privacyPolicyURL should be present for marketplace readiness.
Tanod
Hosted MCP server for agents: PDF, OCR, web pages and more, paid per call
tanod-labs/tanod · v1.0.0 · Tools & Integrations
Tanod is a hosted MCP server with 270 tools for AI agents. The strongest family is documents: PDF to Word, Office to PDF, PDF tables, bank statements to CSV, OCR for scans and images, and any file to Markdown. Around it: web page to Markdown, screenshots and web search; DNS, TLS and email checks; on-chain reads and address risk checks; weather, aviation and space data.
Is Tanod a fit?
From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.
Works with
- MCP
- Codex
- Agent Plugin
- 13 skills
- 1 MCP server
Before you install
- Sign-in
- Not declared
- Declared access
- Not declared
- License
- MIT
Check before relying on it
- Security checks that did not finish: cisco-skill-scanner, codex-plugin-scanner. See the evidence
- 2 medium findings from the scan. See the evidence
About Tanod
Connect once at https://tanod.dev/mcp and every tool is there; no account and no API key. Each tool has a free daily allowance per IP. After that a call costs a fixed price, most between USD 0.001 and 0.02, paid in USDC with x402 on Base, Polygon, Solana, BNB Chain or Arbitrum. Every tool description states its price.
Tanod is operated by an autonomous AI agent on behalf of its owner. Results are automated; a clean scan is not proof that code or a package is safe.
What is Tanod?
Tanod is a published tools & integrations plugin for AI coding agents in the mcp ecosystem, developed by tanod-labs and distributed through the HOL AI plugin registry. Remote MCP server with 140+ pay-per-call tools for PDF, OCR, images, web pages and chain reads; free daily allowance, then x402 USDC on Base or Polygon
- Canonical slug
- tanod-labs/tanod
- Version
- v1.0.0 · updated Oct 12, 2026
- Open data
- entity.json (JSON-LD)
Trust & Reputation
Factor Analysis
Per-metric points (0–100 each) combined via a weighted average into the overall score.
Registry Snapshot
- Project link
- Tanod
- Repository
- https://github.com/tanod-labs/tanod-mcp
- Homepage
- https://tanod.dev
- Canonical profile
- https://hol.org/registry/plugins/tanod-labs%2Ftanod
- Publisher verification
- No
- Marketplace source
- Unknown
- Scanner
- Broker fallback
- Security result
- Needs review
- Digest verified
- Yes
Trust & reputation
Trust & Reputation
Factor Analysis
Per-metric points (0–100 each) combined via a weighted average into the overall score.
Provenance
- Plugin root
- .
- Source repo
- https://github.com/tanod-labs/tanod-mcp
- Source commit
- 8be9b64df38b…
- Publisher verified
- No
- Owner verified
- @tanod-labs
Continuous scanner CI not detected
This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.
Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.
README badge detected
The source repository README links to this HOL listing. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.
Security Posture
See how the Trust Score is computed- Provider
- registry-broker-fallback
- Grade
- C · review
- Version
- Unknown
Findings
termsOfServiceURL should be present for marketplace readiness.
MCP server tanod does not declare an auth posture.
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Cisco skill scanner timed out after 60000 ms
Tanod — Frequently asked questions
- What is Tanod?
- Tanod is an AI plugin in the HOL registry. Tanod is a hosted MCP server with 270 tools for AI agents. The strongest family is documents: PDF to Word, Office to PDF, PDF tables, bank statements to CSV, OCR for scans and images, and any file to Markdown. Around it: web page to Markdown, screenshots and web search; DNS,…
- How do I install Tanod?
- Install Tanod in your harness: Codex — codex plugin marketplace add tanod-labs/tanod-mcp; MCP — git clone https://github.com/tanod-labs/tanod-mcp; Any agent — npx [email protected] add tanod-labs/tanod-mcp. Full step-by-step guidance is on the HOL plugin page.
- How do I install Tanod in Codex?
- To install Tanod in Codex, start with codex plugin marketplace add tanod-labs/tanod-mcp. The complete step-by-step install guide for Codex is on the HOL plugin page.
- How do I install Tanod in MCP?
- To install Tanod in MCP, start with git clone https://github.com/tanod-labs/tanod-mcp. The complete step-by-step install guide for MCP is on the HOL plugin page.
- Is Tanod free?
- Tanod is listed as freemium on HOL.
- How is the Trust Score for Tanod computed?
- Tanod has a HOL Trust Score of 68 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/tanod-labs%2Ftanod/trust
- Who publishes Tanod?
- Tanod is published by tanod-labs and listed on HOL.
- Is Tanod available now?
- Tanod is currently available according to its latest public launch.
Install Guidance
Install in Codex
Install through the Codex CLI plugin marketplace.
Optional: install HOL Guard for Codex first, so it can check this plugin's tools on your machine before Codex uses them.
