com.allthepossibles/preflight

up checked 2026-11-11T08:39:15.581Z

Unclaimed · Unverified

Publisher-provided title

Preflight

Publisher-provided description

Scans an MCP server for security gaps before your agent connects. Free tier, no signup.

Summary by lookupd

Scans MCP servers, extensions, documents and structured outputs for security risks and hidden instructions before an agent uses them.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http preflight https://preflight.allthepossibles.com/mcp

Codex, remote (streamable-http)

codex mcp add preflight --url https://preflight.allthepossibles.com/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "preflight": {
      "url": "https://preflight.allthepossibles.com/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Publisher-provided text

scan_mcp_server Check an MCP server for real risk signals before trusting it: unauthenticated transport, capability overreach (filesystem/shell/credential access with no scopin
scan_content Check a document or web page for hidden instructions before an agent reads, summarizes, or acts on it: invisible Unicode, obfuscated payloads, and (on Pro) a se
scan_extension Check a VS Code extension or a Claude Skill before installing or trusting it. For a VS Code extension (which runs with full Node.js access and no permission mod
check_output Check a structured output you're about to return or act on for degenerate-answer patterns a schema check can't see: invalid JSON, a placeholder value ('TBD', 'N

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/com.allthepossibles/preflight.svg)](https://lookupd.com/servers/com.allthepossibles/preflight)