Skuuy MCP

Returns the caller's public egress IP address with geolocation, ASN/ISP, and datacenter/proxy detection. Use to verify which IP and country your traffic exits from, or to confirm a VPN/proxy is active. No parameters needed.

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

Lists tested-live public proxies (HTTP/HTTPS/SOCKS4/SOCKS5) across 150+ countries, refreshed every 30 minutes. Filter by protocol, country, anonymity tier (L1 Elite = no forwarding headers, L2 Anonymous, L3 Transparent), and max latency. Each entry includes last_checked so you can judge freshness. Free public proxies are inherently unreliable — always implement retry/fallback.

{
  "type": "object",
  "properties": {
    "protocol": {
      "type": "string",
      "enum": [
        "http",
        "https",
        "socks4",
        "socks5"
      ],
      "description": "Proxy protocol filter."
    },
    "country": {
      "type": "string",
      "pattern": "^[A-Z]{2}$",
      "description": "ISO 3166-1 alpha-2 country code, e.g. ID, US, SG."
    },
    "anonymity": {
      "type": "string",
      "enum": [
        "L1",
        "L2",
        "L3"
      ],
      "description": "L1 Elite (no forwarding headers), L2 Anonymous, L3 Transparent."
    },
    "max_latency_ms": {
      "type": "integer",
      "minimum": 1,
      "maximum": 10000,
      "description": "Only proxies tested faster than this."
    },
    "only_tested": {
      "type": "boolean",
      "default": true,
      "description": "If true (default), only proxies that passed the last liveness check."
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 100,
      "default": 20
    },
    "offset": {
      "type": "integer",
      "minimum": 0,
      "default": 0
    }
  },
  "additionalProperties": false
}

Generates a time-based one-time password (RFC 6238 TOTP) from a base32 secret. PRIVACY: the secret is processed ephemerally in memory, never logged or stored. By sending the secret you opt in to server-side generation (the browser vault at 2fa.skuuy.com remains the zero-knowledge alternative). Compatible with Google Authenticator / Authy / Microsoft Authenticator secrets.

{
  "type": "object",
  "properties": {
    "secret": {
      "type": "string",
      "description": "Base32-encoded TOTP secret (spaces/dashes tolerated). REQUIRED."
    },
    "digits": {
      "type": "integer",
      "enum": [
        6,
        8
      ],
      "default": 6
    },
    "period": {
      "type": "integer",
      "enum": [
        30,
        60
      ],
      "default": 30,
      "description": "Time step in seconds."
    },
    "algorithm": {
      "type": "string",
      "enum": [
        "SHA1",
        "SHA256",
        "SHA512"
      ],
      "default": "SHA1"
    }
  },
  "required": [
    "secret"
  ],
  "additionalProperties": false
}

Creates a disposable email inbox for sign-ups and verifications. Inbox self-destructs after TTL (default 30 minutes). Pair with skuuy_read_inbox to poll incoming mail and auto-extracted OTP codes.

{
  "type": "object",
  "properties": {
    "prefix": {
      "type": "string",
      "pattern": "^[a-z0-9._-]{1,32}$",
      "description": "Optional local-part prefix; random if omitted."
    },
    "ttl_minutes": {
      "type": "integer",
      "minimum": 5,
      "maximum": 60,
      "default": 30
    }
  },
  "additionalProperties": false
}

Reads messages in a temp inbox created by skuuy_create_temp_inbox. Each message includes plain-text body and auto-extracted 4-8 digit OTP codes and action links (e.g. password-reset URLs) when detected. Poll this after triggering a verification email.

{
  "type": "object",
  "properties": {
    "inbox_id": {
      "type": "string",
      "description": "ID from skuuy_create_temp_inbox. REQUIRED."
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 50,
      "default": 10
    },
    "offset": {
      "type": "integer",
      "minimum": 0,
      "default": 0
    }
  },
  "required": [
    "inbox_id"
  ],
  "additionalProperties": false
}

Resolves DNS records for a domain. Without 'locations', performs a single edge-resolver lookup. With 'locations', returns a propagation matrix across global edge PoPs (useful to verify DNS changes propagated worldwide). Supports A, AAAA, CNAME, MX, TXT, NS, SOA with DNSSEC validation status.

{
  "type": "object",
  "properties": {
    "domain": {
      "type": "string",
      "format": "hostname",
      "description": "Domain to resolve, e.g. example.com. REQUIRED."
    },
    "types": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "A",
          "AAAA",
          "CNAME",
          "MX",
          "TXT",
          "NS",
          "SOA"
        ]
      },
      "default": [
        "A"
      ],
      "maxItems": 7
    },
    "locations": {
      "type": "array",
      "items": {
        "type": "string",
        "pattern": "^[A-Z]{2}$"
      },
      "description": "Optional ISO country codes for propagation matrix, e.g. [\"ID\",\"US\",\"SG\",\"DE\"]. Max 10.",
      "maxItems": 10
    }
  },
  "required": [
    "domain"
  ],
  "additionalProperties": false
}

Checks whether common service ports are open (TCP connect) on a host. ABUSE GUARD: only a fixed allowlist of common ports may be tested (22 SSH, 80 HTTP, 443 HTTPS, 3306 MySQL, 5432 Postgres, 6379 Redis, 51820 WireGuard). Arbitrary port ranges are rejected. Strictly rate-limited. Intended for diagnosing your own deployments and firewall/NAT traversal — not for scanning third parties.

