Skip to main content
Glama

Check website trust

check_website
Read-onlyIdempotent

Look up verified.fyi's independent trust report for a website: a 0-100 trust score, a verdict and a plain-English summary, drawn from automated checks (domain age, TLS, DNS, Google Web Risk, VirusTotal, blocklists, reviews, archive history, page content), with a link to the full report that lists every check. Use it before visiting, buying from, signing up to, or entering personal or payment details on an unfamiliar site, or when someone asks whether a site, online shop, link or sender's domain is legitimate, safe or a scam. Accepts a bare domain or any URL. Known sites return instantly. A site never checked before is scanned on demand, which usually takes 20-60 seconds; if the scan isn't finished within about 25 seconds the result has status "generating" and retry_after_seconds.

Input Schema

NameRequiredDescriptionDefault
url_or_domainYesThe website to check: a bare domain such as example.com, or any URL on it. Only the hostname is assessed.

Output Schema

NameRequiredDescriptionDefault
scoreNoTrust score from 0 (dangerous) to 100 (trusted). Omitted for Inactive sites and service endpoints.
domainYesThe hostname that was checked.
statusYescomplete: the report is included. generating: a first scan is running, call again after retry_after_seconds. rate_limited: no report exists and new scans are paused, retry after retry_after_seconds or open report_url in a browser. failed: the scan could not complete.
summaryNoPlain-English assessment of the site.
verdictNoTrusted, Mostly safe, Use caution, Suspicious, Dangerous, Inactive (site unreachable), or Service endpoint (a backend address of parent_domain, not a website).
checked_atNoWhen the report was generated. Reports are refreshed at most every 7 days.
report_urlYesThe full report on verified.fyi, listing every check behind the verdict.
attributionYesCitation line for this data.
parent_domainNoFor a service endpoint, the established domain it belongs to. Check that domain for a trust verdict.
retry_after_secondsNoFor generating and rate_limited: seconds to wait before calling again.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (readOnly, idempotent, openWorld), the description discloses the real behavioral traits: cached sites return instantly, uncached sites trigger an on-demand scan of 20-60 seconds, and after ~25 seconds the result may come back with status "generating" plus retry_after_seconds. That latency and partial-result behavior is exactly what an agent needs to plan around, and the annotations don't carry it.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core purpose and the payload come first, the usage triggers follow, and the latency caveat comes last. The middle sentence is long and list-heavy, but each clause, including the list of underlying checks, earns its place by helping the agent judge relevance.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has an output schema, so return values needn't be explained, yet the description still flags the "generating" status and retry_after_seconds so the agent isn't blindsided. With latency, input format and scope all covered, nothing needed in order to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the single parameter is fully documented in the schema, including the bare-domain-or-URL form and the fact that only the hostname is assessed. The description restates "Accepts a bare domain or any URL" rather than adding new meaning, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ("Look up") and resource ("verified.fyi's independent trust report for a website"), and it spells out the payload: a 0-100 trust score, verdict, summary and full-report link. This makes it unmistakable from the only sibling, list_research, which does something unrelated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives concrete trigger conditions: before visiting, buying, signing up, entering payment details, or when someone asks whether a site, shop, link or sender's domain is legitimate. It gives no explicit when-not or named alternative, but the use cases are stated clearly enough that an agent can tell when to reach for it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources