# looktwice-mcp

[![npm version](https://img.shields.io/npm/v/looktwice-mcp)](https://www.npmjs.com/package/looktwice-mcp)
[![license](https://img.shields.io/npm/l/looktwice-mcp)](./LICENSE)
[![MCP](https://img.shields.io/badge/MCP-registry-blue)](https://registry.modelcontextprotocol.io/v0/servers?search=looktwice)

MCP (Model Context Protocol) server for the [LookTwice API](https://looktwice.dev). Validate
emails, EU VAT numbers, IBANs, and domains, and screen products against U.S. CPSC recalls and
Product Safety Warnings — directly from Claude Desktop, Cursor, or any MCP client.

```bash
npx -y looktwice-mcp
```

## Setup

1. Create a LookTwice account at [looktwice.dev](https://looktwice.dev/sign-up) — verified
   accounts receive 100 free API units each month, no credit card required.
2. Create an API key in the [dashboard](https://looktwice.dev/dashboard).
3. Add the server to your MCP client configuration:

```json
{
  "mcpServers": {
    "looktwice": {
      "command": "npx",
      "args": ["-y", "looktwice-mcp"],
      "env": {
        "LOOKTWICE_API_KEY": "lt_live_..."
      }
    }
  }
}
```

## Tools

| Tool                | What it does                                                                | Cost       |
| ------------------- | --------------------------------------------------------------------------- | ---------- |
| `email_check`       | Syntax, MX, disposable, role, free-provider signals (no mailbox probing)    | 2 units    |
| `vat_check`         | Live EU VIES validation with returned business data and request evidence    | 1 unit     |
| `iban_check`        | Country structure, length, and MOD-97 checksum (no account-existence claim) | 1 unit     |
| `domain_check`      | DNS, MX, TLS, and RDAP state for a registrable domain                       | Free quota |
| `cpsc_recall_match` | Evidence-backed candidate matching against CPSC recalls and warnings        | 3 units    |
| `credits_balance`   | Current workspace credit balance                                            | Free       |

## Compared with a single-purpose MCP

Most VAT or email MCP servers wrap one upstream. This server keeps the same evidence rules across email, VIES, IBAN, domain, and CPSC: timestamps, official sources, and no mailbox / account / safety claims.

## Honest boundaries

- `email_check` never claims a mailbox exists (`mailbox_status: not_checked`).
- `iban_check` never claims an account exists or belongs to a person.
- `cpsc_recall_match` returns screening candidates with official sources, not safety, legality,
  or compliance decisions.

## Environment variables

| Variable             | Required | Default                     |
| -------------------- | -------- | --------------------------- |
| `LOOKTWICE_API_KEY`  | Yes      | —                           |
| `LOOKTWICE_BASE_URL` | No       | `https://api.looktwice.dev` |

## License

MIT