Flags phantom-squatted/typosquatted domains and known-malicious URLs before an agent follows them.
Scored across 1 tool
There is only one tool, so there is no possibility of confusion or misselection. Its purpose (verifying a URL before use) is unambiguous and fully contained in the name and description.
The single tool name 'verify_url' follows a clear verb_noun snake_case convention that is easy to read and matches the server's stated action. With only one tool, consistency is trivially satisfied.
The server is a focused URL trust oracle whose entire purpose is a single verification operation, so one tool is exactly right. There is no redundancy or missing companion tool needed for this scope.
The tool covers the key verification steps (RDAP registration age, brand-similarity, blocklist check) and returns actionable verdicts, making the surface largely complete for URL trust checking. Minor gaps exist, such as no batch verification or redirect/SSL inspection, but agents can still work around them.
URL Trust Oracle. Call this BEFORE fetching, citing, recommending, or following any URL you were not given directly by the user (one you generated, recalled, or inferred). LLMs routinely hallucinate plausible-looking URLs for documentation, APIs, and brands — attackers pre-register those exact domains and serve phishing/malware to whoever follows them ('phantom squatting'). This tool checks the domain's RDAP registration (does it exist, how old is it), runs a Levenshtein-distance brand-similarity check against well-known domains, and checks the exact URL against a known-malicious-infrastructure blocklist. Returns a synthetic verdict: ALLOW (no issues found), WARN (proceed with caution — read the findings), or BLOCK (do not fetch or cite this — likely a hallucinated/squatted domain or confirmed malicious URL). First 5 calls per caller are free; after that this tool requires x402 payment (USDC on Base) and will return a payment-required error with the amount and address to pay.
Inputs: url (required).
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Threat-intelligence verdicts on a URL, domain or IP before a coding agent connects to it.
Threat-intelligence verdicts on a URL, domain or IP before a coding agent connects to it.
Tells your agent if a link is safe before it clicks, signs in or pays.
Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.
Add one secure layer between your agents and this server.