Lookproof DNS and mail security checks

Name: Lookproof DNS and mail security checks
Author: lookproof

by lookproofversion 0.2.0i★ 0iRuns on your computer

Registry nameio.github.lookproof/lookproof-mcp

How to install

What it does

SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS and DNS checks for domains, with an API key or USDC (x402)

Connects Runs on your computer
Account or key Needs LOOKPROOF_API_KEY, PRIVATE_KEY
Category Developer tools

Install

Pick the AI app you use, then copy the settings.

Passed 3/3 checks · Runs on your computer · ✓ Commands checked Nov 14, 2026

First: which AI do you use?

ClaudeWeb · app · phoneChatGPTWebClaude CodeTerminalCursorCode editorVS CodeCode editorOtherOther apps

Pick your app and the steps appear below.

Works with Claude, with some setup first

You need a Lookproof DNS and mail security checks key (create it on the maker’s site) · Install Python (uv) on your computer first (one time) · Only the Claude desktop app (Windows or Mac), not the web or phone

Let AI install it

Copy this message into a Claude chat. The AI checks your computer, tells you which file it will change, and waits for your OK every time.

Please install the MCP server Lookproof DNS and mail security checks for Claude on this computer, in this order: 1) Check uv with uv --version. If it is missing, tell me to install it from https://docs.astral.sh/uv/getting-started/installation/; do not install it yourself. 2) Use only this config (already checked by PopNx MCP): { "mcpServers": { "lookproof": { "command": "uvx", "args": [ "lookproof-mcp" ], "env": { "LOOKPROOF_API_KEY": "your-value", "PRIVATE_KEY": "your-value" } } } } 3) Tell me the full path of the file you will change, or the command you will run, and wait for my OK. 4) For LOOKPROOF_API_KEY, PRIVATE_KEY, leave "your-value" in place and tell me to paste the real value myself into the file or the app’s field. Never ask me to type a key in chat. 5) Do what we agreed, then check that the Lookproof DNS and mail security checks tools really show up.

This message has no key in it. If a key is needed, the AI will ask you to paste it yourself into the file or the app’s field.

1
Install uv (if you don’t have it)
Already installed? Check first · Open Terminal, type this command and press Enter
uv --version
- A version number such as uv … = installed, skip this step
- "command not found" (on Windows: "is not recognized") = not installed yet, or installed but Terminal needs to be closed and reopened
How to open Terminal
Mac: press ⌘ + Space, type Terminal, press Enter
Windows: open Start, type Windows PowerShell, then Open
Not installed: uv has no click-through installer. Copy the one-line command for your system (macOS or Windows) from uv’s official page into Terminal · no separate Python install needed; uv downloads it when required
Open the uv download page ↗
When it’s done, close Terminal, open it again and run the same command. You should see a version number: uv --version
Install once; it works for everything that needs uv
Done
Sign up and create a Lookproof DNS and mail security checks key
Open the maker’s site, sign up and create an API key for the next step. Check the maker’s site for pricing and free plans.
Open the Lookproof DNS and mail security checks site ↗
Done
Open the Claude desktop app’s settings file
SettingsDeveloperEdit Config
Done

Paste these settings and save the file

{
  "mcpServers": {
    "lookproof": {
      "command": "uvx",
      "args": [
        "lookproof-mcp"
      ],
      "env": {
        "LOOKPROOF_API_KEY": "your-value",
        "PRIVATE_KEY": "your-value"
      }
    }
  }
}

Paste the key only into the app’s field, never into a chat or to anyone

Done

Quit Claude and open it again
Done
Try it
Use Lookproof DNS and mail security checks and tell me what you can do for me, then show me one thing
✓ If Claude says it is using Lookproof DNS and mail security checks or shows a Lookproof DNS and mail security checks tool in the answer, you are connected

4 optional setting(s) (works without them)

The command above works without these. Add them only if you want to change something, following the maker’s description.

