MCP server

Tanod Security Official

dev.tanod/security

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.

Website

At a glance

Type

MCP server

Publisher

tanod.dev (verified by the MCP Registry)

Status

Working at last check

Tools

27

Token cost

About 11,974 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http security https://tanod.dev/mcp/security

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.security]
url = "https://tanod.dev/mcp/security"

Gemini CLI

{"mcpServers":{"security":{"httpUrl":"https://tanod.dev/mcp/security"}}}

Cursor

{"mcpServers":{"security":{"url":"https://tanod.dev/mcp/security"}}}

VS Code

{"servers":{"security":{"type":"http","url":"https://tanod.dev/mcp/security"}}}

Antigravity

agy mcp add security https://tanod.dev/mcp/security

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"security","server_url":"https://tanod.dev/mcp/security","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"security","server_url":"https://tanod.dev/mcp/security"}

Tools

• audit_token_approvals ~746 tokens
  chainpeek: List a wallet's live token approvals and get revoke transactions. For tokens already pulled out use check_wallet_drain; for one allowance use get_allowance. Returns the live ERC-20 and Permit2 allowances of `wallet`: amount, `unlimited`, spender code (key-controlled, contract, new contrac
• check_address_poisoning ~766 tokens
  chainpeek: Check a transfer recipient for address poisoning: lookalikes in the sender's history. For balance, gas and blacklist checks too use transfer_preflight; for OFAC use check_sanctions. Returns a `risk` (high | medium | low) for paying `to`: reads `from`'s transfers of one token (default USDC
• check_sanctions_batch ~378 tokens
  chainpeek: Screen up to 1,000 crypto addresses against OFAC sanctions in one batch. For one address use check_sanctions. Returns the OFAC sanctions screen of 1-1,000 crypto addresses in one call. EVM and bech32 addresses match case-insensitively, other formats exactly as listed. US OFAC SDN digital-
• check_security_headers ~349 tokens
  sitepeek: grade a public page's HTTP security headers. For a phishing-list check use check_url_phishing; for DNS and TLS use inspect_domain. Grades the final response after redirects: HSTS, CSP, X-Frame-Options / frame-ancestors, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP
• check_solana_token_safety ~458 tokens
  chainpeek: Check a Solana token for rug risk: mint and freeze authority, top holders, sell quote. For authorities alone use get_solana_token_info; for ERC-20 tokens use check_token_safety. Returns a check of the mint: mint and freeze authority, Token-2022 risks (transfer fee, permanent delegate, tra
• check_text_for_secrets ~382 tokens
  utilpeek: Scan text for leaked secrets: API keys, tokens, private keys and seed phrases. For personal data use redact_pii; for injected instructions use check_text_for_prompt_injection. Returns every API key, token, private key or BIP-39 seed phrase in a text (AWS, GitHub, GitLab, Stripe, Slack, Goo
• check_token_honeypot ~475 tokens
  chainpeek: Honeypot check: can this token be sold? Simulated buy and sell with tax. For a verdict that adds contract flags use check_token_safety. Returns a simulated buy and sell-back of an ERC-20 on Base or Ethereum (Uniswap V2/V3, Aerodrome): `honeypot` (true, false or "unknown"), can_buy, can_se
• check_token_safety ~393 tokens
  chainpeek: Use when an agent needs a token risk check before buying an ERC-20 on Base or Ethereum, with a plain-language take. For a written summary and share card use token_verdict; for Solana use check_solana_token_safety. Returns one verdict with reasons and a one-sentence plain-language summary,
• check_url_phishing ~416 tokens
  chainpeek: Check if a URL or domain is phishing or a scam. For up to 1,000 URLs use check_urls_phishing_batch; for headers use check_security_headers. Returns whether a URL's host (or a domain) is on public phishing/scam domain lists: `listed`, the `matched_domain`, the `sources` that list it and `s
• check_urls_phishing_batch ~348 tokens
  chainpeek: Check up to 1,000 URLs or domains for phishing or scams in one batch. For one URL use check_url_phishing. Returns the URL check for 1-1,000 URLs, hosts or domains in one call. A screening aid: the host and its parent domains are matched against two public lists, PhishDestroy (CC0) and Phi
• check_wallet_drain ~526 tokens
  chainpeek: Check a wallet for a drain: find tokens pulled out without its signature. For live approvals with revoke transactions use audit_token_approvals. Returns a `verdict` (drained | review | clean) for `wallet` over the latest 2,000 blocks: each transfer out of USDC and USDT (or up to 5 tokens)
• get_verification_code ~407 tokens
  dnspeek: Get the verification code or magic link from an email without the email body. To check an address before sending use verify_email. Returns the one-time code(s) and verification link(s) from a raw email or text, the sender domain, SPF/DKIM/DMARC results from its Authentication-Results header
• get_wallet_counterparties ~461 tokens
  chainpeek: List a wallet's top counterparties: who an address sends to and receives from, by count and volume. For the raw transfer list use get_erc20_transfers. Returns who `address` transacts with over the latest `days` days (1-90; default 30) of ERC-20 transfers; plus `tokens`, `summary` and `win
• inspect_domain ~300 tokens
  dnspeek: inspect a domain's DNS, email authentication and TLS cert in one call. For registration data use rdap_lookup; for availability use check_domain_availability. Returns DNS records, SPF/DMARC/DKIM/MTA-STS findings with a deliverability score_out_of_8, and the cert (expiry, SANs, key, trust). T
• rdap_lookup ~357 tokens
  dnspeek: RDAP (the successor of whois) registration lookup. For DNS and TLS use inspect_domain; for an IP's ASN and reverse DNS use ip_lookup. Input: `query`, a domain, an IPv4 or IPv6 address or an AS number. For a domain: registrar (name, IANA id), created / updated / expires, status, nameservers,
• repo_info ~378 tokens
  utilpeek: Get health facts for a GitHub repository: activity, licence, dependents, Scorecard. Returns GitHub repository health facts: stars, licence, activity, latest release, dependents and OpenSSF Scorecard. Data: ecosyste.ms (CC BY-SA 4.0), OpenSSF Scorecard (CDLA-Permissive-2.0); answer CC BY-SA
• scan_contract_address ~556 tokens
  pactlint: Scan a deployed, verified contract on Ethereum or Base for security bugs, by address. For source you hold use scan_contract_source. Fetches the verified source from Sourcify. Runs solc, Slither and custom DeFi detectors (unchecked ERC-20 returns, zero slippage limits, oracle misuse, ERC-46
• scan_contract_source ~707 tokens
  pactlint: Scan Solidity source code for security bugs before you deploy, review or depend on it. For a deployed verified contract use scan_contract_address. Runs solc, Slither and custom DeFi detectors (unchecked ERC-20 returns, zero slippage limits, oracle misuse, ERC-4626 inflation, signature repl
• text_unicode_inspect ~505 tokens
  utilpeek: Find invisible, bidi and homoglyph Unicode characters in text. For injected instructions use check_text_for_prompt_injection. Returns a security-oriented Unicode inspection: `risk` (low / medium / high) with reasons; invisible characters (zero-width, tag characters that can smuggle prompt-
• token_verdict ~498 tokens
  chainpeek: Token risk verdict in plain language for a Base or Ethereum token, with a shareable card. For the simulation alone use check_token_honeypot. Returns a plain-language verdict (high_risk, caution, no_major_flags_found or unknown) on an ERC-20 with reasons, a 2-3 sentence summary, metrics (s
• verify_email ~282 tokens
  dnspeek: verify an email address before you send to it or accept it at sign-up. For the domain's SPF, DMARC and DKIM use inspect_domain. Checks syntax (practical RFC 5322 / 5321 limits, IDNA domains), MX records, null MX (RFC 7505), the A/AAAA fallback (RFC 5321), whether an MX host resolves to a pu