- 1
Register the marketplace
Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.
shell - 2
Install from the Plugins browser
Open Codex, open the Plugins browser, choose the marketplace registered by the previous command, and install tanod.
- 3
Check the marketplace is registered
This confirms the marketplace source only. Confirm the plugin itself is enabled in the Plugins browser before relying on it.
shell
Did setup work in Codex?
No setup reports for Codex yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.
Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.
Api 1270x760
Plugin Manifest
{
"name": "tanod",
"version": "1.0.0",
"description": "Hosted MCP tools for agents: PDF, Office and image conversion, OCR, phishing and OFAC checks, contract and package scans, chain data, web screenshots and more. No key, no account; free daily allowance, then pay per call in USDC (x402).",
"homepage": "https://tanod.dev",
"repository": "https://github.com/tanod-labs/tanod-mcp",
"license": "MIT",
"keywords": [
"mcp",
"pdf",
"ocr",
"x402",
"security"
],
"skills": "./",
"mcpServers": "./.registry/mcp.json",
"interface": {
"displayName": "Tanod",
"developerName": "tanod-labs",
"shortDescription": "Hosted pay-per-call MCP tools for agents",
"category": "Developer Tools",
"websiteURL": "https://tanod.dev"
},
"holManifestOrigin": "repository",
"registryIndexVersion": 5
}Marketplace Source
- Repo URL
- https://github.com/tanod-labs/tanod-mcp
- Marketplace path
- Unknown
- Source path
- .
- Install policy
- Unspecified
Skills
13 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.
skills/bank-statement/SKILL.md
Reads a PDF bank statement into dated transactions and JSON, CSV, XLSX, OFX or QIF with Tanod Documents. Use when an agent must turn a bank statement PDF into transactions for bookkeeping or import.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
check-crypto-address-before-sending
skills/check-crypto-address-before-sending/SKILL.md
Check a crypto address or contract for risk right before sending funds, approving a token, or buying a token on Base or Ethereum. Use whenever a user or a workflow is about to interact with an address they did not deploy themselves, transfers, approvals, swaps, mints, signing a permit. Triggers on wallet addresses, token contracts, 'is this safe', 'before I send', 'approve', 'allowance'.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
skills/check-url-for-phishing/SKILL.md
Check whether a URL or domain is a known phishing or scam site before opening it, fetching it, or passing it to a user. Use for links in emails, chats, documents, search results and tool outputs. Triggers on 'is this link safe', 'open this URL', suspicious login pages, crypto drainer links, shortened links.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
skills/convert-and-ocr-documents/SKILL.md
Convert, OCR and edit PDFs and documents through hosted tools, extract text, OCR scanned PDFs and images, merge, split, extract or remove pages, rotate, compress, watermark, number pages, protect or unlock, read metadata, HTML or a URL to PDF, images to PDF and PDF to images. Use when a task involves a PDF, a scan, a document to read or produce, or 'make this a PDF'. Triggers on PDF, scan, OCR, merge, compress, watermark, page numbers, password, docx, html-to-pdf.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
detect-ascii-smuggling-and-hidden-unicode
skills/detect-ascii-smuggling-and-hidden-unicode/SKILL.md
Detect hidden Unicode in untrusted text before an LLM reads it or before it is stored or displayed, ASCII smuggling with Unicode tag characters, zero-width characters, bidi overrides (Trojan Source), and look-alike mixed-script words. Use on emails, web content, tool outputs, pasted prompts, filenames and code reviews. Triggers on 'prompt injection', 'hidden text', 'invisible characters', 'homoglyph', 'suspicious paste'.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
skills/document-to-markdown/SKILL.md
Converts a PDF, DOCX, XLSX, PPTX, HTML, EPUB, CSV or text file to Markdown with Tanod Documents. Use when an agent must read an office document or PDF as Markdown text.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
monitor-a-router-or-cron-job-from-outside
skills/monitor-a-router-or-cron-job-from-outside/SKILL.md
Set up free outside monitoring for a server, website, MikroTik router or cron job so someone is alerted when it goes down, including devices behind CGNAT with no public IP. Use when asked to 'get an alert when X goes down', 'monitor my router', 'watch this cron job or backup', 'uptime check', or when a self-hosted monitor needs a watchdog. Triggers on uptime, heartbeat, dead man's switch, Netwatch, CGNAT, Telegram alert.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
skills/ocr/SKILL.md
Reads text from an image or scanned PDF with tesseract OCR, via Tanod Documents. Use when an agent must extract text from an image or make a scanned PDF searchable.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
skills/pdf-tables/SKILL.md
Extracts the tables of a text PDF as JSON, CSV or XLSX with Tanod Documents. Use when an agent must pull tables out of a PDF for analysis.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
skills/pdf-to-word/SKILL.md
Converts a PDF to a Word (.docx) file with Tanod Documents. Use when an agent must turn a PDF into a .docx for editing.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
scan-mcp-server-or-skill-before-installing
skills/scan-mcp-server-or-skill-before-installing/SKILL.md
Scan an MCP server, agent skill or plugin package for prompt injection, credential exfiltration, hidden instructions and dangerous code before installing or running it. Use when asked to install an MCP server, add a skill, run `npx`/`pip install` for an agent tool, or evaluate a package from npm, PyPI, GitHub or ClawHub. Triggers on 'install this MCP', 'add this skill', 'is this package safe'.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
screen-address-for-ofac-sanctions
skills/screen-address-for-ofac-sanctions/SKILL.md
Screen a cryptocurrency address against the US OFAC SDN list (digital currency addresses) before transacting, onboarding, or paying out. Use for compliance checks on counterparties, withdrawals, grants, airdrops and marketplace payouts. Triggers on 'sanctions', 'OFAC', 'compliance check', 'can we pay this address'.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
skills/screenshot-a-web-page/SKILL.md
Capture a PNG or JPEG screenshot of a public web page at a chosen viewport, full page or dark mode, for visual checks, archiving, link previews or giving an agent eyes. Use when asked 'what does this page look like', to verify a deploy or a layout, or to attach an image of a page. Triggers on 'screenshot', 'capture the page', 'how does it render on mobile'.
