54ch10-mcp
54ch10 MCP 서버
54ch10 라이브 HTTPS API를 감싸는 경량 Model Context Protocol 래퍼입니다.
라이브 API 기본 주소: https://54ch10.uk
Brief: https://54ch10.uk/v1/brief?type=address|token|url&q=...
도구 모음:
/v1/whois,/v1/dns,/v1/tls,/v1/normalize-url, hash, encode, fetch, paste무료/데모: 헤더
X-54ch10-Free: 1또는/v1/<tool>/free형제 엔드포인트OpenAPI: https://54ch10.uk/openapi.json
x402 검색: https://54ch10.uk/.well-known/x402
브랜드: 54ch10
분석 전용 — 정보 제공용 휴리스틱이며, 재정, 법률, 투자 조언이 아닙니다. 승인(clearance)이 아닙니다.
다섯 가지 도구를 제공합니다: brief, whois, dns, tls, normalize-url.
필드 | 값 |
패키지 이름 |
|
MCP 레지스트리 이름 ( |
|
매니페스트 |
|
기본 설치 (현재) |
|
설치 / 실행
Node.js 18+가 필요합니다.
기본 (현재 작동)
아직 공개 npmjs 패키지가 없습니다. 공개 GitHub 저장소에서 설치하세요:
npx -y github:sachio222/54ch10-mcp또는 git 의존성으로:
npm install github:sachio222/54ch10-mcpClaude Desktop / Cursor — CONFIG.example.json을 참조하세요:
{
"mcpServers": {
"54ch10": {
"command": "npx",
"args": ["-y", "github:sachio222/54ch10-mcp"],
"env": {
"BRIEF_API_BASE": "https://54ch10.uk",
"BRIEF_API_KEY": ""
}
}
}
}GitHub Packages (기본 아님)
GitHub Packages npm은 scoped 패키지만 지원합니다 (@sachio222/...). 사용자는 @sachio222:registry=https://npm.pkg.github.com 및 인증이 필요합니다. scoped되지 않은 에이전트 설치에는 그대로 사용할 수 없으므로 기본이 아닙니다.
npmjs.org (게시되지 않음)
54ch10-mcp는 아직 registry.npmjs.org에 없습니다 (404). 향후 게시 전까지 npx 54ch10-mcp에 의존하지 마세요.
이 디렉토리에서 (로컬)
npm install(package.json 참조).npm start또는node src/index.js
프로세스는 stdio를 통해 MCP를 사용합니다. 호스트가 이를 실행합니다. 대화형 터미널 출력을 기대하지 마세요.
환경 변수 | 용도 |
BRIEF_API_BASE | API 기본 주소 재정의 (기본값 https://54ch10.uk) |
BRIEF_API_KEY | 선택적 유료 키. 비어 있으면 — 래퍼가 |
스모크 테스트 (각 도구에 무료 헤더): GET https://54ch10.uk/v1/brief?type=url&q=https://example.com — 또한 /v1/whois?domain=, /v1/dns?domain=, /v1/tls?domain=, /v1/normalize-url?q= 헤더 X-54ch10-Free: 1 포함
선택 사항: package.json의 inspect 스크립트를 MCP Inspector와 함께 사용하세요.
Related MCP server: IP Intelligence MCP Server
도구
brief
인자 | 유형 | 필수 | 설명 |
type | address / token / url | 예 | 무엇을 브리핑할지 |
q | string | 예 | 주소, 토큰 ID/심볼 또는 URL |
점수, 밴드, 플래그, 요약, 출처, 면책 조항을 반환합니다.
whois
인자 | 유형 | 필수 | 설명 |
domain | string | 예 | 도메인 이름 (예: example.com) |
RDAP 등록 정보 / 등록 기관 / age_days. 경로: GET /v1/whois.
dns
인자 | 유형 | 필수 | 설명 |
domain | string | 예 | 도메인 이름 |
A/AAAA/MX/NS + 사기 신호 플래그. 경로: GET /v1/dns.
tls
인자 | 유형 | 필수 | 설명 |
domain | string | 예 | 도메인 이름 |
CT 발급자 / 유효성 + HTTPS 연결 가능 여부. 경로: GET /v1/tls.
normalize-url
인자 | 유형 | 필수 | 설명 |
q | string | 예 | 정규화할 URL |
스킴/호스트 정규화, 프래그먼트 제거, 쿼리 정렬. 경로: GET /v1/normalize-url.