{
  "type": "object",
  "properties": {
    "host": {
      "type": "string",
      "format": "hostname",
      "description": "Hostname or IP to probe. REQUIRED."
    },
    "ports": {
      "type": "array",
      "items": {
        "type": "integer",
        "enum": [
          22,
          80,
          443,
          3306,
          5432,
          6379,
          51820
        ]
      },
      "default": [
        80,
        443
      ],
      "maxItems": 7,
      "description": "Only allowlisted ports accepted."
    }
  },
  "required": [
    "host"
  ],
  "additionalProperties": false
}

Audits a URL's security posture: security headers (HSTS, CSP, X-Frame-Options, Permissions-Policy, etc.), full redirect chain, and TLS certificate health (issuer, expiry, days remaining). Use for pre-deploy checks or auditing any site's hardening.

{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "format": "uri",
      "description": "https:// URL to audit. REQUIRED."
    },
    "follow_redirects": {
      "type": "boolean",
      "default": true,
      "description": "Trace redirect chain up to 10 hops."
    }
  },
  "required": [
    "url"
  ],
  "additionalProperties": false
}

Fetches any public URL and returns clean markdown (ads, cookie banners, nav chrome, and script tags stripped; JS-rendered pages rendered best-effort). Privacy: zero-log, the fetch is not associated with you. Honest scope: soft paywalls and JS pages handled best-effort; hard anti-bot challenges (interactive CAPTCHA) are not bypassed.

{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "format": "uri",
      "description": "Page URL to read. REQUIRED."
    },
    "format": {
      "type": "string",
      "enum": [
        "markdown",
        "text"
      ],
      "default": "markdown"
    },
    "timeout_s": {
      "type": "integer",
      "minimum": 5,
      "maximum": 60,
      "default": 20
    }
  },
  "required": [
    "url"
  ],
  "additionalProperties": false
}

Creates an ephemeral webhook-catcher URL (bin.skuuy.com/w/<id>) that records incoming HTTP requests with full headers and body. Point a third-party callback (Stripe, GitHub, your own API) at it while debugging, then inspect with skuuy_get_bin_requests. Auto-deleted after TTL.

{
  "type": "object",
  "properties": {
    "ttl_minutes": {
      "type": "integer",
      "minimum": 5,
      "maximum": 1440,
      "default": 60,
      "description": "Bin lifetime. Max 100 captured requests, 1 MB per request body."
    }
  },
  "additionalProperties": false
}

Lists HTTP requests captured by a webhook bin created with skuuy_create_webhook_bin: method, headers, query params, and body (truncated at 1 MB). Poll this after triggering the callback you are debugging (allow ~3-5 seconds for edge KV propagation).

{
  "type": "object",
  "properties": {
    "bin_id": {
      "type": "string",
      "description": "Bin ID from skuuy_create_webhook_bin. REQUIRED."
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 100,
      "default": 20
    },
    "offset": {
      "type": "integer",
      "minimum": 0,
      "default": 0
    }
  },
  "required": [
    "bin_id"
  ],
  "additionalProperties": false
}

One-shot hashing/encoding utilities: SHA-256, SHA-512, Base64 encode/decode, UUID v4, and cryptographically random password generation. (MD5 included for legacy checksum verification only — do not use for security.)

{
  "type": "object",
  "properties": {
    "operation": {
      "type": "string",
      "enum": [
        "sha256",
        "sha512",
        "md5",
        "base64_encode",
        "base64_decode",
        "uuid4",
        "password"
      ],
      "description": "REQUIRED."
    },
    "input": {
      "type": "string",
      "description": "Input string (not needed for uuid4/password)."
    },
    "length": {
      "type": "integer",
      "minimum": 8,
      "maximum": 64,
      "default": 20,
      "description": "Password length (only for operation=password)."
    }
  },
  "required": [
    "operation"
  ],
  "additionalProperties": false
}

Searches the Skuuy public API catalog. Call this FIRST when you are unsure which Skuuy tool fits your task — it returns matching tools with their MCP tool name, HTTP endpoint, and parameter summary.

{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "Keywords, e.g. 'email otp', 'proxy', 'dns'."
    },
    "category": {
      "type": "string",
      "enum": [
        "network",
        "privacy",
        "auth",
        "web",
        "utility"
      ]
    }
  },
  "additionalProperties": false
}