X402_PAY x402 only: set to 1 to pay for calls in USDC. Without it (and without LOOKPROOF_API_KEY) every tool is a dry run that only reports the price.
PRIVATE_KEY_FILE Path to a file (chmod 600) with the private key of a dedicated wallet holding a few dollars of USDC on Base
MAX_SPEND_USD Spending cap per session (one server process) in USD · default 0.10
PAYTO_ALLOWLIST Optional comma-separated addresses the server may pay; a 402 asking for any other payTo is refused

Descriptions are as written by the maker.

Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version

ChatGPT cannot connect Lookproof DNS and mail security checks yet

Lookproof DNS and mail security checks runs on your computer, but ChatGPT can only connect servers that run on the web

What you can do instead

A · Use an app that can connect Lookproof DNS and mail security checks

Steps for Claude →You need a Lookproof DNS and mail security checks key (create it on the maker’s site) · Install Python (uv) on your computer first (one time) · Only the Claude desktop app (Windows or Mac), not the web or phone
Steps for Claude Code →You need a Lookproof DNS and mail security checks key (create it on the maker’s site) · Install Python (uv) on your computer first (one time)
Steps for Cursor →You need a Lookproof DNS and mail security checks key (create it on the maker’s site) · Install Python (uv) on your computer first (one time)
Steps for VS Code →You need a Lookproof DNS and mail security checks key (create it on the maker’s site) · Install Python (uv) on your computer first (one time)

B · Others in Developer tools that work with ChatGPT

Picked from the most used in the same category, only ones that connect by address with no key

Sentry✓ ChatGPT
Compiler Explorer✓ ChatGPT
GitDiagram✓ ChatGPT

Works with Claude Code, with some setup first

You need a Lookproof DNS and mail security checks key (create it on the maker’s site) · Install Python (uv) on your computer first (one time)

Let AI install it

Copy this message into a Claude Code chat. The AI checks your computer, tells you which file it will change, and waits for your OK every time.

Please install the MCP server Lookproof DNS and mail security checks for Claude Code on this computer, in this order: 1) Check uv with uv --version. If it is missing, tell me to install it from https://docs.astral.sh/uv/getting-started/installation/; do not install it yourself. 2) Use only this config (already checked by PopNx MCP): claude mcp add --scope user lookproof --env LOOKPROOF_API_KEY=your-value --env PRIVATE_KEY=your-value -- uvx lookproof-mcp 3) Tell me the full path of the file you will change, or the command you will run, and wait for my OK. 4) For LOOKPROOF_API_KEY, PRIVATE_KEY, leave "your-value" in place and tell me to paste the real value myself into the file or the app’s field. Never ask me to type a key in chat. 5) Do what we agreed, then check that the Lookproof DNS and mail security checks tools really show up.

This message has no key in it. If a key is needed, the AI will ask you to paste it yourself into the file or the app’s field.

1
Install uv (if you don’t have it)
Already installed? Check first · Open Terminal, type this command and press Enter
uv --version
- A version number such as uv … = installed, skip this step
- "command not found" (on Windows: "is not recognized") = not installed yet, or installed but Terminal needs to be closed and reopened
How to open Terminal
Mac: press ⌘ + Space, type Terminal, press Enter
Windows: open Start, type Windows PowerShell, then Open
Not installed: uv has no click-through installer. Copy the one-line command for your system (macOS or Windows) from uv’s official page into Terminal · no separate Python install needed; uv downloads it when required
Open the uv download page ↗
When it’s done, close Terminal, open it again and run the same command. You should see a version number: uv --version
Install once; it works for everything that needs uv
Done
Sign up and create a Lookproof DNS and mail security checks key
Open the maker’s site, sign up and create an API key for the next step. Check the maker’s site for pricing and free plans.
Open the Lookproof DNS and mail security checks site ↗
Done
Open Terminal
Mac: press Command+Space and type Terminal · Windows: open PowerShell
Done
4
Paste this command and press Enter
```
claude mcp add --scope user lookproof --env LOOKPROOF_API_KEY=your-value --env PRIVATE_KEY=your-value -- uvx lookproof-mcp
```
Replace “your-value” with your key before pressing Enter
Paste the key only into the app’s field, never into a chat or to anyone
Done
Type /mcp in Claude Code
You should see Lookproof DNS and mail security checks listed as connected
Done
Try it
Use Lookproof DNS and mail security checks and tell me what you can do for me, then show me one thing
✓ If Claude Code says it is using Lookproof DNS and mail security checks or shows a Lookproof DNS and mail security checks tool in the answer, you are connected

4 optional setting(s) (works without them)

The command above works without these. Add them only if you want to change something, following the maker’s description.

X402_PAY x402 only: set to 1 to pay for calls in USDC. Without it (and without LOOKPROOF_API_KEY) every tool is a dry run that only reports the price.
PRIVATE_KEY_FILE Path to a file (chmod 600) with the private key of a dedicated wallet holding a few dollars of USDC on Base
MAX_SPEND_USD Spending cap per session (one server process) in USD · default 0.10
PAYTO_ALLOWLIST Optional comma-separated addresses the server may pay; a 402 asking for any other payTo is refused

Descriptions are as written by the maker.

Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with Cursor, with some setup first

You need a Lookproof DNS and mail security checks key (create it on the maker’s site) · Install Python (uv) on your computer first (one time)

Let AI install it

Copy this message into a Cursor chat. The AI checks your computer, tells you which file it will change, and waits for your OK every time.

Please install the MCP server Lookproof DNS and mail security checks for Cursor on this computer, in this order: 1) Check uv with uv --version. If it is missing, tell me to install it from https://docs.astral.sh/uv/getting-started/installation/; do not install it yourself. 2) Use only this config (already checked by PopNx MCP): { "mcpServers": { "lookproof": { "command": "uvx", "args": [ "lookproof-mcp" ], "env": { "LOOKPROOF_API_KEY": "your-value", "PRIVATE_KEY": "your-value" } } } } 3) Tell me the full path of the file you will change, or the command you will run, and wait for my OK. 4) For LOOKPROOF_API_KEY, PRIVATE_KEY, leave "your-value" in place and tell me to paste the real value myself into the file or the app’s field. Never ask me to type a key in chat. 5) Do what we agreed, then check that the Lookproof DNS and mail security checks tools really show up.

This message has no key in it. If a key is needed, the AI will ask you to paste it yourself into the file or the app’s field.

1
Install uv (if you don’t have it)
Already installed? Check first · Open Terminal, type this command and press Enter
uv --version
- A version number such as uv … = installed, skip this step
- "command not found" (on Windows: "is not recognized") = not installed yet, or installed but Terminal needs to be closed and reopened
How to open Terminal
Mac: press ⌘ + Space, type Terminal, press Enter
Windows: open Start, type Windows PowerShell, then Open
Not installed: uv has no click-through installer. Copy the one-line command for your system (macOS or Windows) from uv’s official page into Terminal · no separate Python install needed; uv downloads it when required
Open the uv download page ↗
When it’s done, close Terminal, open it again and run the same command. You should see a version number: uv --version
Install once; it works for everything that needs uv
Done
Sign up and create a Lookproof DNS and mail security checks key
Open the maker’s site, sign up and create an API key for the next step. Check the maker’s site for pricing and free plans.
Open the Lookproof DNS and mail security checks site ↗
Done
Click this button to open Cursor
Open in Cursor
Cursor asks you to confirm; click Install
Done
Fill in your key
In the Lookproof DNS and mail security checks settings, LOOKPROOF_API_KEY, PRIVATE_KEY is empty; add your key and save
Paste the key only into the app’s field, never into a chat or to anyone
Done
Open the AI chat in Cursor in Agent mode
Done
Try it
Use Lookproof DNS and mail security checks and tell me what you can do for me, then show me one thing
✓ If Cursor says it is using Lookproof DNS and mail security checks or shows a Lookproof DNS and mail security checks tool in the answer, you are connected

4 optional setting(s) (works without them)

The command above works without these. Add them only if you want to change something, following the maker’s description.

