Perimeter Watch MCP

Liveness check for the Perimeter Watch API. Returns ok, service, version. Call first to verify connectivity before pw_snapshot.

{
  "type": "object",
  "title": "pw_healthArguments",
  "properties": {}
}

{
  "title": "Perimeter Watch Health",
  "readOnlyHint": true,
  "idempotentHint": true,
  "destructiveHint": false
}

Run a free one-time external-perimeter scan on a domain you control. Checks TLS certificate expiry, domain renewal status, dangling CNAME takeover risk, and CT-log lookalike domains. Returns a rating plus per-check detail. NOT idempotent (each call consumes rate limit); takes 20-60s; rate-limited to 3 scans per IP per 24h. Args: domain: the domain to scan (e.g. example.com) authority: MUST be true — attests you or your principal own/manage this domain. Scanning third-party domains without authority is prohibited. Scan takes 20-60s. Rate limit: 3/IP/24h.

{
  "type": "object",
  "title": "pw_snapshotArguments",
  "required": [
    "domain",
    "authority"
  ],
  "properties": {
    "domain": {
      "type": "string",
      "title": "Domain"
    },
    "authority": {
      "type": "boolean",
      "title": "Authority"
    }
  }
}

{
  "title": "Run Perimeter Snapshot",
  "readOnlyHint": false,
  "idempotentHint": false,
  "destructiveHint": false
}

Check whether a domain is enrolled on a paid weekly monitoring plan. Returns enrollment status. Paid plans add weekly re-scans with email briefs. Read-only lookup. Args: domain: the domain to look up (e.g. example.com)

{
  "type": "object",
  "title": "pw_watch_statusArguments",
  "required": [
    "domain"
  ],
  "properties": {
    "domain": {
      "type": "string",
      "title": "Domain"
    }
  }
}

{
  "title": "Watch Plan Status",
  "readOnlyHint": true,
  "idempotentHint": true,
  "destructiveHint": false
}

Service funnel counters: page views, snapshots run, paid registrations. Read-only.

{
  "type": "object",
  "title": "pw_statsArguments",
  "properties": {}
}

{
  "title": "Perimeter Watch Stats",
  "readOnlyHint": true,
  "idempotentHint": true,
  "destructiveHint": false
}

List this product's skills. Each entry carries the SKILL.md URI, its name and description, verbatim frontmatter, and a per-file sha256 manifest. Read a body with `read_skill`.

{
  "type": "object",
  "title": "skills_list_toolArguments",
  "properties": {}
}

Read a product skill file by its skill:// URI. Args: uri: e.g. skill://<product>/<skill-name>/SKILL.md Get valid URIs from `skills_list_tool`.

{
  "type": "object",
  "title": "read_skillArguments",
  "required": [
    "uri"
  ],
  "properties": {
    "uri": {
      "type": "string",
      "title": "Uri"
    }
  }
}

Advertised by the server during the last successful anonymous check.

Use when you need to know what is exposed on a domain you own — expiring TLS certificates, dangling DNS that invites subdomain takeover, domain lifecycle risk, and lookalike domains registered against you. Runs a passive scan on public metadata only, never probes the target, and requires you to own or manage the domain.

skill://perimeter-watch/perimeter-watch/SKILL.md

MIME type: text/markdown