dev.tanod/security

up checked 2026-11-11T08:40:17.768Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

Pre-transaction Safety Checks (Tanod)

Publisher-provided description

Safety checks before you sign, pay or install: contract, token and package scans, phishing, OFAC.

Summary by lookupd

Screens crypto addresses, tokens, contracts, URLs and packages for scams, sanctions, phishing and security bugs before transactions or…

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http security https://tanod.dev/mcp/security

Codex, remote (streamable-http)

codex mcp add security --url https://tanod.dev/mcp/security

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "security": {
      "url": "https://tanod.dev/mcp/security"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (28 tools)

Publisher-provided text

scan_contract_source pactlint: Scan Solidity source code for security bugs before you deploy, review or depend on it. For a deployed verified contract use scan_contract_address. Run
scan_contract_address pactlint: Scan a deployed, verified contract on Ethereum or Base for security bugs, by address. For source you hold use scan_contract_source. Fetches the verifi
check_contract_before_interaction txpeek: Check an address for risk right before you send a transaction to it, approve it, or buy its token (Base or Ethereum). For a full scan of verified source
check_token_honeypot chainpeek: Honeypot check: can this token be sold? Simulated buy and sell with tax. For a verdict that adds contract flags use check_token_safety. Returns a sim
check_token_safety chainpeek: Use when an agent needs a token risk check before buying an ERC-20 on Base or Ethereum, with a plain-language take. For a written summary and share c
token_verdict chainpeek: Token risk verdict in plain language for a Base or Ethereum token, with a shareable card. For the simulation alone use check_token_honeypot. Returns
check_solana_token_safety chainpeek: Check a Solana token for rug risk: mint and freeze authority, top holders, sell quote. For authorities alone use get_solana_token_info; for ERC-20 to
scan_agent_package toolsniff: Scan an AI-agent skill or MCP server package before installing it. To see whether a remote MCP server answers use check_mcp_server. Reads every file
check_url_phishing chainpeek: Check if a URL or domain is phishing or a scam. For up to 1,000 URLs use check_urls_phishing_batch; for headers use check_security_headers. Returns w
check_urls_phishing_batch chainpeek: Check up to 1,000 URLs or domains for phishing or scams in one batch. For one URL use check_url_phishing. Returns the URL check for 1-1,000 URLs, hos
check_sanctions chainpeek: screen one crypto address against the US OFAC SDN list's digital currency addresses. For up to 1,000 addresses use check_sanctions_batch; for lookali
check_sanctions_batch chainpeek: Screen up to 1,000 crypto addresses against OFAC sanctions in one batch. For one address use check_sanctions. Returns the OFAC sanctions screen of 1-
screen_sanctions_name chainpeek: Screen a sanctions name. For crypto addresses use check_sanctions or check_sanctions_batch. Returns ranked name candidates from OFAC SDN, UN, UK and
detect_proxy chainpeek: detect whether a contract is a proxy, and of which kind. For code size and hash use get_contract_code. Reads the code, the EIP-1967 / EIP-1822 / Open
decode_calldata chainpeek: decode EVM transaction calldata. To run a read call use eth_call; to fetch a transaction use get_transaction. Input: `calldata` and optional `signatu
get_allowance chainpeek: read an ERC-20 allowance on Ethereum, Base or Robinhood Chain. For every live approval of a wallet use audit_token_approvals. A token that is not a r
inspect_domain dnspeek: inspect a domain's DNS, email authentication and TLS cert in one call. For registration data use rdap_lookup; for availability use check_domain_availab
check_security_headers sitepeek: grade a public page's HTTP security headers. For a phishing-list check use check_url_phishing; for DNS and TLS use inspect_domain. Grades the final re
verify_email dnspeek: verify an email address before you send to it or accept it at sign-up. For the domain's SPF, DMARC and DKIM use inspect_domain. Checks syntax (practica
get_verification_code dnspeek: Get the verification code or magic link from an email without the email body. To check an address before sending use verify_email. Returns the one-time
rdap_lookup dnspeek: RDAP (the successor of whois) registration lookup. For DNS and TLS use inspect_domain; for an IP's ASN and reverse DNS use ip_lookup. Input: `query`, a
text_unicode_inspect utilpeek: Find invisible, bidi and homoglyph Unicode characters in text. For injected instructions use check_text_for_prompt_injection. Returns a security-orien
check_address_poisoning chainpeek: Check a transfer recipient for address poisoning: lookalikes in the sender's history. For balance, gas and blacklist checks too use transfer_prefligh
audit_token_approvals chainpeek: List a wallet's live token approvals and get revoke transactions. For tokens already pulled out use check_wallet_drain; for one allowance use get_all
check_wallet_drain chainpeek: Check a wallet for a drain: find tokens pulled out without its signature. For live approvals with revoke transactions use audit_token_approvals. Retu
get_wallet_counterparties chainpeek: List a wallet's top counterparties: who an address sends to and receives from, by count and volume. For the raw transfer list use get_erc20_transfers
check_text_for_secrets utilpeek: Scan text for leaked secrets: API keys, tokens, private keys and seed phrases. For personal data use redact_pii; for injected instructions use check_t
repo_info utilpeek: Get health facts for a GitHub repository: activity, licence, dependents, Scorecard. Returns GitHub repository health facts: stars, licence, activity,

Details

Version: 0.1.2
Transports: streamable-http
Uptime (7 days): 100%
Median latency: 1909 ms
First indexed: 2026-11-01T09:01:42.335Z
Last seen in registry: 2026-11-09T14:17:23.812Z
Repository: https://github.com/tanod-labs/tanod-mcp
Website: https://tanod.dev

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/dev.tanod/security.svg)](https://lookupd.com/servers/dev.tanod/security)

62071 servers
Last crawl: 2026-11-11T16:39:06.253Z
API base: https://api.lookupd.com
MCP URL: https://api.lookupd.com/mcp