Card-skimmer data, answerable by any AI.

What it is

One address. Every MCP client.

MCP is the open standard for giving an AI assistant real tools. SkimGuard's server offers our check data as tools an assistant can call mid-conversation: status for a place by name or Place ID, nearby activity, risk on the road ahead, Bluetooth manufacturer lookup, and network-wide totals. It's one stateless HTTPS address, with nothing to install or run yourself.

Quick test

Try it now, with no sign-up.

Paste the address into your MCP client, or run the curl calls below. The public tier needs no key, so both work on a machine that has never heard of SkimGuard.

1. Add it by address (Claude, ChatGPT and other hosted assistants)

Open your assistant's connectors or MCP settings, add a custom or remote server, and paste this address. Leave authentication set to none. If asked for a transport, pick HTTP or Streamable HTTP, not SSE or stdio.

https://mcp.skimguard.io/mcp

2. Or add it to a config file (Claude Desktop, Claude Code, Cursor)

{ "mcpServers": { "skimguard": { "url": "https://mcp.skimguard.io/mcp" } } }

Have a paid key? Add it as a header. The server also accepts a Firebase ID token as Authorization: Bearer <token> when you call from a signed-in SkimGuard portal session.

{ "mcpServers": { "skimguard": { "url": "https://mcp.skimguard.io/mcp", "headers": { "X-MCP-Key": "YOUR_KEY_HERE" } } } }

3. Or just curl it

The server speaks JSON-RPC 2.0 over MCP Streamable HTTP. It's stateless, so there's no initialize step. The Accept header must list both application/json and text/event-stream, or you'll get a 406.

curl -s https://mcp.skimguard.io/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Start here: skimguard_search_locations needs only a place name. It finds the place and reports its status in one call. Adding latitude and longitude is optional but gives much better matches for common brand names.

curl -s https://mcp.skimguard.io/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{
    "name":"skimguard_search_locations",
    "arguments":{"query":"Shell gas station Riverside Austin TX",
      "latitude":30.2453,"longitude":-97.7431,
      "limit":5,"days":30,"response_format":"markdown"}}}'

curl -s https://mcp.skimguard.io/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{
    "name":"skimguard_coverage_stats",
    "arguments":{"days":30,"response_format":"markdown"}}}'

curl -s https://mcp.skimguard.io/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":4,"method":"tools/call","params":{
    "name":"skimguard_get_location_status",
    "arguments":{"placeId":"ChIJN1t_tDeuEmsRUsoyG83frY4",
      "days":30,"response_format":"json"}}}'

Swap in a Place ID you care about. If SkimGuard has no data yet, you get a plain "no data" answer, which means unknown, not unsafe. Homes are left out of public data on purpose and always answer that way.

curl -s https://mcp.skimguard.io/health

What it supports

Fifteen tools, one resource, one prompt.

Seven public tools, then four more for Business, two for Partner and two for Data Licensee. Every tool takes an optional response_format of markdown (default) or json, and every tool with a time window takes days (1 to 365, default 30). All fifteen are read-only.

Tools for your own data filter on the account behind your key, never on what you type, so there's no way to ask for another account's data. The one tool that takes a Place ID, skimguard_location_devices, checks it's yours first. Business and Partner are separate: a store never sees partner tools and the other way round.

Access

Start free. Add a key when you need your own data.

Paid tiers don't unlock more public data. They add tools for data that's yours, and a higher rate limit. Every tier keeps all seven public tools.

Prices are shown at checkout. Each paid tier is a Stripe subscription you start from your portal. Yearly billing is ten times the monthly price, so two months are free. Cancelling turns off every key that subscription created; the public tools keep working. A key is shown once when it's created and only a hash is stored, so keep it somewhere safe or create a new one.

Ground rules

What the data will and won't tell you.

The tools are built to keep an assistant honest. If you're building on SkimGuard, design around these.

If your assistant cites SkimGuard, it should cite the note too. That's the difference between a useful safety signal and false comfort.

Higher volume

Building on top of SkimGuard?

Need more than the published limits, a custom set of fields, or bulk delivery instead of per-call lookups? That's a data licensing conversation, not an MCP subscription, and we'll point you to whichever fits.

• Custom rate limits and dedicated capacity
• Bulk exports and regular feeds
• Terms for redistribution or building it into your product

Get in touch

Questions about the MCP API?

Integration questions, higher limits, or a tool you wish existed. Tell us what you're building and we'll reply within 2 business days.