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
File Inventory
.codex-plugin/plugin.json
plugin-manifest
734 bytes
4f92d6e44e3a3e2e…
.mcp.json
file
106 bytes
475ecf5ce6bd4a47…
.registry/mcp.json
mcp-config
70 bytes
3828c2008c564bd3…
package-lock.json
file
64,711 bytes
364c0e18948fa91e…
package.json
file
1,243 bytes
2d336cf6ed58f272…
plugin.json
file
414 bytes
1b6bf45957178f01…
README.md
file
12,836 bytes
d9e084da6f05b8fc…
SECURITY.md
file
588 bytes
6116b9a1ffcd501d…
skills/bank-statement/SKILL.md
skill
2,903 bytes
f08a5f23b811eef1…
skills/check-crypto-address-before-sending/SKILL.md
skill
2,663 bytes
a86acb6c9bbc9187…
skills/check-url-for-phishing/SKILL.md
skill
2,442 bytes
4305fb3c080e31c0…
skills/convert-and-ocr-documents/SKILL.md
skill
5,125 bytes
2b5eb847f021004c…
skills/detect-ascii-smuggling-and-hidden-unicode/SKILL.md
skill
2,870 bytes
e3a94467377e7e40…
skills/document-to-markdown/SKILL.md
skill
2,735 bytes
c42dc4d1c501210d…
skills/monitor-a-router-or-cron-job-from-outside/SKILL.md
skill
2,431 bytes
16f257b1bcc04dc9…
skills/ocr/SKILL.md
skill
3,457 bytes
ad78b15b8dfd6799…
skills/pdf-tables/SKILL.md
skill
2,582 bytes
ed74a19c03f63e24…
skills/pdf-to-word/SKILL.md
skill
2,351 bytes
6596c11a408b0336…
skills/scan-mcp-server-or-skill-before-installing/SKILL.md
skill
2,796 bytes
a32c407e13af93ff…
skills/screen-address-for-ofac-sanctions/SKILL.md
skill
2,398 bytes
7479dbd813cbe3c0…
skills/screenshot-a-web-page/SKILL.md
skill
2,480 bytes
f7f218ea075c2979…
tsconfig.json
file
278 bytes
2ad019fa6af63f56…
Related plugins
Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Tanod.
Alternatives in Tools & Integrations
- Agent402Open-source MCP server and x402 seller: 500+ tools for web search, rendering, PDFs, OCR, market and SEC data, paid per call in USDC or free via proof-of-work, no account or API keyTrust 94 · Scan: safe · Codex, MCP, Cursor
- AI Command CenterLocal-first Windows, macOS and Linux command center for Claude Code, Codex, OpenCode, Aider, Gemini CLI, Ollama and 8,000+ API models, with live cost and token analytics (even for Claude Code sessions in other terminals), a side-by-side Arena, real terminals and git per projectTrust 94 · Scan: safe · Codex, Claude Code, Antigravity CLI
- humanizer-ruAgent skill for Claude Code, Codex, Cursor and Gemini that rewrites Russian text to remove 64 AI-generation markers (bureaucratese, calques, ChatGPT fingerprints), with a corpus-calibrated scanner, audit mode and author-voice calibrationTrust 94 · Scan: safe · Codex, DeepSeek Harness, Claude Code
- ThoughtProof MCPLocal MCP pre-action verification for agents: mandate + proposed action → ALLOW/BLOCK/UNCERTAIN; execute only on ALLOWTrust 94 · Scan: safe · Codex, MCP
History, reviews, and alternatives
Launch history
User reviews
The first substantive review can be added on this page.
Read or write reviewsMilestones and alternatives
Related alternatives
Suggested from HOL scan evidence: same category, at least one shared runtime, similar tags and contents. Paid placement and Trust Score play no part.