Browse

• GitHub tools
• Stripe tools
• Domains and DNS
• Converting to Markdown
• Email
• Team chat

Related MCP servers

• Automaton Onchain Tools
  Paid x402 crypto safety tools (Base/ETH/BSC): tx, approvals, contract risk, token deep scan.
• x402 & MCP Server Index (Tanod)
  x402 endpoint and MCP server index: find paid APIs for agents, x402 checks and price benchmarks.
• Agent Kiosk — 23-in-1 B2A Intelligence, Action & x402 API
  23-in-1 MCP server: EVM tx simulator, funding rate arb, macro radar, swap calldata & security.
• Nslookup
  DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks
• Wicked MCP
  Whole Wicked suite for agents: market data, SEC filings, wallet checks, risk, identity, memory.
• Truedge Crypto Safety
  Free crypto scam checks: token and contract risk, scam or sanctioned addresses, phishing links.
• Tanod Chain
  EVM and Solana reads: balances, tokens, eth_call, logs, receipts, gas, blocks, transactions, ENS.
• UXUS Agent Services: wallet lookup, entity labels, caller ID
  Free wallet lookup, ENS, labels, caller ID. Paid x402: search, scrape, XRP yield and lending grades

Badge for your README

[![AptLynx](https://aptlynx.net/badge/dev.tanod/security.svg)](https://aptlynx.net/servers/dev.tanod/security)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents