URL Safety Validator MCP

ojaskord/url-safety-validator-mcp

This server gates every URL your agent encounters before it fetches content or follows a link. One tool, check_url, returns a SAFE/SUSPICIOUS/DANGEROUS verdict powered by Google Web Risk, URLhaus, PhishTank, and Claude's reasoning engine. You get a 0-100 trust score, threat categories like phishing or typosquatting, domain age from RDAP, SSL status, and a plain-English explanation of why the AI flagged it. Use it before scraping pages, processing email links, or passing URLs to browser tools. Free tier gives you 10 calls per month with no API key. Paid bundles start at $20 for 500 checks. Available as a hosted endpoint or local stdio install.

GitHub stars: 1
tool: 1
auth: Secret needed
transport: STDIO, HTTP
env vars: 3
last updated: Jun 25, 2026

View on GitHub

Install

From registry metadata

$ npx add-mcp https://url-safety-validator-mcp-production.up.railway.app --name url-safety-validator-mcp

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http url-safety-validator-mcp https://url-safety-validator-mcp-production.up.railway.app

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 1 tools

Verified live against the running server on Nov 6, 2026.

check_urlChecks a URL for phishing, malware, typosquatting, and redirect threats. Call this BEFORE your agent fetches, follows, or forwards any URL in an agentic commerce workflow -- at the moment a merchant site, supplier portal, or payment redirect URL is received and no navigation h...1 params

Checks a URL for phishing, malware, typosquatting, and redirect threats. Call this BEFORE your agent fetches, follows, or forwards any URL in an agentic commerce workflow -- at the moment a merchant site, supplier portal, or payment redirect URL is received and no navigation h...

Parameters* required

url*string

The URL to check. Full URL preferred (e.g. https://example.com/path). Bare domains also accepted.

Configuration

ANTHROPIC_API_KEY*secret

Anthropic API key for AI trust scoring

GOOGLE_WEB_RISK_API_KEYsecret

Google Web Risk API key (commercial). Degrades gracefully without it.

GOOGLE_SAFE_BROWSING_API_KEYsecret

Google Safe Browsing API key (free tier available).

Readme