Skuuy MCP

io.github.deaabiePublished by GitHub account deaabiev1.0.0Updated Oct 27, 2026

13 privacy-first network, auth & web tools for AI agents — no API key, 60 req/min free.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server bundling 13 privacy-first network, auth and web utilities — IP lookup, proxies, DNS, URL reading, temp inboxes and more — with no API key.

What you can do
  • Check network identity and connectivity: egress IP with geolocation and proxy detection, DNS resolution with global propagation, allowlisted port checks, security-header and TLS audits
  • Find and inspect proxies: list live HTTP/SOCKS proxies filtered by country, anonymity tier and latency
  • Handle auth helpers: generate TOTP codes from a base32 secret, create disposable inboxes and read messages with auto-extracted OTP codes
  • Fetch and share content: read public URLs as clean markdown, create ephemeral pastes and file download links, create webhook bins and list captured requests
  • Run utilities: hashing and encoding (SHA-256/512, Base64, UUID, passwords), search a directory of free public APIs…
When to use it
Useful when an assistant needs quick network diagnostics, disposable email or TOTP handling, clean page text, temporary file or paste sharing, webhook debugging, or keyless blockchain reads without setting up separate accounts.
Requirements
Remote streamable HTTP endpoint at mcp.skuuy.com; no API key, environment variables or headers declared. Free tier is rate-limited (60 requests per minute, plus per-tool daily quotas). Network access to the Skuuy service is required.
Before you install
TOTP generation sends the base32 secret to the server, which is a weaker option than a local zero-knowledge vault. Temp inboxes, pastes, file links and webhook bins are public and ephemeral, so do not put sensitive data in them. Port checks and URL fetches act on third-party hosts. Free-tier quotas are shared across hosted MCP callers.

Installation

In SourceWeft

  1. Open Skuuy MCP in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.deaabie%2Fskuuy-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "skuuy": {
      "type": "http",
      "url": "https://mcp.skuuy.com/mcp"
    }
  }
}

README

This repository has no README.

Tools

16

skuuy_get_egress_ip

Returns the caller's public egress IP address (or caller's connecting IP in hosted mode) with geolocation, ASN/ISP, and datacenter/proxy detection. Use to verify which IP and country your traffic exits from, or to confirm a VPN/proxy is active. No parameters needed.

Takes no parameters.

skuuy_list_proxies

Lists tested-live public proxies (HTTP/HTTPS/SOCKS4/SOCKS5) across 150+ countries, periodically health-checked for latency and anonymity. Filter by protocol, country, anonymity tier (L1 Elite = no forwarding headers, L2 Anonymous, L3 Transparent), and max latency. Each entry includes last_checked so you can judge freshness. Free public proxies are inherently unreliable — always implement retry/fallback.

Parameterslimitoffsetcountryprotocolanonymityonly_testedmax_latency_ms

skuuy_generate_totp

Generates a time-based one-time password (RFC 6238 TOTP) from a base32 secret. PRIVACY: the secret is processed ephemerally in memory, never logged or stored. By sending the secret you opt in to server-side generation (the browser vault at 2fa.skuuy.com remains the zero-knowledge alternative). Compatible with Google Authenticator / Authy / Microsoft Authenticator secrets.

Parametersdigitsperiodsecretrequiredalgorithm

skuuy_create_temp_inbox

Creates a disposable email inbox for sign-ups and verifications. Inbox self-destructs after TTL (default 30 minutes). Pair with skuuy_read_inbox to poll incoming mail and auto-extracted OTP codes.

Parametersprefixttl_minutes

skuuy_read_inbox

Reads messages in a temp inbox created by skuuy_create_temp_inbox. Each message includes plain-text body and auto-extracted 4-8 digit OTP codes and action links (e.g. password-reset URLs) when detected. Poll this after triggering a verification email.

Parameterslimitoffsetinbox_idrequired

skuuy_resolve_dns

Resolves DNS records for a domain. Without 'locations', performs a single edge-resolver lookup. With 'locations', returns a propagation matrix across global edge PoPs (useful to verify DNS changes propagated worldwide). Supports A, AAAA, CNAME, MX, TXT, NS, SOA with DNSSEC validation status.

