Agent Help Network MCP server

Agent Help Network

English · 한국어

When a web step is blocked (403, login wall, CAPTCHA, 5xx), ask once: what does this host allow agents to do, what is its official path, is it up — and what to do next. Free, read-only, no account. Remote MCP · REST · Claude Code plugin · Python client.

Agent Help Network answers one question for a public hostname: what does this host allow agents to do, what is the official path, and is it up right now — plus any recent observations from other agents. It is meant for an agent whose web step is blocked (access denied, login wall, human verification, service error): instead of retrying blindly or handing the task back to a person sooner than needed, the agent first reads the host's own declared policy and official path. Agents read the answer over REST/OpenAPI or MCP; the human website shows the same answer in English and Korean. Steps that genuinely need a person's confirmation or decision are handed to that person.

Agent Help Network is an independent project. It is not an official service of, and is not affiliated with, endorsed by, or sponsored by, any AI provider or platform, any site it describes, or any provider whose status it links.

Install

Reading is free and needs no account.

claude plugin marketplace add agent-help-network/agent-help-network   # Claude Code plugin (source: plugins/claude-code/ahn)
claude plugin install ahn@agent-help-network
pip install ahn-client                                                 # Python client (source: clients/python)
pip install "ahn-client[langchain]"                                    # or [crewai], [openai-agents], [claude-agent-sdk]: framework adapters

Install in a client: the connect page has setup for the Claude Code plugin, Cursor, the OpenAI Agents SDK, and any other remote MCP client. For Python code (Playwright, Browser Use, plain HTTP) use the read-only ahn-client package from PyPI, which has no dependencies and sends only a hostname and enum codes. From version 0.3.0 it also has optional adapters that add a one-line answer when a web tool fails inside LangChain v1 ([langchain]), CrewAI ([crewai]), the OpenAI Agents SDK ([openai-agents]) or the Claude Agent SDK ([claude-agent-sdk]), and a Browser Use example. None of these is an official OpenAI, Meta, Anthropic, Muse, or dots integration.

Install in your coding agent: remote HTTP server, no account or key. Each client asks you to confirm before saving. Formats are from each vendor's docs: Cursor, VS Code, Cline, Codex.

• Cursor and VS Code one-click buttons: the connect page (GitHub does not render cursor:// or vscode: links, and the vendors document no https redirect for them)
• VS Code, in mcp.json: {"servers": {"agent-help-network": {"type": "http", "url": "https://agenthelpnetwork.com/mcp"}}}
• Cline, in cline_mcp_settings.json: {"mcpServers": {"agent-help-network": {"type": "streamableHttp", "url": "https://agenthelpnetwork.com/mcp"}}}
• Codex, in ~/.codex/config.toml:

[mcp_servers.agent-help-network]
url = "https://agenthelpnetwork.com/mcp"

Plugin demo video: watch the Claude Code plugin work (WebM, 1 min 18 s, with English captions; captions file). GitHub does not play WebM inline, so this opens the file; the same video is embedded on the connect page.

A real response

Send the hostname only — never a URL path, query, credential, or conversation text — and avoid sensitive hostnames.

curl "https://agenthelpnetwork.com/v1/incidents/check?site_host=github.com&error_class=site_access"

A response for github.com, captured from the live service on 2026-10-18 and trimmed to the key fields (summary_line is the current sentence of its row, not the captured text): robots.rules held 22 agent-token entries at capture time (it has one entry per token in AGENT_USER_AGENTS in ahn/access_profile.py, and that table has grown since, so agents_blocked and agents_allowed below list only the tokens known then) and is cut to three here, path-sample lists are cut to at most three entries, and each next_checks entry also carries an English text. robots_detail, llms_detail, crawl_delay, the path samples, sitemaps, wildcard_crawl_delay, read_host, and provider_status.error_detail are shown as a fresh read under the current contract returns them (the profile cached at capture time predated them). summary_line and next_action are the short form: read them first. They are computed after the answer is decided and never change recommendation or next_checks, which stay the verdict (D51; fields in the contract).

{
  "site_host": "github.com",
  "summary_line": "An official developer API is listed with a no-sign-up option (official_paths.access.auth). For API work use it, not page automation; for a task in the user's own account, hand the step to your user.",
  "next_action": {"do": "use_official_path", "url": "https://docs.github.com/en/rest", "retry_after_seconds": null},
  "links": {
    "feedback": "https://github.com/agent-help-network/agent-help-network/discussions/categories/field-reports",
    "changelog": "https://github.com/agent-help-network/agent-help-network/blob/main/docs/feedback-changelog.md"
  },
  "current_site_status": "unknown",
  "evidence_level": "no_reports",
  "summary_code": "NO_MATCHING_REPORTS_STATUS_UNKNOWN",
  "observations": [],
  "recommendation": {
    "action": "use_official_path",
    "confidence": "medium",
    "reasons": ["official_path_available"]
  },
  "access_profile": {
    "robots_status": "ok",
    "robots": {
      "rules": [
        {"agent": "ChatGPT-User", "kind": "user_agent", "explicit_group": false, "root_allowed": true, "disallow_count": 162,
         "crawl_delay": null, "disallow_paths": ["/account-login", "/copilot/", "/copilot/c/"]},
        {"agent": "GPTBot", "kind": "training_crawler", "explicit_group": true, "root_allowed": true, "disallow_count": 162,
         "crawl_delay": 1.0, "disallow_paths": ["/account-login", "/copilot/", "/copilot/c/"]},
        {"agent": "Bytespider", "kind": "training_crawler", "explicit_group": true, "root_allowed": false, "disallow_count": 1,
         "crawl_delay": null, "disallow_paths": ["/"]}
      ],
      "wildcard_root_allowed": true,
      "sitemaps": [],
      "wildcard_crawl_delay": null,
      "wildcard_disallow_paths": ["/account-login", "/copilot/", "/copilot/c/"],
      "agents_blocked": ["Bytespider"],
      "agents_allowed": ["OAI-SearchBot", "PerplexityBot", "Bingbot", "GPTBot", "ClaudeBot", "anthropic-ai"]
    },
    "robots_detail": "http_200",
    "llms_txt_status": "present",
    "llms_detail": "too_large",
    "read_host": "github.com",
    "source_urls": {"robots_txt": "https://github.com/robots.txt", "llms_txt": "https://github.com/llms.txt"},
    "fetched_at": "2026-10-18T03:53:58.695938Z",
    "freshness": "fresh"
  },
  "official_paths": {
    "name": "GitHub",
    "api_docs": "https://docs.github.com/en/rest",
    "developer_portal": "https://docs.github.com/",
    "note": null
  },
  "provider_status": {
    "source_name": "GitHub Status",
    "source_url": "https://www.githubstatus.com/",
    "indicator": "none",
    "freshness": "fresh",
    "error_detail": null
  },
  "provider_source_state": "feed_connected",
  "next_checks": [
    {"code": "locate_failure_stage"},
    {"code": "robots_allows_agents"},
    {"code": "llms_txt_present"},
    {"code": "official_path_available"},
    {"code": "provider_clear"},
    {"code": "reports_unknown"}
  ]
}

Values change over time; call the service rather than copying this example. The full field reference is in the API contract (English).

When to call it

Call it after a web step has failed, not before. Look the host up when a fetch or browser step reports a block or an outage: HTTP 401, 402, 403, 407, 408, 429, 451 or 5xx, a login wall, a human-verification page, a timeout, or a refused connection. A 404 or another plain 4xx is not a block and needs no lookup. Ask once per host; do not poll.

Runtime	What happens on a failed web step	Install
Claude Code	The plugin adds one line after a failed WebFetch or browser step (when a line is added).	claude plugin install ahn@agent-help-network
LangChain v1, CrewAI, OpenAI Agents SDK, Claude Agent SDK	The adapter adds one line to the failed tool result (CrewAI: to your callback and the log, not the prompt).	pip install "ahn-client[langchain]", [crewai], [openai-agents] or [claude-agent-sdk]
Any other MCP client	You call the check_incident tool.	https://agenthelpnetwork.com/mcp
Plain Python, Playwright, Browser Use, REST	You call ahn.check() or the REST endpoint in your except block.	pip install ahn-client

Limits

• It acts only after a failure. A tool that returns the text of a 403 page as an ordinary result is not a failure to the framework, so no adapter sees it: make the tool raise (response.raise_for_status()) or report an error. The Claude Code plugin likewise does not look up a browser step that "succeeds" but shows a block page, or curl run through Bash; use the ahn-lookup skill or the MCP tool by hand.
• A failure that is not a block or an outage (404, 422, a typo in an address) adds nothing, and the run goes on as it would have.
• The answer is declared policy and published sources, not an access guarantee, and no_reports does not mean a site works (see What the answer contains).
• The first lookup of a host can come back with access_profile.freshness: pending: ask once more after retry_after_seconds, do not poll. A subdomain or tenant host answers profile_not_read: look up the apex host.
• It never attempts your task (see What we read and never do).

REST and MCP reference

People can copy the full agent instructions from the Human page and paste them into an agent chat. The public site opens on the agent guide; the Agent | Human switch at the top right leads to the human search page, which shows declared policy, llms.txt, official path, provider status, and observations in that order.

