Atlas / MCP servers / xavierfok / singapore-proxy-mcp

singapore-proxy-mcpSAFE

mcp/xavierfok/singapore-proxy-mcp

Hosted MCP server: let Claude, Cursor or Cline browse the web from a real Singapore mobile IP (Singtel/M1). Free 24h trial.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
—
Transport
stdio · streamable-http
License
MIT
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Browse the web as if you were on a Singapore mobile network. Give Claude, Cursor, Cline, or any MCP agent a real Singapore mobile IP (Singtel and M1 carrier networks) to fetch pages, run Singapore-localized Google searches, and check geo-locked content - something the agent cannot do on its own because it can't set a proxy.

The Singapore web, as your AI sees it.

This is a hosted (remote) MCP server. You don't install or run any code - you point your client at the endpoint with an API key and it works.

Quick start (30 seconds)

  1. Get a key with a free 24-hour trial (10GB): https://singaporemobileproxy.com/client/mcp?utm_source=github&utm_medium=repo&utm_campaign=singapore_proxy_mcp
  2. Add the server to your client:

Claude Desktop / Cursor / Cline / Windsurf (claude_desktop_config.json, ~/.cursor/mcp.json, etc.):

{
"mcpServers": {
"singapore-proxy": {
"command": "npx",
"args": ["-y", "singapore-proxy-mcp"],
"env": { "SMP_API_KEY": "sk_your_key_here" }
}
}
}

(singapore-proxy-mcp is a thin launcher around `mcp-remote` pointed at the hosted endpoint. If you prefer, you can call mcp-remote directly: npx -y mcp-remote https://mcp.singaporemobileproxy.com/mcp --header "x-api-key:${SMP_API_KEY}".)

Claude.ai / clients with native remote MCP: add a custom connector for https://mcp.singaporemobileproxy.com/mcp with header x-api-key: .

  1. Ask your agent: "use my_proxy_status" - it should report a Singapore mobile exit IP.

Tools

Why a specialist

Global proxy MCP s

Read from source at commit 6b15ad8d0b12OBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code (npm)
claude mcp add singapore-proxy-mcp --env SMP_API_KEY=${SMP_API_KEY} -- npx -y [email protected]
03

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (2)

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
mcp-remote
Why it matters. 1 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha 6b15ad8d0b12full audit observations/trust-audit/mcp-server/xavierfok__singapore-proxy-mcp.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-116b15ad8d0b12SAFEB89first audit
05

Questions

What is the singapore-proxy-mcp MCP server?

Hosted MCP server: let Claude, Cursor or Cline browse the web from a real Singapore mobile IP (Singtel/M1). Free 24h trial.

Is singapore-proxy-mcp safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does singapore-proxy-mcp need?

It reads SMP_API_KEY and X_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does singapore-proxy-mcp run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as singapore-proxy-mcp at 1.0.1.

How current is this page?

The grade is for one exact copy of the source (6b15ad8d0b12), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement