Skip to content

Connect an agent to Toolstash

One connection for AI agents such as Claude Code, Cursor or your own scripts. Without a key an agent can search the AI tools directory. With your personal key it can also read your saved links and videos, add new ones, sort them into collections and tick videos as watched.

Connect in one line

Paste this into a terminal with Claude Code installed. Swap tsk_your_key for your own key, which is on your account page under Agent access.

claude mcp add --transport http toolstash https://toolstash.xyz/api/mcp --header "Authorization: Bearer tsk_your_key"

Other agents that speak MCP (Cursor, Claude Desktop, Windsurf) take the same address and header in their settings file:

{
  "mcpServers": {
    "toolstash": {
      "url": "https://toolstash.xyz/api/mcp",
      "headers": {
        "Authorization": "Bearer tsk_your_key"
      }
    }
  }
}

Leave the header out and the directory tools still work. The address is https://toolstash.xyz/api/mcp.

What an agent can do

search_toolsOpen to all

Search the public Toolstash directory of AI tools by text, category or price model.

get_toolOpen to all

Get one AI tool from the public directory by its id.

list_collectionsYour key

List your collections of saved links and how many each holds.

list_savedYour key

List your saved links and videos, newest first. Narrow to one collection, one kind (video, article, website) or matching words.

get_transcriptYour key

Get the transcript of one of your saved videos (by its save id), for analysis. transcript is null when none was captured.

save_linksYour key

Save links privately to your Toolstash library, optionally into a collection (made if new). A link you already saved joins the collection instead of being copied. Returns each save's id.

remove_from_collectionYour key

Take some of your saves out of a collection. The saves themselves stay in your library.

mark_watchedYour key

Mark some of your saved YouTube videos watched, or not watched with watched: false (ids from list_saved). The same tick as on the site.

undo_saveYour key

Take back links an agent saved for you in the last 24 hours (ids from save_links). Links you saved yourself are never deleted here.

Example asks: "save all my open YouTube tabs into a collection called Watch later", "list what is in Watch later", "read the transcript of the third one and sum it up", "mark the first two as watched".

Plain web requests

Everything above is also a normal web address, for scripts that do not speak MCP. Send your key in the same Authorization: Bearer header. Replies are JSON.

curl "https://toolstash.xyz/api/v1/tools?search=video&limit=5"
curl -H "Authorization: Bearer tsk_your_key" https://toolstash.xyz/api/v1/me/collections
curl -X POST https://toolstash.xyz/api/v1/me/saved \
  -H "Authorization: Bearer tsk_your_key" -H "Content-Type: application/json" \
  -d '{"urls":["https://www.youtube.com/watch?v=dQw4w9WgXcQ"],"collection":"Watch later"}'
GET/api/v1/toolsOpen to all

Search the AI tools directory (search, category, revenue, sort, limit, offset)

GET/api/v1/tools/{id}Open to all

One tool

GET/api/v1/me/collectionsYour key

Your collections and how many saves each holds

DELETE/api/v1/me/collectionsYour key

Take saves out of a collection: {"collection", "ids"}

GET/api/v1/me/savedYour key

Your saves, newest first (collection, kind, search, limit, offset)

POST/api/v1/me/savedYour key

Save links, optionally into a collection: {"urls", "collection"}

DELETE/api/v1/me/savedYour key

Take back links an agent saved in the last 24 hours: {"ids"}

GET/api/v1/me/transcript?id=Your key

The transcript of one saved video

POST/api/v1/me/watchedYour key

Tick saved videos as watched, or clear with "watched": false: {"ids", "watched"}

What stays safe

  • Only your own saves. A key reads and changes the saves of the account it belongs to and nothing else.
  • New saves are private. Links an agent adds show only in your library, like ones you save yourself.
  • Nothing you saved gets deleted. An agent can take a link out of a collection, and can take back a link it saved itself in the last 24 hours. Removing anything else is up to you, on the site.
  • A wrong key is refused. The reply is 401 with a short reason; it never falls back to the open tools. Each computer can make up to 120 requests a minute.
  • Lost a key? Make a new one on your account page. The old one stops working at once, so update the browser extension too if you use it.