X402_PAY x402 only: set to 1 to pay for calls in USDC. Without it (and without LOOKPROOF_API_KEY) every tool is a dry run that only reports the price.
PRIVATE_KEY_FILE Path to a file (chmod 600) with the private key of a dedicated wallet holding a few dollars of USDC on Base
MAX_SPEND_USD Spending cap per session (one server process) in USD · default 0.10
PAYTO_ALLOWLIST Optional comma-separated addresses the server may pay; a 402 asking for any other payTo is refused

Descriptions are as written by the maker.

Menu names checked against Cursor’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with VS Code, with some setup first

You need a Lookproof DNS and mail security checks key (create it on the maker’s site) · Install Python (uv) on your computer first (one time)

Let AI install it

Copy this message into a VS Code chat. The AI checks your computer, tells you which file it will change, and waits for your OK every time.

Please install the MCP server Lookproof DNS and mail security checks for VS Code on this computer, in this order: 1) Check uv with uv --version. If it is missing, tell me to install it from https://docs.astral.sh/uv/getting-started/installation/; do not install it yourself. 2) Use only this config (already checked by PopNx MCP): { "servers": { "lookproof": { "type": "stdio", "command": "uvx", "args": [ "lookproof-mcp" ], "env": { "LOOKPROOF_API_KEY": "your-value", "PRIVATE_KEY": "your-value" } } } } 3) Tell me the full path of the file you will change, or the command you will run, and wait for my OK. 4) For LOOKPROOF_API_KEY, PRIVATE_KEY, leave "your-value" in place and tell me to paste the real value myself into the file or the app’s field. Never ask me to type a key in chat. 5) Do what we agreed, then check that the Lookproof DNS and mail security checks tools really show up.

This message has no key in it. If a key is needed, the AI will ask you to paste it yourself into the file or the app’s field.

1
Install uv (if you don’t have it)
Already installed? Check first · Open Terminal, type this command and press Enter
uv --version
- A version number such as uv … = installed, skip this step
- "command not found" (on Windows: "is not recognized") = not installed yet, or installed but Terminal needs to be closed and reopened
How to open Terminal
Mac: press ⌘ + Space, type Terminal, press Enter
Windows: open Start, type Windows PowerShell, then Open
Not installed: uv has no click-through installer. Copy the one-line command for your system (macOS or Windows) from uv’s official page into Terminal · no separate Python install needed; uv downloads it when required
Open the uv download page ↗
When it’s done, close Terminal, open it again and run the same command. You should see a version number: uv --version
Install once; it works for everything that needs uv
Done
Sign up and create a Lookproof DNS and mail security checks key
Open the maker’s site, sign up and create an API key for the next step. Check the maker’s site for pricing and free plans.
Open the Lookproof DNS and mail security checks site ↗
Done
Click this button to open VS Code
Open in VS Code
VS Code asks you to confirm; click Install
Done
Fill in your key
In the Lookproof DNS and mail security checks settings, LOOKPROOF_API_KEY, PRIVATE_KEY is empty; add your key and save
Paste the key only into the app’s field, never into a chat or to anyone
Done
Open the AI chat in VS Code in Agent mode
Done
Try it
Use Lookproof DNS and mail security checks and tell me what you can do for me, then show me one thing
✓ If VS Code says it is using Lookproof DNS and mail security checks or shows a Lookproof DNS and mail security checks tool in the answer, you are connected

4 optional setting(s) (works without them)

The command above works without these. Add them only if you want to change something, following the maker’s description.

