voyk

About Version

Identify this MCP server: returns {id, name, description} carrying the server's name and the exact version it is running. Use it to confirm which deployment or build you are talking to — for example before trusting a capability that only newer versions expose, or when a tool behaves differently than its description says. Takes no arguments, reads no external data, and changes nothing.

Dns Resolve

Resolve DNS records. Without type, preserves the original address-only response {hostname, addresses}. With type, queries A, AAAA, NS, SOA, MX, TXT, or CNAME and returns {hostname, type, rcode, records}; NXDOMAIN and NOERROR/NODATA are normal distinguishable results.

Domain Check

Check a domain's registration state through its authoritative RDAP service, selected from the cached IANA DNS bootstrap. Returns {domain, registered, statusCode, registrar?, created?, expires?, statuses?, source}. RDAP 404 means registered:false; RDAP 200 means registered:true. This checks registry state, not real-time purchasability or trademark safety.

Http Fetch

Fetch a public URL with GET (default), HEAD, or POST and return {statusCode, body, url, headers, error?}. Every received HTTP response, including 4xx/5xx, is a normal result. error is advisory for HTTP 429, a capped body, or a body-stream failure after headers; it includes status and retryAfter when available. Only validation, SSRF, DNS, TLS, timeout, or transport failures before response headers set MCP isError:true. SSRF-guarded across DNS and redirects: only public http(s) hosts on standard w

Http Fetch Batch

Fetch 1-50 public URLs with bounded server-side concurrency and return one input-ordered result per URL. Batch entries are GET-only, retain all HTTP statuses including 4xx/5xx, and carry a structured per-URL error for SSRF/transport/body-cap failures. Concurrency defaults to 4 and is limited to 1-10; each response body is capped at 256 KiB.

Ip Geolocate

Look up geolocation and network ownership for an IPv4 or IPv6 address: returns {ip, asName, asNumber, country, countryCode, city, latitude, longitude, …} from a local DB-IP Lite (CC BY 4.0) database — a local file read, so no request leaves the server. `asName` is the ASN's organisation, the field that tells residential traffic from datacenter / hosting egress. Extended fields (postal code, time zone, subdivision) are sentinel placeholders on the Lite database, and if a deployment has no geo dat

Mcp Bridge

Dispatch a reviewed browser-automation action to the connected Vynx extension. Possession of a session UUID authorizes driving that specific signed-in browser and reading ordinary page content. Remote MCP admits only credential-free http(s) current and pending tab URLs. Remote MCP responses redact password, hidden, token, OTP, card, and security-code field values; SCRIPT/STYLE source and credential-shaped metadata across text/search/table reads and diagnostics; signed CSS URLs; and prior-value/r

Mcp Bridge Status

Report MCP-bridge connection health for a browser session from api's own view. Unlike mcp_bridge, this does NOT round-trip to the extension, so it works even when the extension is disconnected - use it to debug why mcp_bridge calls fail with 'not connected'. You must supply the sessionId you want to inspect; session IDs are per-browser access secrets, so api never auto-discovers or enumerates them. Always returns {sessionId, connected, secondsSinceLastPoll, queuedCommands, queueCapacity, mainten

Request Echo

Analyse an HTTP request the way the public /echo.json endpoint does. You describe the request; nothing is fetched on your behalf. Returns the request as the server would see it (method, HTTP version, scheme, uri, host, parsed query, alphabetically sorted headers, body) enriched with bot / fraud intelligence: `fingerprint` (SHA-256 over the identifying headers), `session` (fingerprint + IP + cookie), `ja3` (the TLS fingerprint when an x-lifub-ja3 header is supplied), `torExitNode` and `iCloudPriv

Request Inspect

Analyse an HTTP request the way the public /inspect.json endpoint does, returning {whois, echo}: the full request_echo payload plus geolocation and ASN for the client IP, with `echo.fraud` bumped when that ASN belongs to a hosting / VPS / cloud provider (datacenter egress is far more bot-like than residential traffic). Prefer this over request_echo whenever the origin network matters — attributing suspicious traffic, or explaining a fraud verdict end to end. Geo data comes from DB-IP Lite (CC BY

Site Audit

Run a one-shot Site Audit of a public web origin. Fetches the page plus well-known files (/robots.txt, /sitemap.xml, /.well-known/*, ads.txt, manifest, …) and reports, per URL, the HTTP status, content-type, observed body size, a SHA-256 of the body, and a curated set of response/security headers — rolled into a 0–100 health score with human-readable findings (HTTPS, HSTS / CSP / X-Frame-Options / X-Content-Type-Options, robots.txt & sitemap presence, soft-404s). Separately reports a versioned `

Site Audit Report Diff

Compare two retained Site Audit snapshots by their exact unguessable UUIDs. Returns the existing deterministic BEFORE/AFTER diff: health and comparable SEO score deltas, stable SEO-check transitions, CDN transition, and per-URL response/header/content changes. It does not re-run either audit, spend a credit, list reports, or batch targets. Each UUID is a bearer secret and both reports must still be retained. Local stdio forwards this read to api.lifub.com's authoritative report store.

Site Audit Report Get

Retrieve one retained Site Audit snapshot by its exact unguessable report UUID. Returns the stored snapshot envelope, including capture metadata and the complete report, without re-running the audit or spending a Site Audit credit. The UUID is a bearer secret: keep it private. Reports expire according to the snapshot retention policy. There is deliberately no report-listing tool. Local stdio forwards this read to api.lifub.com's authoritative report store.