Server definition

Hash: sha256:1cbfa3822b9284ec5b6b04c1d1ad25f30d18e84967a68aae92466784a954e6fb
What it is: What a remote MCP server returned when asked what it offers: 4 tools

The blob, as servednamed by its sha256

{
  "instructions": null,
  "tools": [
    {
      "description": "Checks whether an email address appears in known data breaches. Provide `email`. Returns the number of breaches found with the named sources behind each; a count of zero means no breaches were found in the corpus, not that the address is safe. Read-only: it only looks up breach records. Requires the RELAYSHIELD_API_KEY environment variable; without it, the tool returns setup instructions instead of calling the API.",
      "inputSchema": {
        "properties": {
          "email": {
            "description": "Email address to check. Case-insensitive.",
            "format": "email",
            "type": "string"
          }
        },
        "required": [
          "email"
        ],
        "type": "object"
      },
      "name": "check_breach",
      "outputSchema": null
    },
    {
      "description": "Scores a suspicious email for phishing signals from its parsed fields. Provide any of: from_address, from_name, reply_to, return_path, subject, body_text, and links (up to 25). Returns a risk level and score with the specific flags behind them; links in the email are also checked against RelayShield's threat-intelligence corpus. A verdict of unknown means nothing conclusive was found; this tool never reports an email as safe.",
      "inputSchema": {
        "properties": {
          "body_text": {
            "description": "Plain-text body, used for urgency/deadline/threat phrasing.",
            "type": "string"
          },
          "from_address": {
            "description": "The claimed sender's address, e.g. [email protected].",
            "type": "string"
          },
          "from_name": {
            "description": "The claimed sender's display name.",
            "type": "string"
          },
          "links": {
            "description": "Links found in the body, up to 25.",
            "items": {
              "type": "string"
            },
            "maxItems": 25,
            "type": "array"
          },
          "reply_to": {
            "description": "Reply-To address, if present and different from from_address.",
            "type": "string"
          },
          "return_path": {
            "description": "Envelope sender, if available. Informational only.",
            "type": "string"
          },
          "subject": {
            "description": "Message subject.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "check_email",
      "outputSchema": null
    },
    {
      "description": "Checks one URL, or up to 25 URLs in a single call, against RelayShield's threat-intelligence corpus for known phishing, malware, and scam abuse. Provide either `url` (a single http:// or https:// link) or `urls` (an array of up to 25 links). Returns a per-link verdict of FLAGGED or unknown with the reasons behind each verdict, plus counts of checked, flagged, and incomplete links. A verdict of unknown means nothing is known against the link; this tool never reports a link as safe.",
      "inputSchema": {
        "properties": {
          "url": {
            "description": "A single link starting with http:// or https://. Omit when sending urls.",
            "type": "string"
          },
          "urls": {
            "description": "Up to 25 links to check in one call. Omit when sending url.",
            "items": {
              "type": "string"
            },
            "maxItems": 25,
            "type": "array"
          }
        },
        "type": "object"
      },
      "name": "check_link",
      "outputSchema": null
    },
    {
      "description": "Returns a read-only risk assessment of a cryptocurrency wallet address. It never moves funds or initiates transactions. Provide `address`; the chain (EVM, Solana, TON, or Bitcoin) is detected from the address format automatically. Returns a risk level of CRITICAL, HIGH, MEDIUM, LOW, or unknown, with the specific sanctions, scam, drainer, and phishing flags behind it. A verdict of unknown means nothing is known against the address; it does not mean the address is safe.",
      "inputSchema": {
        "properties": {
          "address": {
            "description": "Wallet address to screen. Chain is auto-detected.",
            "type": "string"
          }
        },
        "required": [
          "address"
        ],
        "type": "object"
      },
      "name": "check_wallet",
      "outputSchema": null
    }
  ]
}

Verify it yourself

curl -s https://api.teppi.xyz/v1/evidence/sha256:1cbfa3822b9284ec5b6b04c1d1ad25f30d18e84967a68aae92466784a954e6fb | sha256sum