Presend checks npm and PyPI packages before they are installed: typosquats, known vulnerabilities of the version you use, publisher changes (npm), and names that do not exist or were first published in the last 30 days. It is available as a free API, an MCP server for AI agents and a GitHub Action. The site also has free browser tools; the file tools process files locally.
Open Presend · API docs · OpenAPI spec · MCP server · Measurements · For teams
- Before an agent installs a package -- the MCP tool
supply_chain_checkreportspackage_not_foundfor a name that does not exist on npm or PyPI (it may be invented by a model) andnew_packagefor one first published less than 30 days ago. - Measured false alarms -- the typosquat check is measured on the most downloaded PyPI packages and the npm-high-impact list, with the scripts to reproduce it: see the measurements page.
- Real supply-chain signal (API) --
maintainer-change-checkflags a package recently taken over by a previously unseen publisher after a long dormancy (the event-stream pattern; it does not detect hijacked existing accounts). - What it is not -- not a malware scanner: it reports signals worth a look before installing, it does not analyse package code.
- No account -- the API and the MCP server are free, with no signup and no key; per-minute rate limits apply. A paid offer for teams is being tested: Presend for teams.
- Browser file tools -- the file tools (EXIF, PDF, images, office files) run locally with Web Crypto, Canvas and FileReader. A few other tools rely on a network service (speech recognition, password breach lookup, link preview...); the privacy page lists each one.
- PWA -- install on mobile or desktop.
- REST API -- free endpoints: supply-chain checks (typosquat, vulnerabilities of a given version, maintainer change, repository health, and a combined supply-chain check), DNS and WHOIS lookups, email checks, JWT decode and verify, file and image processing, and everyday utilities. Full OpenAPI 3.0 spec.
- MCP server -- the same checks as tools over Streamable HTTP, no signup, no key; listed in the official MCP registry as
io.github.presendapp/presend-mcp. - npm client --
npm install presend-api, zero-dependency. - GitHub Action -- checks the dependencies of
package.jsonorrequirements.txtin CI (npm and PyPI). - Code examples -- working Python for LangChain, CrewAI, LlamaIndex, OpenAI Agents SDK, Google ADK, and plain REST.
- MCP config guides -- copy-paste setup for Claude Desktop, Claude Code, Cursor, and Windsurf, no code required.
- Browser extension -- "Presend — Clean Photos", strips EXIF/GPS on right-click.
Python: Cloudflare rejects the default
urllibUser-Agent (Python-urllib/3.x) with403 error code: 1010. Set an explicit one, e.g.urllib.request.Request(url, headers={"User-Agent": "my-app/1.0"}).requests, curl and Node are not affected.
| Tool | What it does | Link |
|---|---|---|
| EXIF Remover | Strip GPS, camera model, timestamps from photos | Open |
| PDF Metadata Remover | Remove author, software, dates from PDFs | Open |
| Image Compressor | Shrink JPG/PNG/WebP with quality preview | Open |
| PDF Compress | Reduce PDF file size without quality loss | Open |
| PDF Merger | Combine multiple PDFs into one document | Open |
| Image Resizer | Resize to exact dimensions (Instagram, LinkedIn, Twitter) | Open |
| HEIC to JPG Converter | Convert iPhone photos to universal JPG | Open |
| Video Metadata Remover | Strip GPS and device data from MP4/MOV | Open |
| Office Metadata Remover | Clean Word, Excel, PowerPoint hidden data | Open |
| File Hash Checker | Verify SHA-256, SHA-1, SHA-512 checksums | Open |
| Password Generator | Create cryptographically secure passwords | Open |
| Password Strength | Analyze password entropy and crack time | Open |
| QR Code Generator | Generate QR codes for URLs, WiFi, text | Open |
| URL Cleaner | Remove tracking parameters (UTM, fbclid, gclid) | Open |
| Email List Cleaner | Deduplicate, validate, clean email lists | Open |
| JSON to CSV Converter | Convert between JSON and CSV instantly | Open |
| Image to Base64 | Encode images for embedding in HTML/CSS | Open |
| Text Diff | Compare two texts side by side | Open |
| Text Formatter | Bold, italic, stylized text for social media | Open |
| Thread Splitter | Split long text into Twitter/X threads | Open |
| Word Counter | Count words, characters, reading time | Open |
| Color Contrast | Check WCAG accessibility contrast ratios | Open |
Presend is built for search engines and AI assistants:
- Schema.org: structured data on the pages (Organization, FAQPage, BreadcrumbList...)
- Sitemap: a static
sitemap.xmlcovering the tools, blog and guides in 8 languages - Dynamic OG Images: API generates social preview images per tool
- Core Web Vitals: Preconnect, DNS-prefetch, CSS preload, zero render-blocking JS
- PWA: Service worker + manifest for offline use and installability
- Privacy-First Analytics: Cloudflare Web Analytics (no cookies, no IP tracking)
Add a Presend tool to your website or link back to us:
- Frontend: Vanilla HTML5, CSS3, ES6 (zero build step)
- Hosting: Cloudflare Pages (200+ edge locations)
- APIs: Cloudflare Workers (share links, analytics, sitemap, OG images)
- Storage: Cloudflare KV (share links, 30-day TTL)
- PWA: Service Worker + Web App Manifest
MIT — free to use, modify, and embed.