Security & Testing

twothumbs.co

An MCP server for security testing that runs web verdicts, lists attack surfaces, and manages API key redemption.

1 endpoint3 known toolsFirst detected August 13, 2026Last detected August 13, 2026

ENDPOINT 1

https://twothumbs.co/mcp

No auth detected

Capabilities

tools.listChangedresourcesprompts

Run a full-cycle web verdict

Inferred read-only

List configured surfaces and target URLs

Inferred read-only

Redeem a promotional code for a new API key

Inferred read-only

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.twothumbs]
url = "https://twothumbs.co/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "twothumbs": {
      "type": "http",
      "url": "https://twothumbs.co/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: twothumbs
Remote MCP URL: https://twothumbs.co/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "twothumbs": {
      "url": "https://twothumbs.co/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "twothumbs": {
      "type": "http",
      "url": "https://twothumbs.co/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "twothumbs",
  "transport": "streamable-http",
  "url": "https://twothumbs.co/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.