Skip to main content
Glama

URL Safety Validator MCP

Ownership verified

Server Details

AI URL safety validator: SAFE/SUSPICIOUS/DANGEROUS verdict, trust score, threat intel.

Status
Healthy
Last Tested
Transport
Streamable HTTP
URL
Repository
OjasKord/url-safety-validator-mcp
GitHub Stars
1
Server Listing
url-safety-validator-mcp

Glama MCP Gateway

Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.

MCP client
Glama
MCP server

Full call logging

Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.

Tool access control

Enable or disable individual tools per connector, so you decide what your agents can and cannot do.

Managed credentials

Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.

Usage analytics

See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.

100% free. Your data is private.
Tool DescriptionsA

Average 4.6/5 across 1 of 1 tools scored.

Server CoherenceA
Disambiguation5/5

With only one tool, there is no ambiguity. The tool's purpose is clearly distinct from any other.

Naming Consistency5/5

Naming consistency is trivial with a single tool; 'check_url' follows a clear verb_noun pattern.

Tool Count4/5

A single tool for URL safety validation is slightly under but reasonable given the comprehensive nature of the tool's checks.

Completeness5/5

The tool covers all major URL threats (phishing, malware, typosquatting, redirects) and provides actionable verdicts, leaving no obvious gaps.

Available Tools

1 tool
check_urlAInspect

Checks a URL for phishing, malware, typosquatting, and redirect threats. Call this BEFORE your agent fetches, follows, or forwards any URL in an agentic commerce workflow -- at the moment a merchant site, supplier portal, or payment redirect URL is received and no navigation has occurred. Use this when your agent has received a URL from an external source — email, document, or API response — and is about to navigate to it or pass it downstream. Checks live against Google Web Risk (webrisk.googleapis.com) and Google Safe Browsing (safebrowsing.googleapis.com). Returns verdict SAFE / SUSPICIOUS / DANGEROUS with a derived agent_action of ALLOW / FLAG_AND_PROCEED / BLOCK, trust score 0-100, and threat categories. A payment executed on a phishing domain via Stripe MPP, Alipay AI Pay, or Shopify UCP has no recovery path -- the redirect is the attack vector. A DANGEROUS verdict means halt immediately. Returns machine-ready verdict, no further analysis needed.

ParametersJSON Schema
NameRequiredDescriptionDefault
urlYesThe URL to check. Full URL preferred (e.g. https://example.com/path). Bare domains also accepted.

Output Schema

ParametersJSON Schema
NameRequiredDescription
urlYes
verdictYes
hostnameYes
reasoningNo
ssl_validNo
checked_atYes
source_urlNo
_disclaimerYes
hold_reasonNoPresent only when verdict is SUSPICIOUS
retry_afterNo
trust_scoreYes
agent_actionYesDerived directly from verdict
ai_confidenceNo
analysis_typeNo
domain_age_daysNo
escalation_pathNoPresent only when verdict is SUSPICIOUS
database_signalsNo
domain_registeredNo
threat_categoriesNo
redirect_chain_detectedNo
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full transparency burden. It discloses live checks against Google Web Risk and Safe Browsing, specifies the return contract (verdict, agent_action, trust score, threat categories), and instructs halting on DANGEROUS. This is thorough and non-misleading for a read-only security check.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose and uses a clear progression from what → when → how → output. It is slightly verbose with overlapping 'before' usage guidance, but each sentence provides useful operational context for a security-sensitive tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that an output schema exists, the description need not detail the return structure, yet it still summarizes verdicts, action, and trust score. It covers when, why, what, and the operational safety rule, making it complete for agent selection and invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema provides 100% coverage for the single URL parameter, including preference for full URLs. The description adds no additional parameter-level semantics beyond the schema, so the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb 'Checks' and explicitly enumerates the threat types (phishing, malware, typosquatting, redirect threats). It clearly identifies the tool's function and is unambiguous even without sibling tool comparison.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit when-to-use guidance: before fetching, following, or forwarding any URL in an agentic commerce workflow, with concrete trigger contexts (email, document, API response). It also implies when not to use (after navigation) and emphasizes the urgency with a recovery-path rationale.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Discussions

No comments yet. Be the first to start the discussion!

Related MCP Servers

  • A
    license
    A
    quality
    C
    maintenance
    URL intelligence for AI agents. One URL in, structured security and data quality signals out across 7 dimensions. 13 tools, risk score 0-100 with 23 configurable weights.
    Last updated
    16
    74
    1
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    AI-powered threat verification across 6 channels: phone numbers, URLs, text messages, emails, documents, and QR codes. Analyzes threats against 10M+ intelligence records from FTC, FCC, URLhaus, ThreatFox, and community reports, returning risk scores, verdicts, and detailed signals.
    Last updated
    10
    1
    MIT
  • F
    license
    -
    quality
    -
    maintenance
    URL reality check for AI agents — returns HTTP status, SHA-256 content hash, classification, readability score, title, and wayback-machine fallback when dead, cached 10 minutes at $0.001 per call.
    Last updated

View all MCP Servers

Try in Browser

Your Connectors

Sign in to create a connector for this server.