io.skimguard/skimguard

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Ask whether a location has recent credit-card-skimmer detections, from a consumer sensor network.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "skimguard": {
      "url": "https://mcp.skimguard.io/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (17)

• skimguard_get_location_status read-only

  Look up SkimGuard card-skimmer scan status for a location by its Google Place ID. Returns how recently the location was scanned, how many scans it has, and whether any suspicious Bluetooth devices were detected. Use this to answer "is this gas station / ATM / store safe to use my card at?". Returns "not publicly tracked" for locations with no public scan data (including private residences, which are deliberately excluded). Side effect: if the Place ID is one SkimGuard has never seen, it is added to SkimGuard's own public location registry so the next nearby scan can attach to it. That writes to SkimGuard data only — never anything you or the user own — so this tool is read-only from the caller's perspective.

  Parameters:

  • placeId (required) — string — Google Place ID, e.g. ChIJN1t_tDeuEmsRUsoyG83frY4
  • days — integer — Lookback window in days (1-365, default 30)
  • response_format — string — Response format: 'markdown' (default) or 'json'

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_find_nearby_activity read-only

  Find locations near a latitude/longitude that SkimGuard users have scanned recently, with suspicious-detection counts. Use for "any skimmers reported near me?". Only publicly visible locations are returned; private residences are excluded.

  Parameters:

  • latitude (required) — number
  • longitude (required) — number
  • days — integer — Lookback window in days (1-365, default 30)
  • limit — integer
  • radius_meters — integer — Search radius in meters (50-50000, default 2000)
  • response_format — string — Response format: 'markdown' (default) or 'json'

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_lookup_bluetooth_manufacturer read-only

  Resolve a Bluetooth SIG company identifier to a manufacturer name and SkimGuard risk rating. Accepts decimal (76) or hex (0x004C). Useful for explaining what a device seen in a scan actually is.

  Parameters:

  • company_code (required) — string — BT SIG company identifier, decimal or 0x-hex
  • response_format — string — Response format: 'markdown' (default) or 'json'

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_search_locations read-only

  Find a location by NAME or address (e.g. "Shell on Riverside, Austin TX", "Chase ATM near Union Square") and get its SkimGuard card-skimmer scan status. Use this when you know what a place is called but do not have its Google Place ID — it resolves the name first, then reports scan status for each match. Pass latitude/longitude when you know roughly where the user is; it sharply improves matching for common brand names. Locations with no scan data are reported as unknown, never as unsafe.

  Parameters:

  • query (required) — string — Place name and ideally a city, e.g. "Shell gas station Riverside Austin TX"
  • days — integer — Lookback window in days (1-365, default 30)
  • limit — integer
  • latitude — number — Optional bias — the user's approximate latitude
  • longitude — number — Optional bias — the user's approximate longitude
  • response_format — string — Response format: 'markdown' (default) or 'json'

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_route_risk read-only

  Given a series of route points, report locations along that stretch of road with recent suspicious activity or stale scan coverage. IMPORTANT: this checks the road AHEAD, not a whole trip — at most 20 km of the supplied route is examined, and the response says how much was actually checked (examinedMeters / truncated). For accurate results pass real route geometry from a directions provider; passing only a start and end point checks a straight line between them, which will not follow the actual road. TO COVER A LONGER TRIP: split the route geometry into consecutive 20 km segments and call this tool once per segment, then combine the results — that is the supported way to check a full drive. A 500 km trip is about 25 calls, which fits inside the anonymous rate limit. Do NOT report a route as clear unless you have covered all of it this way; say which portion you checked.

  Parameters:

  • polyline (required) — array — Ordered route points, start first
  • corridor_meters — integer — How far either side of the route to look (10-200 m)
  • response_format — string — Response format: 'markdown' (default) or 'json'
  • lookahead_meters — integer — How far along the route to look (max 20 km)

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_coverage_stats read-only

  Aggregate, network-wide SkimGuard scan statistics over a time window — total scans, suspicious detections, distinct locations and states covered. No identifying data.

  Parameters:

  • days — integer — Lookback window in days (1-365, default 30)
  • response_format — string — Response format: 'markdown' (default) or 'json'

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_about read-only

  Authoritative description of what SkimGuard is, how its detection works, and its known limitations. Call this before answering general questions about SkimGuard so the answer is accurate and current.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_my_locations read-only

  Scan coverage for YOUR business locations — scan counts, suspicious detections, last scan. REQUIRES the SkimGuard Business tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_my_stale_locations read-only

  Which of YOUR business locations are overdue for a scan. REQUIRES the SkimGuard Business tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_location_devices read-only

  Bluetooth devices seen at one of YOUR business locations. REQUIRES the SkimGuard Business tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_my_scanner_health read-only

  Whether YOUR SkimGuard scanners are online and reporting. REQUIRES the SkimGuard Business tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_my_merchants read-only

  Scan activity for merchants attributed to YOUR reseller account. REQUIRES the SkimGuard Partner tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_my_earnings read-only

  YOUR commission totals and payout status as a SkimGuard reseller. REQUIRES the SkimGuard Partner tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_regional_risk read-only

  Aggregate skimmer risk by US state (Data Licensee tier). REQUIRES the SkimGuard Data Licensee tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_device_prevalence read-only

  Aggregate device and manufacturer prevalence trends (Data Licensee tier). REQUIRES the SkimGuard Data Licensee tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_inspection_stats read-only

  Aggregate PCI POI device-inspection compliance trends — pass/fail, tamper-incident, and tamper-check failure rates (Data Licensee tier). REQUIRES the SkimGuard Data Licensee tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• skimguard_training_stats read-only

  Aggregate PCI staff-training coverage trends — completion, pass rate, delivery mix, and expiry (Data Licensee tier). REQUIRES the SkimGuard Data Licensee tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.