2extract
by 2extract.com · remote · no sign-in to list tools · v1.0.2 · published by com.2extract
Create and manage residential and mobile proxies: geo targeting, usage limits, spend reports.
20 tools: 2 can delete or cancel things, 1 do something that can't be undone, 6 change things and 11 only read.
Scanned Oct 21, 2026
- Deletes or cancels2Claude Code: deny: see these tools
- Can't be undone1Claude Code: ask: see these tools
- Changes things6Claude Code: ask: see these tools
- Only reads11Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http 2extract https://mcp.2extract.com/mcp --header 'Authorization: <your-authorization>'Findings
Matches of fixed checks, with the text they matched.
The description mentions "credential".
What this check looks forMatched text
description: "...resource. The tool retrieves the proxy credential and account prefix automatically, valid..."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
20 tools
Deletes or cancels 2Claude Code: deny
deleteProxyResourcePermanently delete a proxy resource.No findings
Why it is in this group
- The name "deleteProxyResource" says "delete": a word for removing or ending something.
- The description says "Permanently delete".
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Permanently delete a proxy resource. This action is irreversible — the proxy and all its settings will be removed. User confirmation is required before proceeding. Response fields: docs://proxies/deleteProxyResource.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
regenerateProxyPasswordGenerate a new password for a proxy resource.No findings
Why it is in this group
- The description's first verb is "generate": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Generate a new password for a proxy resource. The old password is immediately invalidated — any running traffic using it will be interrupted. User confirmation is required before proceeding. Response fields: docs://proxies/regenerateProxyPassword.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
Can't be undone 1Claude Code: ask
deactivateProxyResourceDeactivate a proxy resource, stopping its traffic without deleting it.No findings
Why it is in this group
- The description says "permanently remove".
Description, as the server wrote it Deactivate a proxy resource, stopping its traffic without deleting it. Use deleteProxyResource to permanently remove instead. Response fields: docs://proxies/updateProxyResource.
Annotations the server declares
- openWorldHint: true
Changes things 6Claude Code: ask
buildConnectionStringBuild a ready-to-use username and connection string for a proxy resource.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...resource. The tool retrieves the proxy credential and account prefix automatically, valid..."
Description, as the server wrote it Build a ready-to-use username and connection string for a proxy resource. The tool retrieves the proxy credential and account prefix automatically, validates geo, network, and session parameters, and encodes them in the correct order. Response fields: docs://proxies/buildConnectionString.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
createProxyResourceCreate a new proxy resource.No findings
Why it is in this group
- The name "createProxyResource" says "create": a word for a change.
Description, as the server wrote it Create a new proxy resource. Response fields: docs://proxies/createProxyResource.
Annotations the server declares
- openWorldHint: true
setProxyIpWhitelistReplace the IP whitelist for a proxy resource, restricting authentication to the given IPs.No findings
Why it is in this group
- The name "setProxyIpWhitelist" says "set": a word for a change.
Description, as the server wrote it Replace the IP whitelist for a proxy resource, restricting authentication to the given IPs. Response fields: docs://proxy-settings/setProxyIpWhitelist.
Annotations the server declares
- openWorldHint: true
setProxyLimitsSet a traffic or spending limit on a proxy resource to control costs.No findings
Why it is in this group
- The name "setProxyLimits" says "set": a word for a change.
Description, as the server wrote it Set a traffic or spending limit on a proxy resource to control costs. Response fields: docs://proxy-settings/setProxyLimits.
Annotations the server declares
- openWorldHint: true
setProxyTargetHostsReplace the target host whitelist for a proxy resource, restricting its traffic to the given domains.No findings
Why it is in this group
- The name "setProxyTargetHosts" says "set": a word for a change.
Description, as the server wrote it Replace the target host whitelist for a proxy resource, restricting its traffic to the given domains. Response fields: docs://proxy-settings/setProxyTargetHosts.
Annotations the server declares
- openWorldHint: true
updateProxyResourceUpdate description, countries, status, IP whitelist, or limits in one call.No findings
Why it is in this group
- The name "updateProxyResource" says "update": a word for a change.
Description, as the server wrote it Update description, countries, status, IP whitelist, or limits in one call. Name and proxy_type are not mutable through this MCP tool. For single-field changes, prefer setProxyIpWhitelist, setProxyLimits, or deactivateProxyResource. Response fields: docs://proxies/updateProxyResource.
Annotations the server declares
- openWorldHint: true
Only reads 11Claude Code: allow
getAccountBalanceGet the current account balance, overdraft limit, and proxy username prefix.No findings
Why it is in this group
- The name "getAccountBalance" says "get": a word for reading.
