Pricing

Most of the servers you depend on will not change this month. In a sample week, the servers that drifted were overwhelmingly ones nobody uses: popular servers are roughly 99% stable week to week.

That is the honest case for this product, not an argument against it. ToolPin is insurance. You are paying to find out on the day it happens rather than the day something breaks in production, and the rest of the time to have it confirmed that nothing changed.

That confirmation is a real deliverable: once a month we send an assurance receipt listing every server we checked, how many times, and the pinned hash it still matches. Quiet months produce evidence, not silence.

What counts as a change?

Any difference in what a tool claims to do: its name, description, input or output schema, or annotations. We hash the fields the MCP specification defines and ignore vendor extras, so a build stamp that changes on every deploy does not wake you up. The exact rule is on the methodology page.

Do you ever call my tools?

No. We perform a standard handshake and read the tool list. We never invoke a tool, never send credentials, and never execute anything a server returns.

Do you tell me whether a server is safe?

Never. We publish observed facts: changed, unreachable, last commit date. No scores, no ratings, no safety judgments. The judgment stays with you.

I need more than 25 servers.

Email [email protected]. There is a feed API for teams that want the whole dataset rather than a watchlist.

What if my server needs authentication?

We record it as reachable but auth gated, and track its reachability. We do not hold credentials, so we cannot hash the tool list behind an auth wall.