인증 / 결제
무료/데모 —
BRIEF_API_KEY를 비워 두세요 (래퍼가X-54ch10-Free: 1사용, UTC 기준 일일 IP당 20회 공유).Stripe — Checkout 클레임 후
BRIEF_API_KEY를 설정하세요.x402 (HTTP API) — https://54ch10.uk/v1/을 USDC 호출당 결제로 호출하세요. 이 stdio 래퍼는 자동 결제를 하지 않습니다. HTTP에 대해 x402 클라이언트 라이브러리를 사용하거나 여기서 Stripe 키를 사용하세요.
도구 | 표시 x402 가격 (USDC) |
brief | $0.01 |
whois | $0.005 |
dns | $0.002 |
tls | $0.005 |
normalize-url | $0.001 |
검색: https://54ch10.uk/.well-known/x402
레지스트리 등록 체크리스트
로컬 준비 (이 폴더):
라이브 HTTPS 도구 대상
도구: brief + whois + dns + tls + normalize-url
package.json 이름 54ch10-mcp + mcpName = io.github.sachio222/54ch10-mcp
mcpName과 일치하는 server.json
CONFIG.example.json + README (github: 기본 설치)
공개 GitHub 저장소 https://github.com/sachio222/54ch10-mcp
공개 npmjs 54ch10-mcp — 아직 게시되지 않음
공식 MCP 레지스트리 — npmjs 패키지가 존재할 때까지 차단됨 (npm registryType = registry.npmjs.org만)
npmjs가 공개된 후: mcp-publisher login github, 그 다음 게시
또한: 패키지가 npmjs에 올라간 후 sachio222로 mcp.so / Smithery / awesome-mcp-servers PR을 제출하세요.
Discord/X 자동 게시를 하지 마세요.
면책 조항
정보 제공용 도구일 뿐입니다. 재정, 투자, 법률, 세무 조언이 아닙니다. 전문: https://54ch10.uk/LEGAL_DISCLAIMER.txt
Available Tools
21 toolsbriefLegacy: brief → url.openARead-onlyIdempotent
Legacy alias for url.open. Prefer url.open. type=url → GET /v1/open; address|token → GET /v1/brief. Score lower is better. HTTP 402 unpaid — stack or Bearer 54k_.
Inputs: q (required), type (required).
dnsLegacy: dns → domain.dnsARead-onlyIdempotent
Legacy alias for domain.dns (GET /v1/dns). Prefer domain.dns.
Inputs: domain (required).
domain.dnsDomain DNSARead-onlyIdempotent
GET /v1/dns — summarize DNS A/AAAA/MX/NS for a domain with fraud-signal style flags. Call with domain.whois / domain.tls for full domain hygiene after url.open. Analytics-only.
Inputs: domain (required).
domain.tlsDomain TLS/CTARead-onlyIdempotent
GET /v1/tls — summarize TLS/CT (issuer, validity, HTTPS reachability) via crt.sh + probe. Call after url.open / domain.dns when certificate age or issuer matters. Analytics-only.
Inputs: domain (required).
domain.whoisDomain WHOIS/RDAPARead-onlyIdempotent
GET /v1/whois — look up domain WHOIS/RDAP (registration, registrar, age_days, status, nameservers). Call after url.open when you need registration age / registrar signals. Analytics-only — not clearance.
Inputs: domain (required).
encodeLegacy: encode → util.encodeCRead-onlyIdempotent
Legacy alias for util.encode (GET /v1/encode). Prefer util.encode.
Inputs: q (required), format.
fetchLegacy: fetch → url.fetchARead-onlyIdempotent
Legacy alias for url.fetch. Page extraction: GET https://54ch10.uk/v1/fetch?url= at $0.005. Prefer url.fetch.
Inputs: url (required), format.
hashLegacy: hash → util.hashARead-onlyIdempotent
Legacy alias for util.hash (GET /v1/hash). Prefer util.hash.
Inputs: q (required), algo.
normalize-urlLegacy: normalize-url → url.normalizeARead-onlyIdempotent
Legacy alias for url.normalize (GET /v1/normalize-url). Prefer url.normalize.
Inputs: q (required).
paste.readRead ephemeral pasteARead-onlyIdempotent
GET /v1/paste — retrieve an ephemeral paste by id from paste.write before TTL expiry. Agent handoff only — not a vault.
Inputs: id (required).
paste_readLegacy: paste_read → paste.readARead-onlyIdempotent
Legacy alias for paste.read (GET /v1/paste). Prefer paste.read.
Inputs: id (required).
paste.writeWrite ephemeral pasteAIdempotent
POST /v1/paste — store a short ephemeral paste (KV TTL default 1h, max 24h) and return an id. Agent handoff only — not a vault. Pair with paste.read.
Inputs: content (required), ttl_seconds.
paste_writeLegacy: paste_write → paste.writeAIdempotent
Legacy alias for paste.write (POST /v1/paste). Prefer paste.write.