X402_PAY x402 only: set to 1 to pay for calls in USDC. Without it (and without LOOKPROOF_API_KEY) every tool is a dry run that only reports the price.
PRIVATE_KEY_FILE Path to a file (chmod 600) with the private key of a dedicated wallet holding a few dollars of USDC on Base
MAX_SPEND_USD Spending cap per session (one server process) in USD · default 0.10
PAYTO_ALLOWLIST Optional comma-separated addresses the server may pay; a 402 asking for any other payTo is refused

Descriptions are as written by the maker.

Menu names checked against VS Code’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Other apps that use MCP, such as Windsurf, Zed or Gemini CLI, each add servers differently. See how in the app list.

See every app that uses MCP →

JSON settings are under “For developers” below

Stuck? Ask people who use Lookproof DNS and mail security checks💬 Discussion →

For developers: Terminal commands and JSON settings

Installed on your computer

Claude Code

claude mcp add --scope user lookproof --env LOOKPROOF_API_KEY=your-value --env PRIVATE_KEY=your-value -- uvx lookproof-mcp

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "lookproof": {
      "command": "uvx",
      "args": [
        "lookproof-mcp"
      ],
      "env": {
        "LOOKPROOF_API_KEY": "your-value",
        "PRIVATE_KEY": "your-value"
      }
    }
  }
}

Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "lookproof": {
      "command": "uvx",
      "args": [
        "lookproof-mcp"
      ],
      "env": {
        "LOOKPROOF_API_KEY": "your-value",
        "PRIVATE_KEY": "your-value"
      }
    }
  }
}

VS Code (mcp.json)

{
  "servers": {
    "lookproof": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "lookproof-mcp"
      ],
      "env": {
        "LOOKPROOF_API_KEY": "your-value",
        "PRIVATE_KEY": "your-value"
      }
    }
  }
}

Values you fill in

LOOKPROOF_API_KEY secret required env
Lookproof API key (lp_...). Calls use your plan's credits, no wallet needed. Free key with 250 credits a month: https://lookproof.dev/pricing
X402_PAY env
x402 only: set to 1 to pay for calls in USDC. Without it (and without LOOKPROOF_API_KEY) every tool is a dry run that only reports the price.
PRIVATE_KEY_FILE env
Path to a file (chmod 600) with the private key of a dedicated wallet holding a few dollars of USDC on Base
PRIVATE_KEY secret required env
Private key of a dedicated wallet (alternative to PRIVATE_KEY_FILE)
MAX_SPEND_USD env
Spending cap per session (one server process) in USD
PAYTO_ALLOWLIST env
Optional comma-separated addresses the server may pay; a 402 asking for any other payTo is refused

Descriptions are as written by the maker.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

At a glance

GitHub stars i: 0
Downloads per weeki: 113/wk
Licence i: MIT
Connection: Runs on your computer
Transport: stdio
Latest versioni: 0.2.0
Categoryi: Developer tools
Published to registryi: Nov 14, 2026
Code last changedi: Nov 14, 2026
Maker: lookproof
Packages: pypi: lookproof-mcp
Repo: lookproof/x402-examples
Website: lookproof.dev
Registry status: Active

Which apps can use it

Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.

Run on your computer in

Claude Goose LM Studio Msty Studio Cherry Studio Cursor VS Code + GitHub Copilot Visual Studio Windsurf (Devin Desktop)Zed Kiro Cline Continue JetBrains AI Assistant Claude Code Codex CLI Gemini CLI OpenCode nodecode Warp LibreChat Raycast

All apps, with pros and cons →

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 16, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account lookproof, which owns the repo
✓ Pass
Still maintained
Code last changed 2 days ago
✓ Pass
Has a licence
Uses MIT
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Published vulnerabilities (OSV.dev)

No entries on OSV.dev for lookproof-mcp@0.2.0

Checks only this package version, not every dependency · checked Nov 15, 2026

What we check → · JSON

Makers: ask for a re-check or report wrong info

Discussion

Ask, share a tip or report that it does not work. Sorted by what people marked helpful.