Description, as the server wrote it Get the current account balance, overdraft limit, and proxy username prefix. Response fields: docs://account/getAccountBalance.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
getAccountTrafficUsageGet traffic usage statistics for the account over a date range.No findings
Why it is in this group
- The name "getAccountTrafficUsage" says "get": a word for reading.
Description, as the server wrote it Get traffic usage statistics for the account over a date range. Response fields: docs://account/getAccountTrafficUsage.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
getProxyResourceGet full details of a specific proxy resource, including IP/host whitelists not present in listProxyResources.No findings
Why it is in this group
- The name "getProxyResource" says "get": a word for reading.
Description, as the server wrote it Get full details of a specific proxy resource, including IP/host whitelists not present in listProxyResources. Response fields: docs://proxies/getProxyResource.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
listAccountBalanceHistoryGet balance transaction history for the account over a date range.No findings
Why it is in this group
- The name "listAccountBalanceHistory" says "list": a word for reading.
Description, as the server wrote it Get balance transaction history for the account over a date range. Response fields: docs://account/listAccountBalanceHistory.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
listGeoCountriesList all available countries for proxy geo targeting, optionally filtered by name.No findings
Why it is in this group
- The name "listGeoCountries" says "list": a word for reading.
Description, as the server wrote it List all available countries for proxy geo targeting, optionally filtered by name. Response fields: docs://geo/listGeoCountries.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
listProxyPlansList tariff plans for a proxy type.No findings
Why it is in this group
- The name "listProxyPlans" says "list": a word for reading.
Description, as the server wrote it List tariff plans for a proxy type. Use the numeric id when calling createProxyResource. Response fields: docs://plans/listProxyPlans.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
listProxyResourcesList all proxy resources in the account, with tariff, limits, traffic, and spend detail.No findings
Why it is in this group
- The name "listProxyResources" says "list": a word for reading.
Description, as the server wrote it List all proxy resources in the account, with tariff, limits, traffic, and spend detail. Response fields: docs://proxies/listProxyResources.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
searchGeoCitiesSearch cities within a country and optional region (region_code from searchGeoRegions).No findings
Why it is in this group
- The name "searchGeoCities" says "search": a word for reading.
Description, as the server wrote it Search cities within a country and optional region (region_code from searchGeoRegions). Use search to narrow results — city lists can be large. Response fields: docs://geo/searchGeoCities.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
searchGeoISPSearch the ISP catalog for mobile ISP targeting (mobile proxies only).No findings
Why it is in this group
- The name "searchGeoISP" says "search": a word for reading.
Description, as the server wrote it Search the ISP catalog for mobile ISP targeting (mobile proxies only). Always resolve the code through this tool — never accept a real-world ASN number as a substitute. Response fields: docs://geo/searchGeoISP.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
searchGeoRegionsSearch regions/states within a country.No findings
Why it is in this group
- The name "searchGeoRegions" says "search": a word for reading.
Description, as the server wrote it Search regions/states within a country. Response fields: docs://geo/searchGeoRegions.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
searchGeoZipsSearch ZIP codes within a country, for use in proxy username params.No findings
Why it is in this group
- The name "searchGeoZips" says "search": a word for reading.
Description, as the server wrote it Search ZIP codes within a country, for use in proxy username params. Response fields: docs://geo/searchGeoZips.
Annotations the server declares
- openWorldHint: true
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.2. Values in angle brackets are yours to fill in.
claude mcp add --transport http 2extract https://mcp.2extract.com/mcp --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__2extract__getAccountBalance",
"mcp__2extract__getAccountTrafficUsage",
"mcp__2extract__getProxyResource",
"mcp__2extract__listAccountBalanceHistory",
"mcp__2extract__listGeoCountries",
"mcp__2extract__listProxyPlans",
"mcp__2extract__listProxyResources",
"mcp__2extract__searchGeoCities",
"mcp__2extract__searchGeoISP",
"mcp__2extract__searchGeoRegions",
"mcp__2extract__searchGeoZips"
],
"ask": [
"mcp__2extract__buildConnectionString",
"mcp__2extract__createProxyResource",
"mcp__2extract__deactivateProxyResource",
"mcp__2extract__setProxyIpWhitelist",
"mcp__2extract__setProxyLimits",
"mcp__2extract__setProxyTargetHosts",
"mcp__2extract__updateProxyResource"
],
"deny": [
"mcp__2extract__deleteProxyResource",
"mcp__2extract__regenerateProxyPassword"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as 2extract. Review it before you use it.