Monitoring for agencies — uptime, SSL, DNS, blocklists, AI visibility, MCP health. 8 no-auth tools.
Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.
https://api.merlonix.com/mcp16 tools · 111mscheck_domain_healthCheck the live SSL/TLS certificate (validity + expiry + issuer), DNS records (A/AAAA/MX/NS resolution), and domain-registration (RDAP) expiry of any public hostname. Each leg fails soft and is reported independently.Check the live SSL/TLS certificate (validity + expiry + issuer), DNS records (A/AAAA/MX/NS resolution), and domain-registration (RDAP) expiry of any public hostname. Each leg fails soft and is reported independently.
| Parameter | Type | Description |
|---|---|---|
| hostname* | string | A public hostname, e.g. example.com |
check_agent_readinessScore how ready a website is for AI agents and answer engines. Fetches /llms.txt, /robots.txt, and the homepage and returns a letter grade with per-signal findings. No browser rendering or LLM call — deterministic HTTP/parse.Score how ready a website is for AI agents and answer engines. Fetches /llms.txt, /robots.txt, and the homepage and returns a letter grade with per-signal findings. No browser rendering or LLM call — deterministic HTTP/parse.
| Parameter | Type | Description |
|---|---|---|
| hostname* | string | A public hostname, e.g. example.com |
check_mcp_healthHealth-check a live MCP (Model Context Protocol) server by URL: performs a real JSON-RPC initialize handshake, then tools/list, and returns whether it is up/degraded/down, its protocol version, server name/version, the callable tool/resource/prompt inventory, transport, and handshake latency. Deter…Health-check a live MCP (Model Context Protocol) server by URL: performs a real JSON-RPC initialize handshake, then tools/list, and returns whether it is up/degraded/down, its protocol version, server name/version, the callable tool/resource/prompt inventory, transport, and handshake latency. Deter…
url: Links to undeclared domain: example.com| Parameter | Type | Description |
|---|---|---|
| url* | string | The MCP endpoint URL, e.g. https://example.com/mcp |
check_email_blacklistCheck whether a domain or IP is listed on the major DNS blocklists (DNSBLs) that mail providers consult before accepting mail — the usual reason legitimate mail silently lands in spam. Returns each zone checked, whether it is listed, and the return code. Deterministic DNS lookups, no LLM.Check whether a domain or IP is listed on the major DNS blocklists (DNSBLs) that mail providers consult before accepting mail — the usual reason legitimate mail silently lands in spam. Returns each zone checked, whether it is listed, and the return code. Deterministic DNS lookups, no LLM.
| Parameter | Type | Description |
|---|---|---|
| domain* | string | A public domain or IP address, e.g. example.com or 203.0.113.10 |
check_broken_linksScan one web page for dead links (4xx/5xx/unreachable) and mixed content (http subresources on an https page). Returns each link with its status. Single-page scan, not a crawl — pass the exact page URL. Rate-limited to a few scans per minute, so batch calls will be throttled.Scan one web page for dead links (4xx/5xx/unreachable) and mixed content (http subresources on an https page). Returns each link with its status. Single-page scan, not a crawl — pass the exact page URL. Rate-limited to a few scans per minute, so batch calls will be throttled.
url: Links to undeclared domain: example.com| Parameter | Type | Description |
|---|---|---|
| url* | string | The exact page URL to scan, e.g. https://example.com/pricing |
list_vendor_statusList the current operational status and recent incidents of every third-party vendor Merlonix monitors (e.g. Cloudflare, GitHub, Stripe). Returns each vendor's slug, current status, and 24h incident count.List the current operational status and recent incidents of every third-party vendor Merlonix monitors (e.g. Cloudflare, GitHub, Stripe). Returns each vendor's slug, current status, and 24h incident count.
No input schema was published for this tool.
get_vendor_statusGet the current status plus 30-day status history of one monitored vendor by slug (e.g. "cloudflare"). Use list_vendor_status to discover valid slugs.Get the current status plus 30-day status history of one monitored vendor by slug (e.g. "cloudflare"). Use list_vendor_status to discover valid slugs.
| Parameter | Type | Description |
|---|---|---|
| slug* | string | Vendor slug, e.g. cloudflare |
list_plansList Merlonix subscription plans and pricing (Starter, Team, Agency, Compliance) with their monitoring limits.List Merlonix subscription plans and pricing (Starter, Team, Agency, Compliance) with their monitoring limits.
No input schema was published for this tool.
list_my_assetsList the monitored assets (websites/domains) in YOUR Merlonix account. Returns each asset id, hostname, type, and monitoring status. Requires an API key (Authorization: Bearer mk_… from app.merlonix.com → Settings → API keys).List the monitored assets (websites/domains) in YOUR Merlonix account. Returns each asset id, hostname, type, and monitoring status. Requires an API key (Authorization: Bearer mk_… from app.merlonix.com → Settings → API keys).
