Skip to content

Early access Governed MCP calls open to beta partners in March 2027. The MCP tracker and scanner are free to use today.

Stackduke Radar

NicheDB MCP server

Featured official server

Can do more

42 tools · Last check that passed 4 Nov 2026, 12:15 UTC

NicheDB's own remote MCP server gives an agent NicheDB's open database of public data, from game releases and package registries to domain names, business checks, blocklists and public profiles of people, with reads open to anyone and writes behind an API key. Once a day, Stackduke connects to it the way any MCP client would, with no account and no sign-in, and lists its tools. It never runs them.

All 42 tools

ToolCounted as
where_to_buy_bookMoves money
delete_webhookDeletes
update_webhookDeletes
test_webhookSends
add_sourceChanges things
claim_profileChanges things
create_feedChanges things
create_inviteChanges things
create_webhookChanges things
follow_feedChanges things
redeem_codeChanges things
rotate_webhook_secretChanges things
run_sourceChanges things
submit_feedChanges things
update_profileChanges things
business_standingSaid to only read
check_domainSaid to only read
feed_itemsSaid to only read
find_profile_by_linkedinSaid to only read
get_itemSaid to only read
get_profileSaid to only read
get_tldSaid to only read
list_adaptersSaid to only read
list_collectionsSaid to only read
list_enrichersSaid to only read
list_feedsSaid to only read
list_invitesSaid to only read
list_sourcesSaid to only read
list_webhooksSaid to only read
match_itemsSaid to only read
populationSaid to only read
recent_itemsSaid to only read
reputation_lookupSaid to only read
search_itemsSaid to only read
search_profilesSaid to only read
search_tldsSaid to only read
statsSaid to only read
tld_changesSaid to only read
traffic_listSaid to only read
upcomingSaid to only read
vuln_lookupSaid to only read
webhook_deliveriesSaid to only read

The tools the server listed at the last check that passed, at its default address and settings, with no sign-in; an account that signs in, or other settings, may see other tools. What a tool is counted as doing is Stackduke's cautious reading of the server's labels, the tool's name and its description: where they disagree it takes whichever says the tool can do most, so it overcounts on purpose. It does not say the server is safe, and it does not list what a tool cannot do. Descriptions are not shown, because they are written for models and may try to steer them.

Recent checks

21 of the last 21 checks passed

A check passes when the server lists its tools. Checked at https://nichedb.dev/mcp.

Recent changes

  1. 29 Oct 2026, 10:58 UTC, after a check on 28 Oct 2026, 17:08 UTC

    Can do more 1 tool added: vuln_lookup. The server's own labels changed on add_source, business_standing, check_domain, claim_profile, create_feed and 15 more. Inputs or outputs changed on add_source, business_standing, check_domain, claim_profile, create_feed and 9 more. 41 tools changed in all. Counted as able to do more: rotate_webhook_secret (make changes that cannot be undone), update_profile (make changes that cannot be undone).

  2. 28 Oct 2026, 17:08 UTC, after a check on 28 Oct 2026, 10:48 UTC

    Can do more 7 tools added: create_webhook, delete_webhook, list_webhooks, rotate_webhook_secret, test_webhook and 2 more. Counted as able to do more: delete_webhook (make changes that cannot be undone), update_webhook (make changes that cannot be undone), test_webhook (send messages or publish to other people) and 4 more.

  3. 27 Oct 2026, 10:01 UTC, after a check on 26 Oct 2026, 10:21 UTC

    Can do more 3 tools added: create_invite, list_invites, redeem_code. Counted as able to do more: redeem_code (move or spend money), create_invite (create or change things).

  4. 26 Oct 2026, 10:21 UTC, after a check on 25 Oct 2026, 09:21 UTC

    Can do more 1 tool added: where_to_buy_book. Counted as able to do more: where_to_buy_book (move or spend money).

  5. 18 Oct 2026, 06:13 UTC, after a check on 16 Oct 2026, 18:22 UTC

    Can do more 3 tools added: business_standing, reputation_lookup, traffic_list. Counted as able to do more: business_standing (not clear what it does).

From the scan of 4 Nov 2026, 12:43 UTC. "Changed" and "Can do more" count changes from the last 30 days; older ones stay listed here. A change made and undone between two checks is not seen. Every check is in the scanner's public data.

What to watch for
  • With a key, its tools create and follow feeds, add data sources, claim and edit profiles, create invites, redeem credit codes, and create, change and delete webhooks that post events to an https URL. NicheDB's MCP documentation
  • create_webhook and rotate_webhook_secret return the signing secret, so the agent sees it. NicheDB's MCP documentation
  • search_profiles and find_profile_by_linkedin return public profiles of people, assembled from other apps, by name or by LinkedIn URL. NicheDB's MCP documentation
  • Item titles and summaries from public sources, and profiles people wrote come back to the agent as text, and text an agent reads can carry instructions for it. OWASP, prompt injection
How to limit it

With NicheDB's own settings, as its documentation describes them. Stackduke has not tested them.

  • NicheDB says reads need no key and the key is only for the tools that write, so we recommend connecting it with no key when the agent only reads. NicheDB's MCP documentation
  • NicheDB says a business_standing name match is not an identity, so confirm a match against the address and identifiers before acting on it, as it advises. NicheDB's MCP documentation
What Stackduke is designed to do

Stackduke is designed to sit between your agents and their MCP servers: to check each tool call against your rules before it runs, hold the risky ones for a person to approve, and keep a record of what was decided.

It does not yet forward or block tool calls for customers. Today it reads what this server offers and publishes what changes.

Stackduke is not affiliated with or endorsed by Profullstack. The NicheDB name belongs to its owner and is used here only to name its MCP server.

How the tracker works, and every other server it checks, is on the tracker page. The scanner and its data are open source at github.com/Stackduke/mcp-scanner.