No posts yet. Be the first to ask or share.

Posts here are written by users, not the PopNx team.

User reviews

No reviews yet

Compared with others in Developer toolsi

More stars than 0% of the other 5926 servers in this category
Published to the registry more recently than 97% of the other 5926 servers in this category
Basic checks equal to or better than 100% of the other 5926 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Lookproof DNS and mail security checks safe?

It passed 3 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: LOOKPROOF_API_KEY, PRIVATE_KEY

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed 2 days ago, and the latest version (0.2.0) reached the registry 2 days ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Python (uv) on your computer.

What can I use instead?

In the same category: GitDiagram, Appllama, Cloudflare MCP, Omnara, Repowise

Similar alternatives

Same category, other makers, commands already checked. Official ones first, then by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

GitDiagram

Architecture diagrams, explanations and Mermaid source for public GitHub repositories.

by ahmedkhaleel2004Widely used★ 18.9KUpdated 2 months ago

Runs in the cloud✓ service owner · gitdiagram.comTried by the PopNx team

How to connect

Appllama

Study screens, flows and paywalls from top-earning iOS apps, then build from what wins.

by AppllamaWidely used★ 5.2KUpdated 3 months ago

Runs in the cloud✓ service owner · appllama.io

How to connect

Cloudflare MCP

Cloudflare MCP servers

by cloudflareWidely used★ 4.5KUpdated 14 months ago

Runs in the cloud✓ service owner · mcp.cloudflare.comTried by the PopNx team

How to connect

Omnara

Deploy durable AI agents with Omnara, an open-source managed-agent platform.

by omnara-aiWidely used★ 3.4KUpdated 2 months ago

Runs in the cloud✓ service owner · omnara.com

How to connect

Repowise

Codebase intelligence for AI coding agents: graph, git history, docs, decisions, code health.

by repowise-devWidely used↓ 6.5K/wk★ 8.1K Stars for the whole repoUpdated 3 days ago

Computer or cloud✓ service owner · repowise.dev

Install

GitDiagram — Runs in the cloud, nothing to install · No key needed
Appllama — Runs in the cloud, nothing to install · No key needed
Cloudflare MCP — Runs in the cloud, nothing to install · No key needed · In Claude’s directory
Omnara — Runs in the cloud, nothing to install · No key needed
Repowise — Cloud or install on your computer · No key needed

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

Lookproof MCP server

An MCP server that gives Claude and other AI agents 23 Lookproof tools: domain and site health, SPF, DKIM, DMARC, MTA-STS, BIMI, DNS, DNSSEC, CAA, RDAP, TLS certificates and HTTP security headers. The agent pays per call in USDC on Base via x402, from a wallet you control, with a spending cap per session.

Every tool description states its price, so the agent can see what a call costs before making it. Without X402_PAY=1 nothing is ever paid: every tool is a dry run that reports the price and returns no data.

uvx lookproof-mcp --version     # needs uv: https://docs.astral.sh/uv/

Tools

Tool	Price	Tool	Price
`get_spending`	free	`bimi`	$0.01
`domain_health`	$0.08	`mail_provider`	$0.005
`site_health`	$0.025	`spf_parse`	$0.002
`mail_check`	$0.03	`dmarc_parse`	$0.002
`spf`	$0.01	`dns_lookup`	$0.005
`spf_flatten`	$0.01	`dnssec`	$0.01
`dmarc`	$0.01	`caa`	$0.01
`dkim`	$0.01	`nameservers`	$0.01
`dkim_discover`	$0.02	`rdap`	$0.01
`mta_sts`	$0.02	`tls_certificate`	$0.01
`tlsrpt`	$0.01	`security_headers`	$0.01
`mx`	$0.01
`spoofable`	$0.01

get_spending is free and shows what the session has spent and how much budget is left.

