Atlas entry

`tanod.dev`

31 capabilities over ARD and MCP. First atlas observation.

Observed 5 Nov 2026, 01:04 UTC · passive: no tools called, no credentials sent · sha256:17e5ee…aed2

What changed

First atlas observation. Atlas history

Surfaces

5 protocols checked

ARD	Valid	0.9 draft · 1 retrieved artifact
A2A	Not found	0 skills
MCP	Valid	2026-07-28 · 27 tools · 0 resources · 4 prompts
OpenAPI	Not detected	0 operations
WebMCP	Not detected	0 declarative form tools · experimental

Exact states and meaning

ARD
observed
Exact state: valid · Revision 0.9 draft · 1 retrieved artifact
A usable protocol document was retrieved and validated.
Directly observed
A2A
absent
Exact state: not found · 0 skills
The supported discovery location returned no matching document.
Not found does not prove the service exposes no such interface elsewhere.
Not observed / not fetched
MCP
observed
Exact state: valid · Revision 2026-07-28 · 27 tools · 0 resources · 4 prompts
A usable protocol document was retrieved and validated.
Directly observed
OpenAPI
absent
Exact state: not detected · 0 operations
No endpoint was established from the evidence and scope that InterfaceDelta inspected.
Not detected does not prove that no endpoint exists.
Not observed / not fetched
WebMCP
absent
Exact state: not detected · 0 declarative form tools · experimental
No named declarative WebMCP form tools were observed in the origin root HTML.
Script-registered tools and other pages are not observed, so this does not mean the site has no WebMCP tools.
Not observed / not fetched

31 · inventory complete

Showing 31 of 31.

Tool and inputs	Status
chain*, lookback_blocks, spenders, stale_days and 2 more	Observed
`audit_token_approvals` inputs `chain` (required), `lookback_blocks`, `spenders`, `stale_days` and 2 more
chain, contacts, dust_threshold, from and 3 more	Observed
`check_address_poisoning` inputs `chain` (required), `contacts`, `dust_threshold`, `from` (required) and 3 more
address, chain	Observed
`check_contract_before_interaction` inputs `address` (required), `chain` (required)
address*	Observed
`check_sanctions` inputs `address` (required)
addresses*	Observed
`check_sanctions_batch` inputs `addresses` (required)
url*	Observed
`check_security_headers` inputs `url` (required)
amount_usd, mint*	Observed
`check_solana_token_safety` inputs `amount_usd`, `mint` (required)
text*	Observed
`check_text_for_secrets` inputs `text` (required)
amount_usd, chain, token*	Observed
`check_token_honeypot` inputs `amount_usd`, `chain`, `token` (required)
address*, chain	Observed
`check_token_safety` inputs `address` (required), `chain`
domain, url	Observed
`check_url_phishing` inputs `domain`, `url`
items*	Observed
`check_urls_phishing_batch` inputs `items` (required)
chain, lookback_blocks, tokens, wallet	Observed
`check_wallet_drain` inputs `chain` (required), `lookback_blocks`, `tokens`, `wallet` (required)
calldata*, signature	Observed
`decode_calldata` inputs `calldata` (required), `signature`
address, chain	Observed
`detect_proxy` inputs `address` (required), `chain` (required)
chain, owner, spender, token	Observed
`get_allowance` inputs `chain` (required), `owner` (required), `spender` (required), `token` (required)
email*	Observed
`get_verification_code` inputs `email` (required)
address, chain, days	Observed
`get_wallet_counterparties` inputs `address` (required), `chain` (required), `days`
checks, domain*	Observed
`inspect_domain` inputs `checks`, `domain` (required)
query*	Observed
`rdap_lookup` inputs `query` (required)
repo*	Observed
`repo_info` inputs `repo` (required)
content_base64, filename, source	Observed
`scan_agent_package` inputs `content_base64`, `filename`, `source`
address, chain, include_dependencies, include_informational and 1 more	Observed
`scan_contract_address` inputs `address` (required), `chain` (required), `include_dependencies`, `include_informational` and 1 more
compiler_version, filename, include_dependencies, include_informational and 3 more	Observed
`scan_contract_source` inputs `compiler_version`, `filename`, `include_dependencies`, `include_informational` and 3 more
list_chars, normalize, skeleton, strip_invisible and 1 more	Observed
`text_unicode_inspect` inputs `list_chars`, `normalize`, `skeleton`, `strip_invisible` and 1 more
chain, output, tokenAddress*	Observed
`token_verdict` inputs `chain`, `output`, `tokenAddress` (required)
email*	Observed
`verify_email` inputs `email` (required)
MCP prompts 4 Not read by AI.
no inputs	Not read
`check-link`
no inputs	Not read
`check-token`
no inputs	Not read
`email-security`
no inputs	Not read
`sanctions-check`

Not observed in this Passport: A2A skills, MCP resources, OpenAPI operations.

The atlas shows each capability by its plain identifier, inputs and declared sign-in. Publisher descriptions, paths, links and source evidence are not published here.

The comparison with the previous observation is shown only to the account that recorded it.

Atlas history

1 observation

5 Nov 2026, 01:04 UTC31 capabilities · ARD and MCP 2026-07-28 · MCP endpoint validFirst observation
Fingerprint and versions
Fingerprint
17e5eed9c03ccdbd933286d49fb226533151130b3430dbf0fa84f0ca0f36aed2
Passport schema
0.5.0, passport-semantic-v4
Consistency
MCP_PROMPTS_ADVERTISEMENT_LIST: match · MCP_RESOURCES_ADVERTISEMENT_LIST: match · MCP_TOOLS_ADVERTISEMENT_LIST: match · OPENAPI_MCP_EXPLICIT_MAPPING: not applicable

Each class compares an observation with the previous atlas observation. Runs of unchanged observations are grouped. Struck values are what the previous observation recorded; inserted values are what this one recorded.

Declared and observed

27 tools declare hints; the AI readings agree with all 0 that have a reading.

A disagreement is not a finding about the service: either side can be wrong. How we compare declarations and readings.

About this entry

dev.tanod/security
Listed
Official MCP Registry · first listed 3 Nov 2026 · last listed 3 Nov 2026

Passive observations of a public interface listed in the Official MCP Registry. An observation does not verify security, ownership or compliance, and InterfaceDelta assigns no scores or rankings. Methodology · Report an inaccuracy · Ask for removal

Identity and snapshot

Target key: sha256:89a079a3b368f0c9cad8466468db78c4cfcdbe82e5d6fe45b8783033452fad1b
Locator SHA-256: 6d10eb162520095d0299ba20f5680f452d09015bb314e3b074423cc419265ddc
Snapshot generated: 5 Nov 2026, 12:20 UTC

The entry is one exact observed target, not a real-world service identity, and implies no ownership. Endpoint paths are not published; the locator hash lets an operator confirm their own URL.

Capability facts

As observed from outside, at the time below

Observed: 5 Nov 2026, 01:04 UTC
Signed: 5 Nov 2026, 08:47 UTC

Protocols: ARD, MCP
Tools: 27
Declared sign-in: None declared

Effects counted AI readings, beta

Moves money: 0
Deletes or cancels records: 0
Sends messages to people: 0
Changes permissions: 0
Runs code: 0
Asks a person: 0

27 tools examined; 0 counted above a measured threshold.

Declared vs read disagreements

Declared read-only, read as writing: 0
Declared destructive, read as not writing: 0
Declared non-destructive, read as deleting: 0
Declared closed-world, read as reaching out: 0

Change since previous: First observation
Label status: Current

What changed

Surfaces

Capabilities

Atlas history

Declared and observed

About this entry