io.github.presendapp/presend-mcp
up checked
Unclaimed · Unverified
Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.
Publisher-provided title
Presend MCP Server
Publisher-provided description
Before an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks.
Summary by lookupd
Checks packages, domains, emails, passwords, IPs and crypto addresses for security risks, typosquats and vulnerabilities before…
Install
Claude Code, remote (streamable-http)
claude mcp add --transport http presend https://presend.pages.dev/mcp
Codex, remote (streamable-http)
codex mcp add presend --url https://presend.pages.dev/mcp
Cursor, remote (streamable-http) → .cursor/mcp.json
{
"mcpServers": {
"presend": {
"url": "https://presend.pages.dev/mcp"
}
}
}Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.
Tools (showing 30 of 40)
Publisher-provided text
address_riskScreens a crypto address against every OFAC SDN digital currency address list. EVM (0x...) and Bitcoin (bc1..., 1..., 3...) addresses are fully covered (sanctioai_crawler_checkFetches a domain's robots.txt and reports which known AI crawlers (GPTBot, ClaudeBot, PerplexityBot, Google-Extended, CCBot and others) are allowed or blocked,base64Encodes text to Base64 or decodes a Base64 string back to text (action = encode or decode).colorConverts a color between hex, RGB and HSL. Provide exactly one of hex, rgb or hsl.csv_jsonConverts CSV text to JSON or JSON to CSV (direction: csv-to-json or json-to-csv), for data passed inline. CSV must be comma-separated, with a header row and atcve_lookupLooks up a vulnerability by identifier (CVE, GHSA or other OSV ID) on OSV.dev: summary, CVSS severity, affected packages and versions, references. Use when youdns_lookupReturns DNS records for a domain via Cloudflare DNS-over-HTTPS: A, AAAA, CNAME, MX, TXT and NS in one call, or a single record type with 'type'. For registratioemail_disposableChecks only whether an email address uses a known disposable/temporary email domain. For syntax, MX, disposable and role-account checks in one call, use email_vemail_securityAudits a domain's email anti-spoofing setup: SPF strength, DMARC policy and a best-effort DKIM lookup on common selectors. A missing DKIM match does not prove Demail_validateLightweight email check: syntax plus confirmation that the domain has an MX record. Does not detect disposable or role addresses; use email_verify for the combiemail_verifyMost complete email check in one call: syntax, MX record, disposable-domain detection and role/generic account detection (e.g. info@, admin@). Prefer it over emfaviconReturns the favicon URL a website declares: fetches the homepage and takes the first <link rel='icon'> (or 'shortcut icon') href, resolved to an absolute URL, wiban_validateValidates an IBAN offline: ISO 7064 mod-97 checksum and country-specific length. Confirms the number is well-formed, not that the account exists.ip_reputationChecks an IPv4 or IPv6 address against a curated list of netblocks known to be hijacked or run by spam/cyber-crime operations (IPv4-mapped IPv6 uses the IPv4 lijwt_decodeDecodes a JWT's header and payload WITHOUT verifying its signature, so its claims must not be trusted on this basis alone. To check authenticity, use jwt_verifyjwt_verifyCryptographically verifies a JWT signature (HS256/384/512, RS/PS256/384/512, ES256/384/512) and checks exp/nbf claims. Provide a secret for HS*, or a JWK or JWKlink_metadataFetches a web page and extracts its title, description, canonical URL, Open Graph and Twitter Card tags and favicon (the data behind link previews). Follows redmaintainer_change_checkPublisher-change analysis is npm only. Also reports whether the package exists (found) and its age (first_published, package_age_days, new_package if first publpasswordGenerates a random password, with options for length, symbols, uppercase, numbers and excluding ambiguous characters. To evaluate an existing password, use passpassword_breachChecks whether a password appears in known data breaches (Have I Been Pwned) and how many times, using k-anonymity towards HIBP. Breach check only; password_chepassword_checkScores a password's strength (length, character variety, entropy as an upper bound, repeated patterns; passphrases are estimated per word) and, with check_breacphone_verifyValidates and formats a phone number: validity, country, line type, E.164, international and national formats. Numbers without a leading + require 'country', siredirect_traceFollows a URL's full redirect chain (up to 15 hops) and returns every hop with its status code, plus whether the chain crossed domains. Use it to see where a shrepo_health_checkMaintenance signals for a GitHub repository given as owner/name: stars, forks, open issues, license, archived and fork flags, creation date and age, days sincerpc_checkRead-only audit of a public CometBFT (Cosmos SDK) RPC endpoint: node status, health, peers, and whether unsafe admin methods (dial_seeds, dial_peers, unsafe_flusecurity_headersAudits the HTTP security headers of one URL (CSP, HSTS, X-Frame-Options, Permissions-Policy, cross-origin policies and others) and returns per-header findings wsecurity_scanCombined website check in one call: security headers, URL reputation and passive subdomain discovery, run in parallel, with an overall score and verdict. Use thsubdomainsPassive subdomain discovery from Certificate Transparency logs (crt.sh): finds hostnames that appeared in public TLS certificates, not every DNS record. crt.shsupply_chain_checkCall this before installing or adding a package (npm install, pip install, a new entry in a manifest), especially one whose name you recalled or that a model sutext_similarityNear-duplicate detection with a 64-bit SimHash over word shingles: send 1 text to get its hash, or 2 texts to compare them. Detects paraphrased or lightly edite
Details
- Version: 3.1.2
- Transports: streamable-http
- Uptime (7 days): 100%
- Median latency: 314 ms
- First indexed:
- Last seen in registry:
- Repository: https://github.com/presendapp/presend-source
Badge for your README
Shows this live status and links here; updates hourly.
[](https://lookupd.com/servers/io.github.presendapp/presend-mcp)
- 62033 servers
- Last crawl: 2026-11-11T15:38:39.561Z
- API base:
https://api.lookupd.com - MCP URL:
https://api.lookupd.com/mcp