Endpoints without a tool

Lookproof has 47 paid endpoints. This server exposes the 23 an agent is most likely to need for questions about a domain's DNS and mail security, because every extra tool costs context and makes the agent's choice harder. The other 24, and why they are left out:

Endpoints	Why left out
`POST /v1/mail/check/bulk`	Up to 20 domains in one paid call ($0.024 each, up to $0.48): too easy for an agent to spend the session budget at once. Use it from a script.
`GET /v1/dns/soa`, `/v1/dns/ttl`, `/v1/dns/wildcard`, `/v1/dns/https-rr`, `/v1/dns/compare`, `/v1/dns/ns-provider`, `/v1/dns/txt-verification`, `/v1/mail/ptr`	Specialised DNS diagnostics. `domain_health` (which includes reverse DNS of the mail servers) and `dns_lookup` answer the common questions.
`GET /v1/ip/info`, `/v1/ip/cidr`, `/v1/ip/subnets`, `/v1/ip/range-to-cidr`, `POST /v1/ip/contains`, `GET /v1/dns/idn`	Offline IP arithmetic and IDN conversion. An agent can do this itself without paying.
`POST /v1/dns/zone-lint`, `/v1/tls/pem-decode`, `/v1/tls/csr-decode`, `/v1/http/csp-parse`, `/v1/http/hsts-parse`, `/v1/http/cookie-parse`, `/v1/mail/mta-sts-parse`, `/v1/mail/bimi-parse`, `/v1/mail/tlsrpt-parse`	Parsers for text the user pastes. They fit a script better than an agent session, and pasted cookies or zone files can contain data the user may not want to send. `spf_parse` and `dmarc_parse` are included as examples of this kind of tool.

All of them are in docs/endpoints.md. To add one, copy a tool in src/lookproof_mcp/server.py, set its path and price, and run uv run lookproof-mcp --check.

Setup

Use a dedicated wallet with a few dollars of USDC on Base mainnet. Never your main wallet.

Store the wallet key in a file only you can read, so it never sits in an MCP client's config file:

install -m 600 /dev/null ~/.lookproof-wallet.key

nano ~/.lookproof-wallet.key # paste the private key, save

The server runs with uv's uvx, which downloads lookproof-mcp from PyPI into its own environment, with exactly the dependency versions this release was tested with. There is nothing to clone or install by hand. Try it without a wallet first: with no settings, every tool is a dry run.

Settings

Variable	Default	Effect
`X402_PAY`	off	Without `X402_PAY=1`, every tool runs as a dry run: it reports the price and returns no data.
`PRIVATE_KEY_FILE`		Path to a file with the wallet's private key (recommended). It must not be readable by other users.
`PRIVATE_KEY`		The key itself, if you prefer an environment variable.
`PAYTO_ALLOWLIST`	empty	Optional comma-separated addresses; a 402 asking for payment to any other address is refused before signing. See pinning the receiving address.
`MAX_SPEND_USD`	`0.10`	Spending cap for the session (one server process). Calls beyond it are refused, not paid.

How payments are limited is described under Security.

Claude Code

claude mcp add lookproof \

--env X402_PAY=1 \ --env PRIVATE_KEY_FILE=$HOME/.lookproof-wallet.key \ --env MAX_SPEND_USD=0.25 \ -- uvx lookproof-mcp

Leave out --env X402_PAY=1 to try it as a dry run first.

Then ask, for example: *"Is example.com protected against email spoofing? Check SPF, DMARC and MTA-STS."*

Claude Desktop

Add this to claude_desktop_config.json (Settings, Developer, Edit Config) and restart Claude Desktop:

"mcpServers": { "lookproof": { "command": "uvx", "args": ["lookproof-mcp"], "env": { "X402_PAY": "1", "PRIVATE_KEY_FILE": "/home/you/.lookproof-wallet.key", "MAX_SPEND_USD": "0.25" } } } }

If Claude Desktop can't find uvx, use its full path (which uvx on macOS and Linux, where uvx on Windows). On Windows, write the key path as C:\\Users\\you\\.lookproof-wallet.key.

