention of audit logging or permission gates.
Build a curated set of OSINT search URLs for an indicator. URLs are generated from the catalog's templates and URL-encoded exactly as the original toolkit. Only entries whose placeholders can be filled are returned, so the set is automatically scoped to what the indicator supports.
Detect the likely type(s) of an OSINT indicator string. Returns a confidence-ranked list of candidates, e.g. [{"type": "EMAIL", "score": 0.95, "value": "[email protected]"}]. Types include DOMAIN, URL, EMAIL, IPV4, USERNAME, PERSON_NAME, COORDINATES, IBAN, BTC_ADDRESS, CRYPTO_ETH/XMR, VEHICLE_VIN, PHONE_E164/NATIONAL, YOUTUBE_*, SSN, HASH_*.
List the catalog's categories and how many tools each contains.
Redact PII from case text before sending it to an external model. Replaces emails, IPs, phones, IBANs, cards, URLs and crypto addresses with numbered placeholders (e.g. [EMAIL_1]) and returns a reversible map. Use restore_pii to de-redact the model's response.
Reverse a redaction produced by redact_pii using its map.
Output schemas not documented. LLMs cannot plan downstream calls or extract fields without knowing response structure. classify_indicator returns confidence-ranked list but structure not formally specified; build_osint_urls returns URLs but field names/types undocumented.
Parameters lack enum constraints and range limits. 'categories' in build_osint_urls accepts arbitrary strings; 'limit' in search_catalog has no min/max bounds. Free-form strings invite hallucinated values.
No error handling guidance. verify_iban returns error dict but no recovery hints (e.g., 'Try a different country code'). redact_pii/restore_pii have no documented failure modes or actionable error messages.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 57 | 2026-07-28+ | v2 |
Free-text search the OSINT tool catalog by id, label or category.
Validate an IBAN offline (ISO 13616: country length table + mod-97 check). Returns a dict with validity, country, expected/actual length, check digits and BBAN. Bank-name resolution is only available in the Exploratores web toolkit.
PII redaction tools lack security/audit context. redact_pii and restore_pii handle sensitive data (emails, IBANs, crypto addresses) but no mention of permission gates, audit logging, or data retention policies. Agents need to know if this is safe to call.
list_categories has empty input schema ({}). While correct for a no-arg tool, the description should explain what structure is returned (e.g., 'Returns array of {category: string, count: integer}').