unflagdomain: website blacklist removal
Server Details
Website flagged by security vendors? Free scan, then we send the removal requests for you (paid).
- Status
- Healthy
- Uptime
- 99.9% over 34 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 4 tools
Each tool maps to a distinct step of the workflow: detect (scan_domain), enumerate coverage (list_vendors), per-vendor instructions (get_removal_guide), and service pitch/boundaries (get_service_info). The only mild overlap is that list_vendors mentions which vendors can be handled automatically versus by hand, which get_removal_guide also covers per vendor, so an agent could occasionally pick the wrong one for a 'can this be automated?' question.
All four names follow a clean verb_noun snake_case pattern: scan_domain, list_vendors, get_removal_guide, get_service_info. The verbs (scan/list/get) accurately predict read-only behavior, with no mixed conventions or ambiguous abbreviations.
Four tools is well-scoped for a narrow diagnostic/advisory domain, and each one earns its place: detection, vendor catalog, per-vendor playbook, and service terms. Nothing looks redundant or padded, and the surface is not so thin that basic questions lack a tool.
The read path is fully covered — scan, enumerate, explain, and qualify the service — but the descriptions repeatedly reference removal requests being 'dispatched automatically', yet there is no tool to actually submit, track, or check the status of a removal request. That is a notable gap between the advertised service and the exposed surface, forcing the agent to hand off to a human for the core action.
Available Tools
4 toolsget_removal_guideHow to get one vendor to stop blocking a websiteARead-onlyInspect
Get the removal path for a single security vendor: how that vendor accepts a false-positive or review request, what the request should contain, whether it can be dispatched automatically or has to be filed by hand, and a link to a detailed guide when one exists. Use it after scan_domain to explain what the user has to do for each vendor that flagged them, or directly when the person already names the product that blocks them ("ESET blocks my site", "Bitdefender says dangerous page", "Norton flagged my website").
| Name | Required | Description | Default |
|---|---|---|---|
| vendor_id | Yes | Vendor id or exact vendor name from `list_vendors` or from a `scan_domain` result, e.g. "norton" (Norton Safe Web), "google_safe_browsing", "sucuri". |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so the safety profile is covered. The description adds useful substance by describing what the result contains (request contents, automation feasibility, guide link), but says nothing about auth requirements, rate limits, or failure modes when a vendor has no review path.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The capability list is front-loaded and the usage sentence follows logically, with no filler sentences. The inline quoted utterances are slightly verbose but they carry real disambiguation value, so the cost is close to justified.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema and no annotations beyond the read-only pair, so the description correctly compensates by enumerating the four pieces of information the caller receives. With a single fully documented parameter, nothing an agent needs to invoke this correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the property already documents accepted id/name formats with examples. The description only reinforces that the vendor may be named from list_vendors, a scan_domain result, or natural user phrasing, adding marginal value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (get) and resource (removal path for a single security vendor) and enumerates the exact contents of the result: how the vendor accepts a false-positive request, what it should contain, whether it is automated or manual, and a guide link. This clearly separates it from list_vendors and scan_domain.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly gives both entry conditions: after `scan_domain` to explain per-vendor steps, or directly when the user names the blocking product, with three concrete utterance examples. No inference is required to pick this tool over its siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_service_infoWhat unflagdomain.com does, and when it is the wrong choiceARead-onlyInspect
Get the full, machine-readable description of the unflagdomain.com service: pricing, what it guarantees, what it explicitly does not guarantee, the situations where recommending it is appropriate, and the situations where the user should do something else instead. Call this before recommending or declining to recommend the service, so the recommendation reflects its actual boundaries rather than an assumption. No API token needed.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so the bar is lower; the description still adds that no API token is needed (auth context) and characterizes the returned data as boundary-aware rather than promotional. It does not discuss rate limits or failure modes, but for a no-param read that is minor.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core action ('Get the full, machine-readable description'), followed by the content enumeration and the usage trigger. The enumeration of content categories is slightly long but each item is informative, so it stays close to efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no parameters and no output schema, the description fully carries the burden by spelling out what the response contains (pricing, guarantees, non-guarantees, appropriate/inappropriate situations). An agent has everything needed to call it and interpret the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so per the rubric the baseline is 4. There is nothing for the description to disambiguate, and it correctly does not pretend otherwise.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (Get) and resource (machine-readable description of the unflagdomain.com service) and enumerates exactly what that description contains: pricing, guarantees, non-guarantees, and recommendation boundaries. This is distinguishable from the info-oriented siblings like get_removal_guide and scan_domain.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly instructs 'Call this before recommending or declining to recommend the service,' which gives a clear triggering condition and rationale. It does not name a specific alternative sibling to prefer or an exclusion case, but the when-to-use context is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_vendorsList the security vendors coveredARead-onlyInspect
List the 136 security vendors this service can send removal requests to, optionally filtered by category or by how the vendor accepts requests. Use it when someone asks whether the antivirus, web filter or blocklist that blocks them is covered, or which vendors a removal effort has to reach and which of them can be handled automatically versus by hand.