What a tool call returns

Paid (shape only, not yet verified against the live API; data is the full Lookproof response):

"data": {"endpoint": "mail.dmarc", "status": " ", "data": {"policy": "...", "...": "..."}, "findings": ["..."]}, "cost_usd": 0.01, "session_spent_usd": 0.01, "session_remaining_usd": 0.09, "tx": "https://basescan.org/tx/0x " }

Dry run (no X402_PAY=1):

{"dry_run": true, "would_cost_usd": 0.08, "network": "eip155:8453", "pay_to": "0x<lookproof-address>",

"note": "Dry run, nothing paid and no data. The user can set X402_PAY=1 to enable payments."}

When the cap is reached:

{"error": "Session spending cap reached: $0.090 spent of MAX_SPEND_USD=$0.1; this call costs $0.080. Restart the server or raise MAX_SPEND_USD."}

Security

Dedicated wallet. Use a wallet that only holds what you are willing to spend on checks, never your main wallet. Prefer PRIVATE_KEY_FILE over PRIVATE_KEY, so the key is not in the MCP client's config file; the server refuses a key file that other users can read.
Dry run by default. Nothing is signed or paid unless X402_PAY=1 is set.
Spending cap. MAX_SPEND_USD (default $0.10) caps what one server process can spend. The cost of a call is reserved before paying, so parallel calls cannot overshoot it, and a call that fails after the payment was signed stays counted and is reported as "possibly paid".
Price check. A tool refuses to pay more than the price in its description.
Locked payment. Each payment is locked to the amount, asset (USDC), network (Base, eip155:8453) and payTo address of the 402 the server just received for that call. If the second 402 asks for anything else, nothing is signed. With PAYTO_ALLOWLIST, a payTo outside the list is refused before signing.
Results are data. Tool results contain records and web content published by the checked domain's owner. The agent is told to treat them as data, and the cap and price checks apply whatever it is told.
Identifiable client. Every request carries User-Agent: lookproof-mcp/ .

Command line

Command	Effect
`uvx lookproof-mcp`	Runs the MCP server on stdio (what Claude Code and Claude Desktop start).
`uvx lookproof-mcp --check`	Compares every tool's advertised price with the live 402 response. Pays nothing and needs no wallet.
`uvx lookproof-mcp --version`	Prints the version.

Run from source

git clone https://github.com/lookproof/x402-examples.git

cd x402-examples/mcp-server uv run lookproof-mcp # or: uv run lookproof-mcp --check

Source, issues and the other x402 examples (quickstart, domain monitor): github.com/lookproof/x402-examples.

Lookproof DNS and mail security checks

What it does

Install

Install uv (if you don’t have it)

Sign up and create a Lookproof DNS and mail security checks key

Open the Claude desktop app’s settings file

Paste these settings and save the file

Quit Claude and open it again

Try it

What you can do instead

Install uv (if you don’t have it)

Sign up and create a Lookproof DNS and mail security checks key

Open Terminal

Paste this command and press Enter

Type /mcp in Claude Code

Try it

Install uv (if you don’t have it)

Sign up and create a Lookproof DNS and mail security checks key

Click this button to open Cursor

Fill in your key

Open the AI chat in Cursor in Agent mode

Try it

Install uv (if you don’t have it)

Sign up and create a Lookproof DNS and mail security checks key

Click this button to open VS Code

Fill in your key

Open the AI chat in VS Code in Agent mode

Try it

Installed on your computer

Values you fill in

At a glance

Which apps can use it

Related guides

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Published vulnerabilities (OSV.dev)

Discussion

User reviews

Compared with others in Developer toolsi

Common questions

Similar alternatives

GitDiagram

Appllama

Cloudflare MCP

Omnara

Repowise

README from the maker

Lookproof MCP server

Tools

Endpoints without a tool

Setup

Settings

Claude Code

Claude Desktop

What a tool call returns

Security

Command line

Run from source