Parameterstypesdomainrequiredlocations

skuuy_check_ports

Checks whether common service ports are open (TCP connect) on a host. ABUSE GUARD: only a fixed allowlist of common ports may be tested (22 SSH, 80 HTTP, 443 HTTPS, 3306 MySQL, 5432 Postgres, 6379 Redis, 51820 WireGuard). Arbitrary port ranges are rejected. Strictly rate-limited. Intended for diagnosing your own deployments and firewall/NAT traversal — not for scanning third parties.

Parametershostrequiredports

skuuy_check_security_headers

Audits a URL's security posture: security headers (HSTS, CSP, X-Frame-Options, Permissions-Policy, etc.), full redirect chain, and TLS certificate health (issuer, expiry, days remaining). Use for pre-deploy checks or auditing any site's hardening.

Parametersurlrequiredfollow_redirects

skuuy_read_url

Fetches any public URL and returns clean markdown (ads, cookie banners, nav chrome, and script tags stripped; JS-rendered pages rendered best-effort). Privacy: zero-log, the fetch is not associated with you. Honest scope: soft paywalls and JS pages handled best-effort; hard anti-bot challenges (interactive CAPTCHA) are not bypassed.

Parametersurlrequiredformattimeout_s

skuuy_create_webhook_bin

Creates an ephemeral webhook-catcher URL (bin.skuuy.com/w/<id>) that records incoming HTTP requests with full headers and body. Point a third-party callback (Stripe, GitHub, your own API) at it while debugging, then inspect with skuuy_get_bin_requests. Auto-deleted after TTL.

Parametersttl_minutes

skuuy_get_bin_requests

Lists HTTP requests captured by a webhook bin created with skuuy_create_webhook_bin: method, headers, query params, and body (truncated at 1 MB). Poll this after triggering the callback you are debugging (allow ~3-5 seconds for edge KV propagation).

Parameterslimitbin_idrequiredoffset

skuuy_hash_encode

One-shot hashing/encoding utilities: SHA-256, SHA-512, Base64 encode/decode, UUID v4, and cryptographically random password generation. (MD5 included for legacy checksum verification only — do not use for security.)

Parametersinputlengthoperationrequired

skuuy_search_public_apis

Use this when you need a free public REST API for a task — weather data, crypto prices, geocoding, news, AI models, etc. Searches Skuuy's live directory of 41 health-checked public APIs (no API key required for most). Returns the API name, what it does, its category, auth requirement, docs link, and a testable sample endpoint you can call immediately. Results are verified alive by continuous edge health probes.

Parameterslimitquerycategoryonline_only

skuuy_drop_file

Uploads or mirrors an inline file (base64 string or remote fetch URL) into an ephemeral public download URL with automatic TTL expiration. Use this when transferring files, charts, CSVs, logs, or binaries between agents, subagents, or to users without blowing token limits on inline data. Free tier: 25 drops/day.

Parametersttlurlcontentfilenamemime_typeburn_after_reading

skuuy_paste

Creates an ephemeral, cleanly-rendered shareable text or Markdown paste page with syntax highlighting and zero-script secure viewer. Use this when sharing code snippets, logs, prompt templates, or long markdown reports with users or other agents without formatting loss. Free tier: 25 pastes/day.

Parametersttltextrequiredtitleformatlanguageburn_after_reading

skuuy_rpc

Sends a read-only JSON-RPC call through the Skuuy Private RPC Relay (rpc.skuuy.com) — zero-log, no API key, no signup. 12 EVM chains: eth, base, arb, op, bnb, polygon, avax, linea, bera, blast, scroll, zksync. Free tier: 2,500 calls/day/IP on the relay (quota is shared when called via the hosted MCP server). Write methods like eth_sendRawTransaction are rejected server-side.

Parameterschainrequiredmethodrequiredparams

Version history

1
  1. v1.0.0LatestOct 9, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.