No input schema was published for this tool.
get_asset_checksGet the latest check results (SSL, DNS, uptime, heartbeat, port) for ONE of your monitored assets, by its asset id (from list_my_assets). Requires an API key.Get the latest check results (SSL, DNS, uptime, heartbeat, port) for ONE of your monitored assets, by its asset id (from list_my_assets). Requires an API key.
| Parameter | Type | Description |
|---|---|---|
| asset_id* | string | The asset id from list_my_assets (a UUID). |
list_my_alertsList recent alerts across YOUR monitored assets (SSL changes, downtime, DNS drift, vendor incidents, etc.) with their severity and lifecycle status. Requires an API key.List recent alerts across YOUR monitored assets (SSL changes, downtime, DNS drift, vendor incidents, etc.) with their severity and lifecycle status. Requires an API key.
No input schema was published for this tool.
create_assetStart monitoring a new asset (website/domain) in YOUR Merlonix account. Provide a hostname and asset_type; optionally a label and which checks to enable. Returns the created asset. Requires an API key with write scope. Subject to your plan asset quota (a full or non-paying plan returns an error).Start monitoring a new asset (website/domain) in YOUR Merlonix account. Provide a hostname and asset_type; optionally a label and which checks to enable. Returns the created asset. Requires an API key with write scope. Subject to your plan asset quota (a full or non-paying plan returns an error).
| Parameter | Type | Description |
|---|---|---|
| hostname* | string | The hostname to monitor, e.g. example.com |
| asset_type* | string | Asset kind: "hostname" (a website/host), "domain", "certificate", or "dns_record". |
| label | string | Optional human label (max 120 chars). |
| ssl_enabled | boolean | Monitor the TLS certificate (default on for hostnames). |
| dns_enabled | boolean | Monitor DNS records. |
| domain_enabled | boolean | Monitor domain-registration (RDAP) expiry. |
| uptime_check_url | string | Optional URL to probe for uptime (enables uptime checks). |
update_assetUpdate one of YOUR monitored assets by its asset id (from list_my_assets): relabel it or toggle which checks run. Returns the updated asset. Requires an API key with write scope.Update one of YOUR monitored assets by its asset id (from list_my_assets): relabel it or toggle which checks run. Returns the updated asset. Requires an API key with write scope.
| Parameter | Type | Description |
|---|---|---|
| asset_id* | string | The asset id from list_my_assets (a UUID). |
| label | string | New label (max 120 chars). |
| ssl_enabled | boolean | Enable/disable TLS-certificate monitoring. |
| dns_enabled | boolean | Enable/disable DNS monitoring. |
| domain_enabled | boolean | Enable/disable domain-registration (RDAP) monitoring. |
delete_assetprivilegedSTOP monitoring one of YOUR assets and remove it, by its asset id (from list_my_assets). This is irreversible — its check history goes too. Requires an API key with write scope.STOP monitoring one of YOUR assets and remove it, by its asset id (from list_my_assets). This is irreversible — its check history goes too. Requires an API key with write scope.
| Parameter | Type | Description |
|---|---|---|
| asset_id* | string | The asset id from list_my_assets (a UUID). |
acknowledge_alertAcknowledge one of YOUR alerts by its alert id (from list_my_alerts) — marks it as seen/being-handled without resolving it. Optionally attach a note. Requires an API key with write scope.Acknowledge one of YOUR alerts by its alert id (from list_my_alerts) — marks it as seen/being-handled without resolving it. Optionally attach a note. Requires an API key with write scope.
| Parameter | Type | Description |
|---|---|---|
| alert_id* | string | The alert id from list_my_alerts (a UUID). |
| note | string | Optional note (max 500 chars). |
resolve_alertResolve one of YOUR alerts by its alert id (from list_my_alerts) — closes it. Optionally set resolution ("fixed" | "false_positive" | "wontfix") and a note. Requires an API key with write scope.Resolve one of YOUR alerts by its alert id (from list_my_alerts) — closes it. Optionally set resolution ("fixed" | "false_positive" | "wontfix") and a note. Requires an API key with write scope.
| Parameter | Type | Description |
|---|---|---|
| alert_id* | string | The alert id from list_my_alerts (a UUID). |
| resolution | string | Why the alert is being closed. |
| note | string | Optional note (max 500 chars). |
16 of 16 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Monitoring for agencies — uptime, SSL, DNS, blocklists, AI visibility, MCP health. 8 no-auth tools.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.