
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@postio/mcp
Advanced tools
Model Context Protocol server for Postio — UK address, email, and phone validation as tools for Claude, Cursor, Windsurf, Zed, etc.
Model Context Protocol server for Postio — the UK validation API for addresses, emails and phone numbers, exposed as tools for any MCP-aware AI host.
First time? Sign up free — first 100 lookups on us, no card needed.
Works with Claude Desktop, Claude Code, Cursor, Windsurf, Zed, Continue, and anything else that speaks MCP over stdio.
Node 20+.
You don't, really. Use npx from your host's MCP config.
claude mcp add postio --env POSTIO_API_KEY=pk_… -- npx -y @postio/mcp
Edit ~/Library/Application Support/Claude/claude_desktop_config.json
(macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"postio": {
"command": "npx",
"args": ["-y", "@postio/mcp"],
"env": { "POSTIO_API_KEY": "pk_…" }
}
}
}
~/.cursor/mcp.json (or <project>/.cursor/mcp.json for project-scoped):
{
"mcpServers": {
"postio": {
"command": "npx",
"args": ["-y", "@postio/mcp"],
"env": { "POSTIO_API_KEY": "pk_…" }
}
}
}
Same JSON as Cursor — they all consume the standard MCP server config shape.
| Tool | What it does | Billable |
|---|---|---|
postio_address_search | Free-form UK address search → suggestions + UDPRNs | No |
postio_postcode_lookup | All PAF delivery points at a postcode | Yes (on hit) |
postio_udprn_lookup | Full record for a single UDPRN | Yes (on hit) |
postio_email_validate | Syntax + typo + MX + SMTP + classification | Yes |
postio_phone_validate | Parse + live HLR lookup (carrier, ported, reachable) | Yes |
postio_connect | Free health probe | No |
The tools are intentionally primitive and 1:1 with the API. The
agent decides when to chain them — a typical address-finder flow
is postio_address_search → pick a UDPRN → postio_udprn_lookup
for the full record.
Each tool returns the raw API envelope as JSON text, including
meta.requestId for support correlation.
"Look up the address with udprn 25742215." →
postio_udprn_lookupwithudprn=25742215
"Find addresses on Wimpole Street W1G." →
postio_address_searchwithquery="Wimpole Street W1G"
"Is alice@gnail.com a real email address?" →
postio_email_validatewithemail="alice@gnail.com"→ the response includesdidYouMean: "gmail.com".
"Verify these UK phone numbers and tell me which are mobile." →
postio_phone_validateper number.
| Env var | Purpose |
|---|---|
POSTIO_API_KEY | Required. Your Postio API key. |
POSTIO_BASE_URL | Optional override of the API base URL (default https://api.postio.co.uk/v1). |
The server fails fast at startup if POSTIO_API_KEY is missing.
MIT.
FAQs
Model Context Protocol server for Postio — UK address, email, and phone validation as tools for Claude, Cursor, Windsurf, Zed, etc.
The npm package @postio/mcp receives a total of 27 weekly downloads. As such, @postio/mcp popularity was classified as not popular.
We found that @postio/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.