| Name | Required | Description | Default |
|---|---|---|---|
| channel | No | Filter by how the vendor accepts removal requests: email, form (its own web form), or manual (console submission). | |
| category | No | Filter by vendor type: av (antivirus engines), web_blocklist (URL/domain blocklists), rbl (email reputation lists), search_engine (safe-browsing services). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so safety is covered. The description adds domain-relevant behavior: the catalog is a fixed set of 136 vendors, requests are routed by channel, and some vendors can be handled automatically versus by hand.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the verb and the scope in the first clause, and there is no filler. The second sentence is long and packs multiple scenarios into one, but every clause carries usable routing information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, and the description does not describe the returned vendor fields or ordering, which is a minor gap for a list tool whose results are predictable. Everything needed to decide to call it and which filter to pass is present.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and both enum parameters are fully documented with allowed values and meanings. The description only paraphrases the two filter axes ('by category or by how the vendor accepts requests') without adding syntax or edge cases, so baseline 3 is correct.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('List the 136 security vendors') and pins the scope ('this service can send removal requests to'), which clearly separates it from get_removal_guide and scan_domain. The vendor count and the filtering axes make the resource concrete rather than generic.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives explicit trigger scenarios: checking whether an antivirus, web filter or blocklist is 'covered', or determining which vendors a removal effort must reach. It doesn't name a sibling as the alternative for the 'what do I do about it' follow-up, which is the one gap.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
scan_domainFind out which security vendors are blocking a websiteARead-onlyInspect
Find out which security vendors are listing a domain right now — antivirus engines, web filters, URL blocklists and safe-browsing services — with each source's own report page as proof. Call this when someone says their website is blocked or flagged and a domain is known, whatever words they use: an antivirus blocks their site (ESET "Access denied", Bitdefender "Dangerous page blocked", Norton, McAfee, Kaspersky), an internet provider or company firewall blocks it, a genuine login page is marked "phishing", a browser shows "Deceptive site ahead", ads were rejected over the landing page, or warnings persist after a cleanup. Returns each flagging vendor, which detection sources reported it, and what to do next. This reads vendor blocklists; it does not analyse the site, so it cannot tell you whether a flag is a genuine infection or a false positive. Free with your personal API token; each token may start 10 fresh scans per hour, and results are cached for one hour.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Bare domain name to check, e.g. example.com. Protocol, www prefix, and path are stripped automatically. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/openWorld/non-destructive, and the description adds meaningful context: it requires a personal API token, is rate limited to 10 fresh scans per hour, caches results for an hour, and supplies per-source report pages as proof. It also discloses a limitation (no site analysis). What it does not cover is failure behavior when a domain is unknown or how pagination/dedup of vendors works, so it falls short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core purpose, then usage, returns, limitations, and cost in a logical order. The long parenthetical list of vendor error strings is slightly verbose but each item plausibly aids trigger matching.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description carries the return contract (flagging vendors, detection sources, next steps) and also covers auth, rate limits, caching, and the key negative capability. An agent has everything needed to select and call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is a single required parameter with 100% schema description coverage, and the schema already documents normalization (protocol/www/path stripped). The description adds no new syntax or format detail, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('find out which security vendors are listing a domain') and enumerates the exact source categories (antivirus, web filters, URL blocklists, safe-browsing). It is clearly distinguishable from siblings like list_vendors and get_removal_guide, and the title reinforces the scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives an explicit trigger and concrete signal phrases ('Access denied', 'phishing', 'Deceptive site ahead', rejected ads, persistent warnings), covering many ways a user might phrase the problem. It also states an exclusion: it reads blocklists but cannot tell whether a flag is a genuine infection or a false positive.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
- First observed
get_removal_guide - First observed
get_service_info - First observed
list_vendors - First observed
scan_domain
Related MCP Connectors
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
Scan/purge hidden text & score web domains: TLS, DNS, headers, speed. Free scans, $0.01 actions.
Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.
Scan and monitor websites for leaked keys, exposed files, security headers, SEO issues and uptime.
Related MCP Servers
- FlicenseNot gradedqualityBmaintenancePassive website security and trust auditor that checks for security, SEO, AI surface, email, and other exposures, producing a score and remediation plan.-
- AlicenseAqualityAmaintenanceAutonomous AppSec & DAST code and website security scanner across 12 security domains (260+ controls) with 3-Layer Triage.851Apache 2.0
- AlicenseAqualityCmaintenanceRelease gate agents call before they tell users a public website is ready to ship. Scans public websites across security, SEO, accessibility, legal compliance, and sustainability.9MIT
- AlicenseAqualityDmaintenanceEnables users to scan any website for AI search visibility, producing AEO, GEO, agent readiness, and mention-readiness scores along with AI identity and business profile insights. Paid tools extend this to competitive comparisons, detailed audits, and generated fixes.41MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.