Inputs: content (required), ttl_seconds.
tlsLegacy: tls → domain.tlsARead-onlyIdempotent
Legacy alias for domain.tls (GET /v1/tls). Prefer domain.tls.
Inputs: domain (required).
url.fetchPage extraction (paid)ARead-onlyIdempotent
Page extraction / public URL to markdown. GET https://54ch10.uk/v1/fetch?url= at $0.005. SSRF-safe; returns status, contentType, markdown|text (200KB cap). Use after url.open when you need page body, not just risk signals. Analytics-only.
Inputs: url (required), format.
url.normalizeNormalize URLARead-onlyIdempotent
GET /v1/normalize-url — canonicalize a URL (scheme/host lowercased, fragment stripped, query sorted) before comparing or opening. Call before url.open when the URL is messy or duplicated. Analytics-only.
Inputs: q (required).
url.openOpen URL / risk briefARead-onlyIdempotent
Maps to GET /v1/open for URL checks (page_risk, whois, page). Score 0–100, lower is better. HTTP 402 when unpaid — prefer X-54ch10-Stack or Bearer 54k_ via BRIEF_API_KEY. For type=url calls /v1/open?q=; for address|token keeps GET /v1/brief?type=&q=. Call first for wrap-before-click; then domain.whois / domain.dns / domain.tls. Analytics-only.
Inputs: q (required), type (required).
url.open_batchBulk open URLs (paid)A
POST /v1/open/batch with JSON {urls:[...]}. Paid-only (stack X-54ch10-Stack or Bearer 54k_); no free path — HTTP 402 without credits. Cap 25 URLs per request. Server concurrency ~3; global inflight ~10. Prefer for allowlists; human bulk UI: https://linksafu.com/bulk. Each URL gets the same page_risk brief as GET /v1/open. Analytics-only.
Inputs: urls (required).
util.encodeEncode textARead-onlyIdempotent
GET /v1/encode — encode text as base64, hex, or url-encoding. Utility for safe transport of strings between tools.
Inputs: q (required), format.
util.hashHash textARead-onlyIdempotent
GET /v1/hash — hash UTF-8 text (sha256|sha1|md5) to hex + base64. Utility for fingerprints — not crypto advice. Analytics-only utility.
Inputs: q (required), algo.
whoisLegacy: whois → domain.whoisARead-onlyIdempotent
Legacy alias for domain.whois (GET /v1/whois). Prefer domain.whois.
Inputs: domain (required).
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
TDQS
Scored across 21 tools
The set includes ten legacy aliases that duplicate primary tools exactly (brief vs url.open, whois vs domain.whois, etc.), so many tools effectively do the same thing. Even though descriptions label the aliases, an agent must choose between redundant names.
Primary tools use a clean resource.action style (url.open, domain.whois, paste.read), but this is mixed with url.open_batch, bare legacy names like brief and dns, and hyphenated normalize-url. The naming is not chaotic but it is inconsistent across the full tool set.
21 tools is borderline heavy, and roughly half are legacy duplicates of the primary 11 tools. The unique surface is reasonable, but exposing aliases as separate tools inflates the count.
The toolset covers the core URL risk workflow: normalize, open/batch, fetch, plus domain enrichment (whois/dns/tls) and small utilities. Minor gaps like no explicit domain reputation endpoint or batch result retrieval can be worked around.
Maintenance
Related MCP Connectors
Enrich, search, assess, and manage threat intelligence through 80+ typed MCP tools.
Free, read-only public-source threat intel over MCP. No account or API key.
Screen EVM wallets, contracts and transactions against sanctions, exploit, phishing and scam intel.
Free MCP server of security & dev API tools -- supply-chain, CVE, DNS, WHOIS, OFAC, Cosmos SDK.
Related MCP Servers
AlicenseNot gradedqualityBmaintenanceWraps the ScanMalware.com API to enable phishing triage, malware scanning, and certificate inspection through natural language, allowing users to submit scans, retrieve results, and analyze threats via MCP tools.1Apache 2.0- AlicenseNot gradedqualityDmaintenanceProvides MCP tools for IP threat intelligence lookup and enrichment, including single IP lookup, bulk hunting, ASN expansion, and feed status queries.MIT
- AlicenseAqualityDmaintenanceMCP server that exposes urlscan.io as tools for security investigations, with compact results optimized for context windows. Enables pivoting on indicators, searching scans, retrieving screenshots, DOM, and scan results, and submitting URLs.6MIT
- AlicenseAqualityBmaintenanceEnables MCP clients to check URLs for scam/phishing risks, get verdicts with confidence and severity, report false positives, and monitor plan usage.314 npmMIT