• REST: GET https://agenthelpnetwork.com/v1/incidents/check?site_host=<public hostname> Optional: error_class (site_access, login_auth, human_verification, service_error), failure_stage (before_target_response, response_observed, access_denial_observed, unknown), task_step (send status_check for a pure up/down check; a lookup after a failure should send error_class and failure_stage instead), window_hours (1–168, default 24), and four optional lookup codes the client already knows: http_status (401, 402, 403, 407, 408, 429, 451 or 500–599), challenge (header, none), retry_after (none, lt_60, 60_3600, gt_3600), via (http_fetch, browser, unknown). They are counted per host and hour and never change the answer (see the contract). One more optional code does change it: agent_vendor (openai, anthropic, google, perplexity, meta, mistral, amazon, microsoft, apple, duckduckgo, diffbot, exa, or other), the vendor whose robots.txt token your own web requests send. The recommendation then reads that vendor's tokens; leave it out when unsure. It is not counted or stored, and a value outside the list is ignored (contract).
• MCP (streamable HTTP): https://agenthelpnetwork.com/mcp — tool check_incident (read-only, idempotent), rate_last_lookup (optional: after a blocked lookup, sends back its one-time feedback token with whether the next attempt worked; no hostname) and the optional report_observation.
• Agent entry points: /llms.txt · /agent-instructions.txt · /openapi.json

What the answer contains

Three layers, read separately:

1. access_profile — declared policy. Rules per agent token from the host's own robots.txt (RFC 9309 precedence with lenient prefix matching of user-agent names of 3+ characters) and whether it publishes llms.txt. The token table is AGENT_USER_AGENTS in ahn/access_profile.py: each token's spelling and kind (user_agent, search_crawler, training_crawler) follows the vendor's own documentation, whose address is recorded in AGENT_SOURCES; tokens that no vendor page confirms are listed in UNCONFIRMED_AGENT_TOKENS (all training crawlers, so they never count as a block). This is what the host declares, not an access guarantee: CDNs, bot filters, logins, and rate limits can treat a user-directed agent differently from a crawler. If robots_status is not ok, the layer is inconclusive, not a block — except refused (the host's edge refused even a plain robots.txt read), which the recommendation treats as a hint to prefer the official path. access_profile.content_use adds the content-use preferences the same robots.txt declares (Cloudflare Content-Signal, IETF AIPREF Content-Usage), normalized to yes/no/unset; they are information only and never change the recommendation. access_profile.site_declared (D59) lists what the host publishes for agents at standard locations, read only where its robots.txt allows: its API catalog (RFC 9727 /.well-known/api-catalog), its text-and-data-mining reservation (W3C TDMRep /.well-known/tdmrep.json and response headers), and, experimentally, the MCP servers in its AI Catalog (/.well-known/ai-catalog.json); also information only.
2. official_paths and provider status — the official route and whether it is up. official_paths is a curated table of publisher-owned API documentation and developer portals for sites that people or agents open to do work; CDN, ad-tech, asset, and link-shortener hosts are left out. provider_status is the provider's own status feed (with source and fetch time) when one is verified for the host; official_status_page links a publisher status page that has no readable feed and is never turned into a reading. Both status mappings are curated by hand from pages the publisher owns or links to (how status sources are curated). A missing entry does not mean no official path exists, and listing is not an endorsement or affiliation.
3. observations — optional reports from other agents. no_reports is the normal case and means no matching published observations, not a healthy site. One failure is not an outage; a later success is not general recovery. current_site_status is always unknown.

Where it applies, a fourth, separate field adds registry facts about the domain: host_facts says which public government domain list names the host (the U.S. .gov list, CC0, or the UK .gov.uk list, Open Government Licence v3.0), the organisation that list gives, and whether the suffix (.gov, .gov.uk, .go.kr) is reserved for government bodies. It is a fact about who registered a name, not a judgement about any site, page or link, and it never changes recommendation. It is left out for every other host.

recommendation.action condenses the declared and official layers into one action. Observations never change it. The first matching row wins:

action	When	confidence
wait_provider_incident	A fresh provider feed reports an active minor, major, critical, or maintenance status, and it rests on an announced incident or maintenance (provider_status.basis is not components_only), or the page reads major or critical even with nothing announced. Incidents that have had no update for more than 7 days, with no maintenance in progress, are not a reason to wait unless a major or critical page stands above them (provider_incident_stale). Neither is a minor page with no incident list behind it (no basis) from an Instatus or Google Gmail feed (provider_status.source_time: active_items) whose active incidents and maintenances were last updated more than 7 days ago (provider_incident_stale, D54); a page whose time is the page's own (Atlassian Statuspage, incident.io, Better Stack) keeps waiting however old that time is; with no usable update time such a page still waits, with low confidence (provider_update_time_unknown). When every affected component is a region or point of presence (provider_scope_partial), the wait has low confidence. When the status rests only on maintenance in progress and no incident is announced (basis is maintenance, active_incidents is 0), the wait and its confidence are unchanged, and provider_maintenance_only says so (D55). Where we read only a page's public incident history (provider_status.source_kind: history_atom, no severity level), an open incident updated within 7 days waits with low confidence (provider_history_incident, D57); an older one, one with no usable time, or a feed window that may miss incidents (window_blind) does not.	medium (low when regional-only, for a minor page with no update time, or from an incident history)
hand_off_to_human	error_class is human_verification (high) or login_auth (medium).	high / medium
use_official_path	A declared block (below) and an official path is listed.	high
stop_declared_block	A declared block and no official path is listed. Stop automated retries against pages.	medium
use_official_path	The host's edge refused the robots.txt read (robots_status: refused) and an official path is listed.	medium
hand_off_to_human	refused, no official path is listed, and the caller reported error_class=site_access (no failure_stage or access_denial_observed): reasons edge_refusal_robots, robots_fetch_refused (D85, D98).	medium
hand_off_to_human	The caller reported error_class=service_error (a 5xx or no response) and the answer would be unknown with no page of the site named to try instead (no official path, or only a developer path that is reference), or a customer page on the site that did not answer after no response at all: reasons as before, then no_path_after_failure (D101). The first line tells the user now and says they can open the page themselves; it never offers another try (D111).	low
unknown	refused and no official path is listed, with no such failure reported (reason robots_fetch_refused). Page automation from a similar environment may be refused too.	medium
use_official_path	A partial block or a wildcard-only disallow (below) and an official path is listed.	medium
unknown	A partial block or a wildcard-only disallow and no official path is listed (reasons robots_blocks_some_agents, robots_names_vendor_alias, robots_wildcard_disallow). Do not read it as permission.	low
use_official_path	An official path is listed and error_class is absent, site_access, or service_error (with D63, only when a failure signal was sent or robots is not clear; with the D66 mode, which the live service runs, a lookup that sends no failure signal and no task_step of status_check or preflight is treated as if it had sent site_access, so it reaches this row too).	medium
proceed	robots.txt was read and declares no block for the tokens the answer was decided on (robots_allows_agents, or robots_blocks_not_your_agent when only other agents' tokens are blocked). Declared allow is still not an access guarantee. Also when no robots.txt is published (absent). proceed means no block is declared, not that nothing blocked you: if a page refused you, that came from your tool, the site's edge or a login, so tell your user (a refusal from the site's own robots.txt or edge is not a reason to retry with another tool or user agent). next_action.url is null for proceed (D65); a curated customer page stays in customer_url. A lookup that only checks whether a site is up, with nothing refused, should send task_step=status_check and gets the answer it would have before D66.	low
unknown	No declared policy could be read (reason robots_unknown), or the hostname is a subdomain or tenant host whose policy is not read (reason profile_not_read; look up the apex host). No declaration is known; it is neither a block nor a declaration of no restriction.	low

reasons are codes that also appear in next_checks. "An official path is listed" means the official_paths entry has api_docs or developer_portal; an entry with only a note does not count. A declared block (D48) is a robots.txt group that disallows the root and names the governing token of your vendor (agent_vendor: its user-directed fetcher, or its search crawler when it documents none), or, when no vendor was sent, of every listed vendor. When a vendor was not sent and only some vendors are blocked, that is a partial block: the answer is unknown (or the official path with medium confidence) with robots_blocks_some_agents, which means stop if your requests identify as a token in agents_blocked. A group that names a vendor's agent only under a retired or variant name (robots.vendor_aliases_blocked, for example claude-web) gives robots_names_vendor_alias, never proceed. A wildcard-only disallow is a file whose * group disallows the root (User-agent: * with Disallow: /) while at least one agent user-agent or search-crawler token is named by no group and so falls under that wildcard, and no group that names such a token disallows the root (that would be a declared block). Groups that name and allow a token, and training-crawler blocks, do not change this; it is not a declared block, is reported as robots_wildcard_disallow, and is never read as "allows agents". agents_blocked lists every token with an explicit root disallow, including training crawlers, but training crawlers do not count as a declared block. In the example above, Bytespider (a training crawler) is blocked, but because training crawlers do not count as a declared block, the medium-confidence official-path row applies.