Maskbreak

com.maskbreakPublished by maskbreak.comv0.1.8Updated Oct 24, 2026

Public IP signals (cloud hosting, Tor exits) and Maskbreak API status for fraud checks.

VerifiedSTDIODesktop onlyWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Maskbreak is a local MCP server that lets an assistant look up public IP signals — cloud hosting and Tor exit nodes — and check Maskbreak API status for fraud-s

What you can do
Look up a public IPv4 or IPv6 address for known status, an allow/review/block verdict, a risk score, and nullable signal and network metadata, limited to cloud-hosting and Tor public feeds. Check Maskbreak API health, uptime and latency. Neither tool performs a browser visit, so VPN/proxy and device evidence are out of scope.
When to use it
Useful when an assistant needs a quick public-feed fraud signal on an IP address, such as screening a signup or login source, or checking whether the Maskbreak API is reachable and responsive. Not suited to full device or proxy evaluation.
Requirements
Runs as a local stdio process via npx, requiring Node.js 18 or later. A Maskbreak API key in MASKBREAK_API_KEY is recommended to unlock the plan allowance; without it, lookups use a rate-limited keyless endpoint. The older SENTINEL_API_KEY name is still read, and SENTINEL_BASE_URL can override the API base URL for testing. Network access to the Maskbreak API is needed.
Before you install
The API key is a secret passed in the environment; keep it out of shared configs. Keyless mode is limited to 12 lookups per minute and 80 per day per caller IP, and additional endpoint and abuse-protection limits may apply. Paid plans start at €29 a month. Unknown IPs, false signals and allow verdicts are not proof of safety, and a failed lookup is not an allow decision. IP addresses are sent to Maskbreak.

Installation

In SourceWeft

  1. Open Maskbreak in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Maskbreak MCP Server

Look up limited public IP intelligence — cloud-hosting ranges and Tor exit nodes — from Claude, Cursor, or another MCP client. Powered by the Maskbreak fraud detection API. Requires Node.js 18+ for the local server.

Tools

ToolWhat it does
lookup_ipPublic IPv4/IPv6 lookup: known, allow / review / block, risk score, and nullable signal/network metadata. Public-feed coverage is limited to cloud hosting and Tor.
service_statusMaskbreak API health, uptime, and latency

Setup

Grab a free API key at maskbreak.com/signup (the Free plan includes 100,000 IP lookups a month, no card; paid plans from €29 a month raise it). Keyless mode uses the free web-tool endpoint, limited to 12 lookups/minute and 80/day per caller IP. Additional endpoint and abuse-protection limits can apply.

Neither mode performs a browser visit. VPN/proxy and device evidence require a browser-SDK-backed /v1/evaluate request outside these tools; service names are available only when known. Unknown IPs, false signals and allow verdicts are not proof of safety.

Claude Code

bash
claude mcp add sentinel -e MASKBREAK_API_KEY=sk_live_your_key -- npx -y @sentinelsup/mcp

Claude Desktop

Add to claude_desktop_config.json:

json
{  "mcpServers": {    "sentinel": {      "command": "npx",      "args": ["-y", "@sentinelsup/mcp"],      "env": { "MASKBREAK_API_KEY": "sk_live_your_key" }    }  }}

Cursor / other MCP clients

Any client that speaks stdio MCP works the same way: command npx, args ["-y", "@sentinelsup/mcp"], env MASKBREAK_API_KEY.

Hosted endpoint (no install)

Prefer a remote server? The same tools are hosted at https://maskbreak.com/mcp (Streamable HTTP). Point any URL-based MCP client at it; pass your API key as an Authorization: Bearer header for full quota.

Example

"What public-feed evidence is available for this IP?"

Illustrative unknown-IP response, not a live lookup:

json
{  "ip": "192.0.2.1",  "known": false,  "verdict": "allow",  "risk_score": 0,  "signals": null,  "network": null}

Environment

VariableRequiredDefaultPurpose
MASKBREAK_API_KEYrecommended—API key from your dashboard; unlocks your plan's lookup allowance (100,000 a month on the Free plan). Since v0.1.5; the older SENTINEL_API_KEY name is still read
SENTINEL_BASE_URLnohttps://maskbreak.comOverride for testing

Failures and local checks

Both tools return MCP isError: true for HTTP failures, malformed responses or requests that exceed the five-second timeout (including body reads). An unavailable lookup is not an allow decision.

bash
npm ci --ignore-scriptsnpm testnpm pack --dry-run --ignore-scriptsnpm audit

Tests use a real stdio MCP client with loopback HTTP fixtures, without production keys. CI checks Node.js 18, 22 and 24. No package is published by these checks.

Links

MIT © Sentinel Edge Networks LTD

Source: README.md at commit 0fd2410

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

3
  1. v0.1.8LatestOct 17, 2026
  2. v0.1.7Sep 30, 2026
  3. v0.1.6Sep 24, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts